Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-15623 State: PUBLISHED Published: 2020-02-04T19:08:57 Last Updated: 2024-08-05T00:56:20.906Z Vendors: n/a Products: Nextcloud Server Problem Types: CWE-359 Description: Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disabled. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/508490 - https://nextcloud.com/security/advisory/?id=NC-SA-2019-016 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00019.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00022.
pensuse-security-announce/2020-02/msg00019.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00022.html
CVE ID: CVE-2019-15624 State: PUBLISHED Published: 2020-02-04T19:08:57 Last Updated: 2024-08-05T00:56:20.901Z Vendors: n/a Products: Nextcloud Server Problem Types: Privilege Escalation (CAPEC-233) Description: Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/508493 - https://nextcloud.com/security/advisory/?id=NC-SA-2019-015 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00019.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00022.html
CVE ID: CVE-2019-15625 State: PUBLISHED Published: 2020-01-17T23:45:24 Last Updated: 2024-08-05T00:56:22.076Z Vendors: Trend Micro Products: Trend Micro Password Manager Problem Types: Memory Usage Description: A memory usage vulnerability exists in Trend Micro Password Manager 3.8 that could allow an attacker with access and permissions to the victim's memory processes to extract sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1123595.aspx - https://jvn.jp/en/jp/JVN49593434/index.html - https://esupport.trendmicro.com/support/pwm/solution/ja-jp/1123614.aspx - https://jvn.jp/jp/JVN49593
593434/index.html - https://esupport.trendmicro.com/support/pwm/solution/ja-jp/1123614.aspx - https://jvn.jp/jp/JVN49593434/index.html
CVE ID: CVE-2019-15626 State: PUBLISHED Published: 2019-10-17T19:09:30 Last Updated: 2024-08-05T00:56:22.020Z Vendors: Trend Micro Products: Deep Security Manager Problem Types: Confidentiality Exposure Description: The Deep Security Manager application (Versions 10.0, 11.0 and 12.0), when configured in a certain way, may transmit initial LDAP communication in clear text. This may result in confidentiality impact but does not impact integrity or availability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000149495
CVE ID: CVE-2019-15627 State: PUBLISHED Published: 2019-10-17T19:09:33 Last Updated: 2024-08-05T00:56:21.684Z Vendors: Trend Micro Products: Deep Security Agent Problem Types: Local Arbitrary File Overwrite Description: Versions 10.0, 11.0 and 12.0 of the Trend Micro Deep Security Agent are vulnerable to an arbitrary file delete attack, which may lead to availability impact. Local OS access is required. Please note that only Windows agents are affected. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000149495 - http://packetstormsecurity.com/files/155579/Trend-Micro-Deep-Security-Agent-11-Arbitrary-File-Overwrite.html
CVE ID: CVE-2019-15628 State: PUBLISHED Published: 2019-12-02T15:45:14 Last Updated: 2024-08-05T00:56:22.385Z Vendors: Trend Micro Products: Trend Micro Security (Consumer) Problem Types: DLL Hijacking Description: Trend Micro Security (Consumer) 2020 (v16.0.1221 and below) is affected by a DLL hijacking vulnerability that could allow an attacker to use a specific service as an execution and/or persistence mechanism which could execute a malicious program each time the service is started. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124011.aspx - https://safebreach.com/Post/Trend-Micro-Security-16-DLL-Sea
dmicro.com/en-us/home/pages/technical-support/1124011.aspx - https://safebreach.com/Post/Trend-Micro-Security-16-DLL-Search-Order-Hijacking-and-Potential-Abuses-CVE-2019-15628
CVE ID: CVE-2019-15629 State: PUBLISHED Published: 2019-11-25T21:01:19 Last Updated: 2024-08-05T00:56:22.137Z Vendors: Trend Micro Products: Trend Micro Password Manager for Android Problem Types: FLAG_MISUSE Description: Trend Micro Password Manager versions 3.x, 5.0, and 5.1 for Android is affected by a FLAG_MISUSE vulnerability that could be exploited to allow the application to share information to third-party applications on the device. Additional Analyst Notes: - CVE Program Container: References: - https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124012.aspx
CVE ID: CVE-2019-15630 State: PUBLISHED Published: 2019-08-30T16:56:14 Last Updated: 2024-08-05T00:56:22.135Z Vendors: Salesforce, Inc. Products: Mulesoft, Mulesoft API Gateway Problem Types: Directory Traversal (Local File Inclusion) Description: Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft Mule Runtime 4.1.0 and higher released before August 1 2019, and all versions of MuleSoft API Gateway released before August 1 2019 allow remote attackers to read files accessible to the Mule process. Additional Analyst Notes: - CVE Program Container: References: - https://help.salesforce.co
essible to the Mule process. Additional Analyst Notes: - CVE Program Container: References: - https://help.salesforce.com/apex/HTViewSolution?urlname=CVE-2019-15630-Directory-Traversal-in-MuleSoft-Runtime&language=en_US
CVE ID: CVE-2019-15631 State: PUBLISHED Published: 2019-12-02T01:44:27 Last Updated: 2024-08-05T00:56:20.902Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: MuleSoft Products: Mule CE/EE 3.x, Mule API Gateway 2.x Problem Types: Remote Code Execution Description: Remote Code Execution vulnerability in MuleSoft Mule CE/EE 3.x and API Gateway 2.x released before October 31, 2019 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://help.salesforce.com/articleView?id=000351827&language=en_US&type=1&mode=1
CVE ID: CVE-2019-15635 State: PUBLISHED Published: 2019-09-23T16:37:08 Last Updated: 2024-08-05T00:56:22.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Grafana 5.4.0. Passwords for data sources used by Grafana (e.g., MySQL) are not encrypted. An admin user can reveal passwords for any data source by pressing the "Save and test" button within a data source's settings menu. When watching the transaction with Burp Proxy, the password for the data source is revealed and sent to the server. From a browser, a prompt to save the credentials is generated, and the password can be revealed by simply checking the "Show password" box. Additional Analyst Notes:
als is generated, and the password can be revealed by simply checking the "Show password" box. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/167244 - https://security.netapp.com/advisory/ntap-20191009-0002/
CVE ID: CVE-2019-15637 State: PUBLISHED Published: 2019-08-26T16:21:07 Last Updated: 2024-08-05T00:56:22.155Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AC:L/AV:N/A:L/C:H/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a DoS. This affects Tableau Server, Tableau Desktop, Tableau Reader, and Tableau Public Desktop. Additional Analyst Notes: - CVE Program Container: References: - https://community.tableau.com/community/security-bulletins/blog/2019/08/22/important-adv-2019-030-xxe-vulnerability-in-tableau-products - https://github.com/min
security-bulletins/blog/2019/08/22/important-adv-2019-030-xxe-vulnerability-in-tableau-products - https://github.com/minecrater/exploits/blob/master/TableauXXE.py - https://packetstormsecurity.com/files/154232/Tableau-XML-Injection.html
CVE ID: CVE-2019-15638 State: PUBLISHED Published: 2019-12-04T14:50:22 Last Updated: 2024-08-05T00:56:22.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: COPA-DATA zenone32 zenon Editor through 8.10 has an Uncontrolled Search Path Element. Additional Analyst Notes: - CVE Program Container: References: - https://forum.copadata.com/ - https://www.copadata.com/fileadmin/user_upload/faq/files/CD_SVA_2019_5.pdf - https://www.copadata.com/en/support-services/knowledge-base-faq/pcd-sva-2019-5-nbspcopa-data-editor-security-3225/
CVE ID: CVE-2019-15639 State: PUBLISHED Published: 2019-09-09T12:50:30 Last Updated: 2024-08-05T00:56:22.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a specific RTP packet during a call and cause a crash in a specific scenario. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/154372/Asterisk-Project-Security-Advisory-AST-2019-005.html - http://downloads.asterisk.org/pub/security/AST-2019-005.html
CVE ID: CVE-2019-15640 State: PUBLISHED Published: 2019-08-26T16:51:17 Last Updated: 2024-08-05T00:56:22.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Limesurvey before 3.17.10 does not validate both the MIME type and file extension of an image. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LimeSurvey/LimeSurvey/commit/0479e3ff93ff1473a25c71e83cc011920b072b4c#diff-d539f3f8185667ee48db78e1bf65a3b4R43
CVE ID: CVE-2019-15641 State: PUBLISHED Published: 2019-08-26T17:07:38 Last Updated: 2024-08-05T00:56:22.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: xmlrpc.cgi in Webmin through 1.930 allows authenticated XXE attacks. By default, only root, admin, and sysadm can access xmlrpc.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.calypt.com/blog/index.php/authenticated-xxe-on-webmin/
CVE ID: CVE-2019-15642 State: PUBLISHED Published: 2019-08-26T17:07:47 Last Updated: 2024-08-05T00:56:22.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialise_variable makes an eval call. NOTE: the Webmin_Servers_Index documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must not be granted to un-trusted Webmin users." Additional Analyst Notes: - CVE Program Container: References: - https://www.calypt.com/blog/index.php/authenticated-rce-on-webmin/ - https://github.com/webmin/webmin/commit/df8a43fb4bdc
ttps://www.calypt.com/blog/index.php/authenticated-rce-on-webmin/ - https://github.com/webmin/webmin/commit/df8a43fb4bdc9c858874f72773bcba597ae9432c - https://github.com/webmin/webmin/blob/ab5e00e41ea1ecc1e24b8f8693f3495a0abb1aed/rpc.cgi#L26-L37 - https://doxfer.webmin.com/Webmin/Webmin_Servers_Index
CVE ID: CVE-2019-15643 State: PUBLISHED Published: 2019-08-27T11:19:37 Last Updated: 2024-08-05T00:56:21.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ultimate-faqs plugin before 1.8.22 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ultimate-faqs/#developers - https://wpvulndb.com/vulnerabilities/9833
CVE ID: CVE-2019-15644 State: PUBLISHED Published: 2019-08-27T11:22:49 Last Updated: 2024-08-05T00:56:22.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: The zoho-salesiq plugin before 1.0.9 for WordPress has stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9433 - https://wordpress.org/plugins/zoho-salesiq/#developers
CVE ID: CVE-2019-15645 State: PUBLISHED Published: 2019-08-27T11:23:30 Last Updated: 2024-08-05T00:56:22.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: The zoho-salesiq plugin before 1.0.9 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9433 - https://wordpress.org/plugins/zoho-salesiq/#developers
CVE ID: CVE-2019-15646 State: PUBLISHED Published: 2019-08-27T11:36:04 Last Updated: 2024-08-05T00:56:21.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rsvpmaker plugin before 6.2 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/rsvpmaker/#developers - https://plugins.trac.wordpress.org/log/rsvpmaker/tags/6.2 - https://wpvulndb.com/vulnerabilities/9830
CVE ID: CVE-2019-15647 State: PUBLISHED Published: 2019-08-27T11:42:31 Last Updated: 2024-08-05T00:56:22.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: The groundhogg plugin before 1.3.5 for WordPress has wp-admin/admin-ajax.php?action=bulk_action_listener remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/groundhogg/#developers - https://www.pluginvulnerabilities.com/2019/04/05/our-proactive-monitoring-caught-an-authenticated-remote-code-execution-rce-vulnerability-being-introduced-in-to-groundhogg - https://wpvulndb.com/vulnerabilities/9834
CVE ID: CVE-2019-15648 State: PUBLISHED Published: 2019-08-27T11:44:46 Last Updated: 2024-08-05T00:56:22.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: The insert-or-embed-articulate-content-into-wordpress plugin before 4.29991 for WordPress has insufficient restrictions on deleting or renaming by a Subscriber. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9416 - https://wordpress.org/plugins/insert-or-embed-articulate-content-into-wordpress/#developers
CVE ID: CVE-2019-15649 State: PUBLISHED Published: 2019-08-27T11:45:43 Last Updated: 2024-08-05T00:56:22.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: The insert-or-embed-articulate-content-into-wordpress plugin before 4.2999 for WordPress has insufficient restrictions on file upload. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9415 - https://wordpress.org/plugins/insert-or-embed-articulate-content-into-wordpress/#developers
CVE ID: CVE-2019-15650 State: PUBLISHED Published: 2019-08-27T12:23:05 Last Updated: 2024-08-05T00:56:22.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: The stops-core-theme-and-plugin-updates plugin before 8.0.5 for WordPress has insufficient restrictions on option changes (such as disabling unattended theme updates) because of a nonce check error. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/stops-core-theme-and-plugin-updates/#developers - https://wpvulndb.com/vulnerabilities/9837
CVE ID: CVE-2019-15651 State: PUBLISHED Published: 2019-08-26T21:57:54 Last Updated: 2024-08-05T00:56:22.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/asn.c because reading the ASN_BOOLEAN byte is mishandled for a crafted DER certificate in GetLength_ex. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfssl/issues/2421
CVE ID: CVE-2019-15652 State: PUBLISHED Published: 2019-11-22T17:23:24 Last Updated: 2024-08-05T00:56:22.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface for NSSLGlobal SatLink VSAT Modem Unit (VMU) devices before 18.1.0 doesn't properly sanitize input for error messages, leading to the ability to inject client-side code. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=26455 - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2019-15652-satlink-vsat-vulnerabilities/
CVE ID: CVE-2019-15653 State: PUBLISHED Published: 2020-03-19T17:16:49 Last Updated: 2024-08-05T00:56:22.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Comba AP2600-I devices through A02,0202N00PD2 are prone to password disclosure via an insecure authentication mechanism. The HTML source code of the login page contains values that allow obtaining the username and password. The username are password values are a double md5 of the plaintext real value, i.e., md5(md5(value)). Additional Analyst Notes: - CVE Program Container: References: - https://www.comba-telecom.com/en/news - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=26164
CVE ID: CVE-2019-15654 State: PUBLISHED Published: 2020-03-19T17:18:03 Last Updated: 2024-08-05T00:56:22.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Comba AC2400 devices are prone to password disclosure via a simple crafted /09/business/upgrade/upcfgAction.php?download=true request to the web management server. The request doesn't require any authentication and will lead to saving the DBconfig.cfg file. At the end of the file, the login information is stored in cleartext. Additional Analyst Notes: - CVE Program Container: References: - https://www.comba-telecom.com/en/news - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=26164
CVE ID: CVE-2019-15655 State: PUBLISHED Published: 2020-03-19T17:19:15 Last Updated: 2024-08-05T00:56:22.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSL-2875AL devices through 1.00.05 are prone to password disclosure via a simple crafted /romfile.cfg request to the web management server. This request doesn't require any authentication and will lead to saving the configuration file. The password is stored in cleartext. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=26165
CVE ID: CVE-2019-15656 State: PUBLISHED Published: 2020-03-19T17:20:13 Last Updated: 2024-08-05T00:56:22.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSL-2875AL and DSL-2877AL devices through 1.00.05 are prone to information disclosure via a simple crafted request to index.asp on the web management server because of username_v and password_v variables. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=26165
CVE ID: CVE-2019-15657 State: PUBLISHED Published: 2019-08-26T22:55:12 Last Updated: 2024-08-05T00:56:22.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mysticatea/eslint-utils/security/advisories/GHSA-3gx7-xhv7-5mx3
CVE ID: CVE-2019-15658 State: PUBLISHED Published: 2019-08-26T22:55:00 Last Updated: 2024-08-05T00:56:22.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: connect-pg-simple before 6.0.1 allows SQL injection if tableName or schemaName is untrusted data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/voxpelli/node-connect-pg-simple/security/advisories/GHSA-xqh8-5j36-4556
CVE ID: CVE-2019-15659 State: PUBLISHED Published: 2019-08-27T11:55:07 Last Updated: 2024-08-05T00:56:22.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pie-register plugin before 3.1.2 for WordPress has SQL injection, a different issue than CVE-2018-10969. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/pie-register/#developers - https://wpvulndb.com/vulnerabilities/9835
CVE ID: CVE-2019-15660 State: PUBLISHED Published: 2019-08-27T12:05:06 Last Updated: 2024-08-05T00:56:22.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-members plugin before 3.2.8 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-members/#developers
CVE ID: CVE-2019-15661 State: PUBLISHED Published: 2020-03-20T16:53:35 Last Updated: 2024-08-05T00:56:22.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120004 in KfeCo10X64.sys fails to validate parameters, leading to a stack-based buffer overflow, which can lead to code execution or escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.killernetworking.com - https://support.killernetworking.com/downloads/ReleaseNotes/KillerSoftware_Release_Notes_2.1.1352.pdf - https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2019-0005/FEYE-201
re_Release_Notes_2.1.1352.pdf - https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2019-0005/FEYE-2019-0005.md
CVE ID: CVE-2019-15662 State: PUBLISHED Published: 2020-03-20T17:02:51 Last Updated: 2024-08-05T00:56:22.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120444 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an arbitrary read primitive that can be used as part of a chain to escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.killernetworking.com - https://support.killernetworking.com/downloads/ReleaseNotes/KillerSoftware_Release_Notes_2.1.1352.pdf - https://github.com/fireeye/Vulnerability-Discl
ng.com/downloads/ReleaseNotes/KillerSoftware_Release_Notes_2.1.1352.pdf - https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2019-0006/FEYE-2019-0006.md
CVE ID: CVE-2019-15663 State: PUBLISHED Published: 2020-03-20T17:10:05 Last Updated: 2024-08-05T00:56:22.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an out-of-bounds read that can be used as part of a chain to escalate privileges (issue 1 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://www.killernetworking.com - https://support.killernetworking.com/downloads/ReleaseNotes/KillerSoftware_Release_Notes_2.1.1352.pdf - https://github.com/fireeye/Vulnerabil
rnetworking.com/downloads/ReleaseNotes/KillerSoftware_Release_Notes_2.1.1352.pdf - https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2019-0007/FEYE-2019-0007.md
CVE ID: CVE-2019-15664 State: PUBLISHED Published: 2020-03-20T17:13:40 Last Updated: 2024-08-05T00:56:22.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an out-of-bounds read that can be used as part of a chain to escalate privileges (issue 2 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://www.killernetworking.com - https://support.killernetworking.com/downloads/ReleaseNotes/KillerSoftware_Release_Notes_2.1.1352.pdf - https://github.com/fireeye/Vulnerabil
rnetworking.com/downloads/ReleaseNotes/KillerSoftware_Release_Notes_2.1.1352.pdf - https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2019-0008/FEYE-2019-0008.md