Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
t may allow for cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. Affected releases are TIBCO Software Inc.'s TIBCO ActiveMatrix BPM: versions up to and including 4.2.0, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric: versions up to and including 4.2.0, TIBCO ActiveMatrix Policy Director: versions up to and including 1.1.0, TIBCO ActiveMatrix Service Bus: versions up to and including 3.3.0, TIBCO ActiveMatrix Service Grid: versions up to and including 3.3.1, TIBCO Silver Fabric Enabler for ActiveMatrix BPM: versions up to and including 1.4.1, and TIBCO Silver Fabric Enabler for ActiveMatrix Service Grid: versions up to and including 1.3.1. Additional Anal
.4.1, and TIBCO Silver Fabric Enabler for ActiveMatrix Service Grid: versions up to and including 1.3.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/04/tibco-security-advisory-april-24-2019-tibco-active-matrix-service-grid-2019-8991 - http://www.securityfocus.com/bid/108059
CVE ID: CVE-2019-8992 State: PUBLISHED Published: 2019-04-24T20:20:12.415598Z Last Updated: 2024-09-17T03:23:24.223Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy Director, TIBCO ActiveMatrix Service Bus, TIBCO ActiveMatrix Service Grid, TIBCO ActiveMatrix Service Grid Distribution for TIBCO Silver Fabric, TIBCO Silver Fabric Enabler for ActiveMatrix BPM, TIBCO Silver Fabric Enabler for ActiveMatrix Service Grid Problem Types: The impact of this vulnerability includes the theoretical possibility that a user without
x Service Grid Problem Types: The impact of this vulnerability includes the theoretical possibility that a user without privileges to upload code could execute arbitrary code on ActiveMatrix Service Grid nodes. Description: The administrative server component of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy Director, TIBCO ActiveMatrix Service Bus, TIBCO ActiveMatrix Service Grid, TIBCO ActiveMatrix Service Grid Distribution for TIBCO Silver Fabric, TIBCO Silver Fabric Enabler for ActiveMatrix BPM, and TIBCO Silver Fabric Enabler for ActiveMatrix Service Grid contains a vulnerability wherein a user without
atrix BPM, and TIBCO Silver Fabric Enabler for ActiveMatrix Service Grid contains a vulnerability wherein a user without privileges to upload distributed application archives ("Upload DAA" permission) can theoretically upload arbitrary code, and in some circumstances then execute that code on ActiveMatrix Service Grid nodes. Affected releases are TIBCO Software Inc.'s TIBCO ActiveMatrix BPM: versions up to and including 4.2.0, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric: versions up to and including 4.2.0, TIBCO ActiveMatrix Policy Director: versions up to and including 1.1.0, TIBCO ActiveMatrix Service Bus: versions up to and including 3.3.0, TIBCO ActiveMatrix Service Grid:
nd including 1.1.0, TIBCO ActiveMatrix Service Bus: versions up to and including 3.3.0, TIBCO ActiveMatrix Service Grid: versions up to and including 3.3.1, TIBCO ActiveMatrix Service Grid Distribution for TIBCO Silver Fabric: versions up to and including 3.3.0, TIBCO Silver Fabric Enabler for ActiveMatrix BPM: versions up to and including 1.4.1, and TIBCO Silver Fabric Enabler for ActiveMatrix Service Grid: versions up to and including 1.3.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/04/tibco-security-advisory-april-24-2019-tibco-active-matrix-service-grid-2019-8992 - http
o.com/support/advisories/2019/04/tibco-security-advisory-april-24-2019-tibco-active-matrix-service-grid-2019-8992 - http://www.securityfocus.com/bid/108058
CVE ID: CVE-2019-8993 State: PUBLISHED Published: 2019-04-24T20:20:12.457365Z Last Updated: 2024-09-16T19:46:19.863Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: TIBCO Software Inc. Products: TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy Director, TIBCO ActiveMatrix Service Bus, TIBCO ActiveMatrix Service Grid, TIBCO ActiveMatrix Service Grid Distribution for TIBCO Silver Fabric, TIBCO Silver Fabric Enabler for ActiveMatrix BPM, TIBCO Silver Fabric Enabler for ActiveMatrix Service Grid Problem Types: The impact of this vulnerability includes the theoretical possibility that credentials could b
rvice Grid Problem Types: The impact of this vulnerability includes the theoretical possibility that credentials could be disclosed. Description: The administrative web server component of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy Director, TIBCO ActiveMatrix Service Bus, TIBCO ActiveMatrix Service Grid, TIBCO ActiveMatrix Service Grid Distribution for TIBCO Silver Fabric, TIBCO Silver Fabric Enabler for ActiveMatrix BPM, and TIBCO Silver Fabric Enabler for ActiveMatrix Service Grid contains a vulnerability that could theoretically allow an unauthenticated user to download a file with credentials infor
ontains a vulnerability that could theoretically allow an unauthenticated user to download a file with credentials information. Affected releases are TIBCO Software Inc.'s TIBCO ActiveMatrix BPM: versions up to and including 4.2.0, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric: versions up to and including 4.2.0, TIBCO ActiveMatrix Policy Director: versions up to and including 1.1.0, TIBCO ActiveMatrix Service Bus: versions up to and including 3.3.0, TIBCO ActiveMatrix Service Grid: versions up to and including 3.3.1, TIBCO ActiveMatrix Service Grid Distribution for TIBCO Silver Fabric: versions up to and including 3.3.0, TIBCO Silver Fabric Enabler for ActiveMatrix BPM: versio
on for TIBCO Silver Fabric: versions up to and including 3.3.0, TIBCO Silver Fabric Enabler for ActiveMatrix BPM: versions up to and including 1.4.1, and TIBCO Silver Fabric Enabler for ActiveMatrix Service Grid: versions up to and including 1.3.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/04/tibco-security-advisory-april-24-2019-tibco-active-matrix-service-grid-2019-8993 - http://www.securityfocus.com/bid/108056
CVE ID: CVE-2019-8994 State: PUBLISHED Published: 2019-04-24T20:20:12.494298Z Last Updated: 2024-09-16T23:51:48.085Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: TIBCO Software Inc. Products: TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO Silver Fabric Enabler for ActiveMatrix BPM Problem Types: The impact of this vulnerability includes the theoretical possibility that an authenticated user could trick other users of the system into visiting malicious web sites. Description: The workspace client of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBC
t of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contains vulnerabilities where an authenticated user can change settings that can theoretically adversely impact other users. Affected releases are TIBCO Software Inc.'s TIBCO ActiveMatrix BPM: versions up to and including 4.2.0, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric: versions up to and including 4.2.0, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM: versions up to and including 1.4.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - ht
. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/04/tibco-security-advisory-april-24-2019-tibco-activematrix-bpm-2019-8994 - http://www.securityfocus.com/bid/108060
CVE ID: CVE-2019-8995 State: PUBLISHED Published: 2019-04-24T20:20:12.532722Z Last Updated: 2024-09-16T23:26:17.050Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: TIBCO Software Inc. Products: TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO Silver Fabric Enabler for ActiveMatrix BPM Problem Types: The impact of this vulnerability includes the theoretical possibility that a user could be tricked into visiting a malicious website. Description: The workspace client, openspace client, and app development client of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric
ment client of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contain a vulnerability wherein a malicious URL could trick a user into visiting a website of the attacker's choice. Affected releases are TIBCO Software Inc.'s TIBCO ActiveMatrix BPM: versions up to and including 4.2.0, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric: versions up to and including 4.2.0, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM: versions up to and including 1.4.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - h
1. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/04/tibco-security-advisory-april-24-2019-tibco-activematrix-bpm-2019-8995 - http://www.securityfocus.com/bid/108062
CVE ID: CVE-2019-8996 State: PUBLISHED Published: 2019-02-21T00:00:00 Last Updated: 2024-08-04T21:31:37.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Signiant Manager+Agents before 13.5, the implementation of the set command has a Buffer Overflow. Additional Analyst Notes: - CVE Program Container: References: - https://help.signiant.com/manager-agents/installation/release-notes/ - https://help.signiant.com/flight-deck/general/release-notes-13-5
CVE ID: CVE-2019-8997 State: PUBLISHED Published: 2019-03-21T17:12:15 Last Updated: 2024-08-04T21:31:37.513Z Vendors: n/a Products: BlackBerry AtHoc Problem Types: XML External Entity Injection (XXE) Description: An XML External Entity Injection (XXE) vulnerability in the Management System (console) of BlackBerry AtHoc versions earlier than 7.6 HF-567 could allow an attacker to potentially read arbitrary local files from the application server or make requests on the network by entering maliciously crafted XML in an existing field. Additional Analyst Notes: - CVE Program Container: References: - http://support.blackberry.com/kb/articleDetail?articleNumber=000047227
CVE ID: CVE-2019-8998 State: PUBLISHED Published: 2019-07-12T15:30:28 Last Updated: 2025-08-22T15:09:48.377Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: BlackBerry Products: QNX Software Development Platform (QNX SDP) Problem Types: Information disclosure leading to a potential local escalation of privilege, CWE-413 Description: An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier could allow an attacker to potentially gain unauthorized access to a chosen process address space. Additional Anal
rlier could allow an attacker to potentially gain unauthorized access to a chosen process address space. Additional Analyst Notes: - CVE Program Container: References: - http://support.blackberry.com/kb/articleDetail?articleNumber=000057178
CVE ID: CVE-2019-8999 State: PUBLISHED Published: 2019-04-18T16:51:41 Last Updated: 2024-08-04T21:31:37.523Z Vendors: n/a Products: BlackBerry UEM Problem Types: XML External Entity Description: An XML External Entity vulnerability in the UEM Core of BlackBerry UEM version(s) earlier than 12.10.1a could allow an attacker to potentially gain read access to files on any system reachable by the UEM service account. Additional Analyst Notes: - CVE Program Container: References: - http://support.blackberry.com/kb/articleDetail?articleNumber=000056241
CVE ID: CVE-2019-9002 State: PUBLISHED Published: 2019-02-22T06:00:00Z Last Updated: 2024-09-17T04:09:40.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Tiny Issue 1.3.1 and pixeline Bugs through 1.3.2c. install/config-setup.php allows remote attackers to execute arbitrary PHP code via the database_host parameter if the installer remains present in its original directory after installation is completed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikelbring/tinyissue/issues/237 - https://github.com/pixeline/bugs/commit/9d2d3fcdea22e94f7b497f6ed83791ab3a31ee41
CVE ID: CVE-2019-9003 State: PUBLISHED Published: 2019-02-22T15:00:00 Last Updated: 2024-08-04T21:31:37.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a "service ipmievd restart" loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107145 - https://github.com/torvalds/linux/commit/77f8269606bf95fcb232ee86f6da80886f1dfae8 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.20.5 - http://git.kernel.org/cgit/linux/kernel/git/
86f1dfae8 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.20.5 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=77f8269606bf95fcb232ee86f6da80886f1dfae8 - https://security.netapp.com/advisory/ntap-20190327-0002/ - https://usn.ubuntu.com/3930-1/ - https://usn.ubuntu.com/3930-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00037.html
CVE ID: CVE-2019-9004 State: PUBLISHED Published: 2019-02-22T15:00:00 Last Updated: 2024-08-04T21:31:37.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Eclipse Wakaama (formerly liblwm2m) 1.0, core/er-coap-13/er-coap-13.c in lwm2mserver in the LWM2M server mishandles invalid options, leading to a memory leak. Processing of a single crafted packet leads to leaking (wasting) 24 bytes of memory. This can lead to termination of the LWM2M server after exhausting all available memory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eclipse/wakaama/issues/425
CVE ID: CVE-2019-9005 State: PUBLISHED Published: 2019-04-18T18:00:02 Last Updated: 2024-08-04T21:31:37.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cprime Power Scripts app before 4.0.14 for Atlassian Jira allows Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://marketplace.atlassian.com/apps/43318/power-scripts-jira-script-automation/version-history - https://www.detack.de/en/cve-2019-9005
CVE ID: CVE-2019-9008 State: PUBLISHED Published: 2019-09-17T13:15:32 Last Updated: 2024-08-04T21:31:37.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30. A user with low privileges can take full control over the runtime. Additional Analyst Notes: - CVE Program Container: References: - https://www.codesys.com/ - https://www.us-cert.gov/ics/advisories/icsa-19-255-03 - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12939&token=5b93f0d95a68ff7461d2c249d8da00f16b8f9987&download=
CVE ID: CVE-2019-9009 State: PUBLISHED Published: 2019-09-17T15:34:42 Last Updated: 2024-08-04T21:31:37.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-255-05 - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12941&token=50fabe3870c7bdc41701eb1799dddeec103de40c&download=
CVE ID: CVE-2019-9010 State: PUBLISHED Published: 2019-08-15T17:44:42 Last Updated: 2024-08-04T21:31:37.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in 3S-Smart CODESYS V3 products. The CODESYS Gateway does not correctly verify the ownership of a communication channel. All variants of the following CODESYS V3 products in all versions prior to v3.5.14.20 that contain the CmpGateway component are affected, regardless of the CPU type or operating system: CODESYS Control for BeagleBone, CODESYS Control for emPC-A/iMX6, CODESYS Control for IOT2000, CODESYS Control for Linux, CODESYS Control for PFC100, CODESYS Control for PFC200, CODESYS Control for Rasp
for IOT2000, CODESYS Control for Linux, CODESYS Control for PFC100, CODESYS Control for PFC200, CODESYS Control for Raspberry Pi, CODESYS Control V3 Runtime System Toolkit, CODESYS Gateway V3, CODESYS V3 Development System. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-213-03 - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12937&token=769045a17015bea00ec7ff313de8f1a5c73e7b93&download=
CVE ID: CVE-2019-9011 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T17:04:22.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), an attacker can identify valid usernames. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2021-061/
CVE ID: CVE-2019-9012 State: PUBLISHED Published: 2019-08-15T17:47:31 Last Updated: 2024-08-04T21:31:37.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may cause uncontrolled memory allocations in the affected CODESYS products and may result in a denial-of-service condition. All variants of the following CODESYS V3 products in all versions prior to v3.5.14.20 that contain the CmpGateway component are affected, regardless of the CPU type or operating system: CODESYS Control for BeagleBone, CODESYS Control for emPC-A/iMX6, CODESYS Control for IOT2000, CODESYS Control for Linux, CODESYS Cont
ol for BeagleBone, CODESYS Control for emPC-A/iMX6, CODESYS Control for IOT2000, CODESYS Control for Linux, CODESYS Control for PFC100, CODESYS Control for PFC200, CODESYS Control for Raspberry Pi, CODESYS Control V3 Runtime System Toolkit, CODESYS Gateway V3, CODESYS V3 Development System. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-213-03 - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12938&token=b9eb30f53246dc57b2e7cb302356a05547148fa2&download=
CVE ID: CVE-2019-9013 State: PUBLISHED Published: 2019-08-15T16:08:31 Last Updated: 2024-08-04T21:31:37.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS based encryption, which results in user credentials being insufficiently protected during transport. All variants of the following CODESYS V3 products in all versions containing the CmpUserMgr component are affected regardless of the CPU type or operating system: CODESYS Control for BeagleBone, CODESYS Control for emPC-A/iMX6, CODESYS Control for IOT2000, CODESYS Control for Linux, CODESYS Control for PFC100, CODESYS Control for PFC200
C-A/iMX6, CODESYS Control for IOT2000, CODESYS Control for Linux, CODESYS Control for PFC100, CODESYS Control for PFC200, CODESYS Control for Raspberry Pi, CODESYS Control RTE V3, CODESYS Control RTE V3 (for Beckhoff CX), CODESYS Control Win V3 (also part of the CODESYS Development System setup), CODESYS V3 Simulation Runtime (part of the CODESYS Development System), CODESYS Control V3 Runtime System Toolkit, CODESYS HMI V3. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-213-04 - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12943&token=d097958a67ba382de688916f77e3013c0802fade&download=
CVE ID: CVE-2019-9015 State: PUBLISHED Published: 2019-02-22T16:00:00 Last Updated: 2024-08-04T21:31:37.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Path Traversal vulnerability was discovered in MOPCMS through 2018-11-30, leading to deletion of unexpected critical files. The exploitation point is in the "column management" function. The path added to the column is not verified. When a column is deleted by an attacker, the corresponding directory is deleted, as demonstrated by ./ to delete the entire web site. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yangsuda/mopcms/issues/1
CVE ID: CVE-2019-9016 State: PUBLISHED Published: 2019-02-22T16:00:00 Last Updated: 2024-08-04T21:31:37.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS vulnerability was discovered in MOPCMS through 2018-11-30. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[name] parameter in a mod=column request, as demonstrated by the /mopcms/X0AZgf(index).php?mod=column&ac=list&menuid=28&ac=add&menuid=29 URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yangsuda/mopcms/issues/2
CVE ID: CVE-2019-9017 State: PUBLISHED Published: 2019-05-02T18:54:00 Last Updated: 2024-08-04T21:31:37.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow associated with the size field for the machine name. Additional Analyst Notes: - CVE Program Container: References: - http://www.binaryworld.it/guidepoc.asp - https://www.exploit-db.com/exploits/46793/ - http://packetstormsecurity.com/files/152721/SolarWinds-DameWare-Mini-Remote-Control-10.0-Denial-Of-Service.html
CVE ID: CVE-2019-9019 State: PUBLISHED Published: 2019-02-22T20:00:00Z Last Updated: 2024-09-16T17:23:54.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: The British Airways Entertainment System, as installed on Boeing 777-36N(ER) and possibly other aircraft, does not prevent the USB charging/data-transfer feature from interacting with USB keyboard and mouse devices, which allows physically proximate attackers to conduct unanticipated attacks against Entertainment applications, as demonstrated by using mouse copy-and-paste actions to trigger a Chat buffer overflow or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https:
rflow or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://www.linkedin.com/pulse/buffer-overflow-exploitation-british-airways-system-marco-gisbert/
CVE ID: CVE-2019-9020 State: PUBLISHED Published: 2019-02-22T23:00:00 Last Updated: 2024-08-04T21:31:37.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=77249 - https://usn.ubuntu.com/3902-2/ - https://www.debian.org/security/2019/dsa-4398 - https://usn.ubuntu.com/3902-1/