Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-20165 State: PUBLISHED Published: 2019-12-30T23:55:43 Last Updated: 2024-08-05T02:39:08.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function ilst_item_Read() in isomedia/box_code_apple.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1338 - https://lists.debian.org/debian-lts-announce/2020/01/msg00017.html
CVE ID: CVE-2019-20166 State: PUBLISHED Published: 2019-12-30T23:55:23 Last Updated: 2024-08-05T02:39:09.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_isom_dump() in isomedia/box_dump.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1331
CVE ID: CVE-2019-20167 State: PUBLISHED Published: 2019-12-30T23:55:14 Last Updated: 2024-08-05T02:39:09.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function senc_Parse() in isomedia/box_code_drm.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1330
CVE ID: CVE-2019-20168 State: PUBLISHED Published: 2019-12-30T23:54:47 Last Updated: 2024-08-05T02:39:09.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function gf_isom_box_dump_ex() in isomedia/box_funcs.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1333
CVE ID: CVE-2019-20169 State: PUBLISHED Published: 2019-12-30T23:54:38 Last Updated: 2024-08-05T02:39:09.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trak_Read() in isomedia/box_code_base.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1329
CVE ID: CVE-2019-20170 State: PUBLISHED Published: 2019-12-30T23:54:01 Last Updated: 2024-08-05T02:39:09.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid pointer dereference in the function GF_IPMPX_AUTH_Delete() in odf/ipmpx_code.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1328 - https://lists.debian.org/debian-lts-announce/2020/01/msg00017.html
CVE ID: CVE-2019-20171 State: PUBLISHED Published: 2019-12-30T23:53:51.000Z Last Updated: 2025-03-04T21:23:48.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metx_New in isomedia/box_code_base.c and abst_Read in isomedia/box_code_adobe.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1337 - https://lists.debian.org/debian-lts-announce/2020/01/msg00017.html - https://github.com/gpac/gpac/blob/v0.5.2/src/isomedia/box_code_adobe.c
CVE ID: CVE-2019-20172 State: PUBLISHED Published: 2019-12-31T02:50:35 Last Updated: 2024-08-05T02:39:09.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows local users to gain privileges by overwriting a return address that was found on the kernel stack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SerenityOS/serenity/commit/0fc24fe2564736689859e7edfa177a86dac36bf9 - https://github.com/Fire30/CTF-WRITEUPS/tree/master/36c3_ctf/wisdom
CVE ID: CVE-2019-20173 State: PUBLISHED Published: 2020-02-05T19:50:33 Last Updated: 2024-08-05T02:39:09.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Auth0 wp-auth0 plugin 3.11.x before 3.11.3 for WordPress allows XSS via a wle parameter associated with wp-login.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/auth0/wp-auth0/releases/tag/3.11.3 - https://auth0.com/docs/security/bulletins/cve-2019-20173 - https://wpvulndb.com/vulnerabilities/10059
CVE ID: CVE-2019-20174 State: PUBLISHED Published: 2020-02-03T17:13:42 Last Updated: 2024-08-05T02:39:09.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Auth0 Lock before 11.21.0 allows XSS when additionalSignUpFields is used with an untrusted placeholder. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/auth0/lock/releases/tag/v11.21.0 - https://auth0.com/docs/security/bulletins/cve-2019-20174
CVE ID: CVE-2019-20175 State: PUBLISHED Published: 2019-12-31T03:27:40 Last Updated: 2024-08-05T02:39:09.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ide_dma_cb() in hw/ide/core.c in QEMU 2.4.0 through 4.2.0. The guest system can crash the QEMU process in the host system via a special SCSI_IOCTL_SEND_COMMAND. It hits an assertion that implies that the size of successful DMA transfers there must be a multiple of 512 (the size of a sector). NOTE: a member of the QEMU security team disputes the significance of this issue because a "privileged guest user has many ways to cause similar DoS effect, without triggering this assert. Additional Analyst Not
"privileged guest user has many ways to cause similar DoS effect, without triggering this assert. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.nongnu.org/archive/html/qemu-devel/2019-07/msg01651.html - https://lists.nongnu.org/archive/html/qemu-devel/2019-11/msg00597.html - https://lists.nongnu.org/archive/html/qemu-devel/2019-11/msg02165.html - https://www.mail-archive.com/qemu-devel%40nongnu.org/msg667396.html - https://lists.nongnu.org/archive/html/qemu-devel/2019-07/msg03869.html
CVE ID: CVE-2019-20176 State: PUBLISHED Published: 2019-12-31T14:04:06 Last Updated: 2024-08-05T02:39:09.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jedisct1/pure-ftpd/commit/aea56f4bcb9948d456f3fae4d044fd3fa2e19706 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PICL3U2J4EPGBLOE555Y5RAZTQL3WBBV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AHZG5FPCRMCB6Z3L7FPICC6BZ5ZATFTO/
CVE ID: CVE-2019-20178 State: PUBLISHED Published: 2020-01-09T21:33:37 Last Updated: 2024-08-05T02:39:09.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advisto PEEL Shopping 9.2.1 has CSRF via administrer/utilisateurs.php to delete a user. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40Pablo0xSantiago/cve-2019-20178-peel-shopping-ecommerce-shopping-cart-9-2-1-cross-site-request-forgery-17fc49ab5a65
CVE ID: CVE-2019-20179 State: PUBLISHED Published: 2020-01-09T21:28:37 Last Updated: 2024-08-05T02:39:09.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: SOPlanning 1.45 has SQL injection via the user_list.php "by" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40Pablo0xSantiago/cve-2019-20179-so-planning-1-45-sql-injection-5f0050ad81d1
CVE ID: CVE-2019-20180 State: PUBLISHED Published: 2020-01-09T00:00:00 Last Updated: 2024-08-05T02:39:09.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TablePress plugin 1.9.2 for WordPress allows tablepress[data] CSV injection by Editor users. Note: The vendor disputes this issue and argues that this responsibility lies with the application that opens the CSV file and not TablePress. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://medium.com/%40Pablo0xSantiago/cve-2019-20180-tablepress-version-1-9-2-csv-injection-65309fcc8be8 - https://wpvulndb.com/vulnerabilities/10016 - https://wordpress.org/support/topic/security-issu
-injection-65309fcc8be8 - https://wpvulndb.com/vulnerabilities/10016 - https://wordpress.org/support/topic/security-issue-cve-2019-20180-for-tablepress/#post-16282996
CVE ID: CVE-2019-20181 State: PUBLISHED Published: 2020-01-09T21:15:27 Last Updated: 2024-08-05T02:39:09.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: The awesome-support plugin 5.8.0 for WordPress allows XSS via the post_title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40Pablo0xSantiago/cve-2019-20181-awesome-support-wordpress-helpdesk-support-plugin-5-8-0-84a0c022cf53
CVE ID: CVE-2019-20182 State: PUBLISHED Published: 2020-01-09T21:01:39 Last Updated: 2024-08-05T02:39:09.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FooGallery plugin 1.8.12 for WordPress allow XSS via the post_title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40Pablo0xSantiago/cve-2019-20182-foogallery-image-gallery-wordpress-plugin-1-8-12-stored-cross-site-scripting-d5864f1259f
CVE ID: CVE-2019-20183 State: PUBLISHED Published: 2020-01-09T21:21:24 Last Updated: 2024-08-05T02:39:08.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: uploadimage.php in Employee Records System 1.0 allows upload and execution of arbitrary PHP code because file-extension validation is only on the client side. The attacker can modify global.js to allow the .php extension. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40Pablo0xSantiago/cve-2019-20183-employee-records-system-bypass-file-upload-to-rce-ea2653660b34
CVE ID: CVE-2019-20184 State: PUBLISHED Published: 2020-01-09T21:09:41 Last Updated: 2024-08-05T02:39:09.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: KeePass 2.4.1 allows CSV injection in the title field of a CSV export. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40Pablo0xSantiago/cve-2019-20184-keepass-2-4-1-csv-injection-33f08de3c11a
CVE ID: CVE-2019-20191 State: PUBLISHED Published: 2020-03-16T21:38:29 Last Updated: 2024-08-05T02:39:09.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oxygen XML Editor 21.1.1 allows XXE to read any file. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40Pablo0xSantiago/cve-2019-20191-oxygen-xml-editor-21-1-1-allows-xxe-216b816f312b
CVE ID: CVE-2019-20197 State: PUBLISHED Published: 2019-12-31T18:50:15 Last Updated: 2024-08-05T02:39:09.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell metacharacters in the id parameter to schedulereport.php, in the context of the web-server user account. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/12/postauth-rce-in-latest-nagiosxi.html
CVE ID: CVE-2019-20198 State: PUBLISHED Published: 2019-12-31T20:31:05 Last Updated: 2024-08-05T02:39:08.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_ent_ok() mishandles recursion, leading to stack consumption for a crafted XML file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/ezxml/bugs/20/
CVE ID: CVE-2019-20199 State: PUBLISHED Published: 2019-12-31T20:30:54 Last Updated: 2024-08-05T02:39:08.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to NULL pointer dereference while running strlen() on a NULL pointer. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/ezxml/bugs/18/
CVE ID: CVE-2019-20200 State: PUBLISHED Published: 2019-12-31T20:30:45 Last Updated: 2024-08-05T02:39:08.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing crafted a XML file, performs incorrect memory handling, leading to a heap-based buffer over-read in the "normalize line endings" feature. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/ezxml/bugs/19/
CVE ID: CVE-2019-20201 State: PUBLISHED Published: 2019-12-31T20:30:33 Last Updated: 2024-08-05T02:39:09.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxml_parse_* functions mishandle XML entities, leading to an infinite loop in which memory allocations occur. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/ezxml/bugs/16/
CVE ID: CVE-2019-20202 State: PUBLISHED Published: 2019-12-31T20:30:23 Last Updated: 2024-08-05T02:39:09.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content() tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/ezxml/bugs/17/
CVE ID: CVE-2019-20203 State: PUBLISHED Published: 2020-01-01T21:59:46 Last Updated: 2024-08-05T02:39:09.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Authorized Addresses feature in the Postie plugin 1.9.40 for WordPress allows remote attackers to publish posts by spoofing the From information of an email message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/V1n1v131r4/Exploiting-Postie-WordPress-Plugin-/blob/master/README.md - https://postieplugin.com/ - https://wordpress.org/plugins/postie/#developers - https://wpvulndb.com/vulnerabilities/10002
CVE ID: CVE-2019-20204 State: PUBLISHED Published: 2020-01-01T21:59:58 Last Updated: 2024-08-05T02:39:08.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/* at the beginning and a crafted SVG element. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/V1n1v131r4/Exploiting-Postie-WordPress-Plugin-/blob/master/README.md - https://postieplugin.com/ - https://wordpress.org/plugins/postie/#developers - https://wpvulndb.com/vulnerabilities/10002 - http://packetstormsecurity.com/files/155973/WordPress-Postie-1.9.40-Cross-Site-Scripting.html
CVE ID: CVE-2019-20205 State: PUBLISHED Published: 2020-01-01T22:30:20 Last Updated: 2024-08-05T02:39:09.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: libsixel 1.8.4 has an integer overflow in sixel_frame_resize in frame.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/127
CVE ID: CVE-2019-20208 State: PUBLISHED Published: 2020-01-01T23:26:32.000Z Last Updated: 2025-03-05T22:50:15.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: dimC_Read in isomedia/box_code_3gpp.c in GPAC from 0.5.2 to 0.8.0 has a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1348 - https://lists.debian.org/debian-lts-announce/2020/01/msg00017.html - https://github.com/gpac/gpac/blob/v0.5.2/src/isomedia/box_code_3gpp.c#L1100 - https://github.com/gpac/gpac/commit/bcfcb3e90476692fe0d2bb532ea8deeb2a77580e
CVE ID: CVE-2019-20209 State: PUBLISHED Published: 2020-01-13T17:05:22 Last Updated: 2024-08-05T02:39:08.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow nsecure Direct Object Reference (IDOR) via wp-admin/admin-ajax.php to delete any page/post/listing. Additional Analyst Notes: - CVE Program Container: References: - https://themeforest.net/item/citybook-directory-listing-wordpress-theme/21694727 - https://themeforest.net/item/townhub-directory-listing-wordpress-theme/25019571 - https://themeforest.net/item/easybook-directory-listing-wordpress-theme/23206622 - https:
ing-wordpress-theme/25019571 - https://themeforest.net/item/easybook-directory-listing-wordpress-theme/23206622 - https://wpvulndb.com/vulnerabilities/10013 - https://wpvulndb.com/vulnerabilities/10014 - https://wpvulndb.com/vulnerabilities/10018 - https://cxsecurity.com/issue/WLB-2019120111 - https://cxsecurity.com/issue/WLB-2019120112 - https://cxsecurity.com/issue/WLB-2019120110
CVE ID: CVE-2019-20210 State: PUBLISHED Published: 2020-01-13T17:16:15 Last Updated: 2024-08-05T02:39:09.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search query. Additional Analyst Notes: - CVE Program Container: References: - https://themeforest.net/item/citybook-directory-listing-wordpress-theme/21694727 - https://themeforest.net/item/townhub-directory-listing-wordpress-theme/25019571 - https://themeforest.net/item/easybook-directory-listing-wordpress-theme/23206622 - https://wpvulndb.com/vulnerabilities/10013 - https://wpvulndb.com/vulner
ok-directory-listing-wordpress-theme/23206622 - https://wpvulndb.com/vulnerabilities/10013 - https://wpvulndb.com/vulnerabilities/10014 - https://wpvulndb.com/vulnerabilities/10018 - https://cxsecurity.com/issue/WLB-2019120111 - https://cxsecurity.com/issue/WLB-2019120112 - https://cxsecurity.com/issue/WLB-2019120110
CVE ID: CVE-2019-20211 State: PUBLISHED Published: 2020-01-13T17:39:09 Last Updated: 2024-08-05T02:39:09.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via Listing Address, Listing Latitude, Listing Longitude, Email Address, Description, Name, Job or Position, Description, Service Name, Address, Latitude, Longitude, Phone Number, or Website. Additional Analyst Notes: - CVE Program Container: References: - https://themeforest.net/item/citybook-directory-listing-wordpress-theme/21694727 - https://themeforest.net/item/townhub-directory-listing-wordpress
m/citybook-directory-listing-wordpress-theme/21694727 - https://themeforest.net/item/townhub-directory-listing-wordpress-theme/25019571 - https://themeforest.net/item/easybook-directory-listing-wordpress-theme/23206622 - https://wpvulndb.com/vulnerabilities/10013 - https://wpvulndb.com/vulnerabilities/10014 - https://wpvulndb.com/vulnerabilities/10018 - https://cxsecurity.com/issue/WLB-2019120111 - https://cxsecurity.com/issue/WLB-2019120112 - https://cxsecurity.com/issue/WLB-2019120110
CVE ID: CVE-2019-20212 State: PUBLISHED Published: 2020-01-13T17:44:57 Last Updated: 2024-08-05T02:39:09.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via the chat widget/page message form. Additional Analyst Notes: - CVE Program Container: References: - https://themeforest.net/item/citybook-directory-listing-wordpress-theme/21694727 - https://themeforest.net/item/townhub-directory-listing-wordpress-theme/25019571 - https://themeforest.net/item/easybook-directory-listing-wordpress-theme/23206622 - https://wpvulndb.com/vulnerabilities/10013 - https:/
rest.net/item/easybook-directory-listing-wordpress-theme/23206622 - https://wpvulndb.com/vulnerabilities/10013 - https://wpvulndb.com/vulnerabilities/10014 - https://wpvulndb.com/vulnerabilities/10018 - https://cxsecurity.com/issue/WLB-2019120111 - https://cxsecurity.com/issue/WLB-2019120112 - https://cxsecurity.com/issue/WLB-2019120110
CVE ID: CVE-2019-20213 State: PUBLISHED Published: 2020-01-02T01:03:16 Last Updated: 2024-08-05T02:39:09.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40s1kr10s/d-link-dir-859-unauthenticated-information-disclosure-en-faf1a9a13f3f - https://medium.com/%40s1kr10s/d-link-dir-859-unauthenticated-information-disclosure-es-6540f7f55b03 - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147 - https://support
es-6540f7f55b03 - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147 - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10146
CVE ID: CVE-2019-20215 State: PUBLISHED Published: 2020-01-29T02:23:26 Last Updated: 2024-08-05T02:39:09.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via a urn: to the M-SEARCH method in ssdpcgi() in /htdocs/cgibin, because HTTP_ST is mishandled. The value of the urn: service/device is checked with the strstr function, which allows an attacker to concatenate arbitrary commands separated by shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147 - https://med
tainer: References: - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147 - https://medium.com/%40s1kr10s/d-link-dir-859-unauthenticated-rce-in-ssdpcgi-http-st-cve-2019-20215-en-2e799acb8a73 - http://packetstormsecurity.com/files/156250/D-Link-ssdpcgi-Unauthenticated-Remote-Command-Execution.html
CVE ID: CVE-2019-20216 State: PUBLISHED Published: 2020-01-29T02:28:32 Last Updated: 2024-08-05T02:39:10.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via the urn: to the M-SEARCH method in ssdpcgi() in /htdocs/cgibin, because REMOTE_PORT is mishandled. The value of the urn: service/device is checked with the strstr function, which allows an attacker to concatenate arbitrary commands separated by shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147 - https
am Container: References: - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147 - https://medium.com/%40s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-en-6bca043500ae - https://medium.com/%40s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-es-e11ca6168d35
CVE ID: CVE-2019-20217 State: PUBLISHED Published: 2020-01-29T02:32:38 Last Updated: 2024-08-05T02:39:08.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via the urn: to the M-SEARCH method in ssdpcgi() in /htdocs/cgibin, because SERVER_ID is mishandled. The value of the urn: service/device is checked with the strstr function, which allows an attacker to concatenate arbitrary commands separated by shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147 - https:/
Container: References: - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147 - https://medium.com/%40s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-en-6bca043500ae - https://medium.com/%40s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-es-e11ca6168d35