Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-19947 State: PUBLISHED Published: 2019-12-23T23:12:42 Last Updated: 2024-08-05T02:32:10.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c driver, aka CID-da2311a6385c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/da2311a6385c3b499da2ed5d9be59ce331fa93e9 - http://www.openwall.com/lists/oss-security/2019/12/24/1 - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://security.netapp.com/advisory/ntap-20200204-0002/ - https:/
ebian.org/debian-lts-announce/2020/01/msg00013.html - https://security.netapp.com/advisory/ntap-20200204-0002/ - https://usn.ubuntu.com/4285-1/ - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - https://usn.ubuntu.com/4284-1/ - https://usn.ubuntu.com/4427-1/ - https://usn.ubuntu.com/4485-1/
CVE ID: CVE-2019-19948 State: PUBLISHED Published: 2019-12-24T00:07:19 Last Updated: 2024-08-05T02:32:10.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1562 - https://lists.debian.org/debian-lts-announce/2019/12/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00006.html - https://www.debian.org/security/2020/dsa-4712 - https://www.debian.org/security/2020/dsa-4715 - https://usn.ubuntu.com/4549-1/
CVE ID: CVE-2019-19949 State: PUBLISHED Published: 2019-12-24T00:06:26 Last Updated: 2024-08-05T02:32:10.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magick_png_write_raw_profile and LocaleNCompare. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1561 - https://lists.debian.org/debian-lts-announce/2019/12/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00006.html - https://www.debian.org/security/2020/dsa-4712 - https://lists.debian.org/debian-lts-anno
nnounce/2020-02/msg00006.html - https://www.debian.org/security/2020/dsa-4712 - https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html - https://usn.ubuntu.com/4549-1/
CVE ID: CVE-2019-19950 State: PUBLISHED Published: 2019-12-24T00:07:10 Last Updated: 2024-08-05T02:32:10.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and ThrowLoggedException of magick/error.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/graphicsmagick/bugs/603/ - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/44ab7f6c20b4 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00064.html - https://lists.debian.org/debian-lts-announce/2020/01/msg00029
use.org/opensuse-security-announce/2020-01/msg00064.html - https://lists.debian.org/debian-lts-announce/2020/01/msg00029.html - https://www.debian.org/security/2020/dsa-4640
CVE ID: CVE-2019-19951 State: PUBLISHED Published: 2019-12-24T00:07:02 Last Updated: 2024-08-05T02:32:09.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GraphicsMagick 1.4 snapshot-20190423 Q8, there is a heap-based buffer overflow in the function ImportRLEPixels of coders/miff.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/graphicsmagick/bugs/608/ - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/bc99af93614d - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00064.html - https://lists.debian.org/debian-lts-announce/2020/01/msg00029
CVE ID: CVE-2019-19952 State: PUBLISHED Published: 2019-12-24T00:06:41 Last Updated: 2024-08-05T02:32:10.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1791
CVE ID: CVE-2019-19953 State: PUBLISHED Published: 2019-12-24T00:06:51 Last Updated: 2024-08-05T02:32:10.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/graphicsmagick/bugs/617/ - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/28f8bacd4bbf - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00064.html - https://lists.debian.org/debian-lts-announce/2020/01/msg00029.ht
.org/opensuse-security-announce/2020-01/msg00064.html - https://lists.debian.org/debian-lts-announce/2020/01/msg00029.html - https://www.debian.org/security/2020/dsa-4640
CVE ID: CVE-2019-19954 State: PUBLISHED Published: 2019-12-24T14:07:20 Last Updated: 2024-08-05T02:32:10.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Signal Desktop before 1.29.1 on Windows allows local users to gain privileges by creating a Trojan horse %SYSTEMDRIVE%\node_modules\.bin\wmic.exe file. Additional Analyst Notes: - CVE Program Container: References: - https://blog.mirch.io/2019/12/18/signal-desktop-windows-lpe/ - https://github.com/signalapp/Signal-Desktop/commit/2da39cca673cc11be3c6d70d4fb95889f9ab6688
CVE ID: CVE-2019-19956 State: PUBLISHED Published: 2019-12-24T15:12:57 Last Updated: 2024-08-05T02:32:10.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/12/msg00032.html - https://usn.ubuntu.com/4274-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFK
I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00005.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://gitlab.gnome.org/GNOME/libxml2/commit/5a02583c7e683896d84878bd90641d8d9b0d0549 - https://security.netapp.com/advisory/ntap-20200114-0002/ - https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html - https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08
CVE ID: CVE-2019-19957 State: PUBLISHED Published: 2019-12-24T21:58:29 Last Updated: 2024-08-05T02:32:10.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libIEC61850 1.4.0, getNumberOfElements in mms/iso_mms/server/mms_access_result.c has an out-of-bounds read vulnerability, related to bufPos and elementLength. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mz-automation/libiec61850/issues/197
CVE ID: CVE-2019-19958 State: PUBLISHED Published: 2019-12-24T21:58:40 Last Updated: 2024-08-05T02:32:10.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libIEC61850 1.4.0, StringUtils_createStringFromBuffer in common/string_utilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mz-automation/libiec61850/issues/198
CVE ID: CVE-2019-19959 State: PUBLISHED Published: 2020-01-03T21:37:42 Last Updated: 2024-08-05T02:32:10.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sqlite/sqlite/commit/d8f2d46cbc9925e034a68aaaf60aad788d9373c1 - https://github.com/sqlite/sqlite/commit/1e490c4ca6b43a9cf8637d695907888349f69bec - https://security.netapp.com/advisory/ntap-20200204-0001/ - https://usn.ubuntu
1e490c4ca6b43a9cf8637d695907888349f69bec - https://security.netapp.com/advisory/ntap-20200204-0001/ - https://usn.ubuntu.com/4298-1/ - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2019-19960 State: PUBLISHED Published: 2019-12-24T23:04:04 Last Updated: 2024-08-05T02:32:10.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: In wolfSSL before 4.3.0, wc_ecc_mulmod_ex does not properly resist side-channel attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfssl/releases/tag/v4.3.0-stable - https://github.com/wolfSSL/wolfssl/commit/5ee9f9c7a23f8ed093fe1e42bc540727e96cebb8
CVE ID: CVE-2019-19962 State: PUBLISHED Published: 2019-12-24T23:03:39 Last Updated: 2024-08-05T02:32:10.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: wolfSSL before 4.3.0 mishandles calls to wc_SignatureGenerateHash, leading to fault injection in RSA cryptography. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfssl/releases/tag/v4.3.0-stable - https://github.com/wolfSSL/wolfssl/commit/23878512c65834d12811b1107d19a001478eca5d
CVE ID: CVE-2019-19963 State: PUBLISHED Published: 2019-12-24T23:03:26 Last Updated: 2024-08-05T02:32:10.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in wolfSSL before 4.3.0 in a non-default configuration where DSA is enabled. DSA signing uses the BEEA algorithm during modular inversion of the nonce, leading to a side-channel attack against the nonce. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfssl/releases/tag/v4.3.0-stable - https://github.com/wolfSSL/wolfssl/commit/7e391f0fd57f2ef375b1174d752a56ce34b2b190
CVE ID: CVE-2019-19964 State: PUBLISHED Published: 2020-03-23T13:58:30 Last Updated: 2024-08-05T02:32:10.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: On NETGEAR GS728TPS devices through 5.3.0.35, a remote attacker having network connectivity to the web-administration panel can access part of the web panel, bypassing authentication. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061738/Security-Advisory-for-Missing-Function-Level-Access-Control-on-GS728TPS-PSV-2020-0012
CVE ID: CVE-2019-19965 State: PUBLISHED Published: 2019-12-25T03:01:51 Last Updated: 2024-08-05T02:32:10.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f70267f379b5e5e11bdc5d72a56bf17e5feed01f - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://security.netapp.com/advisory/ntap-20
d01f - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://security.netapp.com/advisory/ntap-20200204-0002/ - https://usn.ubuntu.com/4285-1/ - https://usn.ubuntu.com/4287-1/ - https://usn.ubuntu.com/4286-2/ - https://usn.ubuntu.com/4287-2/ - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - https://usn.ubuntu.com/4284-1/ - https://usn.ubuntu.com/4286-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
CVE ID: CVE-2019-19966 State: PUBLISHED Published: 2019-12-25T03:01:38 Last Updated: 2024-08-05T02:32:10.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service, aka CID-dea37a972655. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.6 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dea37a97265588da604c6ba80160a287b72c7bfd - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://security.netapp.com/advisory/ntap
72c7bfd - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://security.netapp.com/advisory/ntap-20200204-0002/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
CVE ID: CVE-2019-19967 State: PUBLISHED Published: 2019-12-25T21:20:06 Last Updated: 2024-08-05T02:32:10.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administration page on Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH devices accepts a cleartext password in a POST request on port 80, as demonstrated by the Password field to the xml/setter.xml URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/filipi86/ConnectBoxDOCSIS-3.0
CVE ID: CVE-2019-19968 State: PUBLISHED Published: 2020-02-04T14:14:00 Last Updated: 2024-08-05T02:32:10.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: PandoraFMS 742 suffers from multiple XSS vulnerabilities, affecting the Agent Management, Report Builder, and Graph Builder components. An authenticated user can inject dangerous content into a data store that is later read and included in dynamic content. Additional Analyst Notes: - CVE Program Container: References: - https://pandorafms.com - https://k4m1ll0.com/cve-2019-19968.html
CVE ID: CVE-2019-19977 State: PUBLISHED Published: 2019-12-26T00:07:49 Last Updated: 2024-08-05T02:32:10.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Kirin-say/Vulnerabilities/blob/master/Stack_Overflow_in_libesmtp.md - https://github.com/jbouse-debian/libesmtp/blob/ca5bd0800ef1da234315da4c59716568eb5e6402/ntlm/ntlmstruct.c#L228-L242 - https://web.archive.org/web/20190528215510/http://brianstafford.info/libesmtp/
CVE ID: CVE-2019-19979 State: PUBLISHED Published: 2019-12-26T02:26:32 Last Updated: 2024-08-05T02:32:10.336Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/AV:N/A:H/C:L/I:L/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: A flaw in the WordPress plugin, WP Maintenance before 5.0.6, allowed attackers to enable a vulnerable site's maintenance mode and inject malicious code affecting site visitors. There was CSRF with resultant XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9954 - https://www.wordfence.com/blog/2019/11/high-severity-vulnerability-patched-in-wp-maintenance-plugin/
CVE ID: CVE-2019-19980 State: PUBLISHED Published: 2019-12-26T02:26:20 Last Updated: 2024-08-05T02:32:10.222Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/AV:N/A:L/C:N/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a privilege bypass flaw that allowed authenticated users (Subscriber or greater access) to send test emails from the administrative dashboard on behalf of an administrator. This occurs because the plugin registers a wp_ajax function to send_test_email. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9946 - https://www.wordfence.co
alyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9946 - https://www.wordfence.com/blog/2019/11/multiple-vulnerabilities-patched-in-email-subscribers-newsletters-plugin/
CVE ID: CVE-2019-19981 State: PUBLISHED Published: 2019-12-26T02:26:06 Last Updated: 2024-08-05T02:32:10.068Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/AV:N/A:L/C:N/I:L/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed for CSRF to be exploited on all plugin settings. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9946 - https://www.wordfence.com/blog/2019/11/multiple-vulnerabilities-patched-in-email-subscribers-newsletters-plugin/
CVE ID: CVE-2019-19982 State: PUBLISHED Published: 2019-12-26T02:25:44 Last Updated: 2024-08-05T02:32:10.166Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AC:L/AV:N/A:L/C:N/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed for unauthenticated option creation. In order to exploit this vulnerability, an attacker would need to send a /wp-admin/admin-post.php?es_skip=1&option_name= request. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9946 - https://www.wordfence.com/blog/2019/11/multiple-vulnerabilities-patched-in-email-subscribe
db.com/vulnerabilities/9946 - https://www.wordfence.com/blog/2019/11/multiple-vulnerabilities-patched-in-email-subscribers-newsletters-plugin/
CVE ID: CVE-2019-19983 State: PUBLISHED Published: 2019-12-26T02:25:30 Last Updated: 2024-08-05T02:32:10.194Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In the WordPress plugin, Fast Velocity Minify before 2.7.7, the full web root path to the running WordPress application can be discovered. In order to exploit this vulnerability, FVM Debug Mode needs to be enabled and an admin-ajax request needs to call the fastvelocity_min_files action. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9914 - https://www.wordfence.com/blog/2019/10/medium-severity-vulne
: References: - https://wpvulndb.com/vulnerabilities/9914 - https://www.wordfence.com/blog/2019/10/medium-severity-vulnerability-patched-in-fast-velocity-minify-plugin/
CVE ID: CVE-2019-19984 State: PUBLISHED Published: 2019-12-26T02:25:14 Last Updated: 2024-08-05T02:32:10.101Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AC:L/AV:N/A:L/C:L/I:L/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed users with edit_post capabilities to manage plugin settings and email campaigns. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9946 - https://www.wordfence.com/blog/2019/11/multiple-vulnerabilities-patched-in-email-subscribers-newsletters-plugin/
CVE ID: CVE-2019-19985 State: PUBLISHED Published: 2019-12-26T02:25:00 Last Updated: 2024-08-05T02:32:10.233Z Severity: MEDIUM (CVSS 5.8 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9946 - https://www.wordfence.com/blog/2019/11/multiple-vulnerabilities-patched-in-email-subscribers-newsletters-plugin/ - http://packetstormsecurity.com/files/158563/WordPress-Email-Subscribers-And-Ne
n-email-subscribers-newsletters-plugin/ - http://packetstormsecurity.com/files/158563/WordPress-Email-Subscribers-And-Newsletters-4.2.2-File-Disclosure.html
CVE ID: CVE-2019-19986 State: PUBLISHED Published: 2020-02-26T15:18:05 Last Updated: 2024-08-05T02:32:10.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. An attacker without authentication is able to execute arbitrary SQL SELECT statements by injecting the HTTP (POST or GET) parameter persoid into /tools/VamPersonPhoto.php. The SQL Injection type is Error-based (this means that relies on error messages thrown by the database server to obtain information about the structure of the database). Additional Analyst Notes: - CVE Program Container: References: - https://www.telecomitalia.com/tit/it/inn
the database). Additional Analyst Notes: - CVE Program Container: References: - https://www.telecomitalia.com/tit/it/innovazione/cybersecurity/red-team.html - https://www.seling.it/ - https://www.seling.it/product/vam/
CVE ID: CVE-2019-19987 State: PUBLISHED Published: 2020-02-26T15:16:47 Last Updated: 2024-08-05T02:32:10.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. It allows Cross-Site Request Forgery (CSRF) on any HTML form. An attacker can exploit the vulnerability to abuse functionalities such as change password, add user, add privilege, and so on. Additional Analyst Notes: - CVE Program Container: References: - https://www.telecomitalia.com/tit/it/innovazione/cybersecurity/red-team.html - https://www.seling.it/ - https://www.seling.it/product/vam/
CVE ID: CVE-2019-19988 State: PUBLISHED Published: 2020-02-26T15:15:14 Last Updated: 2024-08-05T02:32:10.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is able to create and write XML files on the filesystem via /common/vam_editXml.php in the web interface. The vulnerable PHP page checks none of these: the parameter that identifies the file name to be created, the destination path, or the extension. Thus, an attacker can manipulate the file name to create any type of file within the filesystem with arbitrary content. Additional Analyst Notes: - CVE Program Contai
to create any type of file within the filesystem with arbitrary content. Additional Analyst Notes: - CVE Program Container: References: - https://www.telecomitalia.com/tit/it/innovazione/cybersecurity/red-team.html - https://www.seling.it/ - https://www.seling.it/product/vam/
CVE ID: CVE-2019-19989 State: PUBLISHED Published: 2020-02-26T15:13:42 Last Updated: 2024-08-05T02:32:10.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several PHP pages, and other type of files, are reachable by any user without checking for user identity and authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.telecomitalia.com/tit/it/innovazione/cybersecurity/red-team.html - https://www.seling.it/ - https://www.seling.it/product/vam/
CVE ID: CVE-2019-19990 State: PUBLISHED Published: 2020-02-26T15:12:10 Last Updated: 2024-08-05T02:32:10.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Multiple Stored Cross-site scripting (XSS) vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via the web pages /monitor/s_headmodel.php and /vam/vam_user.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.telecomitalia.com/tit/it/innovazione/cybersecurity/red-team.html - https://www.seling.it/ - https://www.seling.it/product/vam/