Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
acket. Caching is not affected by this particular bug but see CVE-2019-10191. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10190 - https://www.knot-resolver.cz/2019-07-10-knot-resolver-4.1.0.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZV5YZZ5766UIG2TFLFJL6EESQNAP5X5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMSSWBHINIX4WE6UDXWM66L7JYEK6XS6/ - https://lists.debian.org/debian-lts-announce/2024/04/msg00017.html
CVE ID: CVE-2019-10191 State: PUBLISHED Published: 2019-07-16T17:52:43.000Z Last Updated: 2025-02-13T16:27:21.363Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: CZ.NIC Products: knot-resolver Problem Types: CWE-20 Description: A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to downgrade DNSSEC-secure domains to DNSSEC-insecure state, opening possibility of domain hijack using attacks against insecure DNS protocol. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10191 - https://www.knot-resolver.cz/2019-07-10-knot-resolver
es: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10191 - https://www.knot-resolver.cz/2019-07-10-knot-resolver-4.1.0.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZV5YZZ5766UIG2TFLFJL6EESQNAP5X5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMSSWBHINIX4WE6UDXWM66L7JYEK6XS6/ - https://lists.debian.org/debian-lts-announce/2024/04/msg00017.html
CVE ID: CVE-2019-10192 State: PUBLISHED Published: 2019-07-11T18:30:33 Last Updated: 2024-08-04T22:17:18.947Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Redis Labs Products: redis Problem Types: CWE-122 Description: A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write up to 3 bytes beyond the end of a heap-allocated buffer. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/secur
f a heap-allocated buffer. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2019/dsa-4480 - https://seclists.org/bugtraq/2019/Jul/19 - https://usn.ubuntu.com/4061-1/ - http://www.securityfocus.com/bid/109290 - https://access.redhat.com/errata/RHSA-2019:1819 - https://access.redhat.com/errata/RHSA-2019:1860 - https://access.redhat.com/errata/RHSA-2019:2002 - https://security.gentoo.org/glsa/201908-04 - https://access.redhat.com/errata/RHSA-2019:2508 - https://access.redhat.com/errata/RHSA-2019:2506 - https://access.redhat.com/errata/RHSA-2019:2621 - https://access.redhat.com/errata/RHSA-2019:2630 - https://www.oracle.com/security-alerts/cpujul20
rrata/RHSA-2019:2621 - https://access.redhat.com/errata/RHSA-2019:2630 - https://www.oracle.com/security-alerts/cpujul2020.html - https://raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTES - https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES - https://raw.githubusercontent.com/antirez/redis/5.0/00-RELEASENOTES - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10192
CVE ID: CVE-2019-10193 State: PUBLISHED Published: 2019-07-11T18:30:33 Last Updated: 2024-08-04T22:17:18.421Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Redis Labs Products: redis Problem Types: CWE-121 Description: A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By corrupting a hyperloglog using the SETRANGE command, an attacker could cause Redis to perform controlled increments of up to 12 bytes past the end of a stack-allocated buffer. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2019/dsa-4480 -
buffer. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2019/dsa-4480 - https://seclists.org/bugtraq/2019/Jul/19 - https://usn.ubuntu.com/4061-1/ - http://www.securityfocus.com/bid/109290 - https://access.redhat.com/errata/RHSA-2019:1819 - https://access.redhat.com/errata/RHSA-2019:2002 - https://security.gentoo.org/glsa/201908-04 - https://www.oracle.com/security-alerts/cpujul2020.html - https://raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTES - https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES - https://raw.githubusercontent.com/antirez/redis/5.0/00-RELEASENOTES - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2
https://raw.githubusercontent.com/antirez/redis/5.0/00-RELEASENOTES - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10193
CVE ID: CVE-2019-10194 State: PUBLISHED Published: 2019-07-11T18:33:06 Last Updated: 2024-08-04T22:17:18.907Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: Red Hat Products: ovirt-engine-metrics Problem Types: CWE-532 Description: Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files (if playbooks are run with -v) or in playbooks stored on Metrics or Bastion hosts. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10194 - http://www.securityfocus.com/bid/109140 - https://
ences: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10194 - http://www.securityfocus.com/bid/109140 - https://access.redhat.com/errata/RHSA-2019:2499
CVE ID: CVE-2019-10195 State: PUBLISHED Published: 2019-11-27T07:55:13 Last Updated: 2024-08-04T22:17:18.892Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: IPA Problem Types: CWE-532, CWE-200 Description: A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with passwords as arguments or options is not performed by default in FreeIPA but is possible by third-party components. An attacker having access t
or options is not performed by default in FreeIPA but is possible by third-party components. An attacker having access to system logs on FreeIPA masters could use this flaw to produce log file content with passwords exposed. Additional Analyst Notes: - CVE Program Container: References: - https://www.freeipa.org/page/Releases/4.7.4 - https://www.freeipa.org/page/Releases/4.8.3 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10195 - https://www.freeipa.org/page/Releases/4.6.7 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFL5XDCJ3WT6JCLCQVKHZBLHGW7PW4T/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap
ssage/WLFL5XDCJ3WT6JCLCQVKHZBLHGW7PW4T/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/67SEUWJAJ5RMH5K4Q6TS2I7HIMXUGNKF/ - https://access.redhat.com/errata/RHSA-2020:0378 - https://access.redhat.com/errata/RHBA-2019:4268
CVE ID: CVE-2019-10196 State: PUBLISHED Published: 2021-03-19T19:22:17 Last Updated: 2024-08-04T22:17:18.934Z Vendors: n/a Products: nodejs-http-proxy-agent Problem Types: CWE-665 Description: A flaw was found in http-proxy-agent, prior to version 2.1.0. It was discovered http-proxy-agent passes an auth option to the Buffer constructor without proper sanitization. This could result in a Denial of Service through the usage of all available CPU resources and data exposure through an uninitialized memory leak in setups where an attacker could submit typed input to the auth parameter. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=156
ameter. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1567245 - https://www.npmjs.com/advisories/607
CVE ID: CVE-2019-10197 State: PUBLISHED Published: 2019-09-03T14:50:27 Last Updated: 2024-08-04T22:17:18.912Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: SAMBA Products: samba Problem Types: CWE-22 Description: A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10197 - https:/
alyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10197 - https://www.samba.org/samba/security/CVE-2019-10197.html - https://security.netapp.com/advisory/ntap-20190903-0001/ - https://usn.ubuntu.com/4121-1/ - https://seclists.org/bugtraq/2019/Sep/4 - https://www.debian.org/security/2019/dsa-4513 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00045.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7NYIUZOCIDXWXGWMZ7O5Z7OJ6IX7EAB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/56ZUXHGDHPM7S6RVAKULZT5EATS37OKA/ - htt
doraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/56ZUXHGDHPM7S6RVAKULZT5EATS37OKA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6EEKFT24DQI4DMZMSQTLMNZWG4RMZ57/ - https://support.f5.com/csp/article/K69511801 - https://support.f5.com/csp/article/K69511801?utm_source=f5support&amp%3Butm_medium=RSS - https://access.redhat.com/errata/RHSA-2019:3253 - https://access.redhat.com/errata/RHSA-2019:4023 - https://security.gentoo.org/glsa/202003-52
CVE ID: CVE-2019-10198 State: PUBLISHED Published: 2019-07-31T21:44:19 Last Updated: 2024-08-04T22:17:19.748Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: The Foreman Project Products: foreman-tasks Problem Types: CWE-592 Description: An authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously, commit tasks were searched through find_resource, which performed authorization checks. After the change to Foreman, an unauthenticated user can view the details of a task through the web UI or API, if they can discover or guess the UUID of the task. Additional Analyst Notes: - CVE Program Container: References: - https://bugzil
discover or guess the UUID of the task. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10198 - https://projects.theforeman.org/issues/27275 - https://access.redhat.com/errata/RHSA-2019:3172
CVE ID: CVE-2019-10199 State: PUBLISHED Published: 2019-08-14T16:07:31 Last Updated: 2024-08-04T22:17:19.336Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Red Hat Products: keycloak Problem Types: CWE-352 Description: It was found that Keycloak's account console, up to 6.0.1, did not perform adequate header checks in some requests. An attacker could use this flaw to trick an authenticated user into performing operations via request from an untrusted domain. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10199
CVE ID: CVE-2019-10200 State: PUBLISHED Published: 2021-03-19T20:28:36 Last Updated: 2024-08-04T22:17:19.772Z Vendors: n/a Products: OpenShift Container Platform Problem Types: CWE-284 Description: A flaw was discovered in OpenShift Container Platform 4 where, by default, users with access to create pods also have the ability to schedule workloads on master nodes. Pods with permission to access the host network, running on master nodes, can retrieve security credentials for the master AWS IAM role, allowing management access to AWS resources. With access to the security credentials, the user then has access to the entire infrastructure. Impact to data and system availability is high. Additio
dentials, the user then has access to the entire infrastructure. Impact to data and system availability is high. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1730161 - https://github.com/openshift/cluster-kube-apiserver-operator/pull/524
CVE ID: CVE-2019-10201 State: PUBLISHED Published: 2019-08-14T16:09:39 Last Updated: 2024-08-04T22:17:19.324Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Red Hat Products: keycloak Problem Types: CWE-592 Description: It was found that Keycloak's SAML broker, versions up to 6.0.1, did not verify missing message signatures. If an attacker modifies the SAML Response and removes the <Signature> sections, the message is still accepted, and the message can be modified. An attacker could use this flaw to impersonate other users and gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/sh
o sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10201
CVE ID: CVE-2019-10202 State: PUBLISHED Published: 2019-10-01T14:22:30 Last Updated: 2024-08-04T22:17:19.913Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: RedHat Products: codehaus Problem Types: CWE-502 Description: A series of deserialization vulnerabilities have been discovered in Codehaus 1.9.x implemented in EAP 7. This CVE fixes CVE-2017-17485, CVE-2017-7525, CVE-2017-15095, CVE-2018-5968, CVE-2018-7489, CVE-2018-1000873, CVE-2019-12086 reported for FasterXML jackson-databind by implementing a whitelist approach that will mitigate these vulnerabilities and future ones alike. Additional Analyst Notes: - CVE Program Container: References: - https://bugz
ese vulnerabilities and future ones alike. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10202 - https://lists.apache.org/thread.html/refea6018a2c4e9eb7838cab567ed219c3f726dcd83a5472fbb80d8d9%40%3Cissues.flume.apache.org%3E - https://lists.apache.org/thread.html/r1edabcfacdad42d3c830464e9cf07a9a489059a7b7a8642cf055542d%40%3Cissues.hive.apache.org%3E - https://lists.apache.org/thread.html/r6dea2a887f5eb1d68f124d64b14cd1a04f682f06de8cd01b7e4214e0%40%3Cissues.hive.apache.org%3E - https://lists.apache.org/thread.html/rce00a1c60f7df4b10e72fa87827c102f55b074bb91993631df2c21f9%40%3Cdev.hive.apache.org%3E - https://lists.apache.
hread.html/rce00a1c60f7df4b10e72fa87827c102f55b074bb91993631df2c21f9%40%3Cdev.hive.apache.org%3E - https://lists.apache.org/thread.html/r500867b74f42230a3d65b8aec31fc93ac390eeae737c91a759ab94cb%40%3Cissues.hive.apache.org%3E - https://lists.apache.org/thread.html/r5f16a1bd31a7e94ca78eda686179930781aa3a4a990cd55986703581%40%3Cdev.hive.apache.org%3E - https://lists.apache.org/thread.html/r0fbf2c60967bc9f73d7f5a62ad3b955789f9a14b950f42e99fca9b4e%40%3Cissues.hive.apache.org%3E - https://lists.apache.org/thread.html/r356592d9874ab4bc9da4754592f8aa6edc894c95e17e58484bc2af7a%40%3Cissues.hive.apache.org%3E
CVE ID: CVE-2019-10203 State: PUBLISHED Published: 2019-11-22T12:01:13 Last Updated: 2024-08-04T22:17:18.889Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Red Hat Products: pdns Problem Types: CWE-681 Description: PowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when encountering a serial between 2^31 and 2^32-1 while trying to notify a slave leads to DoS. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10203 - https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-06.html
CVE ID: CVE-2019-10204 State: REJECTED Published: 2022-08-05T16:45:07 Last Updated: 2022-08-05T16:45:07 Description: No description available.
CVE ID: CVE-2019-10205 State: PUBLISHED Published: 2020-01-02T16:31:53 Last Updated: 2024-08-04T22:17:20.136Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H) Vendors: RED HAT Products: quay Problem Types: CWE-522 Description: A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10205
CVE ID: CVE-2019-10206 State: PUBLISHED Published: 2019-11-22T00:00:00 Last Updated: 2024-08-04T22:17:18.927Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: Red Hat Products: Ansible Problem Types: CWE-522 Description: ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before 2.6.19, prompt passwords by expanding them from templates as they could contain special characters. Passwords should be wrapped to prevent templates trigger and exposing them. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html - http://
VE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html - https://www.debian.org/security/2021/dsa-4950 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10206 - https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html
CVE ID: CVE-2019-10207 State: PUBLISHED Published: 2019-11-25T13:51:16 Last Updated: 2024-08-04T22:17:18.861Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: kernel Problem Types: CWE-476 Description: A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and kernel 5.x.x. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10207 - https://secu
Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10207 - https://security.netapp.com/advisory/ntap-20200103-0001/
CVE ID: CVE-2019-10208 State: PUBLISHED Published: 2019-10-29T13:13:12 Last Updated: 2024-08-04T22:17:18.925Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: PostgreSQL Products: postgresql Problem Types: CWE-89 Description: A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function. Additional Analyst Notes: - CVE Program Container: References: - https://www.postgresql.org/abo
e owner of the function. Additional Analyst Notes: - CVE Program Container: References: - https://www.postgresql.org/about/news/1960/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10208 - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html
CVE ID: CVE-2019-10209 State: PUBLISHED Published: 2019-10-29T13:11:45 Last Updated: 2024-08-04T22:17:20.096Z Severity: LOW (CVSS 3.1 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: PostgreSQL Products: postgresql Problem Types: CWE-125, CWE-200 Description: Postgresql, versions 11.x before 11.5, is vulnerable to a memory disclosure in cross-type comparison for hashed subplan. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10209 - https://www.postgresql.org/about/news/1960/
CVE ID: CVE-2019-10210 State: PUBLISHED Published: 2019-10-29T00:00:00 Last Updated: 2024-08-04T22:17:19.604Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: PostgreSQL Products: postgresql Problem Types: CWE-522 Description: Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing password to unprotected temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10210 - https://www.postgresql.org/about/news/1960/
CVE ID: CVE-2019-10211 State: PUBLISHED Published: 2019-10-29T13:15:40 Last Updated: 2024-08-04T22:17:18.944Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: PostgreSQL Products: postgresql Problem Types: CWE-94 Description: Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL executing code from unprotected directory. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10211 - https://www.postgresql.org/about/news/1960/
CVE ID: CVE-2019-10212 State: PUBLISHED Published: 2019-10-02T18:22:08 Last Updated: 2024-08-04T22:17:18.906Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N) Vendors: RedHat Products: undertow Problem Types: CWE-532 Description: A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10212 - https://access.redhat.com/errata/RHSA-2019:2998 - https://access.redhat.com/errata/RHSA-2020:0727 - https://security.netap
tps://access.redhat.com/errata/RHSA-2019:2998 - https://access.redhat.com/errata/RHSA-2020:0727 - https://security.netapp.com/advisory/ntap-20220210-0017/
CVE ID: CVE-2019-10213 State: PUBLISHED Published: 2019-11-25T14:21:21 Last Updated: 2024-08-04T22:17:18.898Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: openshift Problem Types: CWE-117 Description: OpenShift Container Platform, versions 4.1 and 4.2, does not sanitize secret data written to pod logs when the log level in a given operator is set to Debug or higher. A low privileged user could read pod logs to discover secret material if the log level has already been modified in an operator by a privileged user. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10213 -
onal Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10213 - https://access.redhat.com/errata/RHSA-2019:4082 - https://access.redhat.com/errata/RHSA-2019:4088
CVE ID: CVE-2019-10214 State: PUBLISHED Published: 2019-11-25T10:41:15 Last Updated: 2024-08-04T22:17:18.901Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: n/a Products: containers/image Problem Types: CWE-522 Description: The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulnerability to launch a MiTM attack and steal login credentials or bearer tokens. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.