Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-11638 State: PUBLISHED Published: 2019-05-01T17:03:56 Last Updated: 2024-08-04T23:03:31.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function rec_field_name_equal_p at rec-field-name.c in librec.a, leading to a crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/recutils/bug-report-recutils/rec2csv - https://github.com/TeamSeri0us/pocs/blob/master/recutils/bug-report-recutils
CVE ID: CVE-2019-11639 State: PUBLISHED Published: 2019-05-01T17:04:04 Last Updated: 2024-08-04T23:03:31.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU recutils 1.8. There is a stack-based buffer overflow in the function rec_type_check_enum at rec-types.c in librec.a. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/recutils/bug-report-recutils - https://github.com/TeamSeri0us/pocs/tree/master/recutils/bug-report-recutils/recfix
CVE ID: CVE-2019-11640 State: PUBLISHED Published: 2019-05-01T17:04:15 Last Updated: 2024-08-04T23:03:31.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU recutils 1.8. There is a heap-based buffer overflow in the function rec_fex_parse_str_simple at rec-fex.c in librec.a. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/recutils/bug-report-recutils/recfix - https://github.com/TeamSeri0us/pocs/blob/master/recutils/bug-report-recutils/
CVE ID: CVE-2019-11641 State: PUBLISHED Published: 2019-05-01T17:58:19 Last Updated: 2024-08-04T23:03:31.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Anomali Agave (formerly Drupot) through 1.0.0 fails to avoid fingerprinting by including predictable data and minimal variation in size within HTML templates, giving attackers the ability to detect and avoid this system. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/threatstream/agave/issues/1
CVE ID: CVE-2019-11642 State: PUBLISHED Published: 2019-05-08T15:31:05 Last Updated: 2024-08-04T23:03:31.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: A log poisoning vulnerability has been discovered in the OneShield Policy (Dragon Core) framework before 5.1.10. Authenticated remote adversaries can poison log files by entering malicious payloads in either headers or form elements. These payloads are then executed via a client side debugging console. This is predicated on the debugging console and Java Bean being made available to the deployed application. Additional Analyst Notes: - CVE Program Container: References: - https://oneshield.com/business-solutions/oneshield-pc-
Additional Analyst Notes: - CVE Program Container: References: - https://oneshield.com/business-solutions/oneshield-pc-solutions/oneshield-policy/ - http://seclists.org/fulldisclosure/2019/May/1
CVE ID: CVE-2019-11643 State: PUBLISHED Published: 2019-05-08T15:26:13 Last Updated: 2024-08-04T23:03:31.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Persistent XSS has been found in the OneShield Policy (Dragon Core) framework before 5.1.10. Remote adversaries can inject malicious JavaScript into textboxes decorated with type string, which is subsequently stored to the applicable data store. This can be exploited remotely by both authenticated and unauthenticated users. Additional Analyst Notes: - CVE Program Container: References: - https://oneshield.com/business-solutions/oneshield-pc-solutions/oneshield-policy/ - http://seclists.org/fulldisclosure/2019/May/2
CVE ID: CVE-2019-11644 State: PUBLISHED Published: 2019-05-17T20:05:35 Last Updated: 2024-08-04T23:03:31.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the F-Secure installer in F-Secure SAFE for Windows before 17.6, F-Secure Internet Security before 17.6, F-Secure Anti-Virus before 17.6, F-Secure Client Security Standard and Premium before 14.10, F-Secure PSB Workstation Security before 12.01, and F-Secure Computer Protection Standard and Premium before 19.3, a local user can escalate their privileges through a DLL hijacking attack against the installer. The installer writes the file rm.exe to C:\Windows\Temp and then executes it. The rm.exe process then attempts to load
. The installer writes the file rm.exe to C:\Windows\Temp and then executes it. The rm.exe process then attempts to load several DLLs from its current directory. Non-admin users are able to write to this folder, so an attacker can create a malicious C:\Windows\Temp\OLEACC.dll file. When an admin runs the installer, rm.exe will execute the attacker's DLL in an elevated security context. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/web/labs_global/fsc-2019-2
CVE ID: CVE-2019-11646 State: PUBLISHED Published: 2019-06-03T16:47:36 Last Updated: 2024-08-04T23:03:31.566Z Vendors: n/a Products: Micro Focus Service Manager Problem Types: Remote unauthorized command execution and unauthorized disclosure of information Description: Remote unauthorized command execution and unauthorized disclosure of information in Micro Focus Service Manager, versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61. This vulnerability could allow Remote unauthorized command execution and unauthorized disclosure of information. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM034529
n. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03452977
CVE ID: CVE-2019-11647 State: PUBLISHED Published: 2019-06-24T15:27:01 Last Updated: 2024-08-04T23:03:31.141Z Vendors: Micro Focus Products: Micro Focus NetIQ Self Service Password Reset. Problem Types: Cross-Site Scripting Description: A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to enable an XSS attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/documentation/self-service-password-reset-44/release-notes-sspr-44-p2/data/release-notes-sspr-44-p2.html
CVE ID: CVE-2019-11648 State: PUBLISHED Published: 2019-06-24T15:40:28 Last Updated: 2024-08-04T23:03:31.572Z Vendors: Micro Focus Products: Micro Focus NetIQ Self Service Password Reset. Problem Types: Information leakage Description: An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. The vulnerability could be exploited to expose sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/documentation/self-service-password-reset-44/release-notes-sspr-44-p2/data/release-notes-sspr-44-p2.html
CVE ID: CVE-2019-11649 State: PUBLISHED Published: 2019-06-19T16:06:50.731771Z Last Updated: 2024-09-16T23:26:48.441Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Micro Focus Products: Micro Focus Fortify Software Security Center Server Problem Types: Remote code execution Description: Cross-Site Scripting vulnerability in Micro Focus Fortify Software Security Center Server, versions 17.2, 18.1, 18.2, has been identified in Micro Focus Software Security Center. The vulnerability could be exploited to execute JavaScript code in user’s browser. The vulnerability could be exploited to execute JavaScript code in user’s browser. Additional Analyst Notes: - CVE
wser. The vulnerability could be exploited to execute JavaScript code in user’s browser. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03461174
CVE ID: CVE-2019-11650 State: PUBLISHED Published: 2019-07-10T18:02:45 Last Updated: 2024-08-04T23:03:31.461Z Vendors: Micro Focus Products: NetIQ Advanced Authentication Framework Problem Types: MITM Description: A potential Man in the Middle attack (MITM) was found in NetIQ Advanced Authentication Framework versions prior to 6.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/documentation/advanced-authentication-60/advanced-authentication-releasenotes-60/data/advanced-authentication-releasenotes-60.html#t49vfiy1udvg
CVE ID: CVE-2019-11651 State: PUBLISHED Published: 2019-10-02T20:11:26 Last Updated: 2024-08-04T23:03:31.140Z Vendors: n/a Products: Micro Focus Enterprise Developer and Enterprise Server Problem Types: Reflected XSS Description: Reflected XSS on Micro Focus Enterprise Developer and Enterprise Server, all versions prior to version 3.0 Patch Update 20, version 4.0 Patch Update 12, and version 5.0 Patch Update 2. The vulnerability could be exploited to redirect a user to a malicious page or forge certain types of web requests. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03532232
CVE ID: CVE-2019-11652 State: PUBLISHED Published: 2019-08-14T15:47:44 Last Updated: 2024-08-04T23:03:31.549Z Vendors: Micro Focus Products: Self Service Password Reset (SSPR) Problem Types: Authorization Bypass Description: A potential authorization bypass issue was found in Micro Focus Self Service Password Reset (SSPR) versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to Micro Focus Self Service Password Reset (SSPR) SSPR versions 4.4.0.3, 4.3.0.6, or 4.2.0.6 as appropriate. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/documentation/self-service-password-reset-44/release-notes-sspr-44-p3/data/release-notes-sspr-44-p3.html - https://www.net
cumentation/self-service-password-reset-44/release-notes-sspr-44-p3/data/release-notes-sspr-44-p3.html - https://www.netiq.com/documentation/self-service-password-reset-43/release-notes-sspr-43-p3/data/release-notes-sspr-43-p3.html - https://www.netiq.com/documentation/self-service-password-reset-42/release-notes-sspr42-p6/data/release-notes-sspr42-p6.html
CVE ID: CVE-2019-11653 State: PUBLISHED Published: 2019-08-07T16:28:52 Last Updated: 2024-08-04T23:03:31.569Z Vendors: Micro Focus Products: Content Manager Problem Types: Remote Access Control Bypass Description: Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during another user’s CheckIn request. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03489552 - https://ashsecurity.wordpress.com/2019/07/09/cm-cve/
CVE ID: CVE-2019-11654 State: PUBLISHED Published: 2019-08-23T17:20:11 Last Updated: 2024-08-04T23:03:31.538Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Micro Focus Products: Verastream Host Integrator Problem Types: A path traversal vulnerability has been identified in Verastream Host Integrator (VHI). The vulnerability allows remote unauthenticated attackers to read arbitrary files. Description: Path traversal vulnerability in Micro Focus Verastream Host Integrator (VHI), versions 7.7 SP2 and earlier, The vulnerability allows remote unauthenticated attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https:
authenticated attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://support.microfocus.com/kb/doc.php?id=7024061
CVE ID: CVE-2019-11655 State: PUBLISHED Published: 2019-10-04T19:10:15 Last Updated: 2024-08-04T23:03:31.529Z Vendors: n/a Products: ArcSight Logger. Problem Types: Unrestricted file upload. Description: Unrestricted file upload vulnerability in Micro Focus ArcSight Logger, version 6.7.0 and later. This vulnerability could allow Unrestricted Upload of File with Dangerous type. Additional Analyst Notes: - CVE Program Container: References: - https://community.microfocus.com/t5/ArcSight-Announcements/ArcSight-Logger-Fix-for-Security-Vulnerability/td-p/2699569
CVE ID: CVE-2019-11656 State: PUBLISHED Published: 2019-10-04T19:16:52 Last Updated: 2024-08-04T23:03:31.613Z Vendors: n/a Products: ArcSight Logger. Problem Types: Stored XSS. Description: Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. This vulnerability could allow Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'). Additional Analyst Notes: - CVE Program Container: References: - https://community.microfocus.com/t5/ArcSight-Announcements/ArcSight-Logger-Fix-for-Security-Vulnerability/td-p/2699569
CVE ID: CVE-2019-11657 State: PUBLISHED Published: 2019-12-17T22:05:07 Last Updated: 2024-08-04T23:03:31.510Z Vendors: Micro Focus International Products: ArcSight Logger Problem Types: Cross-Site Request Forgery Description: Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack. Additional Analyst Notes: - CVE Program Container: References: - https://community.microfocus.com/t5/Logger/Logger-Release-Notes-7-0/ta-p/2750305?attachment-id=76910
CVE ID: CVE-2019-11658 State: PUBLISHED Published: 2019-08-29T22:23:51 Last Updated: 2024-08-04T23:03:31.556Z Vendors: Micro Focus Products: Content Manager Problem Types: Information exposure Description: Information exposure in Micro Focus Content Manager, versions 9.1, 9.2 and 9.3. This vulnerability when configured to use an Oracle database, allows valid system users to gain access to a limited subset of records they would not normally be able to access when the system is in an undisclosed abnormal state. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03496282
CVE ID: CVE-2019-11660 State: PUBLISHED Published: 2019-09-13T17:21:26 Last Updated: 2024-08-04T23:03:31.537Z Vendors: n/a Products: Data Protector Problem Types: Privileges manipulation. Description: Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40. This vulnerability could be exploited by a low-privileged user to execute a custom binary with higher privileges. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03525630 - http://packetstormsecurity.com/files/155076/Micro-Focus-HPE-Data-Protector-SUID-Privilege-Escalation.html
CVE ID: CVE-2019-11661 State: PUBLISHED Published: 2019-09-18T21:50:05 Last Updated: 2024-08-04T23:03:31.474Z Vendors: Micro Focus Products: Service Manager Problem Types: Allow changes to some table by non-SysAdmin Description: Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. This vulnerability could be exploited to allow unauthorized access and modification of data. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03518316
CVE ID: CVE-2019-11662 State: PUBLISHED Published: 2019-09-18T21:55:49 Last Updated: 2024-08-04T23:03:32.184Z Vendors: Micro Focus Products: Service Manager Problem Types: Class and method names in error message. Description: Class and method names in error message in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. This vulnerability could be exploited in some special cases to allow information exposure through an error message. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03518316
CVE ID: CVE-2019-11663 State: PUBLISHED Published: 2019-09-18T21:29:59 Last Updated: 2024-08-04T23:03:31.510Z Vendors: Micro Focus Products: Service Manager Problem Types: Clear text credentials Description: Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow sensitive data exposure. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03518316
CVE ID: CVE-2019-11664 State: PUBLISHED Published: 2019-09-18T21:35:55 Last Updated: 2024-08-04T23:03:32.420Z Vendors: Micro Focus Products: Service Manager Problem Types: Clear text password in browser Description: Clear text password in browser in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow sensitive data exposure. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03518316
CVE ID: CVE-2019-11665 State: PUBLISHED Published: 2019-09-17T19:01:27 Last Updated: 2024-08-04T23:03:32.335Z Vendors: Micro Focus Products: Service Manager Problem Types: Data exposure Description: Data exposure in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow sensitive data exposure. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03518316
CVE ID: CVE-2019-11666 State: PUBLISHED Published: 2019-09-17T18:52:03 Last Updated: 2024-08-04T23:03:31.614Z Vendors: Micro Focus Products: Service Manager Problem Types: Insecure deserialization of untrusted data. Description: Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow insecure deserialization of untrusted data. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03518316
CVE ID: CVE-2019-11667 State: PUBLISHED Published: 2019-09-17T17:13:56 Last Updated: 2024-08-04T23:03:31.542Z Vendors: Micro Focus Products: Service Manager Problem Types: Unauthorized access to contact information Description: Unauthorized access to contact information in Micro Focus Service Manager, versions 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow unauthorized access to private data. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03517346
CVE ID: CVE-2019-11668 State: PUBLISHED Published: 2019-09-10T20:25:45 Last Updated: 2024-08-04T23:03:31.530Z Vendors: n/a Products: Service Manager, Service Manager – Chat Service. Server Manager – Chat Service. Problem Types: HTTP cookie Description: HTTP cookie in Micro Focus Service manager, Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. And Micro Focus Service Manager Chat Server, versions 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. And Micro Focus Service Manager Chat Service 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03517335
CVE ID: CVE-2019-11669 State: PUBLISHED Published: 2019-09-10T20:32:26 Last Updated: 2024-08-04T23:03:32.385Z Vendors: Micro Focus Products: Service Manager Problem Types: Modifiable read only check box in FF Description: Modifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61, 9.62. This vulnerability could be exploited to allow unauthorized modification of data. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03517334
CVE ID: CVE-2019-11674 State: PUBLISHED Published: 2019-10-22T14:42:32 Last Updated: 2024-08-04T23:03:31.534Z Vendors: n/a Products: Self Service Password Reset (SSPR) versions prior to 4.4.0.4 Problem Types: Invalid certificate validation. Description: Man-in-the-middle vulnerability in Micro Focus Self Service Password Reset, affecting all versions prior to 4.4.0.4. The vulnerability could exploit invalid certificate validation and may result in a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/documentation/self-service-password-reset-44/release-notes-sspr-44-p4/data/release-notes-sspr-44-p4.html
CVE ID: CVE-2019-11675 State: PUBLISHED Published: 2019-05-02T05:43:16 Last Updated: 2024-08-04T23:03:32.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: The groonga-httpd package 6.1.5-1 for Debian sets the /var/log/groonga ownership to the groonga account, which might let local users obtain root access because of unsafe interaction with logrotate. For example, an attacker can exploit a race condition to insert a symlink from /var/log/groonga/httpd to /etc/bash_completion.d. NOTE: this is an issue in the Debian packaging of the Groonga HTTP server. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/928304
CVE ID: CVE-2019-11676 State: PUBLISHED Published: 2019-05-02T13:05:49 Last Updated: 2024-08-04T23:03:32.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user defined DNS name in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to stored XSS attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/firewall/release-notes.html
CVE ID: CVE-2019-11677 State: PUBLISHED Published: 2019-05-02T13:06:10 Last Updated: 2024-08-04T23:03:32.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to XML External Entity (XXE) Injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/firewall/release-notes.html
CVE ID: CVE-2019-11678 State: PUBLISHED Published: 2019-05-02T13:06:22 Last Updated: 2024-08-04T23:03:32.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "default reports" feature in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123218 is vulnerable to SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/firewall/release-notes.html
CVE ID: CVE-2019-11680 State: PUBLISHED Published: 2019-05-13T17:36:53 Last Updated: 2024-08-04T23:03:32.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: KonaKart 8.9.0.0 is vulnerable to Remote Code Execution by uploading a web shell as a product category image. Additional Analyst Notes: - CVE Program Container: References: - https://www.konakart.com/downloads/patch-releases/
CVE ID: CVE-2019-11682 State: PUBLISHED Published: 2019-05-02T15:03:03 Last Updated: 2024-08-04T23:03:32.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in the SMTP response service in MailCarrier 2.51 allows the attacker to execute arbitrary code remotely via a long HELP command, a related issue to CVE-2019-11395. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/152694/MailCarrier-2.51-HELP-Remote-Buffer-Overflow.html
CVE ID: CVE-2019-11683 State: PUBLISHED Published: 2019-05-02T16:56:38 Last Updated: 2024-08-04T23:03:32.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: udp_gro_receive_segment in net/ipv4/udp_offload.c in the Linux kernel 5.x before 5.0.13 allows remote attackers to cause a denial of service (slab-out-of-bounds memory corruption) or possibly have unspecified other impact via UDP packets with a 0 payload, because of mishandling of padded packets, aka the "GRO packet of death" issue. Additional Analyst Notes: - CVE Program Container: References: - https://www.spinics.net/lists/netdev/msg568315.html - https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=4dd2