Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-6656 State: PUBLISHED Published: 2019-09-25T19:03:32 Last Updated: 2024-08-04T20:31:02.508Z Vendors: n/a Products: BIG-IP APM Edge Client Problem Types: Information disclosure. Description: BIG-IP APM Edge Client before version 7.1.8 (7180.2019.508.705) logs the full apm session ID in the log files. Vulnerable versions of the client are bundled with BIG-IP APM versions 15.0.0-15.0.1, 14,1.0-14.1.0.6, 14.0.0-14.0.0.4, 13.0.0-13.1.1.5, 12.1.0-12.1.5, and 11.5.1-11.6.5. In BIG-IP APM 13.1.0 and later, the APM Clients components can be updated independently from BIG-IP software. Client version 7.1.8 (7180.2019.508.705) and later has the fix. Additional Analyst Notes: - CVE Progr
m BIG-IP software. Client version 7.1.8 (7180.2019.508.705) and later has the fix. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K23876153 - https://support.f5.com/csp/article/K23876153?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2019-6657 State: PUBLISHED Published: 2019-11-01T14:53:06 Last Updated: 2024-08-04T20:31:02.507Z Vendors: F5 Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Problem Types: XSS Description: On BIG-IP 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, a reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Traffic Management User Interface (TMUI), also known as the BIG-IP Configuration utility. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K22441651
CVE ID: CVE-2019-6658 State: PUBLISHED Published: 2019-11-01T14:59:18 Last Updated: 2024-08-04T20:31:02.522Z Vendors: F5 Products: BIG-IP (AFM) Problem Types: SQL Injection Description: On BIG-IP AFM 15.0.0-15.0.1, 14.0.0-14.1.2, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, a vulnerability in the AFM configuration utility may allow any authenticated BIG-IP user to run an SQL injection attack. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K21121741
CVE ID: CVE-2019-6659 State: PUBLISHED Published: 2019-11-15T20:27:10 Last Updated: 2024-08-04T20:31:02.514Z Vendors: n/a Products: BIG-IP Problem Types: DoS Description: On version 14.0.0-14.1.0.1, BIG-IP virtual servers with TLSv1.3 enabled may experience a denial of service due to undisclosed incoming messages. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K34450231
CVE ID: CVE-2019-6660 State: PUBLISHED Published: 2019-11-15T20:31:33 Last Updated: 2024-08-04T20:31:02.513Z Vendors: n/a Products: BIG-IP Problem Types: DoS Description: On BIG-IP 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.1, undisclosed HTTP requests may consume excessive amounts of systems resources which may lead to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K23860356
CVE ID: CVE-2019-6661 State: PUBLISHED Published: 2019-11-15T20:35:37 Last Updated: 2024-08-04T20:31:02.510Z Vendors: n/a Products: BIG-IP APM Problem Types: DoS Description: When the BIG-IP APM 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.4.1, or 11.5.1-11.6.5 system processes certain requests, the APD/APMD daemon may consume excessive resources. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K61705126
CVE ID: CVE-2019-6662 State: PUBLISHED Published: 2019-11-15T20:45:17 Last Updated: 2024-08-04T20:31:02.481Z Vendors: n/a Products: BIG-IP Problem Types: Confidentiality Breach Description: On BIG-IP 13.1.0-13.1.1.4, sensitive information is logged into the local log files and/or remote logging targets when restjavad processes an invalid request. Users with access to the log files would be able to view that data. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K01049383
CVE ID: CVE-2019-6663 State: PUBLISHED Published: 2019-11-15T20:40:26 Last Updated: 2024-08-04T20:31:04.108Z Vendors: n/a Products: BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager Problem Types: Anti DNS Pinning (DNS Rebinding) Description: The BIG-IP 15.0.0-15.0.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, BIG-IQ 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1 configuration utility is vulnerable to Anti DNS Pinning (DNS Rebinding) attack. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K76052144
CVE ID: CVE-2019-6664 State: PUBLISHED Published: 2019-11-15T20:48:08 Last Updated: 2024-08-04T20:31:04.106Z Vendors: n/a Products: BIG-IP Problem Types: Information Leakage Description: On BIG-IP 15.0.0 and 14.1.0-14.1.0.6, under certain conditions, network protections on the management port do not follow current best practices. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K03126093
CVE ID: CVE-2019-6665 State: PUBLISHED Published: 2019-11-27T21:57:58 Last Updated: 2024-08-04T20:31:02.519Z Vendors: F5 Products: BIG-IP ASM, BIG-IQ, IWorkflow, Enterprise Manager Problem Types: Data injection Description: On BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, BIG-IQ 6.0.0 and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, an attacker with access to the device communication between the BIG-IP ASM Central Policy Builder and the BIG-IQ/Enterprise Manager/F5 iWorkflow will be able to set up the proxy the same way and intercept the traffic. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K
rcept the traffic. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K26462555
CVE ID: CVE-2019-6666 State: PUBLISHED Published: 2019-11-27T21:54:09 Last Updated: 2024-08-04T20:31:02.528Z Vendors: F5 Products: BIG-IP Problem Types: DoS Description: On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, and 13.1.0-13.1.1.4, the TMM process may produce a core file when an upstream server or cache sends the BIG-IP an invalid age header value. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K92411323
CVE ID: CVE-2019-6667 State: PUBLISHED Published: 2019-11-27T21:51:43 Last Updated: 2024-08-04T20:31:03.818Z Vendors: F5 Products: BIG-IP Problem Types: DoS Description: On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.1.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.5.1-11.6.5, under certain conditions, TMM may consume excessive resources when processing traffic for a Virtual Server with the FIX (Financial Information eXchange) profile applied. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K82781208
CVE ID: CVE-2019-6668 State: PUBLISHED Published: 2019-11-27T21:47:22 Last Updated: 2024-08-04T20:31:03.572Z Vendors: F5 Products: BIG-IP APM Edge Client Problem Types: Privilege escalation Description: The BIG-IP APM Edge Client for macOS bundled with BIG-IP APM 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.1.0-13.1.1.5, 12.1.0-12.1.5, and 11.5.1-11.6.5 may allow unprivileged users to access files owned by root. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K49827114
CVE ID: CVE-2019-6669 State: PUBLISHED Published: 2019-11-27T21:44:38 Last Updated: 2024-08-04T20:31:03.757Z Vendors: F5 Products: BIG-IP Problem Types: DoS Description: On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, undisclosed traffic flow may cause TMM to restart under some circumstances. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K11447758
CVE ID: CVE-2019-6670 State: PUBLISHED Published: 2019-11-27T21:35:35 Last Updated: 2024-08-04T20:31:02.515Z Vendors: F5 Products: BIG-IP Problem Types: Information disclosure Description: On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5, vCMP hypervisors are incorrectly exposing the plaintext unit key for their vCMP guests on the filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K05765031
CVE ID: CVE-2019-6671 State: PUBLISHED Published: 2019-11-27T21:41:34 Last Updated: 2024-08-04T20:31:04.049Z Vendors: n/a Products: BIG-IP Problem Types: DoS Description: On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, under certain conditions tmm may leak memory when processing packet fragments, leading to resource starvation. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K39225055
CVE ID: CVE-2019-6672 State: PUBLISHED Published: 2019-11-27T21:38:16 Last Updated: 2024-08-04T20:31:04.038Z Vendors: F5 Products: BIG-IP AFM Problem Types: DoS Description: On BIG-IP AFM 15.0.0-15.0.1, 14.0.0-14.1.2, and 13.1.0-13.1.3.1, when bad-actor detection is configured on a wildcard virtual server on platforms with hardware-based sPVA, the performance of the BIG-IP AFM system is degraded. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K14703097
CVE ID: CVE-2019-6673 State: PUBLISHED Published: 2019-11-27T21:30:34 Last Updated: 2024-08-04T20:31:03.812Z Vendors: F5 Products: BIG-IP Problem Types: DoS Description: On versions 15.0.0-15.0.1 and 14.0.0-14.1.2, when the BIG-IP is configured in HTTP/2 Full Proxy mode, specifically crafted requests may cause a disruption of service provided by the Traffic Management Microkernel (TMM). Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K81557381
CVE ID: CVE-2019-6674 State: PUBLISHED Published: 2019-11-27T21:00:11 Last Updated: 2024-08-04T20:31:03.881Z Vendors: F5 Products: SSL Orchestrator Problem Types: DoS Description: On F5 SSL Orchestrator 15.0.0-15.0.1 and 14.0.0-14.1.2, TMM may crash when processing SSLO data in a service-chaining configuration. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K21135478
CVE ID: CVE-2019-6675 State: PUBLISHED Published: 2019-11-26T14:49:31 Last Updated: 2024-08-04T20:31:03.620Z Vendors: n/a Products: BIG-IP Problem Types: Authentication Bypass Description: BIG-IP configurations using Active Directory, LDAP, or Client Certificate LDAP for management authentication with multiple servers are exposed to a vulnerability which allows an authentication bypass. This can result in a complete compromise of the system. This issue only impacts specific engineering hotfixes using the aforementioned authentication configuration. NOTE: This vulnerability does not affect any of the BIG-IP major, minor or maintenance releases you obtained from downloads.f5.com. The affected
does not affect any of the BIG-IP major, minor or maintenance releases you obtained from downloads.f5.com. The affected Engineering Hotfix builds are as follows: Hotfix-BIGIP-14.1.0.3.0.79.6-ENG.iso, Hotfix-BIGIP-14.1.0.3.0.97.6-ENG.iso, Hotfix-BIGIP-14.1.0.3.0.99.6-ENG.iso, Hotfix-BIGIP-14.1.0.5.0.15.5-ENG.iso, Hotfix-BIGIP-14.1.0.5.0.36.5-ENG.iso, Hotfix-BIGIP-14.1.0.5.0.40.5-ENG.iso, Hotfix-BIGIP-14.1.0.6.0.11.9-ENG.iso, Hotfix-BIGIP-14.1.0.6.0.14.9-ENG.iso, Hotfix-BIGIP-14.1.0.6.0.68.9-ENG.iso, Hotfix-BIGIP-14.1.0.6.0.70.9-ENG.iso, Hotfix-BIGIP-14.1.2.0.11.37-ENG.iso, Hotfix-BIGIP-14.1.2.0.18.37-ENG.iso, Hotfix-BIGIP-14.1.2.0.32.37-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.46.4-ENG.iso, Hotfix-BI
otfix-BIGIP-14.1.2.0.18.37-ENG.iso, Hotfix-BIGIP-14.1.2.0.32.37-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.46.4-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.14.4-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.16.4-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.34.4-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.97.4-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.99.4-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.105.4-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.111.4-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.115.4-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.122.4-ENG.iso, Hotfix-BIGIP-15.0.1.0.33.11-ENG.iso, Hotfix-BIGIP-15.0.1.0.48.11-ENG.iso Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K55655944?utm_source=f5support&amp%3Butm_medium=RSS - https://support.
References: - https://support.f5.com/csp/article/K55655944?utm_source=f5support&amp%3Butm_medium=RSS - https://support.f5.com/csp/article/K55655944
CVE ID: CVE-2019-6676 State: PUBLISHED Published: 2019-12-23T16:41:06 Last Updated: 2024-08-04T20:31:02.507Z Vendors: F5 Products: BIG-IP Problem Types: DoS Description: On versions 15.0.0-15.0.1, 14.0.0-14.1.2.2, and 13.1.0-13.1.3.1, TMM may restart on BIG-IP Virtual Edition (VE) when using virtio direct descriptors and packets 2 KB or larger. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K92002212
CVE ID: CVE-2019-6677 State: PUBLISHED Published: 2019-12-23T16:50:26 Last Updated: 2024-08-04T20:31:03.804Z Vendors: F5 Products: BIG-IP Problem Types: DoS Description: On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, under certain conditions when using custom TCP congestion control settings in a TCP profile, TMM stops processing traffic when processed by an iRule. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K06747393
CVE ID: CVE-2019-6678 State: PUBLISHED Published: 2019-12-23T16:57:49 Last Updated: 2024-08-04T20:31:04.184Z Vendors: F5 Products: BIG-IP Problem Types: DoS Description: On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, the TMM process may restart when the packet filter feature is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K04897373
CVE ID: CVE-2019-6679 State: PUBLISHED Published: 2019-12-23T17:06:16 Last Updated: 2024-08-04T20:31:03.595Z Vendors: F5 Products: BIG-IP Problem Types: DoS Description: On BIG-IP versions 15.0.0-15.0.1, 14.1.0.2-14.1.2.2, 14.0.0.5-14.0.1, 13.1.1.5-13.1.3.1, 12.1.4.1-12.1.5, 11.6.4-11.6.5, and 11.5.9-11.5.10, the access controls implemented by scp.whitelist and scp.blacklist are not properly enforced for paths that are symlinks. This allows authenticated users with SCP access to overwrite certain configuration files that would otherwise be restricted. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K54336216
CVE ID: CVE-2019-6680 State: PUBLISHED Published: 2019-12-23T17:18:32 Last Updated: 2024-08-04T20:31:03.992Z Vendors: F5 Products: BIG-IP Problem Types: DoS Description: On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5, while processing traffic through a standard virtual server that targets a FastL4 virtual server (VIP on VIP), hardware appliances may stop responding. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K53183580
CVE ID: CVE-2019-6681 State: PUBLISHED Published: 2019-12-23T17:10:07 Last Updated: 2024-08-04T20:31:04.061Z Vendors: F5 Products: BIG-IP Problem Types: DoS Description: On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, a memory leak in Multicast Forwarding Cache (MFC) handling in tmrouted. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K93417064
CVE ID: CVE-2019-6682 State: PUBLISHED Published: 2019-12-23T16:54:57 Last Updated: 2024-08-04T20:31:03.619Z Vendors: F5 Products: BIG-IP ASM Problem Types: DoS Description: On versions 15.0.0-15.0.1.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, the BIG-IP ASM system may consume excessive resources when processing certain types of HTTP responses from the origin web server. This vulnerability is only known to affect resource-constrained systems in which the security policy is configured with response-side features, such as Data Guard or response-side learning. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K404524
de learning. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K40452417
CVE ID: CVE-2019-6683 State: PUBLISHED Published: 2019-12-23T17:01:24 Last Updated: 2024-08-04T20:31:03.848Z Vendors: F5 Products: BIG-IP Virtual Edition Problem Types: DoS Description: On versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IP virtual servers with Loose Initiation enabled on a FastL4 profile may be subject to excessive flow usage under undisclosed conditions. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K76328112
CVE ID: CVE-2019-6684 State: PUBLISHED Published: 2019-12-23T17:23:13 Last Updated: 2024-08-04T20:31:03.989Z Vendors: F5 Products: BIG-IP Problem Types: DoS Description: On versions 15.0.0-15.0.1.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, under certain conditions, a multi-bladed BIG-IP Virtual Clustered Multiprocessing (vCMP) may drop broadcast packets when they are rebroadcast to the vCMP guest secondary blades. An attacker can leverage the fragmented broadcast IP packets to perform any type of fragmentation-based attack. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K95117754
CVE ID: CVE-2019-6685 State: PUBLISHED Published: 2019-12-23T17:30:59 Last Updated: 2024-08-04T20:31:04.227Z Vendors: F5 Products: BIG-IP Problem Types: Privilege escalation Description: On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, users with access to edit iRules are able to create iRules which can lead to an elevation of privilege, configuration modification, and arbitrary system command execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K30215839
CVE ID: CVE-2019-6686 State: PUBLISHED Published: 2019-12-23T17:14:27 Last Updated: 2024-08-04T20:31:04.140Z Vendors: F5 Products: BIG-IP Problem Types: DoS Description: On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, the Traffic Management Microkernel (TMM) might stop responding after the total number of diameter connections and pending messages on a single virtual server has reached 32K. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K55812535
CVE ID: CVE-2019-6687 State: PUBLISHED Published: 2019-12-23T17:46:20 Last Updated: 2024-08-04T20:31:04.201Z Vendors: F5 Products: BIG-IP ASM Problem Types: MitM Description: On versions 15.0.0-15.0.1.1, the BIG-IP ASM Cloud Security Services profile uses a built-in verification mechanism that fails to properly authenticate the X.509 certificate of remote endpoints. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K59957337
CVE ID: CVE-2019-6688 State: PUBLISHED Published: 2019-12-23T17:58:55 Last Updated: 2024-08-04T20:31:03.956Z Vendors: F5 Products: BIG-IP, BIG-IQ Problem Types: Information disclosure Description: On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5 and BIG-IQ versions 6.0.0-6.1.0 and 5.2.0-5.4.0, a user is able to obtain the secret that was being used to encrypt a BIG-IP UCS backup file while sending SNMP query to the BIG-IP or BIG-IQ system, however the user can not access to the UCS files. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K25607522
CVE ID: CVE-2019-6689 State: PUBLISHED Published: 2019-04-26T18:37:09 Last Updated: 2024-08-04T20:31:03.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Dillon Kane Tidal Workload Automation Agent 3.2.0.5 (formerly known as Cisco Workload Automation or CWA). The Enterprise Scheduler for AIX allows local users to gain privileges via Command Injection in crafted Tidal Job Buffers (TJB) parameters. NOTE: this vulnerability exists because the CVE-2014-3272 solution did not address AIX operating systems. Additional Analyst Notes: - CVE Program Container: References: - https://ashsecurity.wordpress.com/2019/04/25/an-improper-cisco-fix-for-cve-2014-3272/
CVE ID: CVE-2019-6690 State: PUBLISHED Published: 2019-03-17T17:02:07 Last Updated: 2024-08-04T20:31:04.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and the ciphertext should be trusted. Related to a "CWE-20: Improper Input Validation" issue affecting the affect functionality component. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106756 - http://packetstormsecurity.com/files/151341/Python-GnuPG-0.4.3-Improper-Input-Validation.ht
curityfocus.com/bid/106756 - http://packetstormsecurity.com/files/151341/Python-GnuPG-0.4.3-Improper-Input-Validation.html - https://pypi.org/project/python-gnupg/#history - http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00058.html - https://lists.debian.org/debian-lts-announce/2019/02/msg00021.html - https://seclists.org/bugtraq/2019/Jan/41 - https://blog.hackeriet.no/cve-2019-6690-python-gnupg-vulnerability/ - https://usn.ubuntu.com/3964-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6KYZMN2PWXY4ENZVJUVTGFBVYEVY7II/ - https://lists.fedoraproj
ves/list/package-announce%40lists.fedoraproject.org/message/W6KYZMN2PWXY4ENZVJUVTGFBVYEVY7II/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4VFRUG56542LTYK4444TPJBGR57MT25/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3WMV6XNPPL3VB3RQRFFOBCJ3AGWC4K47/ - https://lists.debian.org/debian-lts-announce/2021/12/msg00027.html
CVE ID: CVE-2019-6691 State: PUBLISHED Published: 2019-01-23T09:00:00Z Last Updated: 2024-09-17T04:03:48.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpwind 9.0.2.170426 UTF8 allows SQL Injection via the admin.php?m=backup&c=backup&a=doback tabledb[] parameter, related to the "--backup database" option. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Veeeooo/phpwind/blob/master/README.md
CVE ID: CVE-2019-6692 State: PUBLISHED Published: 2019-10-24T13:46:16 Last Updated: 2024-10-25T14:28:28.747Z Vendors: n/a Products: Fortinet FortiClient for Windows Problem Types: Execute unauthorized code or commands Description: A malicious DLL preload vulnerability in Fortinet FortiClient for Windows 6.2.0 and below allows a privileged attacker to perform arbitrary code execution via forging that DLL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-19-148
CVE ID: CVE-2019-6693 State: PUBLISHED Published: 2019-11-21T15:08:05.000Z Last Updated: 2025-10-21T23:35:57.795Z Vendors: Fortinet Products: FortiGate Problem Types: Information disclosure Description: Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup file to decipher the sensitive data, via knowledge of the hard-coded key. The aforementioned sensitive data includes users' passwords (except the administrator's password), private keys' passphrases and High Availability password (when set). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguar
(when set). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-19-007