Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-15491 State: PUBLISHED Published: 2019-08-23T12:42:02 Last Updated: 2024-08-05T00:49:13.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: openITCOCKPIT before 3.7.1 has CSRF, aka RVID 2-445b21. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/it-novum/openITCOCKPIT/releases/tag/openITCOCKPIT-3.7.1
CVE ID: CVE-2019-15492 State: PUBLISHED Published: 2019-08-23T12:42:45 Last Updated: 2024-08-05T00:49:13.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: openITCOCKPIT before 3.7.1 has reflected XSS, aka RVID 3-445b21. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/it-novum/openITCOCKPIT/releases/tag/openITCOCKPIT-3.7.1
CVE ID: CVE-2019-15493 State: PUBLISHED Published: 2019-08-23T12:43:29 Last Updated: 2024-08-05T00:49:13.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: openITCOCKPIT before 3.7.1 allows deletion of files, aka RVID 4-445b21. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/it-novum/openITCOCKPIT/releases/tag/openITCOCKPIT-3.7.1
CVE ID: CVE-2019-15494 State: PUBLISHED Published: 2019-08-23T12:44:12 Last Updated: 2024-08-05T00:49:13.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: openITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/it-novum/openITCOCKPIT/releases/tag/openITCOCKPIT-3.7.1
CVE ID: CVE-2019-15496 State: PUBLISHED Published: 2019-08-28T16:34:15 Last Updated: 2024-08-05T00:49:13.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyT Project Management 1.5.1 lacks CSRF protection and, for example, allows a user/create CSRF attack. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://www.sevenlayers.com/index.php/240-myt-project-management-1-5-1-csrf
CVE ID: CVE-2019-15497 State: PUBLISHED Published: 2019-08-26T20:29:14 Last Updated: 2024-08-05T00:49:13.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Black Box iCOMPEL 9.2.3 through 11.1.4, as used in ONELAN Net-Top-Box 9.2.3 through 11.1.4 and other products, has default credentials that allow remote attackers to access devices remotely via SSH, HTTP, HTTPS, and FTP. Additional Analyst Notes: - CVE Program Container: References: - https://experiencesofasysadmin.wordpress.com/2019/08/23/cve-2019-15497-default-credentials/
CVE ID: CVE-2019-15498 State: PUBLISHED Published: 2019-08-23T03:05:45 Last Updated: 2024-08-05T00:49:13.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/cmh/webcam.sh in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via --output argument injection in the username parameter to /cgi-bin/cmh/webcam.sh. Additional Analyst Notes: - CVE Program Container: References: - https://distributedcompute.com/2019/08/22/vera-edge-home-controller-remote-shell-via-unauthenticated-command-injection/
CVE ID: CVE-2019-15499 State: PUBLISHED Published: 2019-08-23T03:19:57 Last Updated: 2024-08-05T00:49:13.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: CodiMD 1.3.1, when Safari is used, allows XSS via an IFRAME element with allow-top-navigation in the sandbox attribute, in conjunction with a data: URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hackmdio/codimd/issues/1263
CVE ID: CVE-2019-15501 State: PUBLISHED Published: 2019-08-26T13:47:59 Last Updated: 2024-08-05T00:49:13.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected cross site scripting (XSS) in L-Soft LISTSERV before 16.5-2018a exists via the /scripts/wa.exe OK parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47302 - http://packetstormsecurity.com/files/154202/LSoft-ListServ-Cross-Site-Scripting.html
CVE ID: CVE-2019-15502 State: PUBLISHED Published: 2019-08-29T15:31:27 Last Updated: 2024-08-05T00:49:13.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TeamSpeak client before 3.3.2 allows remote servers to trigger a crash via the 0xe2 0x81 0xa8 0xe2 0x81 0xa7 byte sequence, aka Unicode characters U+2068 (FIRST STRONG ISOLATE) and U+2067 (RIGHT-TO-LEFT ISOLATE). Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=PlVbPIs75D4 - https://r4p3.net/threads/teamkilled-new-teamspeak-crash.8144/ - https://forum.teamspeak.com/threads/141134-Release-TeamSpeak-Client-3-3-2
CVE ID: CVE-2019-15503 State: PUBLISHED Published: 2019-08-26T17:21:43 Last Updated: 2024-08-05T00:49:13.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-cpn/xcoding/prontus_videocut.cgi in AltaVoz Prontus (aka ProntusCMS) through 12.0.3.0 has "Improper Neutralization of Special Elements used in an OS Command," allowing attackers to execute OS commands via an HTTP GET parameter. Additional Analyst Notes: - CVE Program Container: References: - https://blog.nivel4.com/investigaciones/vulnerabilidad-de-ejecucion-de-comandos-remotos-rce-en-prontuscms/
CVE ID: CVE-2019-15504 State: PUBLISHED Published: 2019-08-23T05:18:30 Last Updated: 2024-08-05T00:49:13.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic (which may be remote via usbip or usbredir). Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/lkml/20190819220230.10597-1-benquike%40gmail.com/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4JZ6AEUKFWBHQAROGMQARJ274PQP2QP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/m
EUKFWBHQAROGMQARJ274PQP2QP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3RUDQJXRJQVGHCGR4YZWTQ3ECBI7TXH/ - https://security.netapp.com/advisory/ntap-20190905-0002/ - https://support.f5.com/csp/article/K33554143 - https://support.f5.com/csp/article/K33554143?utm_source=f5support&amp%3Butm_medium=RSS - https://usn.ubuntu.com/4157-1/ - https://usn.ubuntu.com/4157-2/
CVE ID: CVE-2019-15505 State: PUBLISHED Published: 2019-08-23T05:18:51 Last Updated: 2024-08-05T00:49:13.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be remote via usbip or usbredir). Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/lkml/b9b256cb-95f2-5fa1-9956-5a602a017c11%40gmail.com/ - https://git.linuxtv.org/media_tree.git/commit/?id=0c4df39e504bf925ab666132ac3c98d6cbbe380b - https://lore.kernel.org/linux-media/20190821104408.w7krumcglxo6fz5q%40gofer.mess.org/ - https://lists.fedoraproje
380b - https://lore.kernel.org/linux-media/20190821104408.w7krumcglxo6fz5q%40gofer.mess.org/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4JZ6AEUKFWBHQAROGMQARJ274PQP2QP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3RUDQJXRJQVGHCGR4YZWTQ3ECBI7TXH/ - https://security.netapp.com/advisory/ntap-20190905-0002/ - https://support.f5.com/csp/article/K28222050 - https://support.f5.com/csp/article/K28222050?utm_source=f5support&amp%3Butm_medium=RSS - https://usn.ubuntu.com/4157-1/ - https://usn.ubuntu.com/4162-1/ - https://usn.ubuntu.com/4157-2/ - https://usn.ubuntu.com/4163-1/ - https://usn.
157-1/ - https://usn.ubuntu.com/4162-1/ - https://usn.ubuntu.com/4157-2/ - https://usn.ubuntu.com/4163-1/ - https://usn.ubuntu.com/4163-2/ - https://usn.ubuntu.com/4162-2/ - https://seclists.org/bugtraq/2019/Nov/11 - http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE ID: CVE-2019-15506 State: PUBLISHED Published: 2019-08-26T11:32:21 Last Updated: 2024-08-05T00:49:13.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Kaseya Virtual System Administrator (VSA) through 9.4.0.37. It has a critical information disclosure vulnerability. An unauthenticated attacker can send properly formatted requests to the web application and download sensitive files and information. For example, the /DATAREPORTS directory can be farmed for reports. Because this directory contains the results of reports such as NMAP, Patch Status, and Active Directory domain metadata, an attacker can easily collect this critical information and parse
, Patch Status, and Active Directory domain metadata, an attacker can easily collect this critical information and parse it for information. There are a number of directories affected. Additional Analyst Notes: - CVE Program Container: References: - http://help.kaseya.com/WebHelp/EN/RN/index.asp#VSAReleaseNotes.htm - http://dfdrconsulting.com/2019/cyber-security/cve-2019-15506-kaseya-vsa-critical-information-disclosure-unauthenticated-access/
CVE ID: CVE-2019-15507 State: PUBLISHED Published: 2019-08-23T05:49:50 Last Updated: 2024-08-05T00:49:13.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Octopus Deploy versions 2018.8.4 to 2019.7.6, when a web request proxy is configured, an authenticated user (in certain limited special-characters circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext. This is fixed in 2019.7.7. The fix was back-ported to LTS 2019.6.7 as well as LTS 2019.3.8. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/5761
CVE ID: CVE-2019-15508 State: PUBLISHED Published: 2019-08-23T05:49:35 Last Updated: 2024-08-05T00:49:13.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Octopus Tentacle versions 3.0.8 to 5.0.0, when a web request proxy is configured, an authenticated user (in certain limited OctopusPrintVariables circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext. This is fixed in 5.0.1. The fix was back-ported to 4.0.7. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/5750
CVE ID: CVE-2019-15510 State: PUBLISHED Published: 2020-03-23T13:03:12 Last Updated: 2024-08-05T00:49:13.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: ManageEngine_DesktopCentral.exe in Zoho ManageEngine Desktop Central 10 allows HTML injection on the user administration page via the description of a role. Additional Analyst Notes: - CVE Program Container: References: - https://www.esecforte.com/responsible-vulnerability-disclosure-cve-2019-15510-manageengine-desktopcentral-v-10-vulnerable-to-html-injection/ - https://www.manageengine.com/products/desktop-central/html-injection.html
CVE ID: CVE-2019-15511 State: PUBLISHED Published: 2019-11-21T17:47:40 Last Updated: 2024-08-05T00:49:13.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due to Improper Access Control, an attacker can send unauthenticated local TCP packets to the service to gain SYSTEM privileges in Windows system where GOG Galaxy software is installed. All GOG Galaxy versions before 1.2.60 and all corresponding versions of GOG Galaxy 2.0 Beta are affected. Additional Analyst Notes: - CVE Program Container: References: - https://support.gog.com/hc/en-us/articles/360025458833-GOG-
tional Analyst Notes: - CVE Program Container: References: - https://support.gog.com/hc/en-us/articles/360025458833-GOG-GALAXY-2-0-updates-and-known-issues - https://cqureacademy.com/cqure-labs/cqlabs-cve-2019-15511-broken-access-control-in-gog-galaxy
CVE ID: CVE-2019-15513 State: PUBLISHED Published: 2019-08-23T06:48:57 Last Updated: 2024-08-05T00:49:13.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface) before 15.05.1 as used on Motorola CX2L MWR04L 1.01 and C1 MWR03 1.01 devices. /tmp/.uci/network locking is mishandled after reception of a long SetWanSettings command, leading to a device hang. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/iot/morouter/motorola%E8%B7%AF%E7%94%B1%E5%99%A8%E6%96%87%E4%BB%B6%E8%A7%A3%E9%94%81%E6%BC%8F%E6%B4%9E.pdf - https://lists.infr
outer/motorola%E8%B7%AF%E7%94%B1%E5%99%A8%E6%96%87%E4%BB%B6%E8%A7%A3%E9%94%81%E6%BC%8F%E6%B4%9E.pdf - https://lists.infradead.org/pipermail/openwrt-devel/2019-November/019736.html - https://git.openwrt.org/?p=project/uci.git%3Ba=commitdiff%3Bh=19e29ffc15dbd958e8e6a648ee0982c68353516f - https://lists.openwrt.org/pipermail/openwrt-devel/2019-November/025453.html
CVE ID: CVE-2019-15514 State: PUBLISHED Published: 2019-08-23T12:07:53 Last Updated: 2024-08-05T00:49:13.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Privacy > Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is Nobody, because attackers can find these numbers via the Group Info feature, e.g., by adding a significant fraction of a region's assigned phone numbers. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/document/d/e/2PACX-1vRx2wO2kj0axlQtv2CDSjPGlRKJOHtucvpOKGFKybh2eVVGZqvt_JJv-2Q11NHn5Y4um_F4-bgA6q5v/pub
CVE ID: CVE-2019-15515 State: PUBLISHED Published: 2019-08-26T17:20:21 Last Updated: 2024-08-05T00:49:13.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Discourse 2.3.2 sends the CSRF token in the query string. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/discourse/discourse/pull/8026
CVE ID: CVE-2019-15516 State: PUBLISHED Published: 2019-08-23T14:42:05 Last Updated: 2024-08-05T00:49:13.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cuberite/cuberite/pull/4341
CVE ID: CVE-2019-15517 State: PUBLISHED Published: 2019-08-23T14:53:42 Last Updated: 2024-08-05T00:49:13.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: jc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jc21/nginx-proxy-manager/compare/2.0.12...2.0.13 - https://github.com/jc21/nginx-proxy-manager/pull/114
CVE ID: CVE-2019-15518 State: PUBLISHED Published: 2019-08-23T14:51:59 Last Updated: 2024-08-05T00:49:13.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Swoole before 4.2.13 allows directory traversal in swPort_http_static_handler. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/swoole/swoole-src/compare/v4.2.12...v4.2.13 - https://github.com/swoole/swoole-src/pull/2323
CVE ID: CVE-2019-15519 State: PUBLISHED Published: 2019-08-23T14:46:49 Last Updated: 2024-08-05T00:49:13.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Power-Response before 2019-02-02 allows directory traversal (up to the application's main directory) via a plugin. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Asymmetric-InfoSec/Power-Response/pull/156
CVE ID: CVE-2019-15520 State: PUBLISHED Published: 2019-08-23T14:58:08 Last Updated: 2024-08-05T00:49:13.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: comelz Quark before 2019-03-26 allows directory traversal to locations outside of the project directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/comelz/quark/pull/18
CVE ID: CVE-2019-15521 State: PUBLISHED Published: 2019-08-26T12:11:26 Last Updated: 2024-08-05T00:49:13.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spoon Library through 2014-02-06, as used in Fork CMS before 1.4.1 and other products, allows PHP object injection via a cookie containing an object. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/forkcms/library/pull/69 - https://github.com/forkcms/library/releases/tag/1.4.1 - https://github.com/spoon/library/blob/bda89be80b7e1ffdc93d3180d33a56927430298b/spoon/cookie/cookie.php#L117
CVE ID: CVE-2019-15522 State: PUBLISHED Published: 2020-03-20T20:24:41 Last Updated: 2024-08-05T00:49:13.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LINBIT/csync2/commit/416f1de878ef97e27e27508914f7ba8599a0be22
CVE ID: CVE-2019-15523 State: PUBLISHED Published: 2020-12-30T20:04:16 Last Updated: 2024-08-05T00:49:13.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LINBIT csync2 through 2.0. It does not correctly check for the return value GNUTLS_E_WARNING_ALERT_RECEIVED of the gnutls_handshake() function. It neglects to call this function again, as required by the design of the API. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LINBIT/csync2/pull/13/commits/92742544a56bcbcd9ec99ca15f898b31797e39e2 - https://lists.debian.org/debian-lts-announce/2021/01/msg00003.html
CVE ID: CVE-2019-15524 State: PUBLISHED Published: 2019-08-26T12:52:49 Last Updated: 2024-08-05T00:49:13.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager in the File Management Module, which leads to remote code execution by visiting a photo/upload/2019/ URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.cszcms.com - https://pastebin.com/vbx4JWQh
CVE ID: CVE-2019-15525 State: PUBLISHED Published: 2019-08-23T15:20:23 Last Updated: 2024-08-05T00:49:13.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1. Additional Analyst Notes: - CVE Program Container: References: - https://softwarepublico.gov.br/gitlab/pw3270/principal/compare/efa4ab249821ec351ae986683371043b8ca3c2ea...ff2b10fd56cf1fdae862b44bb0610e20e08de427 - https://www.openwall.com/lists/oss-security/2019/08/26/1 - http://www.openwall.com/lists/oss-security/2019/08/26/1
CVE ID: CVE-2019-15526 State: PUBLISHED Published: 2019-08-23T16:04:04 Last Updated: 2024-08-05T00:49:13.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the Type field to SetWanSettings, a related issue to CVE-2019-13482. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/iot/dlink/823G-102B05-7.pdf
CVE ID: CVE-2019-15527 State: PUBLISHED Published: 2019-08-23T16:03:53 Last Updated: 2024-08-05T00:49:13.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the MaxIdTime field to SetWanSettings. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/iot/dlink/823G-102B05-6.pdf
CVE ID: CVE-2019-15528 State: PUBLISHED Published: 2019-08-23T16:03:40 Last Updated: 2024-08-05T00:49:13.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the Interface field to SetStaticRouteSettings. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/iot/dlink/823G-102B05-5.pdf
CVE ID: CVE-2019-15529 State: PUBLISHED Published: 2019-08-23T16:03:29 Last Updated: 2024-08-05T00:49:13.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the Username field to Login. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/iot/dlink/823G-102B05-1.pdf
CVE ID: CVE-2019-15530 State: PUBLISHED Published: 2019-08-23T16:03:16 Last Updated: 2024-08-05T00:49:13.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the LoginPassword field to Login. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/iot/dlink/823G-102B05-2.pdf
CVE ID: CVE-2019-15531 State: PUBLISHED Published: 2019-08-23T16:03:07 Last Updated: 2024-08-05T00:49:13.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.gnunet.org/view.php?id=5846 - https://lists.debian.org/debian-lts-announce/2019/08/msg00038.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GRQUHTSNOCKGRKPRXPUJ6FGTVZ2K5POL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.
RQUHTSNOCKGRKPRXPUJ6FGTVZ2K5POL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MUJWNWDGGXQLTNQNELKERJ7DLW7E22BK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DV5YBIS2UUNUUKQOEKDWUKEEWJIKWFMZ/ - https://lists.debian.org/debian-lts-announce/2021/12/msg00016.html
CVE ID: CVE-2019-15532 State: PUBLISHED Published: 2019-08-26T11:45:10 Last Updated: 2024-08-05T00:49:13.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: CyberChef before 8.31.2 allows XSS in core/operations/TextEncodingBruteForce.mjs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gchq/CyberChef/issues/544 - https://github.com/gchq/CyberChef/issues/539 - https://github.com/gchq/CyberChef/commit/01f0625d6a177f9c5df9281f12a27c814c2d8bcf - https://github.com/gchq/CyberChef/compare/v8.31.1...v8.31.2
CVE ID: CVE-2019-15533 State: PUBLISHED Published: 2019-08-26T17:19:57 Last Updated: 2024-08-05T00:49:13.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: XENFCoreSharp before 2019-07-16 allows SQL injection in web/verify.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/XAYRGA/XENFCoreSharp/pull/1
CVE ID: CVE-2019-15534 State: PUBLISHED Published: 2019-08-26T11:47:25 Last Updated: 2024-08-05T00:49:13.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Raml-Module-Builder 26.4.0 allows SQL Injection in PostgresClient.update. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/folio-org/raml-module-builder/pull/501