Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-4973 State: REJECTED Published: 2019-12-30T16:19:34 Last Updated: 2019-12-30T16:19:34 Description: No description available.
CVE ID: CVE-2019-4974 State: REJECTED Published: 2019-12-30T16:19:34 Last Updated: 2019-12-30T16:19:34 Description: No description available.
CVE ID: CVE-2019-4975 State: REJECTED Published: 2019-12-30T16:19:34 Last Updated: 2019-12-30T16:19:34 Description: No description available.
CVE ID: CVE-2019-4976 State: REJECTED Published: 2019-12-30T16:19:34 Last Updated: 2019-12-30T16:19:34 Description: No description available.
CVE ID: CVE-2019-4977 State: REJECTED Published: 2019-12-30T16:19:34 Last Updated: 2019-12-30T16:19:34 Description: No description available.
CVE ID: CVE-2019-4978 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4979 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4980 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4981 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4982 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4983 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4984 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4985 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4986 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4987 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4988 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4989 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4990 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4991 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4992 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4993 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4994 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4995 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4996 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4997 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4998 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-4999 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-5000 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-5001 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-5002 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-5003 State: REJECTED Published: 2019-12-30T16:19:35 Last Updated: 2019-12-30T16:19:35 Description: No description available.
CVE ID: CVE-2019-5005 State: PUBLISHED Published: 2019-01-03T23:00:00Z Last Updated: 2024-09-17T00:11:03.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. They allowed Denial of Service (application crash) via image data, because two bytes are written to the end of the allocated memory without judging whether this will cause corruption. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-5006 State: PUBLISHED Published: 2019-01-03T23:00:00Z Last Updated: 2024-09-17T02:02:45.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is a NULL pointer dereference during PDF parsing. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-5007 State: PUBLISHED Published: 2019-01-03T23:00:00Z Last Updated: 2024-09-17T02:10:37.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is an Out-of-Bounds Read Information Disclosure and crash due to a NULL pointer dereference when reading TIFF data during TIFF parsing. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-5008 State: PUBLISHED Published: 2019-04-19T18:07:38 Last Updated: 2024-08-04T19:40:48.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: hw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL pointer dereference, which allows the attacker to cause a denial of service via a device driver. Additional Analyst Notes: - CVE Program Container: References: - https://git.qemu.org/?p=qemu.git%3Ba=history%3Bf=hw/sparc64/sun4u.c%3Bhb=HEAD - https://fakhrizulkifli.github.io/posts/2019/01/03/CVE-2019-5008/ - http://www.securityfocus.com/bid/108024 - https://usn.ubuntu.com/3978-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/m
ps://usn.ubuntu.com/3978-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVDHJB2QKXNDU7OFXIHIL5O5VN5QCSZL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BOE3PVFPMWMXV3DGP2R3XIHAF2ZQU3FS/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00000.html
CVE ID: CVE-2019-5009 State: PUBLISHED Published: 2019-01-04T14:00:00Z Last Updated: 2024-09-16T23:52:10.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vtiger CRM 7.1.0 before Hotfix2 allows uploading files with the extension "php3" in the logo upload field, if the uploaded file is in PNG format and has a size of 150x40. One can put PHP code into the image; PHP code can be executed using "<? ?>" tags, as demonstrated by a CompanyDetailsSave action. This bypasses the bad-file-extensions protection mechanism. It is related to actions/CompanyDetailsSave.php, actions/UpdateCompanyLogo.php, and models/CompanyDetails.php. Additional Analyst Notes: - CVE Program Container: Referenc
ctions/UpdateCompanyLogo.php, and models/CompanyDetails.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.vtigercrm.com/pipermail/vtigercrm-developers/2019-January/037852.html - https://pentest.com.tr/exploits/Vtiger-CRM-7-1-0-Remote-Code-Execution.html - https://www.exploit-db.com/exploits/46065 - http://code.vtiger.com/vtiger/vtigercrm/commit/52fc2fb520ddc55949c2fbedaabd61ddd0109375
CVE ID: CVE-2019-5010 State: PUBLISHED Published: 2019-10-31T20:05:57 Last Updated: 2024-08-04T19:40:49.196Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Python Problem Types: CWE-476 Description: An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2019:3520
bility. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2019:3520 - https://access.redhat.com/errata/RHSA-2019:3725 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html - https://security.gentoo.org/glsa/202003-26 - https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html - https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E - https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0758
CVE ID: CVE-2019-5011 State: PUBLISHED Published: 2019-03-21T14:50:38 Last Updated: 2024-08-04T19:40:49.194Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: n/a Products: CleanMyMac X Problem Types: CWE-459 Description: An exploitable privilege escalation vulnerability exists in the helper service CleanMyMac X, version 4.20, due to improper updating. The application failed to remove the vulnerable components upon upgrading to the latest version, leaving the user open to attack. A user with local access can use this vulnerability to modify the file system as root. An attacker would need local access to the machine for a successful exploit. Additional Analyst No
file system as root. An attacker would need local access to the machine for a successful exploit. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0759
CVE ID: CVE-2019-5012 State: PUBLISHED Published: 2019-10-24T15:17:27 Last Updated: 2024-08-04T19:40:49.091Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: n/a Products: Wacom Problem Types: CWE-88 Description: An exploitable privilege escalation vulnerability exists in the Wacom, driver version 6.3.32-3, update helper service in the startProcess command. The command takes a user-supplied script argument and executes it under root context. A user with local access can use this vulnerability to raise their privileges to root. An attacker would need local access to the machine for a successful exploit. Additional Analyst Notes: - CVE Program Container: Referenc
d need local access to the machine for a successful exploit. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0760
CVE ID: CVE-2019-5013 State: PUBLISHED Published: 2019-10-24T15:17:14 Last Updated: 2024-08-04T19:40:49.142Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: n/a Products: Wacom Problem Types: CWE-88 Description: An exploitable privilege escalation vulnerability exists in the Wacom, driver version 6.3.32-3, update helper service in the start/stopLaunchDProcess command. The command takes a user-supplied string argument and executes launchctl under root context. A user with local access can use this vulnerability to raise load arbitrary launchD agents. An attacker would need local access to the machine for a successful exploit. Additional Analyst Notes: - CVE Pro
agents. An attacker would need local access to the machine for a successful exploit. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0761
CVE ID: CVE-2019-5014 State: PUBLISHED Published: 2019-05-08T16:47:59 Last Updated: 2024-08-04T19:40:49.184Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Winco Firefly Problem Types: CWE-284 Description: An exploitable improper access control vulnerability exists in the bluetooth low energy functionality of Winco Fireworks FireFly FW-1007 V2.0. An attacker can connect to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0772
CVE ID: CVE-2019-5015 State: PUBLISHED Published: 2019-03-08T20:00:00Z Last Updated: 2024-09-16T19:04:24.135Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: Talos Products: Pixar Renderman Problem Types: CWE-749 Description: A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0's Install Helper helper tool. A user with local access can use this vulnerability to escalate their privileges to root. An attacker would need local access to the machine for a successful exploit. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107436 - https://talosintelligence.com/vulner
s: - CVE Program Container: References: - http://www.securityfocus.com/bid/107436 - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0773
CVE ID: CVE-2019-5016 State: PUBLISHED Published: 2019-06-17T20:29:55 Last Updated: 2024-08-04T19:40:48.991Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H) Vendors: Talos Products: KCodes Problem Types: CWE-200 Description: An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functionality of at least two NETGEAR Nighthawk Routers and potentially several other vendors/products. A specially crafted index value can cause an invalid memory read, resulting in a denial of service or remote information disclosure. An unauthenticated attacker can send a crafted packet on the local network to t
ervice or remote information disclosure. An unauthenticated attacker can send a crafted packet on the local network to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/108820 - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0775
CVE ID: CVE-2019-5017 State: PUBLISHED Published: 2019-06-17T20:34:20 Last Updated: 2024-08-04T19:40:49.264Z Severity: MEDIUM (CVSS 5.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: Talos Products: KCodes Problem Types: CWE-200 Description: An exploitable information disclosure vulnerability exists in the KCodes NetUSB.ko kernel module that enables the ReadySHARE Printer functionality of at least two NETGEAR Nighthawk Routers and potentially several other vendors/products. An unauthenticated, remote attacker can craft and send a packet containing an opcode that will trigger the kernel module to return several addresses. One of which can be used to calculate the dynamic base address
l trigger the kernel module to return several addresses. One of which can be used to calculate the dynamic base address of the module for further exploitation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/108827 - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0776
CVE ID: CVE-2019-5018 State: PUBLISHED Published: 2019-05-10T18:46:59 Last Updated: 2024-08-04T19:40:49.048Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Sqlite3 Problem Types: CWE-416 Description: An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote code execution. An attacker can send a malicious SQL command to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/108294 - https://security.gentoo.org/glsa/201908-0
CVE Program Container: References: - http://www.securityfocus.com/bid/108294 - https://security.gentoo.org/glsa/201908-09 - https://usn.ubuntu.com/4205-1/ - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0777 - http://packetstormsecurity.com/files/152809/Sqlite3-Window-Function-Remote-Code-Execution.html - https://security.netapp.com/advisory/ntap-20190521-0001/
CVE ID: CVE-2019-5019 State: PUBLISHED Published: 2019-03-07T20:00:00 Last Updated: 2024-08-04T19:40:49.300Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Antenna House Problem Types: CWE-122 Description: A heap-based overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro R1 (7,0,2018,1113). While parsing Document Summary Property Set stream, the getSummaryInformation function is incorrectly checking the correlation between size and the number of properties in PropertySet packets, causing an out-of-bounds write that leads to heap corruption and consequent code execut
operties in PropertySet packets, causing an out-of-bounds write that leads to heap corruption and consequent code execution. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0780
CVE ID: CVE-2019-5020 State: PUBLISHED Published: 2019-07-31T16:38:21 Last Updated: 2024-08-04T19:40:49.327Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: n/a Products: Yara Object Problem Types: CWE-617 Description: An exploitable denial of service vulnerability exists in the object lookup functionality of Yara 3.8.1. A specially crafted binary file can cause a negative value to be read to satisfy an assert, resulting in Denial of Service. An attacker can create a malicious binary to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0781
CVE ID: CVE-2019-5021 State: PUBLISHED Published: 2019-05-08T16:52:23 Last Updated: 2024-08-04T19:40:49.199Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Alpine Linux Problem Types: CWE-258 Description: Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user. This vulnerability appears to be the result of a regression introduced in December of 2015. Due to the nature of this issue, systems deployed using affected versions of the Alpine Linux container which utilize Linux PAM, or some other mechanism which uses the system shadow file as an authentication database, may accept a NULL passwo
x PAM, or some other mechanism which uses the system shadow file as an authentication database, may accept a NULL password for the `root` user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/108288 - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00004.html - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0782 - https://security.netapp.com/advisory/ntap-20190510-0001/ - https://alpinelinux.org/posts/Docker-image-vulnerability-CVE-2019-5021.html - https://support.f5.com/csp/article/K25551452
CVE ID: CVE-2019-5022 State: REJECTED Published: 2019-04-04T15:00:08 Last Updated: 2019-04-04T15:00:08 Description: No description available.
CVE ID: CVE-2019-5023 State: PUBLISHED Published: 2019-10-31T20:15:40 Last Updated: 2024-08-04T19:40:48.969Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: PaX Problem Types: CWE-401 Description: An exploitable vulnerability exists in the grsecurity PaX patch for the function read_kmem, in PaX from version pax-linux-4.9.8-test1 to 4.9.24-test7, grsecurity official from version grsecurity-3.1-4.9.8-201702060653 to grsecurity-3.1-4.9.24-201704252333, grsecurity unofficial from version v4.9.25-unofficialgrsec to v4.9.74-unofficialgrsec. PaX adds a temp buffer to the read_kmem function, which is never freed when an invalid address is supplied. Thi
algrsec. PaX adds a temp buffer to the read_kmem function, which is never freed when an invalid address is supplied. This results in a memory leakage that can lead to a crash of the system. An attacker needs to induce a read to /dev/kmem using an invalid address to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0784
CVE ID: CVE-2019-5024 State: PUBLISHED Published: 2019-04-11T17:45:08 Last Updated: 2024-08-04T19:40:49.207Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Capsule Technologies Products: Capsule Technologies SmartLinx Neuron 2 Problem Types: CWE-693 Description: A restricted environment escape vulnerability exists in the “kiosk mode” function of Capsule Technologies SmartLinx Neuron 2 medical information collection devices running versions 9.0.3 or lower. A specific series of keyboard inputs can escape the restricted environment, resulting in full administrator access to the underlying operating system. An attacker can connect to the device via USB port with
n full administrator access to the underlying operating system. An attacker can connect to the device via USB port with a keyboard or other HID device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0785
CVE ID: CVE-2019-5025 State: REJECTED Published: 2019-03-28T15:00:26 Last Updated: 2019-03-28T15:00:26 Description: No description available.
CVE ID: CVE-2019-5026 State: REJECTED Published: 2019-03-28T15:02:38 Last Updated: 2019-03-28T15:02:38 Description: No description available.
CVE ID: CVE-2019-5027 State: REJECTED Published: 2019-03-28T15:05:22 Last Updated: 2019-03-28T15:05:22 Description: No description available.
CVE ID: CVE-2019-5028 State: REJECTED Published: 2019-03-28T15:06:11 Last Updated: 2019-03-28T15:06:11 Description: No description available.
CVE ID: CVE-2019-5029 State: PUBLISHED Published: 2019-11-13T22:34:02 Last Updated: 2024-08-04T19:40:49.119Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Exhibitor Problem Types: CWE-78 Description: An exploitable command injection vulnerability exists in the Config editor of the Exhibitor Web UI versions 1.0.9 to 1.7.1. Arbitrary shell commands surrounded by backticks or $() can be inserted into the editor and will be executed by the Exhibitor process when it launches ZooKeeper. An attacker can execute any command as the user running the Exhibitor process. Additional Analyst Notes: - CVE Program Container: References: - https://talosintel
user running the Exhibitor process. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0790
CVE ID: CVE-2019-5030 State: PUBLISHED Published: 2019-10-31T20:09:08 Last Updated: 2024-08-04T19:40:49.255Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Antenna House Problem Types: CWE-122 Description: A buffer overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro MR1 (7,0,2019,0220). While parsing a document text info container, the TxMasterStyleAtom::parse function is incorrectly checking the bounds corresponding to the number of style levels, causing a vtable pointer to be overwritten, which leads to code execution. Additional Analyst Notes: - CVE Program Cont
causing a vtable pointer to be overwritten, which leads to code execution. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0792