Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
E Program Container: References: - https://www.openwall.com/lists/oss-security/2019/04/18/6 - https://w1.fi/security/2019-5/eap-pwd-message-reassembly-issue-with-unexpected-fragment.txt - https://w1.fi/security/2019-5/ - http://www.openwall.com/lists/oss-security/2019/04/26/1 - https://usn.ubuntu.com/3969-1/ - https://usn.ubuntu.com/3969-2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5T7G763UECWR7FQXOJVL67PW7C5A3SA4/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:03.wpa.asc - https://seclists.org/bugtraq/2019/May/40 - https://www.debian.org/security/2019/dsa-4450 - https://seclists.org/bugtraq/2019/May/64 - https://lists.fedorap
ay/40 - https://www.debian.org/security/2019/dsa-4450 - https://seclists.org/bugtraq/2019/May/64 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IQ6P2GI5GSXRNLNIUNPARFZQVDEIGVZD/ - https://lists.debian.org/debian-lts-announce/2019/07/msg00030.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJKZHAT5KPUN26JL77EUH563GAH5XZ5C/ - https://security.gentoo.org/glsa/201908-25
CVE ID: CVE-2019-11556 State: PUBLISHED Published: 2020-09-25T05:56:42 Last Updated: 2024-08-04T22:55:40.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pagure before 5.6 allows XSS via the templates/blame.html blame view. Additional Analyst Notes: - CVE Program Container: References: - https://pagure.io/pagure/commits/master - https://docs.pagure.org/pagure/changelog.html - https://pagure.io/pagure/c/31a0d2950ed409550074ca52ba492f9b87ec3318?branch=ab39e95ed4dc8367e5e146e6d9a9fa6925b75618 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00066.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00007.html
CVE ID: CVE-2019-11557 State: PUBLISHED Published: 2019-04-26T21:42:23 Last Updated: 2024-08-04T22:55:40.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebDorado Contact Form Builder plugin before 1.0.69 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST['action'] value and the $_GET['action'] value, and the latter is unsanitized. Additional Analyst Notes: - CVE Program Container: References: - https://lists.openwall.net/full-disclosure/2019/04/23/1 - https://wordpress.org/plugins/contact-form-builder/#developers - http://seclists.or
l.net/full-disclosure/2019/04/23/1 - https://wordpress.org/plugins/contact-form-builder/#developers - http://seclists.org/fulldisclosure/2019/Apr/35 - https://wpvulndb.com/vulnerabilities/9260
CVE ID: CVE-2019-11559 State: PUBLISHED Published: 2019-09-17T14:44:10 Last Updated: 2024-08-04T22:55:40.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected Cross-site scripting (XSS) vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/gpheheise/status/1173896069769519105?s=21 - http://seclists.org/fulldisclosure/2019/Sep/28
CVE ID: CVE-2019-11560 State: PUBLISHED Published: 2019-05-07T15:08:35 Last Updated: 2024-08-04T22:55:40.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in the streaming server provided by hisilicon in HI3516 models allows an unauthenticated attacker to remotely run arbitrary code by sending a special RTSP over HTTP packet. The vulnerability was found in many cameras using hisilicon's hardware and software, as demonstrated by TENVIS cameras 1.3.3.3, 1.2.7.2, 1.2.1.4, 7.1.20.1.2, and 13.1.1.1.7.2; FDT FD7902 11.3.14.1.3 and 10.3.14.1.3; FOSCAM cameras 3.2.1.1.1_0815 and 3.2.2.2.1_0815; and Dericam cameras V11.3.8.1.12. Additional Analyst Notes:
3.14.1.3; FOSCAM cameras 3.2.1.1.1_0815 and 3.2.2.2.1_0815; and Dericam cameras V11.3.8.1.12. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/vulnfan1337/e95c2dba75ad93a1a325c6ace950eba9
CVE ID: CVE-2019-11561 State: PUBLISHED Published: 2019-05-08T15:57:10 Last Updated: 2024-08-04T22:55:41.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chuango 433 MHz burglar-alarm product line is vulnerable to a Denial of Service attack. When the condition is triggered, the OV2 base station is unable to process sensor states and effectively prevents the alarm from setting off, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm System. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RiieCco/write-ups/tree/master/CVE-2019-11561
CVE ID: CVE-2019-11563 State: REJECTED Published: 2019-05-09T19:44:08 Last Updated: 2019-09-21T19:34:40 Description: No description available.
CVE ID: CVE-2019-11564 State: PUBLISHED Published: 2019-05-08T15:45:53 Last Updated: 2024-08-04T22:55:40.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in HumHub 1.3.12 allows remote attackers to inject arbitrary web script or HTML via a /protected/vendor/codeception/codeception/tests/data/app/view/index.php POST request. Additional Analyst Notes: - CVE Program Container: References: - https://humhub.org/en/news - https://www.exploit-db.com/exploits/46771/
CVE ID: CVE-2019-11565 State: PUBLISHED Published: 2019-04-27T13:15:49 Last Updated: 2024-08-04T22:55:41.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server Side Request Forgery (SSRF) exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter. Additional Analyst Notes: - CVE Program Container: References: - http://dumpco.re/bugs/wp-plugin-print-my-blog-ssrf - https://wordpress.org/plugins/print-my-blog/#developers - https://github.com/mnelson4/printmyblog/commit/8584a2839a541eb29fca64252e388c827af3ec21 - https://plugins.trac.wordpress.org/changeset?old_path=%2Fprint-my-blog%2Ftrunk&old=2075667&new_path=%2Fprint-my-blog%2Ftrunk&new=2075667 - https
dpress.org/changeset?old_path=%2Fprint-my-blog%2Ftrunk&old=2075667&new_path=%2Fprint-my-blog%2Ftrunk&new=2075667 - https://wpvulndb.com/vulnerabilities/9263
CVE ID: CVE-2019-11567 State: PUBLISHED Published: 2019-04-27T13:57:51 Last Updated: 2024-08-04T22:55:41.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in AikCms v2.0. There is a SQL Injection vulnerability via $_GET['del'], as demonstrated by an admin/page/system/nav.php?del= URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kikulo/DebugOpen/blob/master/Aikcms2.0/main.md
CVE ID: CVE-2019-11568 State: PUBLISHED Published: 2019-04-27T13:58:04 Last Updated: 2024-08-04T22:55:41.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in AikCms v2.0. There is a File upload vulnerability, as demonstrated by an admin/page/system/nav.php request with PHP code in a .php file with the application/octet-stream content type. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kikulo/DebugOpen/blob/master/Aikcms2.0/main.md
CVE ID: CVE-2019-11569 State: PUBLISHED Published: 2019-05-06T19:47:22 Last Updated: 2024-08-04T22:55:41.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Veeam ONE Reporter 9.5.0.3201 allows CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46765
CVE ID: CVE-2019-11574 State: PUBLISHED Published: 2020-03-20T22:08:06 Last Updated: 2024-08-04T22:55:40.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Simple Machines Forum (SMF) before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls. Additional Analyst Notes: - CVE Program Container: References: - https://www.simplemachines.org/community/index.php?board=1.0 - https://pastebin.com/raw/prE3iiLm
CVE ID: CVE-2019-11576 State: PUBLISHED Published: 2019-04-28T01:40:48 Last Updated: 2024-08-04T22:55:40.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gitea before 1.8.0 allows 1FA for user accounts that have completed 2FA enrollment. If a user's credentials are known, then an attacker could send them to the API without requiring the 2FA one-time password. Additional Analyst Notes: - CVE Program Container: References: - https://blog.gitea.io/2019/04/gitea-1.8.0-is-released/ - https://github.com/go-gitea/gitea/pull/6674
CVE ID: CVE-2019-11577 State: PUBLISHED Published: 2019-04-28T15:22:10 Last Updated: 2024-08-04T22:55:41.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: dhcpcd before 7.2.1 contains a buffer overflow in dhcp6_findna in dhcp6.c when reading NA/TA addresses. Additional Analyst Notes: - CVE Program Container: References: - https://roy.marples.name/git/dhcpcd.git/commit/?id=8d11b33f6c60e2db257130fa383ba76b6018bcf6 - https://roy.marples.name/archives/dhcpcd-discuss/0002415.html - http://www.securityfocus.com/bid/108090
CVE ID: CVE-2019-11578 State: PUBLISHED Published: 2019-04-28T15:22:24 Last Updated: 2024-08-04T22:55:41.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: auth.c in dhcpcd before 7.2.1 allowed attackers to infer secrets by performing latency attacks. Additional Analyst Notes: - CVE Program Container: References: - https://roy.marples.name/archives/dhcpcd-discuss/0002415.html - https://roy.marples.name/git/dhcpcd.git/commit/?id=7121040790b611ca3fbc400a1bbcd4364ef57233 - https://roy.marples.name/git/dhcpcd.git/commit/?id=cfde89ab66cb4e5957b1c4b68ad6a9449e2784da - https://roy.marples.name/git/dhcpcd.git/commit/?id=aee631aadeef4283c8a749c1caf77823304acf5e - http://www.securityfocus
- https://roy.marples.name/git/dhcpcd.git/commit/?id=aee631aadeef4283c8a749c1caf77823304acf5e - http://www.securityfocus.com/bid/108090
CVE ID: CVE-2019-11579 State: PUBLISHED Published: 2019-04-28T15:22:37 Last Updated: 2024-08-04T22:55:40.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: dhcp.c in dhcpcd before 7.2.1 contains a 1-byte read overflow with DHO_OPTSOVERLOADED. Additional Analyst Notes: - CVE Program Container: References: - https://roy.marples.name/archives/dhcpcd-discuss/0002415.html - https://roy.marples.name/git/dhcpcd.git/commit/?id=4b67f6f1038fd4ad5ca7734eaaeba1b2ec4816b8 - http://www.securityfocus.com/bid/108090 - https://lists.debian.org/debian-lts-announce/2019/05/msg00024.html
CVE ID: CVE-2019-11580 State: PUBLISHED Published: 2019-06-03T13:43:48.001Z Last Updated: 2025-10-21T23:45:35.696Z Vendors: Atlassian Products: Crowd Problem Types: Leftover Debug Code Description: Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attackers who can send unauthenticated or authenticated requests to a Crowd or Crowd Data Center instance can exploit this vulnerability to install arbitrary plugins, which permits remote code execution on systems running a vulnerable version of Crowd or Crowd Data Center. All versions of Crowd from version 2.1.0 before 3.0.5 (the fixed version for 3.0.x), from version 3.1.0 before 3.
enter. All versions of Crowd from version 2.1.0 before 3.0.5 (the fixed version for 3.0.x), from version 3.1.0 before 3.1.6 (the fixed version for 3.1.x), from version 3.2.0 before 3.2.8 (the fixed version for 3.2.x), from version 3.3.0 before 3.3.5 (the fixed version for 3.3.x), and from version 3.4.0 before 3.4.4 (the fixed version for 3.4.x) are affected by this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.atlassian.com/browse/CWD-5388 - http://www.securityfocus.com/bid/108637 - http://packetstormsecurity.com/files/163810/Atlassian-Crowd-pdkinstall-Remote-Code-Execution.html
CVE ID: CVE-2019-11581 State: PUBLISHED Published: 2019-08-09T19:30:59.317Z Last Updated: 2025-10-21T23:45:32.328Z Vendors: Atlassian Products: Jira Server and Data Center Problem Types: Template injection Description: There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker is able to remotely execute code on systems that run a vulnerable version of Jira Server or Data Center. All versions of Jira Server and Data Center from 4.4.0 before 7.6.14, from 7.7.0 before 7.13.5, from 8.0.0 before 8.0.3, from 8.1.0 before 8.1.2, and from 8.2.0 before 8.2.3 are affected by this vulnerability. Additi
from 8.0.0 before 8.0.3, from 8.1.0 before 8.1.2, and from 8.2.0 before 8.2.3 are affected by this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.atlassian.com/browse/JRASERVER-69532
CVE ID: CVE-2019-11582 State: PUBLISHED Published: 2019-06-14T13:54:38.881640Z Last Updated: 2024-09-16T19:25:35.218Z Vendors: Atlassian Products: Sourcetree for Windows Problem Types: Argument Injection Description: An argument injection vulnerability in Atlassian Sourcetree for Windows's URI handlers, in all versions prior to 3.1.3, allows remote attackers to gain remote code execution through the use of a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/SRCTREEWIN-11917
CVE ID: CVE-2019-11583 State: PUBLISHED Published: 2019-06-26T15:13:17.712150Z Last Updated: 2024-09-16T17:54:52.599Z Vendors: Atlassian Products: Jira Problem Types: Denial of Service Description: The issue searching component in Jira before version 8.1.0 allows remote attackers to deny access to Jira service via denial of service vulnerability in issue search when ordering by "Epic Name". Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JSWSERVER-20111 - http://www.securityfocus.com/bid/108901
CVE ID: CVE-2019-11584 State: PUBLISHED Published: 2019-08-23T13:49:47.476469Z Last Updated: 2024-09-16T22:24:53.468Z Vendors: Atlassian Products: Jira Problem Types: Cross Site Scripting (XSS) Description: The MigratePriorityScheme resource in Jira before version 8.3.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the priority icon url of an issue priority. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-69785
CVE ID: CVE-2019-11585 State: PUBLISHED Published: 2019-08-23T13:49:47.527781Z Last Updated: 2024-09-16T20:32:20.365Z Vendors: Atlassian Products: Jira Problem Types: URL Redirection to Untrusted Site ('Open Redirect') Description: The startup.jsp resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to redirect users to a different website which they may use as part of performing a phishing attack via an open redirect. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-69784
CVE ID: CVE-2019-11586 State: PUBLISHED Published: 2019-08-23T13:49:47.573286Z Last Updated: 2024-09-16T17:18:14.250Z Vendors: Atlassian Products: Jira Problem Types: Cross-Site Request Forgery (CSRF) Description: The AddResolution.jspa resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to create new resolutions via a Cross-site request forgery (CSRF) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-69783
CVE ID: CVE-2019-11587 State: PUBLISHED Published: 2019-08-23T13:49:47.620456Z Last Updated: 2024-09-17T02:06:37.521Z Vendors: Atlassian Products: Jira Problem Types: Cross-Site Request Forgery (CSRF) Description: Various exposed resources of the ViewLogging class in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allow remote attackers to modify various settings via Cross-site request forgery (CSRF). Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-69782
CVE ID: CVE-2019-11588 State: PUBLISHED Published: 2019-08-23T13:49:47.662321Z Last Updated: 2024-09-16T16:57:57.828Z Vendors: Atlassian Products: Jira Problem Types: Cross-Site Request Forgery (CSRF) Description: The ViewSystemInfo class doGarbageCollection method in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to trigger garbage collection via a Cross-site request forgery (CSRF) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-69781
CVE ID: CVE-2019-11589 State: PUBLISHED Published: 2019-08-23T13:49:47.709583Z Last Updated: 2024-09-17T04:05:01.224Z Vendors: Atlassian Products: Jira Problem Types: URL Redirection to Untrusted Site ('Open Redirect') Description: The ChangeSharedFilterOwner resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to attack users, in some cases be able to obtain a user's Cross-site request forgery (CSRF) token, via a open redirect vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-69780
CVE ID: CVE-2019-11590 State: PUBLISHED Published: 2019-04-29T13:46:30 Last Updated: 2024-08-04T22:55:40.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 10Web Form Maker plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST['action'] value and the $_GET['action'] value, and the latter is unsanitized. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/form-maker/#developers - https://lists.openwall.net/full-disclosure/2019/04/05/11 - http://seclists.org/fulldisclosure/2019/A
maker/#developers - https://lists.openwall.net/full-disclosure/2019/04/05/11 - http://seclists.org/fulldisclosure/2019/Apr/36
CVE ID: CVE-2019-11591 State: PUBLISHED Published: 2019-04-29T13:46:46 Last Updated: 2024-08-04T22:55:40.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebDorado Contact Form plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST['action'] value and the $_GET['action'] value, and the latter is unsanitized. Additional Analyst Notes: - CVE Program Container: References: - https://lists.openwall.net/full-disclosure/2019/04/05/12 - https://wordpress.org/plugins/contact-form-maker/#developers - http://seclists.org/fulldis
ll-disclosure/2019/04/05/12 - https://wordpress.org/plugins/contact-form-maker/#developers - http://seclists.org/fulldisclosure/2019/Apr/37 - https://wpvulndb.com/vulnerabilities/9252
CVE ID: CVE-2019-11592 State: PUBLISHED Published: 2019-04-29T13:47:24 Last Updated: 2024-08-04T22:55:41.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: WeBid 1.2.2 has reflected XSS via the id parameter to admin/deletenews.php, admin/editbannersuser.php, admin/editfaqscategory.php, or admin/excludeuser.php, or the offset parameter to admin/edituser.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.netsparker.com/web-applications-advisories/ns-18-053-reflected-cross-site-scripting-in-webid/
CVE ID: CVE-2019-11593 State: PUBLISHED Published: 2019-04-29T14:30:34 Last Updated: 2024-08-04T22:55:41.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Adblock Plus before 3.5.2, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect. Additional Analyst Notes: - CVE Program Container: References: - https://armin.dev/blog/2019/04/adblock-plus-code-injection/ - https://news.ycombinator.com/item?id=19666504 - https://adblockplus.org/releases/adblock-plus-352-for-chrome-firefox-and-opera-released - https://
om/item?id=19666504 - https://adblockplus.org/releases/adblock-plus-352-for-chrome-firefox-and-opera-released - https://gitlab.com/eyeo/adblockplus/adblockpluschrome/issues/1 - https://gitlab.com/eyeo/adblockplus/adblockpluscore/issues/4
CVE ID: CVE-2019-11594 State: PUBLISHED Published: 2019-04-29T14:30:50 Last Updated: 2024-08-04T22:55:41.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: In AdBlock before 3.45.0, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect. Additional Analyst Notes: - CVE Program Container: References: - https://armin.dev/blog/2019/04/adblock-plus-code-injection/ - https://news.ycombinator.com/item?id=19666504 - https://blog.getadblock.com/adblock-for-chrome-3-45-0-resolving-a-potential-security-risk-b21647a26df6
CVE ID: CVE-2019-11595 State: PUBLISHED Published: 2019-04-29T14:31:21 Last Updated: 2024-08-04T22:55:41.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: In uBlock before 0.9.5.15, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect. Additional Analyst Notes: - CVE Program Container: References: - https://armin.dev/blog/2019/04/adblock-plus-code-injection/ - https://news.ycombinator.com/item?id=19666504
CVE ID: CVE-2019-11596 State: PUBLISHED Published: 2019-04-29T14:46:55 Last Updated: 2024-08-04T22:55:41.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru temp_ttl" commands. This causes a denial of service when parsing crafted lru command messages in process_lru_command in memcached.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/memcached/memcached/issues/474 - https://github.com/memcached/memcached/commit/d35334f368817a77a6bd1f33c6a5676b2c402c02 - https://github.com/memcached/memcached/compare/ee1cfe3...50bdc9f - https://usn.ubuntu.com/3963-1/ -
3c6a5676b2c402c02 - https://github.com/memcached/memcached/compare/ee1cfe3...50bdc9f - https://usn.ubuntu.com/3963-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UUE3QBMP5UWTXMPKJREUICH6DIK6SOBX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y2CCWRM4LHB253KG5SPOKRVDCXQX5VZR/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00060.html
CVE ID: CVE-2019-11597 State: PUBLISHED Published: 2019-04-29T15:05:54 Last Updated: 2024-08-04T22:55:41.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1555 - http://www.securityfocus.com/bid/108102 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://usn.ubuntu.com/4034-1/ - http://lists.opensuse.org/opensus
ebian.org/debian-lts-announce/2019/05/msg00015.html - https://usn.ubuntu.com/4034-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00043.html - https://www.debian.org/security/2020/dsa-4712 - https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html