Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-5634 State: PUBLISHED Published: 2019-08-22T13:51:37.034660Z Last Updated: 2024-09-17T01:11:56.007Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Belwith Products, LLC Products: Hickory Smart Problem Types: CWE-532 Description: An inclusion of sensitive information in log files vulnerability is present in Hickory Smart for Android mobile devices from Belwith Products, LLC. Communications to the internet API services and direct connections to the lock via Bluetooth Low Energy (BLE) from the mobile application are logged in a debug log on the Android device at HickorySmartLog/Logs/SRDeviceLog.txt. This information was found stored in the And
a debug log on the Android device at HickorySmartLog/Logs/SRDeviceLog.txt. This information was found stored in the Android device's default USB or SDcard storage paths and is accessible without rooting the device. This issue affects Hickory Smart for Android, version 01.01.43 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://blog.rapid7.com/2019/08/01/r7-2019-18-multiple-hickory-smart-lock-vulnerabilities/ - https://play.google.com/store/apps/details?id=com.belwith.hickorysmart&hl=en_US
CVE ID: CVE-2019-5635 State: PUBLISHED Published: 2019-08-22T13:51:37.081035Z Last Updated: 2024-09-16T20:07:32.589Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Belwith Products, LLC Products: Hickory Smart Ethernet Bridge Problem Types: CWE-319 Description: A cleartext transmission of sensitive information vulnerability is present in Hickory Smart Ethernet Bridge from Belwith Products, LLC. Captured data reveals that the Hickory Smart Ethernet Bridge device communicates over the network to an MQTT broker without using encryption. This exposed the default username and password used to authenticate to the MQTT broker. This issue affects Hickory Smart Ethe
exposed the default username and password used to authenticate to the MQTT broker. This issue affects Hickory Smart Ethernet Bridge, model number H077646. The firmware does not appear to contain versioning information. Additional Analyst Notes: - CVE Program Container: References: - https://blog.rapid7.com/2019/08/01/r7-2019-18-multiple-hickory-smart-lock-vulnerabilities/ - https://hickoryhardware.com/products/hickory-smart-ethernet-bridge?variant=20882150228086
CVE ID: CVE-2019-5636 State: PUBLISHED Published: 2019-11-21T19:16:12.913139Z Last Updated: 2024-09-17T03:18:42.935Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Beckhoff Products: TwinCAT 2, TwinCAT 3.1 Problem Types: CWE-404 Description: When a Beckhoff TwinCAT Runtime receives a malformed UDP packet, the ADS Discovery Service shuts down. Note that the TwinCAT devices are still performing as normal. This issue affects TwinCAT 2 version 2304 (and prior) and TwinCAT 3.1 version 4204.0 (and prior). Additional Analyst Notes: - CVE Program Container: References: - https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2019-004.p
Container: References: - https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2019-004.pdf - https://blog.rapid7.com/2019/10/08/r7-2019-32-denial-of-service-vulnerabilities-in-beckhoff-twincat-plc-environment-fixed/
CVE ID: CVE-2019-5637 State: PUBLISHED Published: 2019-11-21T19:16:13.344360Z Last Updated: 2024-09-17T01:35:41.695Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Beckhoff Products: TwinCAT 2, TwinCAT 3.1 Problem Types: CWE-369 Description: When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending a malformed UDP packet to the device. This issue affects TwinCAT 2 version 2304 (and prior) and TwinCAT 3.1 version 4204.0 (and prior). Additional Analyst Notes: - CVE Program Container: References: - https://blog.rapid7.com/2019/10/08/r7-2019-32-denial-of-service-vulnerabilities-in-beckhoff-tw
Container: References: - https://blog.rapid7.com/2019/10/08/r7-2019-32-denial-of-service-vulnerabilities-in-beckhoff-twincat-plc-environment-fixed/ - https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2019-007.pdf
CVE ID: CVE-2019-5638 State: PUBLISHED Published: 2019-08-21T19:36:25.675225Z Last Updated: 2024-09-16T22:25:03.188Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Rapid7 Products: Nexpose Problem Types: CWE-613 Description: Rapid7 Nexpose versions 6.5.50 and prior suffer from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user. For example, if a user's password is changed by an administrator due to an otherwise unrelated credential leak, that user account's current session is still valid after the password change, potentially allowing the attacker who originally compromised the credential to
s still valid after the password change, potentially allowing the attacker who originally compromised the credential to remain logged in and able to cause further damage. Additional Analyst Notes: - CVE Program Container: References: - https://help.rapid7.com/nexpose/en-us/release-notes/archive/2019/02/ - https://docs.rapid7.com/insightvm/enable-insightvm-platform-login
CVE ID: CVE-2019-5640 State: PUBLISHED Published: 2021-11-22T16:35:10.539066Z Last Updated: 2024-09-17T00:15:52.087Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Rapid7 Products: Nexpose Problem Types: CWE-200 Description: Rapid7 Nexpose versions prior to 6.6.114 suffer from an information exposure issue whereby, when the user's session has ended due to inactivity, an attacker can use the inspect element browser feature to remove the login panel and view the details available in the last webpage visited by previous user Additional Analyst Notes: - CVE Program Container: References: - https://docs.rapid7.com/release-notes/nexpose/20211117/
CVE ID: CVE-2019-5641 State: PUBLISHED Published: 2022-09-21T14:45:14.786Z Last Updated: 2025-05-29T18:28:29.705Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Rapid7 Products: InsightVM Problem Types: CWE-200 Description: Rapid7 InsightVM suffers from an information exposure issue whereby, when the user's session has ended due to inactivity, an attacker can use the Inspect Element browser feature to remove the login panel and view the details available in the last webpage visited by previous user Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.rapid7.com/release-notes/insightvm/20220830/
CVE ID: CVE-2019-5642 State: PUBLISHED Published: 2019-11-06T18:30:42.787547Z Last Updated: 2024-09-17T04:24:03.024Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Rapid7 Products: Metasploit Pro Problem Types: CWE-732 Description: Rapid7 Metasploit Pro version 4.16.0-2019081901 and prior suffers from an instance of CWE-732, wherein the unique server.key is written to the file system during installation with world-readable permissions. This can allow other users of the same system where Metasploit Pro is installed to intercept otherwise private communications to the Metasploit Pro web interface. Additional Analyst Notes: - CVE Program Container: References: -
te communications to the Metasploit Pro web interface. Additional Analyst Notes: - CVE Program Container: References: - https://help.rapid7.com/metasploit/release-notes/?rid=4.16.0-2019091001
CVE ID: CVE-2019-5643 State: PUBLISHED Published: 2019-11-06T18:30:43.187703Z Last Updated: 2024-09-16T19:14:34.337Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Computing For Good Products: Basic Laboratory Information System Problem Types: CWE-284 Description: Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may enumerate the user names and facility names in use on a particular installation. Additional Analyst Notes: - CVE Program Container: References: - https://blog.rapid7.com/2019/09/10/r7-2019-
stallation. Additional Analyst Notes: - CVE Program Container: References: - https://blog.rapid7.com/2019/09/10/r7-2019-09-cve-2019-5617-cve-2019-5643-cve-2019-5644-c4g-blis-authentication-and-authorization-vulnerabilities-fixed/
CVE ID: CVE-2019-5644 State: PUBLISHED Published: 2019-11-06T18:30:43.639074Z Last Updated: 2024-09-16T22:41:06.846Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Computing For Good Products: Basic Laboratory Information System Problem Types: CWE-284 Description: Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may alter several facets of a user account, including promoting any user to an administrator. Additional Analyst Notes: - CVE Program Container: References: - https://blog.rapid7.com/2019/09/1
to an administrator. Additional Analyst Notes: - CVE Program Container: References: - https://blog.rapid7.com/2019/09/10/r7-2019-09-cve-2019-5617-cve-2019-5643-cve-2019-5644-c4g-blis-authentication-and-authorization-vulnerabilities-fixed/
CVE ID: CVE-2019-5645 State: PUBLISHED Published: 2020-09-01T14:35:12.880695Z Last Updated: 2024-09-17T03:29:11.352Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Rapid7 Products: Metasploit Framework Problem Types: CWE-400 Description: By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular expression. When evaluated, this malicious handler can either prevent new HTTP handler sessions from being established, or cause a resource exhaustion on the Metasploit server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rapid7/metasploit-framework
server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rapid7/metasploit-framework/pull/12433
CVE ID: CVE-2019-5647 State: PUBLISHED Published: 2020-01-22T18:00:22.724972Z Last Updated: 2024-09-17T00:51:55.819Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Rapid7 Products: AppSpider Problem Types: CWE-613 Description: The Chrome Plugin for Rapid7 AppSpider can incorrectly keep browser sessions active after recording a macro, even after a restart of the Chrome browser. This behavior could make future session hijacking attempts easier, since the user could believe a session was closed when it was not. This issue affects Rapid7 AppSpider version 3.8.213 and prior versions, and is fixed in version 3.8.215. Additional Analyst Notes: - CVE Program Contai
ider version 3.8.213 and prior versions, and is fixed in version 3.8.215. Additional Analyst Notes: - CVE Program Container: References: - https://help.rapid7.com/appspiderenterprise/release-notes/?rid=3.8.215
CVE ID: CVE-2019-5648 State: PUBLISHED Published: 2020-03-12T13:00:16.318855Z Last Updated: 2024-09-17T01:21:54.238Z Severity: HIGH (CVSS 8.7 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: Barracuda Products: Load Balancer ADC Problem Types: CWE-522 Description: Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware <= v6.4 allows one to edit the LDAP service configuration of the balancer and change the LDAP server to an attacker-controlled system, without having to re-enter LDAP credentials. These steps can be used by any authenticated administrative user to expose the LDAP credentials configured in the LDAP connector over the network. Addit
uthenticated administrative user to expose the LDAP credentials configured in the LDAP connector over the network. Additional Analyst Notes: - CVE Program Container: References: - https://blog.rapid7.com/2020/03/05/r7-2019-39-cve-2019-5648-ldap-credential-exposure-in-barracuda-load-balancer-adc-fixed/
CVE ID: CVE-2019-5650 State: REJECTED Published: 2020-02-07T15:40:22 Last Updated: 2020-02-07T15:40:22 Description: No description available.
CVE ID: CVE-2019-5651 State: REJECTED Published: 2020-02-07T15:40:23 Last Updated: 2020-02-07T15:40:23 Description: No description available.
CVE ID: CVE-2019-5652 State: REJECTED Published: 2020-02-07T15:40:23 Last Updated: 2020-02-07T15:40:23 Description: No description available.
CVE ID: CVE-2019-5653 State: REJECTED Published: 2020-02-07T15:40:24 Last Updated: 2020-02-07T15:40:23 Description: No description available.
CVE ID: CVE-2019-5654 State: REJECTED Published: 2020-02-07T15:40:24 Last Updated: 2020-02-07T15:40:24 Description: No description available.
CVE ID: CVE-2019-5655 State: REJECTED Published: 2020-02-07T15:40:24 Last Updated: 2020-02-07T15:40:24 Description: No description available.
CVE ID: CVE-2019-5656 State: REJECTED Published: 2020-02-07T15:40:25 Last Updated: 2020-02-07T15:40:25 Description: No description available.
CVE ID: CVE-2019-5657 State: REJECTED Published: 2020-02-07T15:40:25 Last Updated: 2020-02-07T15:40:25 Description: No description available.
CVE ID: CVE-2019-5658 State: REJECTED Published: 2020-02-07T15:40:25 Last Updated: 2020-02-07T15:40:25 Description: No description available.
CVE ID: CVE-2019-5659 State: REJECTED Published: 2020-02-07T15:40:26 Last Updated: 2020-02-07T15:40:26 Description: No description available.
CVE ID: CVE-2019-5660 State: REJECTED Published: 2020-02-07T15:40:26 Last Updated: 2020-02-07T15:40:26 Description: No description available.
CVE ID: CVE-2019-5661 State: REJECTED Published: 2020-02-07T15:40:27 Last Updated: 2020-02-07T15:40:27 Description: No description available.
CVE ID: CVE-2019-5662 State: REJECTED Published: 2020-02-07T15:40:27 Last Updated: 2020-02-07T15:40:27 Description: No description available.
CVE ID: CVE-2019-5663 State: REJECTED Published: 2020-02-07T15:40:27 Last Updated: 2020-02-07T15:40:27 Description: No description available.
CVE ID: CVE-2019-5664 State: REJECTED Published: 2020-02-07T15:40:28 Last Updated: 2020-02-07T15:40:28 Description: No description available.
CVE ID: CVE-2019-5665 State: PUBLISHED Published: 2019-02-27T23:00:00Z Last Updated: 2024-09-17T03:07:39.183Z Vendors: Nvidia Corporation Products: NVIDIA GPU Graphics Driver Problem Types: code execution, denial of service, escalation of privileges Description: NVIDIA Windows GPU Display driver contains a vulnerability in the 3D vision component in which the stereo service software, when opening a file, does not check for hard links. This behavior may lead to code execution, denial of service or escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4772 - http://support.lenovo.com/us/en/solutions/LEN-26
eferences: - https://nvidia.custhelp.com/app/answers/detail/a_id/4772 - http://support.lenovo.com/us/en/solutions/LEN-26250
CVE ID: CVE-2019-5666 State: PUBLISHED Published: 2019-02-27T23:00:00Z Last Updated: 2024-09-17T03:28:46.673Z Vendors: Nvidia Corporation Products: NVIDIA GPU Graphics Driver Problem Types: denial of service or escalation of privileges Description: NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) create context command DDI DxgkDdiCreateContext in which the product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array, which may lead to denial of service or escalation of privileges. Additional Analyst N
a valid position within the array, which may lead to denial of service or escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4772 - http://support.lenovo.com/us/en/solutions/LEN-26250 - https://nvidia.custhelp.com/app/answers/detail/a_id/4797
CVE ID: CVE-2019-5667 State: PUBLISHED Published: 2019-02-27T23:00:00Z Last Updated: 2024-09-16T18:49:55.397Z Vendors: Nvidia Corporation Products: NVIDIA GPU Graphics Driver Problem Types: code execution, denial of service or escalation of privileges Description: NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiSetRootPageTable in which the application dereferences a pointer that it expects to be valid, but is NULL, which may lead to code execution, denial of service or escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4772 - http:
l Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4772 - http://support.lenovo.com/us/en/solutions/LEN-26250
CVE ID: CVE-2019-5668 State: PUBLISHED Published: 2019-02-27T23:00:00Z Last Updated: 2024-09-16T23:56:05.418Z Vendors: Nvidia Corporation Products: NVIDIA GPU Graphics Driver Problem Types: denial of service or escalation of privileges Description: NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiSubmitCommandVirtual in which the application dereferences a pointer that it expects to be valid, but is NULL, which may lead to denial of service or escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4772 - http://support.lenovo.com/us/en/s
am Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4772 - http://support.lenovo.com/us/en/solutions/LEN-26250
CVE ID: CVE-2019-5669 State: PUBLISHED Published: 2019-02-27T23:00:00Z Last Updated: 2024-09-16T20:58:00.185Z Vendors: Nvidia Corporation Products: NVIDIA GPU Graphics Driver Problem Types: denial of service or escalation of privileges Description: NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential operation to read from or write to a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer, which may lead to denial of service or escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://nvi
ial of service or escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4772 - http://support.lenovo.com/us/en/solutions/LEN-26250
CVE ID: CVE-2019-5670 State: PUBLISHED Published: 2019-02-27T23:00:00Z Last Updated: 2024-09-16T16:17:58.743Z Vendors: Nvidia Corporation Products: NVIDIA GPU Graphics Driver Problem Types: denial of service, escalation of privileges, code execution or information disclosure Description: NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential operation to read from or write to a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer which may lead to denial of service, escalation of privileges, code execution or information disclosur
nds of the buffer which may lead to denial of service, escalation of privileges, code execution or information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4772 - http://support.lenovo.com/us/en/solutions/LEN-26250
CVE ID: CVE-2019-5671 State: PUBLISHED Published: 2019-02-27T23:00:00Z Last Updated: 2024-09-17T00:46:18.629Z Vendors: Nvidia Corporation Products: NVIDIA GPU Graphics Driver Problem Types: denial of service Description: NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the software does not release a resource after its effective lifetime has ended, which may lead to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4772 - http://support.lenovo.com/us/en/solutions/LEN-26250
CVE ID: CVE-2019-5672 State: PUBLISHED Published: 2019-04-11T16:37:26 Last Updated: 2024-08-04T20:01:51.975Z Vendors: NVIDIA Products: Jetson TX1 and TX2 Problem Types: Information disclosure Description: NVIDIA Jetson TX1 and TX2 contain a vulnerability in the Linux for Tegra (L4T) operating system (on all versions prior to R28.3) where the Secure Shell (SSH) keys provided in the sample rootfs are not replaced by unique host keys after sample rootsfs generation and flashing, which may lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4787
CVE ID: CVE-2019-5673 State: PUBLISHED Published: 2019-04-11T16:38:55 Last Updated: 2024-08-04T20:01:52.043Z Vendors: NVIDIA Products: Jetson TX2 Problem Types: Denial of service Description: NVIDIA Jetson TX2 contains a vulnerability in the kernel driver (on all versions prior to R28.3) where the ARM System Memory Management Unit (SMMU) improperly checks for a fault condition, causing transactions to be discarded, which may lead to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4787
CVE ID: CVE-2019-5674 State: PUBLISHED Published: 2019-03-28T14:09:11 Last Updated: 2024-08-04T20:01:52.193Z Vendors: NVIDIA Corporation Products: GeForce Experience Problem Types: code execution, denial of service, or escalation of privileges Description: NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of service, or escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4784 - http:/
Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4784 - http://www.securityfocus.com/bid/107621 - http://support.lenovo.com/us/en/solutions/LEN-27096
CVE ID: CVE-2019-5675 State: PUBLISHED Published: 2019-05-10T20:18:16 Last Updated: 2024-08-04T20:01:52.244Z Vendors: NVIDIA Products: NVIDIA GPU Display Driver Problem Types: denial of service, escalation of privileges, or information disclosure Description: NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the product does not properly synchronize shared data, such as static variables across threads, which can lead to undefined behavior and unpredictable data changes, which may lead to denial of service, escalation of privileges, or information disclosure. Additional Analyst
ta changes, which may lead to denial of service, escalation of privileges, or information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4797
CVE ID: CVE-2019-5676 State: PUBLISHED Published: 2019-05-10T20:21:18 Last Updated: 2024-08-04T20:01:52.217Z Vendors: NVIDIA Products: NVIDIA GPU Display Driver Problem Types: escalation of privileges, code execution Description: NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack), leading to escalation of privileges through code execution. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/4797 - https://nvidia.custhelp.com/app/answers/