Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-13105 State: PUBLISHED Published: 2019-08-06T19:02:40 Last Updated: 2024-08-04T23:41:10.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Das U-Boot versions 2019.07-rc1 through 2019.07-rc4 can double-free a cached block of data when listing files in a crafted ext4 filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/u-boot/u-boot/commits/master - https://lists.denx.de/pipermail/u-boot/2019-July/375513.html - https://gist.github.com/deephooloovoo/d91b81a1674b4750e662dfae93804d75
CVE ID: CVE-2019-13106 State: PUBLISHED Published: 2019-08-06T19:05:47 Last Updated: 2024-08-04T23:41:10.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/u-boot/u-boot/commits/master - https://lists.denx.de/pipermail/u-boot/2019-July/375516.html - https://gist.github.com/deephooloovoo/d91b81a1674b4750e662dfae93804d75 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00002.html - http://lists.opensu
b4750e662dfae93804d75 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00004.html
CVE ID: CVE-2019-13107 State: PUBLISHED Published: 2019-06-30T21:07:03 Last Updated: 2024-08-04T23:41:10.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tbeu/matio/releases/tag/v1.5.16 - https://github.com/tbeu/matio/compare/f8cd397...fabac6c - https://github.com/tbeu/matio/pull/118 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7AE25FWDBPC7KLVMPLHT4G64O4GISQQ/
CVE ID: CVE-2019-13108 State: PUBLISHED Published: 2019-06-30T22:19:48 Last Updated: 2024-08-04T23:41:10.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because PngImage::readMetadata mishandles a zero value for iccOffset. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/789 - https://github.com/Exiv2/exiv2/pull/794 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGBT5OD2TF4AIXJUC56WOUJRHAZLZ4DC/
CVE ID: CVE-2019-13109 State: PUBLISHED Published: 2019-06-30T22:20:02 Last Updated: 2024-08-04T23:41:10.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because PngImage::readMetadata mishandles a chunkLength - iccOffset subtraction. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/790 - https://github.com/Exiv2/exiv2/pull/795 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGBT5OD2TF4AIXJUC56WOUJRHAZLZ4DC/
CVE ID: CVE-2019-13110 State: PUBLISHED Published: 2019-06-30T00:00:00 Last Updated: 2024-08-04T23:41:10.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted CRW image file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/843 - https://github.com/Exiv2/exiv2/pull/844 - https://usn.ubuntu.com/4056-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGBT5OD2TF4AIXJUC56WOUJRHAZLZ4DC/ - https://lists.debian.org/debian
t/package-announce%40lists.fedoraproject.org/message/FGBT5OD2TF4AIXJUC56WOUJRHAZLZ4DC/ - https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html
CVE ID: CVE-2019-13111 State: PUBLISHED Published: 2019-06-30T22:20:54 Last Updated: 2024-08-04T23:41:10.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation followed by a very long running loop) via a crafted WEBP image file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/791 - https://github.com/Exiv2/exiv2/pull/797 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGBT5OD2TF4AIXJUC56WOUJRHAZLZ4DC/
CVE ID: CVE-2019-13112 State: PUBLISHED Published: 2019-06-30T00:00:00 Last Updated: 2024-08-04T23:41:10.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to an std::bad_alloc exception) via a crafted PNG image file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/845 - https://github.com/Exiv2/exiv2/pull/846 - https://usn.ubuntu.com/4056-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGBT5OD2TF4AIXJUC56WOUJRHAZLZ4DC/ - https://
roject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGBT5OD2TF4AIXJUC56WOUJRHAZLZ4DC/ - https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html
CVE ID: CVE-2019-13113 State: PUBLISHED Published: 2019-06-30T22:21:47 Last Updated: 2024-08-04T23:41:10.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to assertion failure) via an invalid data location in a CRW image file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/841 - https://github.com/Exiv2/exiv2/pull/842 - https://usn.ubuntu.com/4056-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGBT5OD2TF4AIXJUC56WOUJRHAZLZ4DC/
CVE ID: CVE-2019-13114 State: PUBLISHED Published: 2019-06-30T00:00:00 Last Updated: 2024-08-04T23:41:10.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/793 - https://github.com/Exiv2/exiv2/pull/815 - https://usn.ubuntu.com/4056-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGBT5OD2TF4AIXJUC56WOUJRHAZLZ4DC/ - https://support.f5.
archives/list/package-announce%40lists.fedoraproject.org/message/FGBT5OD2TF4AIXJUC56WOUJRHAZLZ4DC/ - https://support.f5.com/csp/article/K45429077?utm_source=f5support&amp%3Butm_medium=RSS - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html - https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html
CVE ID: CVE-2019-13115 State: PUBLISHED Published: 2019-07-16T00:00:00 Last Updated: 2024-08-04T23:41:10.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server. This is related to an _libssh2_check_length mistake, and is different from the various issues fixed in 1.8.1, such as CVE-2019-3855. Addi
o an _libssh2_check_length mistake, and is different from the various issues fixed in 1.8.1, such as CVE-2019-3855. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libssh2/libssh2/pull/350 - https://libssh2.org/changes.html - https://github.com/libssh2/libssh2/compare/02ecf17...42d37aa - https://blog.semmle.com/libssh2-integer-overflow/ - https://lists.debian.org/debian-lts-announce/2019/07/msg00024.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LUNHPW64IGCASZ4JQ2J5KDXNZN53DWW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7IF3LNHOA75O4WZWIHJLIRM
ttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7IF3LNHOA75O4WZWIHJLIRMA5LJUED3/ - https://security.netapp.com/advisory/ntap-20190806-0002/ - https://support.f5.com/csp/article/K13322484 - https://support.f5.com/csp/article/K13322484?utm_source=f5support&amp%3Butm_medium=RSS - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E - https://lists.debian.org/debian-lts-announce/2021/12/msg00013.html - http://packetstormsecurity.com/files
pache.org%3E - https://lists.debian.org/debian-lts-announce/2021/12/msg00013.html - http://packetstormsecurity.com/files/172834/libssh2-1.8.2-Out-Of-Bounds-Read.html - https://lists.debian.org/debian-lts-announce/2023/09/msg00006.html
CVE ID: CVE-2019-13116 State: PUBLISHED Published: 2019-10-16T19:06:39 Last Updated: 2024-08-04T23:41:10.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections Additional Analyst Notes: - CVE Program Container: References: - https://docs.mulesoft.com/release-notes/mule-runtime/mule-3.8.0-release-notes - https://threat.tevora.com/mulesoft-3-8-unauthenticated-rce/
CVE ID: CVE-2019-13117 State: PUBLISHED Published: 2019-07-01T01:27:02 Last Updated: 2024-08-04T23:41:10.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/libxslt/commit/c5eb6cf3aba0af048596106ed839b4ae17ecbcb1 - https://oss-fuzz.com/testcase-detail/5631739747106816 - https://bugs.chromium.org/p/oss-fuzz/issues/
ed839b4ae17ecbcb1 - https://oss-fuzz.com/testcase-detail/5631739747106816 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14471 - https://lists.debian.org/debian-lts-announce/2019/07/msg00020.html - https://security.netapp.com/advisory/ntap-20190806-0004/ - https://usn.ubuntu.com/4164-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IOYJKXPQCUNBMMQJWYXOR6QRUJZHEDRZ/ - http://www.openwall.com/lists/oss-security/2019/11/17/2 - https://www.oracle.com/security-alerts/cpujan2020.html - https://security.netapp.com/advisory/ntap-20200122-0003/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00062.html - https://lists.apa
ory/ntap-20200122-0003/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00062.html - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2019-13118 State: PUBLISHED Published: 2019-07-01T01:27:39 Last Updated: 2024-08-04T23:41:10.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/libxslt/commit/6ce8de69330783977dd14f6569419489875fb71b - https://oss-fuzz.com/testcase-detail/5197371471822848 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15069 - https://suppo
-fuzz.com/testcase-detail/5197371471822848 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15069 - https://support.apple.com/kb/HT210348 - https://support.apple.com/kb/HT210353 - https://support.apple.com/kb/HT210351 - https://lists.debian.org/debian-lts-announce/2019/07/msg00020.html - https://support.apple.com/kb/HT210346 - https://seclists.org/bugtraq/2019/Jul/35 - https://seclists.org/bugtraq/2019/Jul/37 - https://seclists.org/bugtraq/2019/Jul/36 - http://seclists.org/fulldisclosure/2019/Jul/24 - http://seclists.org/fulldisclosure/2019/Jul/23 - http://seclists.org/fulldisclosure/2019/Jul/22 - http://seclists.org/fulldisclosure/2019/Jul/26 - https://support.apple.com/kb/HT210356 -
rg/fulldisclosure/2019/Jul/22 - http://seclists.org/fulldisclosure/2019/Jul/26 - https://support.apple.com/kb/HT210356 - https://support.apple.com/kb/HT210357 - https://support.apple.com/kb/HT210358 - https://seclists.org/bugtraq/2019/Jul/42 - https://seclists.org/bugtraq/2019/Jul/40 - https://seclists.org/bugtraq/2019/Jul/41 - http://seclists.org/fulldisclosure/2019/Jul/31 - http://seclists.org/fulldisclosure/2019/Jul/37 - http://seclists.org/fulldisclosure/2019/Jul/38 - https://security.netapp.com/advisory/ntap-20190806-0004/ - https://seclists.org/bugtraq/2019/Aug/25 - https://seclists.org/bugtraq/2019/Aug/22 - https://seclists.org/bugtraq/2019/Aug/23 - https://seclists.org/bugtraq/2019/A
ttps://seclists.org/bugtraq/2019/Aug/22 - https://seclists.org/bugtraq/2019/Aug/23 - https://seclists.org/bugtraq/2019/Aug/21 - http://seclists.org/fulldisclosure/2019/Aug/14 - http://seclists.org/fulldisclosure/2019/Aug/11 - http://seclists.org/fulldisclosure/2019/Aug/13 - http://seclists.org/fulldisclosure/2019/Aug/15 - https://usn.ubuntu.com/4164-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IOYJKXPQCUNBMMQJWYXOR6QRUJZHEDRZ/ - http://www.openwall.com/lists/oss-security/2019/11/17/2 - https://www.oracle.com/security-alerts/cpujan2020.html - https://security.netapp.com/advisory/ntap-20200122-0003/ - http://lists.opensuse.org/opensuse-s
alerts/cpujan2020.html - https://security.netapp.com/advisory/ntap-20200122-0003/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00062.html - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2019-13120 State: PUBLISHED Published: 2019-10-07T21:57:48 Last Updated: 2024-08-04T23:41:10.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amazon FreeRTOS up to and including v1.4.8 lacks length checking in prvProcessReceivedPublish, resulting in untargetable leakage of arbitrary memory contents on a device to an attacker. If an attacker has the authorization to send a malformed MQTT publish packet to an Amazon IoT Thing, which interacts with an associated vulnerable MQTT message in the application, specific circumstances could trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://aws.amazon.com/cn/freertos/security
nerability. Additional Analyst Notes: - CVE Program Container: References: - https://aws.amazon.com/cn/freertos/security-updates/
CVE ID: CVE-2019-13121 State: PUBLISHED Published: 2020-03-10T17:11:26 Last Updated: 2024-08-04T23:41:10.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Enterprise Edition 10.6 through 12.0.2. The GitHub project integration was vulnerable to an SSRF vulnerability which allowed an attacker to make requests to local network resources. It has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/releases/2019/07/03/security-release-gitlab-12-dot-0-dot-3-released/
CVE ID: CVE-2019-13122 State: PUBLISHED Published: 2019-07-10T16:38:39 Last Updated: 2024-08-04T23:41:10.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting (XSS) vulnerability exists in the template tag used to render message ids in Patchwork v1.1 through v2.1.x. This allows an attacker to insert JavaScript or HTML into the patch detail page via an email sent to a mailing list consumed by Patchwork. This affects the function msgid in templatetags/patch.py. Patchwork versions v2.1.4 and v2.0.4 will contain the fix. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/getpatchwork/patchwork/releases - https://github.com/getpatc
: - CVE Program Container: References: - https://github.com/getpatchwork/patchwork/releases - https://github.com/getpatchwork/patchwork/commits/master - https://lists.ozlabs.org/pipermail/patchwork/2019-July/date.html - http://jk.ozlabs.org/projects/patchwork/ - http://www.openwall.com/lists/oss-security/2019/07/05/1 - https://lists.ozlabs.org/pipermail/patchwork/2019-July/005870.html - https://lists.ozlabs.org/pipermail/patchwork/2019-July/005878.html
CVE ID: CVE-2019-13123 State: PUBLISHED Published: 2019-09-30T19:18:42 Last Updated: 2024-08-04T23:41:10.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled Recursion in the V8 JavaScript engine (issue 1 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-13124 State: PUBLISHED Published: 2019-09-30T19:29:35 Last Updated: 2024-08-04T23:41:10.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled Recursion in the V8 JavaScript engine (issue 2 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-13125 State: PUBLISHED Published: 2019-07-01T13:23:24 Last Updated: 2024-08-04T23:41:10.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: HaboMalHunter through 2.0.0.3 in Tencent Habo allows attackers to evade dynamic malware analysis via PIE compilation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Tencent/HaboMalHunter/issues/23
CVE ID: CVE-2019-13126 State: PUBLISHED Published: 2019-07-29T16:07:16 Last Updated: 2024-08-04T23:41:10.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow in NATS Server before 2.0.2 allows a remote attacker to crash the server by sending a crafted request. If authentication is enabled, then the remote attacker must have first authenticated. Additional Analyst Notes: - CVE Program Container: References: - https://www.twistlock.com/labs-blog/finding-dos-vulnerability-nats-go-fuzz-cve-2019-13126/ - https://github.com/nats-io/nats-server/pull/1053
CVE ID: CVE-2019-13127 State: PUBLISHED Published: 2019-07-01T14:33:36 Last Updated: 2024-08-04T23:41:10.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mxGraph through 4.0.0, related to the "draw.io Diagrams" plugin before 8.3.14 for Confluence and other products. Improper input validation/sanitization of a color field leads to XSS. This is associated with javascript/examples/grapheditor/www/js/Dialogs.js. Additional Analyst Notes: - CVE Program Container: References: - https://marketplace.atlassian.com/apps/1210933/draw-io-diagrams-for-confluence/version-history - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-032.txt -
ms-for-confluence/version-history - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-032.txt - https://github.com/jgraph/mxgraph/commit/76e8e2809b622659a9c5ffdc4f19922b7a68cfa3
CVE ID: CVE-2019-13128 State: PUBLISHED Published: 2019-07-01T14:47:52 Last Updated: 2024-08-04T23:41:10.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the IPAddress or Gateway field to SetStaticRouteSettings. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/iot/dlink/DIR-823G-v2.pdf
CVE ID: CVE-2019-13129 State: PUBLISHED Published: 2019-07-01T14:48:00 Last Updated: 2024-08-04T23:41:10.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: On the Motorola router CX2L MWR04L 1.01, there is a stack consumption (infinite recursion) issue in scopd via TCP port 8010 and UDP port 8080. It is caused by snprintf and inappropriate length handling. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/iot/morouter/morouter_stackoverflow.pdf
CVE ID: CVE-2019-13131 State: PUBLISHED Published: 2019-07-01T15:31:11 Last Updated: 2024-08-04T23:41:10.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Super Micro SuperDoctor 5, when restrictions are not implemented in agent.cfg, allows remote attackers to execute arbitrary commands via NRPE. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47030
CVE ID: CVE-2019-13132 State: PUBLISHED Published: 2019-07-10T00:00:00 Last Updated: 2024-08-04T23:41:10.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due to a buffer overflow in the library. Users running public servers with the above configuration are highly encouraged to upgrade as soon as possible, as there are no known mitigations. Additional Analyst Notes: - CVE Program Container
ged to upgrade as soon as possible, as there are no known mitigations. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/07/08/6 - https://lists.debian.org/debian-lts-announce/2019/07/msg00007.html - https://usn.ubuntu.com/4050-1/ - https://www.debian.org/security/2019/dsa-4477 - https://seclists.org/bugtraq/2019/Jul/13 - https://github.com/zeromq/libzmq/issues/3558 - https://github.com/zeromq/libzmq/releases - http://www.securityfocus.com/bid/109284 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00033.html - https://security.gentoo.org/glsa/201908-17 - https://lists.fedoraproject.org/archives/list/package-anno
/msg00033.html - https://security.gentoo.org/glsa/201908-17 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AVCTNUEOFFZUNJOXFCYCF3C6Y6NDILI3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T6HINI24SL7CU6XIJWUOSGTZWEFOOL7X/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MK7SJYDJ7MMRRRPCUN3SCSE7YK6ZSHVS/ - https://fangpenlin.com/posts/2024/04/07/how-i-discovered-a-9-point-8-critical-security-vulnerability-in-zeromq-with-mostly-pure-luck/ - https://news.ycombinator.com/item?id=39970716