Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
bmodule/advisory.md - https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.24.1.txt - https://public-inbox.org/git/xmqqr21cqcn9.fsf%40gitster-ct.c.googlers.com/ - https://www.debian.org/security/2019/dsa-4581 - http://www.openwall.com/lists/oss-security/2019/12/13/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HCYSSCA5ZTEP46SB4XRPSQGFV2L3NKMZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6UGTEOXWIYSM5KDZL74QD2GK6YQNQCP/ - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html - https://security.gentoo.org/glsa/202003-30 - http://lists.opensuse.
g/opensuse-security-announce/2020-01/msg00056.html - https://security.gentoo.org/glsa/202003-30 - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html
CVE ID: CVE-2019-19605 State: PUBLISHED Published: 2020-03-30T21:33:54 Last Updated: 2024-08-05T02:25:11.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: X-Plane before 11.41 allows Arbitrary Memory Write via crafted network packets, which could cause a denial of service or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://blog.0xlabs.com/2020/03/x-plane-1141-remote-command-execution.html
CVE ID: CVE-2019-19606 State: PUBLISHED Published: 2020-03-30T21:31:32 Last Updated: 2024-08-05T02:25:11.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: X-Plane before 11.41 has multiple improper path validations that could allow reading and writing files from/to arbitrary paths (or a leak of OS credentials to a remote system) via crafted network packets. This could be used to execute arbitrary commands on the system. Additional Analyst Notes: - CVE Program Container: References: - https://blog.0xlabs.com/2020/03/x-plane-1141-remote-command-execution.html
CVE ID: CVE-2019-19607 State: PUBLISHED Published: 2020-03-02T17:55:30 Last Updated: 2024-08-05T02:25:11.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the session parameter. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19
l.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0007
CVE ID: CVE-2019-19608 State: PUBLISHED Published: 2020-03-02T17:56:07 Last Updated: 2024-08-05T02:25:11.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the registeredList.cgi page. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-ad
/www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0007
CVE ID: CVE-2019-19609 State: PUBLISHED Published: 2019-12-05T19:44:28 Last Updated: 2024-08-05T02:25:11.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin components of the Admin panel, because it does not sanitize the plugin name, and attackers can inject arbitrary shell commands to be executed by the execa function. Additional Analyst Notes: - CVE Program Container: References: - https://bittherapy.net/post/strapi-framework-remote-code-execution/ - https://github.com/strapi/strapi/pull/4636 - http://packetstormsecurity.com/files/163950/Strapi-CMS-3.0.0-beta.1
tion/ - https://github.com/strapi/strapi/pull/4636 - http://packetstormsecurity.com/files/163950/Strapi-CMS-3.0.0-beta.17.4-Remote-Code-Execution.html - http://packetstormsecurity.com/files/163940/Strapi-3.0.0-beta.17.7-Remote-Code-Execution.html
CVE ID: CVE-2019-19610 State: PUBLISHED Published: 2020-03-16T20:16:26 Last Updated: 2024-08-05T02:25:11.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Halvotec RaQuest 10.23.10801.0. It allows session fixation. Fixed in Release 24.2020.20608.0. Additional Analyst Notes: - CVE Program Container: References: - https://excellium-services.com/cert-xlm-advisory/ - https://halvotec.de/produkte/raquest/ - https://excellium-services.com/cert-xlm-advisory/cve-2019-19610/
CVE ID: CVE-2019-19611 State: PUBLISHED Published: 2020-03-13T18:54:28 Last Updated: 2024-08-05T02:25:11.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Halvotec RaQuest 10.23.10801.0. One of the exposed web services allows an anonymous user to access the list of connected users as well as the session cookie for each user. Fixed in Release 10.24.11206.1 Additional Analyst Notes: - CVE Program Container: References: - https://excellium-services.com/cert-xlm-advisory/cve-2019-19611/
CVE ID: CVE-2019-19612 State: PUBLISHED Published: 2020-03-16T20:18:52 Last Updated: 2024-08-05T02:25:11.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Halvotec RaQuest 10.23.10801.0. Several features of the application allow stored Cross-site Scripting (XSS). Fixed in Release 24.2020.20608.0. Additional Analyst Notes: - CVE Program Container: References: - https://excellium-services.com/cert-xlm-advisory/ - https://halvotec.de/produkte/raquest/ - https://excellium-services.com/cert-xlm-advisory/cve-2019-19612/
CVE ID: CVE-2019-19613 State: PUBLISHED Published: 2020-03-16T20:21:39 Last Updated: 2024-08-05T02:25:11.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Halvotec RaQuest 10.23.10801.0. The login page of the admin application is vulnerable to an Open Redirect attack allowing an attacker to redirect a user to a malicious site after authentication. The attacker needs to be on the same network to modify the victim's request on the wire. Fixed in Release 24.2020.20608.0 Additional Analyst Notes: - CVE Program Container: References: - https://excellium-services.com/cert-xlm-advisory/ - https://halvotec.de/produkte/raquest/ - https://excellium-services.com
tps://excellium-services.com/cert-xlm-advisory/ - https://halvotec.de/produkte/raquest/ - https://excellium-services.com/cert-xlm-advisory/cve-2019-19613/
CVE ID: CVE-2019-19614 State: PUBLISHED Published: 2020-03-09T18:51:19 Last Updated: 2024-08-05T02:25:12.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Halvotec RAQuest 10.23.10801.0. The login page is vulnerable to wildcard injection, allowing an attacker to enumerate the list of users sharing an identical password. Fixed in Release 10.24.11206.1. Additional Analyst Notes: - CVE Program Container: References: - https://excellium-services.com/cert-xlm-advisory/ - https://excellium-services.com/cert-xlm-advisory/cve-2019-19614/
CVE ID: CVE-2019-19615 State: PUBLISHED Published: 2020-03-16T20:27:42 Last Updated: 2024-08-05T02:25:11.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple XSS vulnerabilities exist in the Backup & Restore module \ v14.0.10.2 through v14.0.10.7 for FreePBX, as shown at /admin/config.php?display=backup on the FreePBX Administrator web site. An attacker can modify the id parameter of the backup configuration screen and embed malicious XSS code via a link. When another user (such as an admin) clicks the link, the XSS payload will render and execute in the context of the victim user's account. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.fre
context of the victim user's account. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.freepbx.org/display/FOP/List+of+Securities+Vulnerabilities - https://wiki.freepbx.org/pages/viewpage.action?pageId=175177911
CVE ID: CVE-2019-19616 State: PUBLISHED Published: 2019-12-06T02:06:33 Last Updated: 2024-08-05T02:25:12.212Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An Insecure Direct Object Reference (IDOR) vulnerability in the Xtivia Web Time and Expense (WebTE) interface used for Microsoft Dynamics NAV before 2017 allows an attacker to download arbitrary files by specifying arbitrary values for the recId and filename parameters of the /Home/GetAttachment function. Additional Analyst Notes: - CVE Program Container: References: - http://www.nolanbkennedy.com/post/insecure-direct-object-reference-idor-in-xtivia-web-
Program Container: References: - http://www.nolanbkennedy.com/post/insecure-direct-object-reference-idor-in-xtivia-web-time-and-expense-webte
CVE ID: CVE-2019-19617 State: PUBLISHED Published: 2019-12-06T02:45:14 Last Updated: 2024-08-05T02:25:12.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/news/2019/11/22/phpmyadmin-492-released/ - https://github.com/phpmyadmin/phpmyadmin/compare/RELEASE_4_9_1...RELEASE_4_9_2 - https://github.com/phpmyadmin/phpmyadmin/commit/1119de642b136d20e810bb20f545069a01dd7cc9 - https://lists.debian.org/debian-lts-announce/2019/12/msg00006.html - htt
mmit/1119de642b136d20e810bb20f545069a01dd7cc9 - https://lists.debian.org/debian-lts-announce/2019/12/msg00006.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00024.html
CVE ID: CVE-2019-19619 State: PUBLISHED Published: 2019-12-06T03:28:46 Last Updated: 2024-08-05T02:25:12.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: domain/section/markdown/markdown.go in Documize before 3.5.1 mishandles untrusted Markdown content. This was addressed by adding the bluemonday HTML sanitizer to defend against XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/documize/community/releases/tag/v3.5.1 - https://github.com/documize/community/compare/v3.5.0...v3.5.1 - https://github.com/documize/community/commit/a4384210d4d0d6b18e6fdb7e155de96d4a1cf9f3
CVE ID: CVE-2019-19620 State: PUBLISHED Published: 2019-12-06T15:59:14 Last Updated: 2024-08-05T02:25:12.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SecureWorks Red Cloak Windows Agent before 2.0.7.9, a local user can bypass the generation of telemetry alerts by removing NT AUTHORITY\SYSTEM permissions from a file. This is limited in scope to the collection of process-execution telemetry, for executions against specific files where the SYSTEM user was denied access to the source file. Additional Analyst Notes: - CVE Program Container: References: - https://www.secureworks.com/resources/ds-aetd-red-cloak-data-sheet - https://medium.com/%40CowbellSteve/secureworks-red-cl
tps://www.secureworks.com/resources/ds-aetd-red-cloak-data-sheet - https://medium.com/%40CowbellSteve/secureworks-red-cloak-local-bypass-bfaed2be407e
CVE ID: CVE-2019-19624 State: PUBLISHED Published: 2019-12-06T14:26:56 Last Updated: 2024-08-05T02:25:12.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsest_scale is assumed to be greater than or equal to finest_scale within the calc()/ocl_calc() functions in dis_flow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of the heap-allocated arrays Ux and Uy. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/opencv/opencv/issues/14554 - https://github.com/opencv/opencv/commit/d1615ba11a93062b1429fce9f0f638d1572d3
://github.com/opencv/opencv/issues/14554 - https://github.com/opencv/opencv/commit/d1615ba11a93062b1429fce9f0f638d1572d3418
CVE ID: CVE-2019-19625 State: PUBLISHED Published: 2019-12-06T15:09:54 Last Updated: 2024-08-05T02:25:11.906Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: SROS 2 0.8.1 (which provides the tools that generate and distribute keys for Robot Operating System 2 and uses the underlying security plugins of DDS from ROS 2) leaks node information due to a leaky default configuration as indicated in the policy/defaults/dds/governance.xml document. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aliasrobotics/RVD/issues/922 - https://github.com/ros2/sros2/pull/171
CVE ID: CVE-2019-19627 State: PUBLISHED Published: 2019-12-06T15:09:34 Last Updated: 2024-08-05T02:25:11.557Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: SROS 2 0.8.1 (after CVE-2019-19625 is mitigated) leaks ROS 2 node-related information regardless of the rtps_protection_kind configuration. (SROS2 provides the tools to generate and distribute keys for Robot Operating System 2 and uses the underlying security plugins of DDS from ROS 2.) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aliasrobotics/RVD/issues/922 - https://github.com/ros2/sros2/issues/172 - https://asciin
eferences: - https://github.com/aliasrobotics/RVD/issues/922 - https://github.com/ros2/sros2/issues/172 - https://asciinema.org/a/yuGkBlaPC33wqL4qABRlgxBkd - https://ros-swg.github.io/ROSCon19_Security_Workshop/ - https://github.com/ros-swg/turtlebot3_demo
CVE ID: CVE-2019-19628 State: PUBLISHED Published: 2020-01-05T21:51:51 Last Updated: 2024-08-05T02:25:12.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GitLab EE 11.3 through 12.5.3, 12.4.5, and 12.3.8, insufficient parameter sanitization for the Maven package registry could lead to privilege escalation and remote code execution vulnerabilities under certain conditions. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/blog/2019/12/10/critical-security-release-gitlab-12-5-4-released/
CVE ID: CVE-2019-19629 State: PUBLISHED Published: 2020-01-05T21:54:30 Last Updated: 2024-08-05T02:25:12.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private code would be disclosed via the Group Search API provided by the Elasticsearch integration. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/blog/2019/12/10/critical-security-release-gitlab-12-5-4-released/
CVE ID: CVE-2019-19630 State: PUBLISHED Published: 2019-12-08T01:57:28 Last Updated: 2024-08-05T02:25:12.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when called from render_contents in ps-pdf.cxx) via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/michaelrsweet/htmldoc/issues/370 - https://lists.debian.org/debian-lts-announce/2019/12/msg00008.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FEUT3LG6DWTICKXYAN4SWOQWWCGHPLDJ/ - https://lists.fedoraproject.org/archives
-announce%40lists.fedoraproject.org/message/FEUT3LG6DWTICKXYAN4SWOQWWCGHPLDJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MZLVUBON5AYWYTFTJ4HBSHGTQTY7KBN/ - https://lists.debian.org/debian-lts-announce/2021/07/msg00000.html
CVE ID: CVE-2019-19631 State: PUBLISHED Published: 2020-01-24T15:15:39 Last Updated: 2024-08-05T02:25:12.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Big Switch Big Monitoring Fabric 6.2 through 6.2.4, 6.3 through 6.3.9, 7.0 through 7.0.3, and 7.1 through 7.1.3; Big Cloud Fabric 4.5 through 4.5.5, 4.7 through 4.7.7, 5.0 through 5.0.1, and 5.1 through 5.1.4; and Multi-Cloud Director through 1.1.0. A read-only user can access sensitive information via an API endpoint that reveals session cookies of authenticated administrators, leading to privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://know.bishopfox.c
ading to privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://know.bishopfox.com/advisories - https://know.bishopfox.com/advisories/big-monitoring-fabric
CVE ID: CVE-2019-19632 State: PUBLISHED Published: 2020-01-24T14:58:06 Last Updated: 2024-08-05T02:25:12.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Big Switch Big Monitoring Fabric 6.2 through 6.2.4, 6.3 through 6.3.9, 7.0 through 7.0.3, and 7.1 through 7.1.3; Big Cloud Fabric 4.5 through 4.5.5, 4.7 through 4.7.7, 5.0 through 5.0.1, and 5.1 through 5.1.4; and Multi-Cloud Director through 1.1.0. An unauthenticated attacker may inject stored arbitrary JavaScript (XSS), and execute it in the content of authenticated administrators. Additional Analyst Notes: - CVE Program Container: References: - https://know.bishopfox.com/advisories - https://know
s. Additional Analyst Notes: - CVE Program Container: References: - https://know.bishopfox.com/advisories - https://know.bishopfox.com/advisories/big-monitoring-fabric
CVE ID: CVE-2019-19634 State: PUBLISHED Published: 2019-12-17T17:11:29 Last Updated: 2024-08-05T02:25:12.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/verot/class.upload.php/blob/2.0.4/src/class.upload.php#L3068 - https://medium.com/%40jra8908/cve-2019-19634-arbitrary-file-upload-in-class-upload-php-ccaf9e13875e - https://github.com/jra89/CVE-2019-19634
CVE ID: CVE-2019-19635 State: PUBLISHED Published: 2019-12-08T03:00:23 Last Updated: 2024-08-05T02:25:11.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libsixel 1.8.2. There is a heap-based buffer overflow in the function sixel_decode_raw_impl at fromsixel.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/103
CVE ID: CVE-2019-19636 State: PUBLISHED Published: 2019-12-08T03:00:53 Last Updated: 2024-08-05T02:25:12.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libsixel 1.8.2. There is an integer overflow in the function sixel_encode_body at tosixel.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/104
CVE ID: CVE-2019-19637 State: PUBLISHED Published: 2019-12-08T03:00:44 Last Updated: 2024-08-05T02:25:11.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libsixel 1.8.2. There is an integer overflow in the function sixel_decode_raw_impl at fromsixel.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/105
CVE ID: CVE-2019-19638 State: PUBLISHED Published: 2019-12-08T03:00:34 Last Updated: 2024-08-05T02:25:12.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libsixel 1.8.2. There is a heap-based buffer overflow in the function load_pnm at frompnm.c, due to an integer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/102
CVE ID: CVE-2019-19642 State: PUBLISHED Published: 2019-12-08T03:39:13 Last Updated: 2024-08-05T02:25:11.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenticated attackers who can send HTTP requests to the IPMI IP address. This requires a POST to /rpc/setvmdrive.asp with shell metacharacters in ShareHost or ShareName. The attacker can achieve a persistent backdoor. Additional Analyst Notes: - CVE Program Container: References: - https://www.dark-sec.net/2019/12/supermicro-ipmi-exploitation.html
CVE ID: CVE-2019-19643 State: PUBLISHED Published: 2020-08-14T14:02:11 Last Updated: 2024-08-05T02:25:11.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: ise smart connect KNX Vaillant 1.2.839 contain a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://psytester.github.io/CVE-2019-19643/
CVE ID: CVE-2019-19645 State: PUBLISHED Published: 2019-12-09T15:15:57 Last Updated: 2024-08-05T02:25:12.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sqlite/sqlite/commit/38096961c7cd109110ac21d3ed7dad7e0cb0ae06 - https://security.netapp.com/advisory/ntap-20191223-0001/ - https://www.oracle.com/security-alerts/cpuapr2020.html - https://usn.ubuntu.com/4394-1/ - https://www.tenable.com/security/tns-2021-14 - https://cert-portal
ts/cpuapr2020.html - https://usn.ubuntu.com/4394-1/ - https://www.tenable.com/security/tns-2021-14 - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
CVE ID: CVE-2019-19646 State: PUBLISHED Published: 2019-12-09T18:36:18 Last Updated: 2024-08-05T02:25:12.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns. Additional Analyst Notes: - CVE Program Container: References: - https://www.sqlite.org/ - https://github.com/sqlite/sqlite/commit/ebd70eedd5d6e6a890a670b5ee874a5eae86b4dd - https://github.com/sqlite/sqlite/commit/926f796e8feec15f3836aa0a060ed906f8ae04d3 - https://security.netapp.com/advisory/ntap-20191223-0001/ - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.tenable.com/secu
com/advisory/ntap-20191223-0001/ - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.tenable.com/security/tns-2021-14 - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
CVE ID: CVE-2019-19647 State: PUBLISHED Published: 2019-12-09T00:36:32 Last Updated: 2024-08-05T02:25:12.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: radare2 through 4.0.0 lacks validation of the content variable in the function r_asm_pseudo_incbin at libr/asm/asm.c, ultimately leading to an arbitrary write. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radareorg/radare2/issues/15545 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQTOWEDFXDTGTD6D4N
45 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQTOWEDFXDTGTD6D4NHRB4FUURQSTTEN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WRQXCOVFWZIIMAZIAAFAVQGZOS7LGHXP/