Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
versions include: 4.22 release train: 4.22.1F and earlier releases 4.21 release train: 4.21.0F - 4.21.2.3F, 4.21.3F - 4.21.7.1M 4.20 release train: 4.20.14M and earlier releases 4.19 release train: 4.19.12M and earlier releases End of support release trains (4.18 and 4.17) Additional Analyst Notes: - CVE Program Container: References: - https://www.arista.com/en/support/advisories-notices - https://www.arista.com/en/support/advisories-notices/security-advisories/8321-security-advisory-42
CVE ID: CVE-2019-14811 State: PUBLISHED Published: 2019-09-03T15:17:12 Last Updated: 2024-08-05T00:26:38.930Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Artifex Software Products: ghostscript Problem Types: CWE-648 Description: A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.co
execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14811 - https://www.debian.org/security/2019/dsa-4518 - https://lists.debian.org/debian-lts-announce/2019/09/msg00007.html - https://seclists.org/bugtraq/2019/Sep/15 - https://access.redhat.com/errata/RHSA-2019:2594 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LBUC4DBBJTRFNCR3IODBV4IXB2C2HI3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZP34D27RKYV2POJ3NJLSVCHUA5V5C45A/ - https://lists.fedoraproject.org/archives/list/package-announce%40list
ct.org/message/ZP34D27RKYV2POJ3NJLSVCHUA5V5C45A/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6AATIHU32MYKUOXQDJQU4X4DDVL7NAY3/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html - https://access.redhat.com/errata/RHBA-2019:2824 - https://security.gentoo.org/glsa/202004-03
CVE ID: CVE-2019-14812 State: PUBLISHED Published: 2019-11-27T13:50:15 Last Updated: 2024-08-05T00:26:39.040Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Red Hat Products: ghostscript Problem Types: CWE-648 Description: A flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://git.ghostscript.com/?p=ghostp
rbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=885444fcbe10dc42787ecb76686c8ee4dd33bf33 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14812 - https://access.redhat.com/security/cve/cve-2019-14812 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LBUC4DBBJTRFNCR3IODBV4IXB2C2HI3V/ - https://bugs.ghostscript.com/show_bug.cgi?id=701444 - https://security.gentoo.org/glsa/202004-03
CVE ID: CVE-2019-14813 State: PUBLISHED Published: 2019-09-06T13:27:47 Last Updated: 2024-08-05T00:26:39.065Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Artifex Software Products: ghostscript Problem Types: CWE-648 Description: A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/sh
cute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14813 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=885444fcbe10dc42787ecb76686c8ee4dd33bf33 - https://www.debian.org/security/2019/dsa-4518 - https://lists.debian.org/debian-lts-announce/2019/09/msg00007.html - https://seclists.org/bugtraq/2019/Sep/15 - https://access.redhat.com/errata/RHSA-2019:2594 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LBUC4DBBJTRFNCR3IODBV4IXB2C2HI3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZP34
ODBV4IXB2C2HI3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZP34D27RKYV2POJ3NJLSVCHUA5V5C45A/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6AATIHU32MYKUOXQDJQU4X4DDVL7NAY3/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html - https://access.redhat.com/errata/RHBA-2019:2824 - https://security.gentoo.org/glsa/202004-03
CVE ID: CVE-2019-14814 State: PUBLISHED Published: 2019-09-20T18:27:42 Last Updated: 2024-08-05T00:26:39.067Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Linux Products: kernel Problem Types: CWE-122 Description: There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/08/28/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.o
lists/oss-security/2019/08/28/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4JZ6AEUKFWBHQAROGMQARJ274PQP2QP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3RUDQJXRJQVGHCGR4YZWTQ3ECBI7TXH/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14814 - https://www.openwall.com/lists/oss-security/2019/08/28/1 - https://github.com/torvalds/linux/commit/7caac62ed598a196d6ddf8d9c121e12e082cac3a - https://access.redhat.com/security/cve/cve-2019-14814 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/ms
e.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html - https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html - https://usn.ubuntu.com/4157-1/ - https://usn.ubuntu.com/4162-1/ - https://usn.ubuntu.com/4157-2/ - https://usn.ubuntu.com/4163-1/ - https://usn.ubuntu.com/4163-2/ - https://usn.ubuntu.com/4162-2/ - http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html - https://security.netapp.com/advisory/ntap-20191031-0005/ - https://seclists.org/bugtraq/2019/Nov/11 - http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates
traq/2019/Nov/11 - http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://access.redhat.com/errata/RHSA-2020:0174 - https://access.redhat.com/errata/RHSA-2020:0328 - https://access.redhat.com/errata/RHSA-2020:0339 - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE ID: CVE-2019-14815 State: PUBLISHED Published: 2019-11-25T10:51:15 Last Updated: 2024-08-05T00:26:38.908Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Linux Products: kernel Problem Types: CWE-122 Description: A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/7caac62ed598a196d6ddf8d9c121e12e082cac3a - https://access.redhat.com/security/cve/cve-2019-14815 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14815 - https://www.openwall.com/lists/oss-security/2019/
9-14815 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14815 - https://www.openwall.com/lists/oss-security/2019/08/28/1 - https://lore.kernel.org/linux-wireless/20190828020751.13625-1-huangwenabc%40gmail.com - https://security.netapp.com/advisory/ntap-20200103-0001/ - https://access.redhat.com/errata/RHSA-2020:0174 - https://access.redhat.com/errata/RHSA-2020:0328 - https://access.redhat.com/errata/RHSA-2020:0339 - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE ID: CVE-2019-14816 State: PUBLISHED Published: 2019-09-20T18:25:15 Last Updated: 2024-08-05T00:26:39.113Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Linux Products: kernel Problem Types: CWE-122 Description: There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/08/28/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/mes
oss-security/2019/08/28/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4JZ6AEUKFWBHQAROGMQARJ274PQP2QP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3RUDQJXRJQVGHCGR4YZWTQ3ECBI7TXH/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14816 - https://www.openwall.com/lists/oss-security/2019/08/28/1 - https://github.com/torvalds/linux/commit/7caac62ed598a196d6ddf8d9c121e12e082cac3 - https://access.redhat.com/security/cve/cve-2019-14816 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.
pensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html - https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html - https://usn.ubuntu.com/4157-1/ - https://usn.ubuntu.com/4162-1/ - https://usn.ubuntu.com/4157-2/ - https://usn.ubuntu.com/4163-1/ - https://usn.ubuntu.com/4163-2/ - https://usn.ubuntu.com/4162-2/ - http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html - https://security.netapp.com/advisory/ntap-20191031-0005/ - https://seclists.org/bugtraq/2019/Nov/11 - http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html -
19/Nov/11 - http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://access.redhat.com/errata/RHSA-2020:0174 - https://access.redhat.com/errata/RHSA-2020:0204 - https://access.redhat.com/errata/RHSA-2020:0328 - https://access.redhat.com/errata/RHSA-2020:0339 - https://access.redhat.com/errata/RHSA-2020:0374 - https://access.redhat.com/errata/RHSA-2020:0375 - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - https://access.redhat.com/errata/RHSA-2020:0653 - https://access.redhat.com/errata/RHSA-2020:0661 - https://access.redhat.com/errata/RHSA-2020:0664
CVE ID: CVE-2019-14817 State: PUBLISHED Published: 2019-09-03T15:50:42 Last Updated: 2024-08-05T00:26:39.156Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Artifex Software Products: ghostscript Problem Types: CWE-648 Description: A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat
or execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14817 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=cd1b1cacadac2479e291efe611979bdc1b3bdb19 - https://www.debian.org/security/2019/dsa-4518 - https://lists.debian.org/debian-lts-announce/2019/09/msg00007.html - https://seclists.org/bugtraq/2019/Sep/15 - https://access.redhat.com/errata/RHSA-2019:2594 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LBUC4DBBJTRFNCR3IODBV4IXB2C2HI3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/messa
RFNCR3IODBV4IXB2C2HI3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZP34D27RKYV2POJ3NJLSVCHUA5V5C45A/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6AATIHU32MYKUOXQDJQU4X4DDVL7NAY3/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html - https://access.redhat.com/errata/RHBA-2019:2824 - https://security.gentoo.org/glsa/202004-03
CVE ID: CVE-2019-14818 State: PUBLISHED Published: 2019-11-14T00:00:00 Last Updated: 2024-08-05T00:26:39.137Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: DPDK Products: dpdk Problem Types: CWE-401 Description: A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This flaw could lead to a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedorap
to a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ULJ3C7OVBOEVDGSHYC3VCLSUHANGTFFP/ - https://access.redhat.com/errata/RHSA-2020:0166 - https://access.redhat.com/errata/RHSA-2020:0165 - https://access.redhat.com/errata/RHSA-2020:0168 - https://access.redhat.com/errata/RHSA-2020:0172 - https://access.redhat.com/errata/RHSA-2020:0171 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14818 - https://bugs.dpdk.org/show_bug.cgi?id=363
CVE ID: CVE-2019-14819 State: PUBLISHED Published: 2020-01-07T17:02:01 Last Updated: 2024-08-05T00:26:39.118Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: [Red Hat] Products: openshift-ansible Problem Types: CWE-266, CWE-270 Description: A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster. Using CRI-O, the dockergc service account is assigned to the current namespace of the user performing the upgrade. This flaw can allow an unprivileged user to escalate their privileges to those allowed by the privileged Security Context Constraints. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.re
leged Security Context Constraints. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14819
CVE ID: CVE-2019-14820 State: PUBLISHED Published: 2020-01-08T14:50:44 Last Updated: 2024-08-05T00:26:39.126Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: keycloak Products: keycloak Problem Types: CWE-200 Description: It was found that keycloak before version 8.0.0 exposes internal adapter endpoints in org.keycloak.constants.AdapterConstants, which can be invoked via a specially-crafted URL. This vulnerability could allow an attacker to access unauthorized information. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14820
CVE ID: CVE-2019-14821 State: PUBLISHED Published: 2019-09-19T17:37:24 Last Updated: 2024-08-05T00:26:39.131Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: Linux Products: Kernel Problem Types: CWE-787 Description: An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash
t user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14821 - http://www.openwall.com/lists/oss-security/2019/09/20/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRZQQQANZWQMPILZV7OTS3RGGRLLE2Q7/ - https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html - https://seclists.org/bugtraq/2019/Sep/41 - https://www.debian.org/security/2019/dsa-4531 -
unce/2019/09/msg00025.html - https://seclists.org/bugtraq/2019/Sep/41 - https://www.debian.org/security/2019/dsa-4531 - https://lists.debian.org/debian-lts-announce/2019/10/msg00000.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YW3QNMPENPFEGVTOFPSNOBL7JEIJS25P/ - https://security.netapp.com/advisory/ntap-20191004-0001/ - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html - https://usn.ubuntu.com/4157-1/ - https://usn.ubuntu.com/4162-1/ - https://usn.ubuntu.com/4157-2/ - https://usn.ubuntu.com/4163-1/ - https://usn.ubuntu.com/4163-2/ -
ubuntu.com/4162-1/ - https://usn.ubuntu.com/4157-2/ - https://usn.ubuntu.com/4163-1/ - https://usn.ubuntu.com/4163-2/ - https://usn.ubuntu.com/4162-2/ - http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html - https://access.redhat.com/errata/RHSA-2019:3309 - https://access.redhat.com/errata/RHSA-2019:3517 - https://seclists.org/bugtraq/2019/Nov/11 - http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://access.redhat.com/errata/RHSA-2019:3978 - https://access.redhat.com/errata/RHSA-2019:3979 - https://access.redhat.com/errata/RHSA-2019:4154 - https://access.redhat.com/errata/RHSA-2019:4256 -
ata/RHSA-2019:3979 - https://access.redhat.com/errata/RHSA-2019:4154 - https://access.redhat.com/errata/RHSA-2019:4256 - https://access.redhat.com/errata/RHSA-2020:0027 - https://access.redhat.com/errata/RHSA-2020:0204 - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2019-14822 State: PUBLISHED Published: 2019-11-25T11:01:18 Last Updated: 2024-08-05T00:26:39.079Z Vendors: n/a Products: ibus Problem Types: CWE-862 Description: A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is using the graphical interface, change the input method engine, or modify other input related configurations of the victim user. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cg
he victim user. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1717958 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14822 - https://usn.ubuntu.com/4134-3/ - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2019-14823 State: PUBLISHED Published: 2019-10-14T19:35:04 Last Updated: 2024-08-05T00:26:39.111Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Dogtag Products: JSS Problem Types: CWE-358 Description: A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly trusted the root certificate of a certificate chain. Applications using this policy may not properly verify the chain and could be vulnerable to attacks such as Man in the Middle. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14823 -
ional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14823 - https://access.redhat.com/errata/RHSA-2019:3067 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O53NXVKMF7PJCPMCJQHLMSYCUGDHGBVE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UZZWZLNALV6AOIBIHB3ZMNA5AGZMZAIY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ENEN4DQBE6WOGEP5BQ5X62WZM7ZQEEBG/ - https://access.redhat.com/errata/RHSA-2019:3225
CVE ID: CVE-2019-14824 State: PUBLISHED Published: 2019-11-08T14:45:46.000Z Last Updated: 2025-02-13T16:27:22.527Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: [UNKNOWN] Products: 389-ds-base Problem Types: CWE-732 Description: A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2019:3981 - https://lists.debian.org/debian-lts-announce/2019/11/msg00036.html - https
s://access.redhat.com/errata/RHSA-2019:3981 - https://lists.debian.org/debian-lts-announce/2019/11/msg00036.html - https://access.redhat.com/errata/RHSA-2020:0464 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14824 - https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html
CVE ID: CVE-2019-14825 State: PUBLISHED Published: 2019-11-25T00:00:00 Last Updated: 2024-08-05T00:26:39.129Z Severity: MEDIUM (CVSS 4.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: Red Hat Products: katello Problem Types: CWE-312 Description: A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.0.9. Registry credentials used during container image discovery were inadvertently logged without being masked. This flaw could expose the registry credentials to other privileged users. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14825
CVE ID: CVE-2019-14826 State: PUBLISHED Published: 2019-09-17T15:09:31 Last Updated: 2024-08-05T00:26:39.109Z Severity: MEDIUM (CVSS 5.6 CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: Red Hat Products: ipa Problem Types: CWE-613 Description: A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this flaw if they obtain previously valid session cookies and can use this to gain access to the session. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14826