Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-5718 State: PUBLISHED Published: 2019-01-08T23:00:00 Last Updated: 2024-08-04T20:01:52.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was addressed in epan/charsets.c by adding a get_t61_string length check. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15373 - http://www.securityfocus.com/bid/106482 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=cd09cb5cfb673beca3cce20b1d6a9bc67a134ae1 - https://www.wireshark.org/security/wnpa-sec-2019-03.html - http
Ba=commit%3Bh=cd09cb5cfb673beca3cce20b1d6a9bc67a134ae1 - https://www.wireshark.org/security/wnpa-sec-2019-03.html - https://www.debian.org/security/2019/dsa-4416 - https://seclists.org/bugtraq/2019/Mar/35 - https://www.oracle.com/security-alerts/cpujan2020.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
CVE ID: CVE-2019-5719 State: PUBLISHED Published: 2019-01-08T23:00:00 Last Updated: 2024-08-04T20:01:52.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was addressed in epan/dissectors/packet-isakmp.c by properly handling the case of a missing decryption data block. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15374 - https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html - https://www.wireshark.org/security/wnpa-sec-2019-04.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b5b0
eshark.org/security/wnpa-sec-2019-04.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b5b02f2a9b8772d8814096f86c60a32889d61f2c - https://www.debian.org/security/2019/dsa-4416 - https://seclists.org/bugtraq/2019/Mar/35 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
CVE ID: CVE-2019-5720 State: PUBLISHED Published: 2019-01-08T10:00:00Z Last Updated: 2024-09-17T03:02:37.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: includes/db/class.reflines_db.inc in FrontAccounting 2.4.6 contains a SQL Injection vulnerability in the reference field that can allow the attacker to grab the entire database of the application via the void_transaction.php filterType parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FrontAccountingERP/FA/issues/38
CVE ID: CVE-2019-5721 State: PUBLISHED Published: 2019-01-08T23:00:00 Last Updated: 2024-08-04T20:01:52.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1c66174ec7aa19e2ddc79178cf59f15a654fc4fe - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14470 - https://www.wireshark.org/security/wnpa-sec-2019-05.html - http://lists.opensuse.org/opensuse-secu
ow_bug.cgi?id=14470 - https://www.wireshark.org/security/wnpa-sec-2019-05.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
CVE ID: CVE-2019-5722 State: PUBLISHED Published: 2019-03-19T17:11:11 Last Updated: 2024-08-04T20:01:52.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Due to a lack of user input validation in parameter handling, it has various SQL injections, including on the login form, and on the search form for a key ring number. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46163/ - http://packetstormsecurity.com/files/151117/PORTIER-4.4.4.2-4.4.4.6-SQL-Injection.html - https://seclists.org/bugtraq/2019/Jan/7 - https://www.syss.de/fileadmin/dokumente/Publikationen/Adviso
-Injection.html - https://seclists.org/bugtraq/2019/Jan/7 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-012.txt
CVE ID: CVE-2019-5723 State: PUBLISHED Published: 2019-03-19T17:26:02 Last Updated: 2024-08-04T20:01:52.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Passwords are stored using reversible encryption rather than as a hash value, and the used Vigenere algorithm is badly outdated. Moreover, the encryption key is static and too short. Due to this, the passwords stored by the application can be easily decrypted. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151118/PORTIER-4.4.4.2-4.4.4.6-Cryptographic-Issues.html - https://seclists.org/bugtraq/2019/Jan/8 - https
ity.com/files/151118/PORTIER-4.4.4.2-4.4.4.6-Cryptographic-Issues.html - https://seclists.org/bugtraq/2019/Jan/8 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-011.txt
CVE ID: CVE-2019-5725 State: PUBLISHED Published: 2019-01-08T23:00:00Z Last Updated: 2024-09-16T23:46:53.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: qibosoft through V7 allows remote attackers to read arbitrary files via the member/index.php main parameter, as demonstrated by SSRF to a URL on the same web site to read a .sql file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/novysodope/Qibosoft-CMS
CVE ID: CVE-2019-5727 State: PUBLISHED Published: 2019-02-21T01:00:00 Last Updated: 2024-08-04T20:01:52.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Splunk Web in Splunk Enterprise 6.5.x before 6.5.5, 6.4.x before 6.4.9, 6.3.x before 6.3.12, 6.2.x before 6.2.14, 6.1.x before 6.1.14, and 6.0.x before 6.0.15 and Splunk Light before 6.6.0 has Persistent XSS, aka SPL-138827. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107113 - https://www.splunk.com/view/SP-CAAAQAF
CVE ID: CVE-2019-5729 State: PUBLISHED Published: 2019-03-19T17:34:28 Last Updated: 2024-08-04T20:01:52.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Splunk-SDK-Python before 1.6.6 does not properly verify untrusted TLS server certificates, which could result in man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.splunk.com/view/SP-CAAAQAD
CVE ID: CVE-2019-5731 State: REJECTED Published: 2020-06-10T17:02:52 Last Updated: 2020-06-10T17:02:52 Description: No description available.
CVE ID: CVE-2019-5732 State: REJECTED Published: 2020-06-10T17:02:01 Last Updated: 2020-06-10T17:02:01 Description: No description available.
CVE ID: CVE-2019-5735 State: REJECTED Published: 2020-06-10T17:02:21 Last Updated: 2020-06-10T17:02:21 Description: No description available.
CVE ID: CVE-2019-5736 State: PUBLISHED Published: 2019-02-11T00:00:00 Last Updated: 2024-08-04T20:01:52.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe. Additional An
attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/opencontainers/runc/commit/6635b4f0c6af3810594d2770f662f34ddc15b40d - https://access.redhat.com/errata/RHSA-2019:0408 - https://github.com/rancher/runc-cve - https://access.redhat.com/errata/RHSA-2019:0401 - https://github.com/docker/docker-ce/releases/tag/v18.09.2 - https://www.synology.com/security/advisory/Synology_SA_19_06 - https://security.netapp.com/advisory/ntap-20190307-0008/ - https://access.redhat.com/errata/RHSA-2019:0303 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory
https://access.redhat.com/errata/RHSA-2019:0303 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190215-runc - https://github.com/q3k/cve-2019-5736-poc - https://www.exploit-db.com/exploits/46359/ - https://github.com/opencontainers/runc/commit/0a8e4117e7f715d5fbeef398405813ce8e88558b - https://aws.amazon.com/security/security-bulletins/AWS-2019-002/ - https://www.openwall.com/lists/oss-security/2019/02/11/2 - https://kubernetes.io/blog/2019/02/11/runc-and-cve-2019-5736/ - https://access.redhat.com/security/cve/cve-2019-5736 - https://www.exploit-db.com/exploits/46369/ - https://access.redhat.com/errata/RHSA-2019:0304 - https://github.com/Frichetten/CVE-201
exploit-db.com/exploits/46369/ - https://access.redhat.com/errata/RHSA-2019:0304 - https://github.com/Frichetten/CVE-2019-5736-PoC - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03913en_us - https://brauner.github.io/2019/02/12/privileged-containers.html - https://www.twistlock.com/2019/02/11/how-to-mitigate-cve-2019-5736-in-runc-and-docker/ - https://cloud.google.com/kubernetes-engine/docs/security-bulletins#february-11-2019-runc - http://www.securityfocus.com/bid/106976 - https://access.redhat.com/security/vulnerabilities/runcescape - https://blog.dragonsector.pl/2019/02/cve-2019-5736-escape-from-docker-and.html - https://bugzilla.suse.com/show_bug.cg
- https://blog.dragonsector.pl/2019/02/cve-2019-5736-escape-from-docker-and.html - https://bugzilla.suse.com/show_bug.cgi?id=1121967 - https://lists.apache.org/thread.html/b162dd624dc088cd634292f0402282a1d1d0ce853baeae8205bc033c%40%3Cdev.mesos.apache.org%3E - https://lists.apache.org/thread.html/a258757af84c5074dc7bf932622020fd4f60cef65a84290380386706%40%3Cuser.mesos.apache.org%3E - http://www.openwall.com/lists/oss-security/2019/03/23/1 - https://support.mesosphere.com/s/article/Known-Issue-Container-Runtime-Vulnerability-MSPH-2019-0003 - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00044.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00074.html -
-security-announce/2019-03/msg00044.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00074.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00091.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6A4OSFM5GGOWW4ECELV5OHX2XRAUSPH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWFJGIPYAAAMVSWWI3QWYXGA3ZBU2H4W/ - https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03410944 - https://access.redhat.com/errata/RHSA-2019:0975 - https://azure.microsoft.com/en-us/updates/cve-2019-5736-and-runc-vulnerability/ - https://azure.micros
/RHSA-2019:0975 - https://azure.microsoft.com/en-us/updates/cve-2019-5736-and-runc-vulnerability/ - https://azure.microsoft.com/en-us/updates/iot-edge-fix-cve-2019-5736/ - https://lists.apache.org/thread.html/acacf018c12636e41667e94ac0a1e9244e887eef2debdd474640aa6e%40%3Cdev.dlab.apache.org%3E - https://lists.apache.org/thread.html/a585f64d14c31ab393b90c5f17e41d9765a1a17eec63856ce750af46%40%3Cdev.dlab.apache.org%3E - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00060.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00011.html - http://lists.opensuse.org/opensuse-security-annou
/lists.opensuse.org/opensuse-security-announce/2019-06/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00015.html - http://www.openwall.com/lists/oss-security/2019/06/28/2 - http://www.openwall.com/lists/oss-security/2019/07/06/3 - http://www.openwall.com/lists/oss-security/2019/07/06/4 - https://usn.ubuntu.com/4048-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EGZKRCKI3Y7FMADO2MENMT4TU24QGHFR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLC52IOJN6IQJWJ6CUI6AIUP6GVVG2QP/ - ht
edoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLC52IOJN6IQJWJ6CUI6AIUP6GVVG2QP/ - https://lists.apache.org/thread.html/24e54e3c6b2259e3903b6b8fe26896ac649c481ea99c5739468c92a3%40%3Cdev.dlab.apache.org%3E - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00029.html - http://www.openwall.com/lists/oss-security/2019/10/24/1 - http://www.openwall.com/lists/oss-security/2019/10/29/3 - https://security.gentoo.org/glsa/202003-21 - https://lists.apache.org/thread.html/rc494623986d76593873ce5a40dd69cb3629400d10750d5d7e96b8587%40%3Cdev.dlab.apache.org%3E - https://lists.apac
g/thread.html/rc494623986d76593873ce5a40dd69cb3629400d10750d5d7e96b8587%40%3Cdev.dlab.apache.org%3E - https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E - http://packetstormsecurity.com/files/163339/Docker-Container-Escape.html - http://packetstormsecurity.com/files/165197/Docker-runc-Command-Execution-Proof-Of-Concept.html - http://www.openwall.com/lists/oss-security/2024/01/31/6 - http://www.openwall.com/lists/oss-security/2024/02/01/1 - http://www.openwall.com/lists/oss-security/2024/02/02/3
CVE ID: CVE-2019-5737 State: PUBLISHED Published: 2019-03-28T16:20:28 Last Updated: 2024-08-04T20:01:52.386Z Vendors: Node.js Products: Node.js Problem Types: CWE-400 Description: In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service (DoS) by establishing an HTTP or HTTPS connection in keep-alive mode and by sending headers very slowly. This keeps the connection and associated resources alive for a long period of time. Potential attacks are mitigated by the use of a load balancer or other proxy layer. This vulnerability is an extension of CVE-2018-12121, addressed in November and impacts all active N
other proxy layer. This vulnerability is an extension of CVE-2018-12121, addressed in November and impacts all active Node.js release lines including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1. Additional Analyst Notes: - CVE Program Container: References: - https://nodejs.org/en/blog/vulnerability/february-2019-security-releases/ - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00041.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00046.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00059.html - https://security.netapp.com/advisory/ntap-20190502-0008/ - https://access.redhat.com/errata/R
ce/2019-04/msg00059.html - https://security.netapp.com/advisory/ntap-20190502-0008/ - https://access.redhat.com/errata/RHSA-2019:1821 - https://security.gentoo.org/glsa/202003-48
CVE ID: CVE-2019-5739 State: PUBLISHED Published: 2019-03-28T16:27:34 Last Updated: 2024-08-04T20:01:52.297Z Vendors: Node.js Products: Node.js Problem Types: CWE-400 Description: Keep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js 6.16.0 and earlier. Node.js 8.0.0 introduced a dedicated server.keepAliveTimeout which defaults to 5 seconds. The behavior in Node.js 6.16.0 and earlier is a potential Denial of Service (DoS) attack vector. Node.js 6.17.0 introduces server.keepAliveTimeout and the 5-second default. Additional Analyst Notes: - CVE Program Container: References: - https://nodejs.org/en/blog/vulnerability/february-2019-security-releases/
Notes: - CVE Program Container: References: - https://nodejs.org/en/blog/vulnerability/february-2019-security-releases/ - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00041.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00046.html - https://security.netapp.com/advisory/ntap-20190502-0008/ - https://security.gentoo.org/glsa/202003-48
CVE ID: CVE-2019-5747 State: PUBLISHED Published: 2019-01-09T16:00:00.000Z Last Updated: 2025-06-09T15:28:24.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in BusyBox through 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP client, server, and/or relay) might allow a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to assurance of a 4-byte length when decoding DHCP_SUBNET. NOTE: this issue exists because of an incomplete fix for CVE-2018-20679. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.busybox.net/busybox/co
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.busybox.net/busybox/commit/?id=74d9f1ba37010face4bd1449df4d60dd84450b06 - https://bugs.busybox.net/show_bug.cgi?id=11506 - https://usn.ubuntu.com/3935-1/ - http://seclists.org/fulldisclosure/2019/Sep/7 - https://seclists.org/bugtraq/2019/Sep/7 - http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html
CVE ID: CVE-2019-5748 State: PUBLISHED Published: 2019-01-09T17:00:00 Last Updated: 2024-08-04T20:01:52.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Traccar Server version 4.2, protocol/SpotProtocolDecoder.java might allow XXE attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/traccar/traccar/commit/d7f6c53fd88635885914013649b6807ec53227bf - https://www.traccar.org/blog/
CVE ID: CVE-2019-5754 State: PUBLISHED Published: 2019-02-19T17:00:00 Last Updated: 2024-08-04T20:01:52.245Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Implementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an attacker running or able to cause use of a proxy server to obtain cleartext of transport encryption via malicious network proxy. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106767 - https://access.redhat.com/errata/RHSA-2019:0309 - https://www.debian.org/security/2019/dsa-4395 - https://chromereleases.googleblog.com/2019/01/stable-channel-update-for-deskt
://www.debian.org/security/2019/dsa-4395 - https://chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html - https://crbug.com/914497 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQOP53LXXPRGD4N5OBKGQTSMFXT32LF6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JVFHYCJGMZQUKYSIE2BXE4NLEGFGUXU5/
CVE ID: CVE-2019-5755 State: PUBLISHED Published: 2019-02-19T17:00:00 Last Updated: 2024-08-04T20:01:52.286Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Incorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106767 - https://access.redhat.com/errata/RHSA-2019:0309 - https://www.debian.org/security/2019/dsa-4395 - https://chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html - https://crbug.com/913296 - https://lists.fedo
mereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html - https://crbug.com/913296 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQOP53LXXPRGD4N5OBKGQTSMFXT32LF6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JVFHYCJGMZQUKYSIE2BXE4NLEGFGUXU5/
CVE ID: CVE-2019-5756 State: PUBLISHED Published: 2019-02-19T17:00:00 Last Updated: 2024-08-04T20:01:52.331Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106767 - https://access.redhat.com/errata/RHSA-2019:0309 - https://www.debian.org/security/2019/dsa-4395 - https://chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html - https://crbug.com/895152 - https://l
ps://chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html - https://crbug.com/895152 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQOP53LXXPRGD4N5OBKGQTSMFXT32LF6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JVFHYCJGMZQUKYSIE2BXE4NLEGFGUXU5/
CVE ID: CVE-2019-5757 State: PUBLISHED Published: 2019-02-19T17:00:00 Last Updated: 2024-08-04T20:01:52.282Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: An incorrect object type assumption in SVG in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106767 - https://access.redhat.com/errata/RHSA-2019:0309 - https://www.debian.org/security/2019/dsa-4395 - https://crbug.com/915469 - https://chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html - https://lists.fedorapr
m/915469 - https://chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQOP53LXXPRGD4N5OBKGQTSMFXT32LF6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JVFHYCJGMZQUKYSIE2BXE4NLEGFGUXU5/
CVE ID: CVE-2019-5758 State: PUBLISHED Published: 2019-02-19T17:00:00 Last Updated: 2024-08-04T20:01:52.233Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Incorrect object lifecycle management in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106767 - https://access.redhat.com/errata/RHSA-2019:0309 - https://www.debian.org/security/2019/dsa-4395 - https://chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html - https://crbug.com/913970 - https://lists.fedora
releases.googleblog.com/2019/01/stable-channel-update-for-desktop.html - https://crbug.com/913970 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQOP53LXXPRGD4N5OBKGQTSMFXT32LF6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JVFHYCJGMZQUKYSIE2BXE4NLEGFGUXU5/
CVE ID: CVE-2019-5759 State: PUBLISHED Published: 2019-02-19T17:00:00 Last Updated: 2024-08-04T20:01:52.146Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106767 - https://access.redhat.com/errata/RHSA-2019:0309 - https://www.debian.org/security/2019/dsa-4395 - https://chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html - https://crbug.com/9122