Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
uct-advisories/detail/the-vulnerability-in-canon-digital-cameras - https://cweb.canon.jp/e-support/products/eos-d/190806dilc-firm.html - https://www.canon-europe.com/support/product-security/ - http://jvn.jp/en/vu/JVNVU97511331/index.html - https://research.checkpoint.com/say-cheese-ransomware-ing-a-dslr-camera/
CVE ID: CVE-2019-5996 State: PUBLISHED Published: 2019-09-12T15:58:55 Last Updated: 2024-08-04T20:09:23.990Z Vendors: Video Insight VMS Products: 7.3.2.5 and earlier Problem Types: SQL injection vulnerability in the Video Insight VMS 7.3.2.5 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. Description: SQL injection vulnerability in the Video Insight VMS 7.3.2.5 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN93833849/index.html
CVE ID: CVE-2019-5997 State: PUBLISHED Published: 2020-05-20T10:15:21 Last Updated: 2024-08-04T20:09:24.027Z Vendors: Panasonic Corporation Products: Video Insight VMS Problem Types: Code injection Description: Video Insight VMS versions prior to 7.6.1 allow remote attackers to conduct code injection attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://downloadvi.com/downloads/IPServer/v7.6/76148/v76148RN.pdf - https://jvn.jp/en/jp/JVN96646182/index.html
CVE ID: CVE-2019-5998 State: PUBLISHED Published: 2019-08-06T18:41:11 Last Updated: 2024-08-04T20:09:24.025Z Vendors: Canon, Inc. Products: EOS series digital cameras, PowerShot SX740 HS, PowerShot SX70 HS, and PowerShot G5XmarkⅡ Problem Types: Buffer Overflow Description: Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware version 1.2.0 and earlier, EOS 5DS firmware version 1.1.2 and earlier, EOS 5DS R firmware version 1.1.2 and earlier, EOS 6D firm
nd earlier, EOS M100 firmware version 1.0.0 and earlier, EOS KISS M / EOS M50 firmware version 1.0.2 and earlier) and PowerShot SX740 HS firmware version 1.0.1 and earlier, PowerShot SX70 HS firmware version 1.1.0 and earlier, and PowerShot G5Xmark II firmware version 1.0.1 and earlier allows an attacker on the same network segment to trigger the affected product being unresponsive or to execute arbitrary code on the affected product via notifybtstatus command. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.canon.com/internet/portal/us/home/support/product-advisories/detail/the-vulnerability-in-canon-digital-cameras - https://cweb.canon.jp/e-support/products
CVE ID: CVE-2019-5999 State: PUBLISHED Published: 2019-08-06T18:41:11 Last Updated: 2024-08-04T20:09:23.942Z Vendors: Canon, Inc. Products: EOS series digital cameras, PowerShot SX740 HS, PowerShot SX70 HS, and PowerShot G5XmarkⅡ Problem Types: Buffer Overflow Description: Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware version 1.2.0 and earlier, EOS 5DS firmware version 1.1.2 and earlier, EOS 5DS R firmware version 1.1.2 and earlier, EOS 6D firm
nd earlier, EOS M100 firmware version 1.0.0 and earlier, EOS KISS M / EOS M50 firmware version 1.0.2 and earlier) and PowerShot SX740 HS firmware version 1.0.1 and earlier, PowerShot SX70 HS firmware version 1.1.0 and earlier, and PowerShot G5Xmark II firmware version 1.0.1 and earlier allows an attacker on the same network segment to trigger the affected product being unresponsive or to execute arbitrary code on the affected product via blerequest command. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.canon.com/internet/portal/us/home/support/product-advisories/detail/the-vulnerability-in-canon-digital-cameras - https://cweb.canon.jp/e-support/products/eos
port/product-advisories/detail/the-vulnerability-in-canon-digital-cameras - https://cweb.canon.jp/e-support/products/eos-d/190806dilc-firm.html - https://www.canon-europe.com/support/product-security/ - http://jvn.jp/en/vu/JVNVU97511331/index.html - https://research.checkpoint.com/say-cheese-ransomware-ing-a-dslr-camera/
CVE ID: CVE-2019-6000 State: PUBLISHED Published: 2019-08-06T18:41:11 Last Updated: 2024-08-04T20:09:23.999Z Vendors: Canon, Inc. Products: EOS series digital cameras, PowerShot SX740 HS, PowerShot SX70 HS, and PowerShot G5XmarkⅡ Problem Types: Buffer Overflow Description: Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware version 1.2.0 and earlier, EOS 5DS firmware version 1.1.2 and earlier, EOS 5DS R firmware version 1.1.2 and earlier, EOS 6D firm
nd earlier, EOS M100 firmware version 1.0.0 and earlier, EOS KISS M / EOS M50 firmware version 1.0.2 and earlier) and PowerShot SX740 HS firmware version 1.0.1 and earlier, PowerShot SX70 HS firmware version 1.1.0 and earlier, and PowerShot G5Xmark II firmware version 1.0.1 and earlier allows an attacker on the same network segment to trigger the affected product being unresponsive or to execute arbitrary code on the affected product via sendhostinfo command. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.canon.com/internet/portal/us/home/support/product-advisories/detail/the-vulnerability-in-canon-digital-cameras - https://cweb.canon.jp/e-support/products/e
upport/product-advisories/detail/the-vulnerability-in-canon-digital-cameras - https://cweb.canon.jp/e-support/products/eos-d/190806dilc-firm.html - https://www.canon-europe.com/support/product-security/ - http://jvn.jp/en/vu/JVNVU97511331/index.html - https://research.checkpoint.com/say-cheese-ransomware-ing-a-dslr-camera/
CVE ID: CVE-2019-6001 State: PUBLISHED Published: 2019-08-06T18:41:11 Last Updated: 2024-08-04T20:09:24.079Z Vendors: Canon, Inc. Products: EOS series digital cameras, PowerShot SX740 HS, PowerShot SX70 HS, and PowerShot G5XmarkⅡ Problem Types: Buffer Overflow Description: Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware version 1.2.0 and earlier, EOS 5DS firmware version 1.1.2 and earlier, EOS 5DS R firmware version 1.1.2 and earlier, EOS 6D firm
nd earlier, EOS M100 firmware version 1.0.0 and earlier, EOS KISS M / EOS M50 firmware version 1.0.2 and earlier) and PowerShot SX740 HS firmware version 1.0.1 and earlier, PowerShot SX70 HS firmware version 1.1.0 and earlier, and PowerShot G5Xmark II firmware version 1.0.1 and earlier allows an attacker on the same network segment to trigger the affected product being unresponsive or to execute arbitrary code on the affected product via setadapterbatteryreport command. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.canon.com/internet/portal/us/home/support/product-advisories/detail/the-vulnerability-in-canon-digital-cameras - https://cweb.canon.jp/e-support
l/us/home/support/product-advisories/detail/the-vulnerability-in-canon-digital-cameras - https://cweb.canon.jp/e-support/products/eos-d/190806dilc-firm.html - https://www.canon-europe.com/support/product-security/ - http://jvn.jp/en/vu/JVNVU97511331/index.html - https://research.checkpoint.com/say-cheese-ransomware-ing-a-dslr-camera/
CVE ID: CVE-2019-6002 State: PUBLISHED Published: 2019-07-26T13:25:39 Last Updated: 2024-08-04T20:09:24.032Z Vendors: LINE Corporation Products: Central Dogma Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Central Dogma 0.17.0 to 0.40.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/line/centraldogma/releases/tag/centraldogma-0.41.0 - http://jvn.jp/en/jp/JVN94889214/index.html
CVE ID: CVE-2019-6003 State: PUBLISHED Published: 2019-09-12T15:58:55 Last Updated: 2024-08-04T20:09:23.996Z Vendors: LTD." Products: EC-CUBE plugin 'Amazon Pay Plugin 2.12,2.13' Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in EC-CUBE plugin 'Amazon Pay Plugin 2.12,2.13' version 2.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.ec-cube.net/products/detail.php?product_id=1602 - http://jvn.jp/en/jp/JVN29343839/index.html
CVE ID: CVE-2019-6004 State: PUBLISHED Published: 2019-09-12T15:58:55 Last Updated: 2024-08-04T20:09:24.034Z Vendors: Fuji Xerox Co.,Ltd. Products: ApeosWare Management Suite and ApeosWare Management Suite 2 Problem Types: Open Redirect Description: Open redirect vulnerability in ApeosWare Management Suite Ver.1.4.0.18 and earlier, and ApeosWare Management Suite 2 Ver.2.1.2.4 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://onlinesupport.fujixerox.com/processDriverForm.do?ctry_code=SG&lang_code=en&d_lang=en&corp_pid=AWMS2&rts=null&model=Apeo
/onlinesupport.fujixerox.com/processDriverForm.do?ctry_code=SG&lang_code=en&d_lang=en&corp_pid=AWMS2&rts=null&model=ApeosWare+Management+Suite+2&type_id=7&oslist=Windows+10+64bit&lang_list=en - http://jvn.jp/en/jp/JVN07679150/index.html
CVE ID: CVE-2019-6005 State: PUBLISHED Published: 2019-09-12T15:58:55 Last Updated: 2024-08-04T20:09:23.998Z Vendors: Smart TV Box Products: firmware version prior to 1300 Problem Types: Smart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction to conduct arbitrary operations on the device without user's intent, such as installing arbitrary software or changing the device settings via Android Debug Bridge port 5555/TCP. Description: Smart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction to conduct arbitrary operations on the device without user's intent, such as installing arbitrary software or changing the devi
uct arbitrary operations on the device without user's intent, such as installing arbitrary software or changing the device settings via Android Debug Bridge port 5555/TCP. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN17127920/index.html
CVE ID: CVE-2019-6007 State: PUBLISHED Published: 2019-09-12T15:58:55 Last Updated: 2024-08-04T20:09:23.965Z Vendors: apng-drawable Products: 1.0.0 to 1.6.0 Problem Types: Integer overflow vulnerability in apng-drawable 1.0.0 to 1.6.0 allows an attacker to cause a denial of service (DoS) condition or execute arbitrary code via unspecified vectors. Description: Integer overflow vulnerability in apng-drawable 1.0.0 to 1.6.0 allows an attacker to cause a denial of service (DoS) condition or execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN39383894/index.html - http://jvn.jp/en/jp/JVN97845465/index.html
CVE ID: CVE-2019-6008 State: PUBLISHED Published: 2019-12-26T15:16:49 Last Updated: 2024-08-04T20:09:24.050Z Vendors: Yokogawa Electric Corporation Products: Multiple Yokogawa products for Windows Problem Types: Unquoted Search Path or Element Description: An unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00 ? R3.77.00), Exaplog (R1.10.00 ? R3.40.00), Exaquantum (R1.10.00 ? R3.02.00 and R3.15.00), Exaquantum/Batch (R1.01.00 ? R2.50.40), Exasmoc (all revisions), Exarqe (all revisions), GA10 (R1.01.01 ? R3.05.01), and InsightSuiteAE (R1.01.00 ? R1.06.00)) allow local users to gain privileges via a Trojan horse executable file and execute arbitrary c
E (R1.01.00 ? R1.06.00)) allow local users to gain privileges via a Trojan horse executable file and execute arbitrary code with eleveted privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/ - http://jvn.jp/vu/JVNVU98228725/index.html
CVE ID: CVE-2019-6009 State: PUBLISHED Published: 2019-09-12T15:58:55 Last Updated: 2024-08-04T20:09:23.960Z Vendors: SHIRASAGI Project Products: SHIRASAGI Problem Types: Open Redirect Description: Open redirect vulnerability in SHIRASAGI v1.7.0 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.ss-proj.org/ - https://github.com/shirasagi/shirasagi - https://github.com/shirasagi/shirasagi/commit/6016948ea535e51b16535888af13df064a1a15d3 - https://github.com/shirasagi/shirasagi/commit/6016948ea535e51b16535888af13df064a1a15d3.patch - http:/
af13df064a1a15d3 - https://github.com/shirasagi/shirasagi/commit/6016948ea535e51b16535888af13df064a1a15d3.patch - http://jvn.jp/en/jp/JVN74699196/index.html
CVE ID: CVE-2019-6010 State: PUBLISHED Published: 2019-09-19T13:34:18 Last Updated: 2024-08-04T20:09:24.028Z Vendors: LINE Corporation Products: LINE(Android) Problem Types: Integer overflow Description: Integer overflow vulnerability in LINE(Android) from 4.4.0 to the version before 9.15.1 allows remote attackers to cause a denial of service (DoS) condition or execute arbitrary code via a specially crafted image. Additional Analyst Notes: - CVE Program Container: References: - https://play.google.com/store/apps/details?id=jp.naver.line.android&hl=en - http://jvn.jp/en/jp/JVN97845465/index.html
CVE ID: CVE-2019-6011 State: PUBLISHED Published: 2019-12-26T15:16:50 Last Updated: 2024-08-04T20:09:24.032Z Vendors: TMS-Plugins Products: wpDataTables Lite Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in wpDataTables Lite Version 2.0.11 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wpdatatables/ - http://jvn.jp/en/jp/JVN14776551/index.html
CVE ID: CVE-2019-6012 State: PUBLISHED Published: 2019-12-26T15:16:50 Last Updated: 2024-08-04T20:09:23.989Z Vendors: TMS-Plugins Products: wpDataTables Lite Problem Types: SQL Injection Description: SQL injection vulnerability in the wpDataTables Lite Version 2.0.11 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wpdatatables/ - http://jvn.jp/en/jp/JVN14776551/index.html
CVE ID: CVE-2019-6013 State: PUBLISHED Published: 2019-12-26T15:16:50 Last Updated: 2024-08-04T20:09:24.083Z Vendors: D-Link Japan K.K. Products: DBA-1510P Problem Types: OS Command Injection Description: DBA-1510P firmware 1.70b009 and earlier allows authenticated attackers to execute arbitrary OS commands via Command Line Interface (CLI). Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink-jp.com/product/dba-1510p#product_firmware - http://jvn.jp/en/jp/JVN95875796/index.html
CVE ID: CVE-2019-6014 State: PUBLISHED Published: 2019-12-26T15:16:50 Last Updated: 2024-08-04T20:09:24.027Z Vendors: D-Link Japan K.K. Products: DBA-1510P Problem Types: OS Command Injection Description: DBA-1510P firmware 1.70b009 and earlier allows an attacker to execute arbitrary OS commands via Web User Interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink-jp.com/product/dba-1510p#product_firmware - http://jvn.jp/en/jp/JVN95875796/index.html
CVE ID: CVE-2019-6015 State: PUBLISHED Published: 2019-10-04T17:55:42 Last Updated: 2024-08-04T20:16:23.652Z Vendors: FON Wireless Limited Products: FON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and FON2601E-FSW-B Problem Types: DNS amplification attacks Description: FON2601E-SE, FON2601E-RE, FON2601E-FSW-S, and FON2601E-FSW-B with firmware versions 1.1.7 and earlier contain an issue where they may behave as open resolvers. If this vulnerability is exploited, FON routers may be leveraged for DNS amplification attacks to some other entities. Additional Analyst Notes: - CVE Program Container: References: - https://fonjapan.zendesk.com/hc/ja/articles/360000558942 - http://jvn.jp/en/vu/JVNVU94678942
am Container: References: - https://fonjapan.zendesk.com/hc/ja/articles/360000558942 - http://jvn.jp/en/vu/JVNVU94678942/index.html
CVE ID: CVE-2019-6016 State: PUBLISHED Published: 2019-12-26T15:16:50 Last Updated: 2024-08-04T20:16:23.191Z Vendors: REMISE Corporation Products: REMISE Payment Module (2.11, 2.12 and 2.13) Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in REMISE Payment Module (2.11, 2.12 and 2.13) version 3.0.12 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.remise.jp/data/pdf/20191002.pdf - http://jvn.jp/en/jp/JVN59436681/index.html
CVE ID: CVE-2019-6017 State: PUBLISHED Published: 2019-12-26T15:16:50 Last Updated: 2024-08-04T20:16:23.212Z Vendors: REMISE Corporation Products: REMISE Payment Module (2.11, 2.12 and 2.13) Problem Types: Information Disclosure Description: REMISE Payment Module (2.11, 2.12 and 2.13) version 3.0.12 and earlier allow remote attackers to [Disclosed_Information_type] via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.remise.jp/data/pdf/20191002.pdf - http://jvn.jp/en/jp/JVN59436681/index.html
CVE ID: CVE-2019-6018 State: PUBLISHED Published: 2019-12-26T15:16:50 Last Updated: 2024-08-04T20:16:23.171Z Vendors: The NetCommons Project Products: NetCommons Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in NetCommons 3.2.2 and earlier (NetCommons3.x) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.netcommons.org/blogs/blog_entries/view/6/7b40ca16fc8358a57d0e178c931c0027?frame_id=13 - http://jvn.jp/en/jp/JVN74530672/index.html
CVE ID: CVE-2019-6019 State: PUBLISHED Published: 2019-12-26T15:16:50 Last Updated: 2024-08-04T20:16:23.182Z Vendors: INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Products: STAMP Workbench installer Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in STAMP Workbench installer all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.ipa.go.jp/ikc/info/20191126.html - http://jvn.jp/en/jp/JVN19386781/index.html
CVE ID: CVE-2019-6020 State: PUBLISHED Published: 2019-12-26T15:16:50 Last Updated: 2024-08-04T20:16:23.965Z Vendors: Alfasado Inc. Products: PowerCMS Problem Types: Open Redirect Description: Open redirect vulnerability in PowerCMS 5.12 and earlier (PowerCMS 5.x), 4.42 and earlier (PowerCMS 4.x), and 3.293 and earlier (PowerCMS 3.x) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.powercms.jp/news/release-powercms-201910.html - http://jvn.jp/en/jp/JVN34634458/index.html
CVE ID: CVE-2019-6021 State: PUBLISHED Published: 2019-12-26T15:16:50 Last Updated: 2024-08-04T20:16:24.377Z Vendors: RICOH COMPANY, LTD. Products: Library Information Management System LIMEDIO Problem Types: Open Redirect Description: Open redirect vulnerability in Library Information Management System LIMEDIO all versions allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.ricoh.co.jp/limedio/user/ - http://jvn.jp/en/jp/JVN45633549/index.html
CVE ID: CVE-2019-6022 State: PUBLISHED Published: 2019-12-26T15:16:50 Last Updated: 2024-08-04T20:16:24.078Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Directory traversal Description: Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to alter arbitrary files via the 'Customapp' function. Additional Analyst Notes: - CVE Program Container: References: - https://kb.cybozu.support/article/36124 - http://jvn.jp/en/jp/JVN79854355/index.html
CVE ID: CVE-2019-6023 State: PUBLISHED Published: 2019-12-26T15:16:50 Last Updated: 2024-08-04T20:16:24.755Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Fails to restrict access Description: Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to bypass access restriction which may result in obtaining data without access privileges via the application 'Address'. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN79854355/index.html - https://kb.cybozu.support/article/36130
CVE ID: CVE-2019-6024 State: PUBLISHED Published: 2019-12-26T15:16:50 Last Updated: 2024-08-04T20:16:23.668Z Vendors: Rakuten, Inc. Products: Rakuma App Problem Types: Authentication bypass Description: Rakuma App for Android version 7.15.0 and earlier, and for iOS version 7.16.4 and earlier allows an attacker to bypass authentication and obtain the user's authentication information via a malicious application created by the third party. Additional Analyst Notes: - CVE Program Container: References: - https://play.google.com/store/apps/details?id=jp.co.fablic.fril&hl=en - https://apps.apple.com/jp/app/furimaapuri-furiru-fril-fasshon/id523497998 - http://jvn.jp/en/jp/JVN41566067/index.html
CVE ID: CVE-2019-6025 State: PUBLISHED Published: 2019-12-26T15:16:50 Last Updated: 2024-08-04T20:16:23.131Z Vendors: Six Apart Ltd Products: Movable Type series Problem Types: Open Redirect Description: Open redirect vulnerability in Movable Type series Movable Type 7 r.4602 (7.1.3) and earlier (Movable Type 7), Movable Type 6.5.0 and 6.5.1 (Movable Type 6.5), Movable Type 6.3.9 and earlier (Movable Type 6.3.x, 6.2.x, 6.1.x, 6.0.x), Movable Type Advanced 7 r.4602 (7.1.3) and earlier (Movable Type 7), Movable Type Advanced 6.5.0 and 6.5.1 (Movable Type 6.5), Movable Type Advanced 6.3.9 and earlier (Movable Type 6.3.x, 6.2.x, 6.1.x, 6.0.x), Movable Type Premium 1.24 and earlier (Movable Type
vanced 6.3.9 and earlier (Movable Type 6.3.x, 6.2.x, 6.1.x, 6.0.x), Movable Type Premium 1.24 and earlier (Movable Type Premium), and Movable Type Premium (Advanced Edition) 1.24 and earlier (Movable Type Premium) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://movabletype.org/news/2019/11/movable_type_r4603_v714_v652_and_v6310_released.html - http://jvn.jp/en/jp/JVN65280626/index.html