Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-14236 State: PUBLISHED Published: 2019-09-12T17:43:11 Last Updated: 2024-08-05T00:12:43.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated by observing CPU registers and the effect of code/instruction execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.usenix.org/system/files/woot19-paper_schink.pdf
CVE ID: CVE-2019-14237 State: PUBLISHED Published: 2019-09-12T17:56:44 Last Updated: 2024-08-05T00:12:43.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls (FAC) (a software IP protection method for execute-only access) can be defeated by observing CPU registers and the effect of code/instruction execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.usenix.org/system/files/woot19-paper_schink.pdf
CVE ID: CVE-2019-14238 State: PUBLISHED Published: 2019-09-24T18:00:20 Last Updated: 2024-08-05T00:12:43.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated with a debug probe via the Instruction Tightly Coupled Memory (ITCM) bus. Additional Analyst Notes: - CVE Program Container: References: - https://www.usenix.org/system/files/woot19-paper_schink.pdf - https://www.usenix.org/conference/woot19/presentation/schink
CVE ID: CVE-2019-14239 State: PUBLISHED Published: 2019-09-24T18:14:47 Last Updated: 2024-08-05T00:12:43.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls (FAC) (a software IP protection method for execute-only access) can be defeated by leveraging a load instruction inside the execute-only region to expose the protected code into a CPU register. Additional Analyst Notes: - CVE Program Container: References: - https://www.usenix.org/system/files/woot19-paper_schink.pdf - https://www.usenix.org/conference/woot19/presentation/schink
CVE ID: CVE-2019-14240 State: PUBLISHED Published: 2019-07-23T11:51:14 Last Updated: 2024-08-05T00:12:42.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: WCMS v0.3.2 has a CSRF vulnerability, with resultant directory traversal, to modify index.html via the /wex/html.php?finish=../index.html URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/266/
CVE ID: CVE-2019-14241 State: PUBLISHED Published: 2019-07-23T12:02:36 Last Updated: 2024-08-05T00:12:43.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_manage_client_side_cookies in proto_htx.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/haproxy/haproxy/issues/181 - http://www.securityfocus.com/bid/109352 - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00062.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00060.html
CVE ID: CVE-2019-14242 State: PUBLISHED Published: 2019-07-30T17:47:59 Last Updated: 2024-08-05T00:12:43.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bitdefender products for Windows (Bitdefender Endpoint Security Tool versions prior to 6.6.8.115; and Bitdefender Antivirus Plus, Bitdefender Internet Security, and Bitdefender Total Security versions prior to 23.0.24.120) that can lead to local code injection. A local attacker with administrator privileges can create a malicious DLL file in %SystemRoot%\System32\ that will be executed with local user privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefende
uted with local user privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/code-injection-bitdefender-products-windows/
CVE ID: CVE-2019-14243 State: PUBLISHED Published: 2019-07-23T21:38:14 Last Updated: 2024-08-05T00:12:43.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: headerv2.go in mastercactapus proxyprotocol before 0.0.2, as used in the mastercactapus caddy-proxyprotocol plugin through 0.0.2 for Caddy, allows remote attackers to cause a denial of service (webserver panic and daemon crash) via a crafted HAProxy PROXY v2 request with truncated source/destination address data. Additional Analyst Notes: - CVE Program Container: References: - https://caddy.community/t/dos-in-http-proxyprotocol-plugin/6014 - https://github.com/mastercactapus/proxyprotocol/issues/1 - https://github.com/masterc
n-http-proxyprotocol-plugin/6014 - https://github.com/mastercactapus/proxyprotocol/issues/1 - https://github.com/mastercactapus/caddy-proxyprotocol/issues/8 - https://github.com/mastercactapus/proxyprotocol/compare/ef496d7...5c4a101 - https://github.com/mastercactapus/proxyprotocol/commit/5c4a101121fc3e868026189c7a73f7f19eef90ac - https://github.com/mastercactapus/proxyprotocol/releases/tag/v0.0.2
CVE ID: CVE-2019-14245 State: PUBLISHED Published: 2019-08-21T18:41:25 Last Updated: 2024-08-05T00:12:43.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete databases (such as oauthv2) from the server via an attacker account. Additional Analyst Notes: - CVE Program Container: References: - https://centos-webpanel.com/changelog-cwp7 - http://packetstormsecurity.com/files/154155/CentOS-Control-Web-Panel-CWP-0.9.8.851-Arbitrary-Database-Drop.html - http://packetstormsecurity.com/files/154155/CentOS-WebPanel.com-CentOS-Control-Web-Panel-CWP-0.9.8.851-Arbitrary-Databa
http://packetstormsecurity.com/files/154155/CentOS-WebPanel.com-CentOS-Control-Web-Panel-CWP-0.9.8.851-Arbitrary-Database-Drop.html - http://packetstormsecurity.com/files/154155/CentOS-WebPanel.com-Control-Web-Panel-CWP-0.9.8.851-Arbitrary-Database-Drop.html
CVE ID: CVE-2019-14246 State: PUBLISHED Published: 2019-08-21T18:38:44 Last Updated: 2024-08-05T00:12:43.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to discover phpMyAdmin passwords (of any user in /etc/passwd) via an attacker account. Additional Analyst Notes: - CVE Program Container: References: - https://centos-webpanel.com/changelog-cwp7 - http://packetstormsecurity.com/files/154156/CentOS-Control-Web-Panel-CWP-0.9.8.851-phpMyAdmin-Password-Change.html - http://packetstormsecurity.com/files/154156/CentOS-WebPanel.com-CentOS-Control-Web-Panel-CWP-0.9.8.851-phpMy
ange.html - http://packetstormsecurity.com/files/154156/CentOS-WebPanel.com-CentOS-Control-Web-Panel-CWP-0.9.8.851-phpMyAdmin-Password-Change.html - http://packetstormsecurity.com/files/154156/CentOS-WebPanel.com-Control-Web-Panel-CWP-0.9.8.851-phpMyAdmin-Password-Change.html
CVE ID: CVE-2019-14247 State: PUBLISHED Published: 2019-07-24T03:29:47 Last Updated: 2024-08-05T00:12:42.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: The scan() function in mad.c in mpg321 0.3.2 allows remote attackers to trigger an out-of-bounds write via a zero bitrate in an MP3 file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mpg321/bugs/51/
CVE ID: CVE-2019-14248 State: PUBLISHED Published: 2019-07-24T03:30:01 Last Updated: 2024-08-05T00:12:42.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libnasm.a in Netwide Assembler (NASM) 2.14.xx, asm/pragma.c allows a NULL pointer dereference in process_pragma, search_pragma_list, and nasm_set_limit when "%pragma limit" is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392576
CVE ID: CVE-2019-14249 State: PUBLISHED Published: 2019-07-24T03:30:18 Last Updated: 2024-08-05T00:12:43.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service (division by zero) via an ELF file with a zero-size section group (SHT_GROUP), as demonstrated by dwarfdump. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/libdwarf/code/merge-requests/4/ - https://sourceforge.net/p/libdwarf/code/ci/cb7198abde46c2ae29957ad460da6886eaa606ba/tree/libdwarf/dwarf_elf_load_headers.c?diff=99e77c3894877a1dd80b82808d8309eded4e5599 - http://www.securityfocus.
aa606ba/tree/libdwarf/dwarf_elf_load_headers.c?diff=99e77c3894877a1dd80b82808d8309eded4e5599 - http://www.securityfocus.com/bid/109380
CVE ID: CVE-2019-14250 State: PUBLISHED Published: 2019-07-24T03:30:30 Last Updated: 2024-08-05T00:12:42.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=90924 - https://gcc.gnu.org/ml/gcc-patches/2019-07/msg01003.html - http://www.securityfocus.com/bid/109354 - https://security.netapp.com/advisory/ntap-20190822-0002/ - http://lists
html - http://www.securityfocus.com/bid/109354 - https://security.netapp.com/advisory/ntap-20190822-0002/ - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00056.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00057.html - https://usn.ubuntu.com/4326-1/ - https://usn.ubuntu.com/4336-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00058.html - https://security.gentoo.org/glsa/202007-39 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html
CVE ID: CVE-2019-14251 State: PUBLISHED Published: 2019-12-09T16:39:37 Last Updated: 2024-08-05T00:12:43.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in T24 in TEMENOS Channels R15.01. The login page presents JavaScript functions to access a document on the server once successfully authenticated. However, an attacker can leverage downloadDocServer() to traverse the file system and access files or directories that are outside of the restricted directory because WealthT24/GetImage is used with the docDownloadPath and uploadLocation parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kmkz/exploit/blob/master/
arameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kmkz/exploit/blob/master/CVE-2019-14251-TEMENOS-T24.txt
CVE ID: CVE-2019-14252 State: PUBLISHED Published: 2019-09-18T15:35:24 Last Updated: 2024-08-05T00:12:42.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the secure portal in Publisure 2.1.2. Once successfully authenticated as an administrator, one is able to inject arbitrary PHP code by using the adminCons.php form. The code is then stored in the E:\PUBLISURE\webservice\webpages\AdminDir\Templates\ folder even if removed from the adminCons.php view (i.e., the rogue PHP file can be hidden). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kmkz/exploit/blob/master/PUBLISURE-EXPLOIT-CHAIN-ADVISORY.txt
CVE ID: CVE-2019-14253 State: PUBLISHED Published: 2019-09-18T15:37:08 Last Updated: 2024-08-05T00:12:42.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in servletcontroller in the secure portal in Publisure 2.1.2. One can bypass authentication and perform a query on PHP forms within the /AdminDir folder that should be restricted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kmkz/exploit/blob/master/PUBLISURE-EXPLOIT-CHAIN-ADVISORY.txt
CVE ID: CVE-2019-14254 State: PUBLISHED Published: 2019-09-18T15:38:31 Last Updated: 2024-08-05T00:12:42.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the secure portal in Publisure 2.1.2. Because SQL queries are not well sanitized, there are multiple SQL injections in userAccFunctions.php functions. Using this, an attacker can access passwords and/or grant access to the user account "user" in order to become "Administrator" (for example). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kmkz/exploit/blob/master/PUBLISURE-EXPLOIT-CHAIN-ADVISORY.txt
CVE ID: CVE-2019-14255 State: PUBLISHED Published: 2019-08-08T12:41:01 Last Updated: 2024-08-05T00:12:42.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Server Side Request Forgery (SSRF) vulnerability in go-camo up to version 1.1.4 allows a remote attacker to perform HTTP requests to internal endpoints. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cactus/go-camo/security/advisories/GHSA-xrmp-4542-q746
CVE ID: CVE-2019-14257 State: PUBLISHED Published: 2019-08-21T18:35:35 Last Updated: 2024-08-05T00:12:43.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: pyraw in Zenoss 2.5.3 allows local privilege escalation by modifying environment variables to redirect execution before privileges are dropped, aka ZEN-31765. Additional Analyst Notes: - CVE Program Container: References: - https://www.coalfire.com/The-Coalfire-Blog - https://www.coalfire.com/The-Coalfire-Blog/August-2019/Getting-more-from-a-compliance-test
CVE ID: CVE-2019-14258 State: PUBLISHED Published: 2019-08-21T18:33:52 Last Updated: 2024-08-05T00:12:43.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML-RPC subsystem in Zenoss 2.5.3 allows XXE attacks that lead to unauthenticated information disclosure via port 9988. Additional Analyst Notes: - CVE Program Container: References: - https://www.coalfire.com/The-Coalfire-Blog - https://www.coalfire.com/The-Coalfire-Blog/August-2019/Getting-more-from-a-compliance-test
CVE ID: CVE-2019-14259 State: PUBLISHED Published: 2019-08-01T14:44:12 Last Updated: 2024-08-05T00:12:43.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: On the Polycom Obihai Obi1022 VoIP phone with firmware 5.1.11, a command injection (missing input validation) issue in the NTP server IP address field for the "Time Service Settings web" interface allows an authenticated remote attacker in the same network to trigger OS commands via shell commands in a POST request. Additional Analyst Notes: - CVE Program Container: References: - https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Obihai_Obi1002.pdf?_=1563787869
CVE ID: CVE-2019-14260 State: PUBLISHED Published: 2019-08-01T19:15:14 Last Updated: 2024-08-05T00:12:43.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: On the Alcatel-Lucent Enterprise (ALE) 8008 Cloud Edition Deskphone VoIP phone with firmware 1.50.13, a command injection (missing input validation) issue in the password change field for the Change Password interface allows an authenticated remote attacker in the same network to trigger OS commands via shell commands in a POST request. Additional Analyst Notes: - CVE Program Container: References: - https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Alcatel_8008CloudEditionDeskPhone.pdf?_=1559026340
CVE ID: CVE-2019-14261 State: PUBLISHED Published: 2019-09-03T17:53:38 Last Updated: 2024-08-05T00:12:43.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on ABUS Secvest FUAA50000 3.01.01 devices. Due to an insufficient implementation of jamming detection, an attacker is able to suppress correctly received RF messages sent between wireless peripheral components, e.g., wireless detectors or remote controls, and the ABUS Secvest alarm central. An attacker is able to perform a "reactive jamming" attack. The reactive jamming simply detects the start of a RF message sent by a component of the ABUS Secvest wireless alarm system, for instance a wireless motion
the start of a RF message sent by a component of the ABUS Secvest wireless alarm system, for instance a wireless motion detector (FUBW50000) or a remote control (FUBE50014 or FUBE50015), and overlays it with random data before the original RF message ends. Thereby, the receiver (alarm central) is not able to properly decode the original transmitted signal. This enables an attacker to suppress correctly received RF messages of the wireless alarm system in an unauthorized manner, for instance status messages sent by a detector indicating an intrusion. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-004
s: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-004.txt - http://seclists.org/fulldisclosure/2019/Jul/30 - http://packetstormsecurity.com/files/153780/ABUS-Secvest-3.01.01-Unchecked-Message-Transmission-Error-Condition.html - https://seclists.org/bugtraq/2019/Jul/52
CVE ID: CVE-2019-14262 State: PUBLISHED Published: 2019-07-25T04:35:51 Last Updated: 2024-08-05T00:12:42.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: MetadataExtractor 2.1.0 allows stack consumption. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/drewnoakes/metadata-extractor-dotnet/pull/190 - https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E
CVE ID: CVE-2019-14266 State: PUBLISHED Published: 2019-07-25T15:07:07 Last Updated: 2024-08-05T00:12:43.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSNS v6.1.0 allows SQL Injection via the index.php?s=/ucenter/Config/ uid parameter because of the getNeedQueryData function in Application/Common/Model/UserModel.class.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kikulo/DebugOpen/blob/master/OpenSNSv6.1.0/main.md
CVE ID: CVE-2019-14267 State: PUBLISHED Published: 2019-07-29T15:13:49 Last Updated: 2024-08-05T00:12:43.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/enferex/pdfresurrect/commits/master - http://packetstormsecurity.com/files/153767/pdfresurrect-0.15-Buffer-Overflow.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DBYXYU2VSDJ3NAL54IW2KYD3TZSR33M/ - https://lists.fedoraproject.org/archives/list/package-announce%4
project.org/message/4DBYXYU2VSDJ3NAL54IW2KYD3TZSR33M/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LXN6W5QTNQJ2LFDCQWKYSMMZ3NPUWP3U/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y243C2IFMRFQWHV62JCSHTMQGDDCICNF/ - https://github.com/snappyJack/pdfresurrect_CVE-2019-14267
CVE ID: CVE-2019-14268 State: PUBLISHED Published: 2019-07-25T15:55:20 Last Updated: 2024-08-05T00:12:43.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Octopus Deploy versions 3.0.19 to 2019.7.2, when a web request proxy is configured, an authenticated user (in certain limited circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext. This is fixed in 2019.7.3. The fix was back-ported to LTS 2019.6.5 as well as LTS 2019.3.7. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/5739
CVE ID: CVE-2019-14270 State: PUBLISHED Published: 2019-07-25T16:28:27 Last Updated: 2024-08-05T00:12:43.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Comodo Antivirus through 12.0.0.6870, Comodo Firewall through 12.0.0.6870, and Comodo Internet Security Premium through 12.0.0.6870, with the Comodo Container feature, are vulnerable to Sandbox Escape. Additional Analyst Notes: - CVE Program Container: References: - https://gaissecurity.com/yazi/discovery-of-sandbox-escape-on-comodo-container-antivirus-amp-firewall
CVE ID: CVE-2019-14271 State: PUBLISHED Published: 2019-07-29T17:05:57 Last Updated: 2024-08-05T00:12:43.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that contains the contents of the container. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moby/moby/issues/39449 - https://docs.docker.com/engine/release-notes/ - https://security.netapp.com/advisory/ntap-20190828-0003/ - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.html - https://www.debian
ry/ntap-20190828-0003/ - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.html - https://www.debian.org/security/2019/dsa-4521 - https://seclists.org/bugtraq/2019/Sep/21
CVE ID: CVE-2019-14272 State: PUBLISHED Published: 2019-09-26T11:50:53 Last Updated: 2024-08-05T00:12:43.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SilverStripe asset-admin 4.0, there is XSS in file titles managed through the CMS. Additional Analyst Notes: - CVE Program Container: References: - https://www.silverstripe.org/download/security-releases/ - https://www.silverstripe.org/blog/tag/release - https://forum.silverstripe.org/c/releases - https://www.silverstripe.org/download/security-releases/CVE-2019-14272
CVE ID: CVE-2019-14273 State: PUBLISHED Published: 2019-09-26T11:42:49 Last Updated: 2024-08-05T00:12:43.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SilverStripe assets 4.0, there is broken access control on files. Additional Analyst Notes: - CVE Program Container: References: - https://www.silverstripe.org/download/security-releases/ - https://www.silverstripe.org/blog/tag/release - https://forum.silverstripe.org/c/releases - https://www.silverstripe.org/download/security-releases/CVE-2019-14273
CVE ID: CVE-2019-14274 State: PUBLISHED Published: 2019-07-26T03:15:42 Last Updated: 2024-08-05T00:12:42.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mcpp/bugs/13/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00038.html - https://security.gentoo.org/glsa/202208-04
CVE ID: CVE-2019-14275 State: PUBLISHED Published: 2019-07-26T03:16:12 Last Updated: 2024-08-05T00:12:43.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/52/ - https://lists.debian.org/debian-lts-announce/2020/01/msg00018.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00043.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00019.html
CVE ID: CVE-2019-14276 State: PUBLISHED Published: 2019-10-23T11:49:08 Last Updated: 2024-08-05T00:12:43.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: WUSTL XNAT 1.7.5.3 allows XXE attacks via a POST request body. Additional Analyst Notes: - CVE Program Container: References: - http://www.senseofsecurity.com.au/research/it-security-advisories.php - https://www.senseofsecurity.com.au/advisories/SOS-19-001 - https://wiki.xnat.org/documentation/getting-started-with-xnat/what-s-new-in-xnat/xnat-1-7-5-4-1-7-5-6-release-notes