Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
15374c6922 - https://syzkaller.appspot.com/bug?id=082c09653e43e33a6a56f8c57cf051eeacae9d5f - http://www.openwall.com/lists/oss-security/2019/08/20/2 - https://usn.ubuntu.com/4115-1/ - https://usn.ubuntu.com/4118-1/ - https://security.netapp.com/advisory/ntap-20190905-0002/ - https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html - https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html - https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html - https://usn.ubuntu.com/4147-1/ - https://usn.ubuntu.com/4286-2/
s.debian.org/debian-lts-announce/2019/09/msg00025.html - https://usn.ubuntu.com/4147-1/ - https://usn.ubuntu.com/4286-2/ - https://usn.ubuntu.com/4286-1/
CVE ID: CVE-2019-15221 State: PUBLISHED Published: 2019-08-19T21:45:38 Last Updated: 2024-08-05T00:42:03.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.17 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3450121997ce872eb7f1248417225827ea249710 - https://syzkaller.appspot.com/bug?id=240f09164db2c3d3af33a117c713dc7650dc29d6 - http://www.openwall.com/lists/oss-se
0 - https://syzkaller.appspot.com/bug?id=240f09164db2c3d3af33a117c713dc7650dc29d6 - http://www.openwall.com/lists/oss-security/2019/08/20/2 - https://usn.ubuntu.com/4115-1/ - https://usn.ubuntu.com/4118-1/ - https://security.netapp.com/advisory/ntap-20190905-0002/ - https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html - https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html - https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html - https://usn.ubuntu.com/4147-1/ - https://usn.ubuntu.com/4286-2/ - https:
org/debian-lts-announce/2019/09/msg00025.html - https://usn.ubuntu.com/4147-1/ - https://usn.ubuntu.com/4286-2/ - https://usn.ubuntu.com/4286-1/
CVE ID: CVE-2019-15222 State: PUBLISHED Published: 2019-08-19T21:45:29 Last Updated: 2024-08-05T00:42:00.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.2.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/helper.c (motu_microbookii) driver. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.8 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5d78e1c2b7f4be00bbe62141603a631dc7812f35 - https://syzkaller.appspot.com/bug?id=3ec1dad62657fef22282536d7532dbb65eee778a - http://www.openwall.co
03a631dc7812f35 - https://syzkaller.appspot.com/bug?id=3ec1dad62657fef22282536d7532dbb65eee778a - http://www.openwall.com/lists/oss-security/2019/08/20/2 - https://security.netapp.com/advisory/ntap-20190905-0002/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html
CVE ID: CVE-2019-15223 State: PUBLISHED Published: 2019-08-19T21:45:20 Last Updated: 2024-08-05T00:42:03.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/driver.c driver. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.8 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0b074ab7fc0d575247b9cc9f93bb7e007ca38840 - https://syzkaller.appspot.com/bug?id=0c1e517c657d3de2361cb0cc2d3a8663c25039a7 - http://www.openwall.com/lists/oss-s
40 - https://syzkaller.appspot.com/bug?id=0c1e517c657d3de2361cb0cc2d3a8663c25039a7 - http://www.openwall.com/lists/oss-security/2019/08/20/2 - https://security.netapp.com/advisory/ntap-20190905-0002/ - https://usn.ubuntu.com/4147-1/
CVE ID: CVE-2019-15224 State: PUBLISHED Published: 2019-08-19T22:24:13 Last Updated: 2024-08-05T00:42:02.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions <=1.6.9 and >=1.6.14 are unaffected. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rest-client/rest-client/issues/713 - https://rubygems.org/gems/rest-client/versions/
CVE ID: CVE-2019-15225 State: PUBLISHED Published: 2019-08-19T22:57:58 Last Updated: 2024-08-05T00:42:01.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service (memory consumption). This is a related issue to CVE-2019-14993. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/envoyproxy/envoy/issues/7728
CVE ID: CVE-2019-15226 State: PUBLISHED Published: 2019-10-09T15:25:02 Last Updated: 2024-08-05T00:42:01.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Upon receiving each incoming request header data, Envoy will iterate over existing request headers to verify that the total size of the headers stays below a maximum limit. The implementation in versions 1.10.0 through 1.11.1 for HTTP/1.x traffic and all versions of Envoy for HTTP/2 traffic had O(n^2) performance characteristics. A remote attacker may craft a request that stays below the maximum request header size but consists of many thousands of small headers to consume CPU and result in a denial-of-service attack. Additio
er size but consists of many thousands of small headers to consume CPU and result in a denial-of-service attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/envoyproxy/envoy/commits/master - https://github.com/envoyproxy/envoy/commit/afc39bea36fd436e54262f150c009e8d72db5014 - https://github.com/envoyproxy/envoy/issues/8520
CVE ID: CVE-2019-15227 State: PUBLISHED Published: 2019-08-20T04:09:23 Last Updated: 2024-08-05T00:42:00.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlightPath 4.8.3 has XSS in the Content, Edit urgent message, and Users sections of the Admin Console. This could lead to cookie stealing and other malicious actions. Additional Analyst Notes: - CVE Program Container: References: - https://www.sevenlayers.com/index.php/236-flightpath-4-8-3-xss
CVE ID: CVE-2019-15228 State: PUBLISHED Published: 2019-08-19T23:28:53 Last Updated: 2024-08-05T00:42:02.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: FUEL CMS 1.4.4 has XSS in the Create Blocks section of the Admin console. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account but can also impact unauthenticated visitors. Additional Analyst Notes: - CVE Program Container: References: - https://www.sevenlayers.com/index.php/237-fuelcms-1-4-4-xss - https://github.com/daylightstudio/FUEL-CMS/issues/536
CVE ID: CVE-2019-15229 State: PUBLISHED Published: 2019-08-19T23:29:04 Last Updated: 2024-08-05T00:42:01.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/daylightstudio/FUEL-CMS/issues/536 - https://www.sevenlayers.com/index.php/238-fuelcms-1-4-4-csrf
CVE ID: CVE-2019-15230 State: PUBLISHED Published: 2019-08-28T16:32:12 Last Updated: 2024-08-05T00:42:03.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreNMS v1.54 has XSS in the Create User, Inventory, Add Device, Notifications, Alert Rule, Create Maintenance, and Alert Template sections of the admin console. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account. Additional Analyst Notes: - CVE Program Container: References: - https://www.sevenlayers.com/index.php/239-librenms-v1-54-xss
CVE ID: CVE-2019-15231 State: REJECTED Published: 2019-08-19T23:47:38 Last Updated: 2019-08-22T18:04:03 Description: No description available.
CVE ID: CVE-2019-15232 State: PUBLISHED Published: 2019-08-19T23:57:37 Last Updated: 2024-08-05T00:42:04.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and Matroska file demultiplexors. Additional Analyst Notes: - CVE Program Container: References: - http://www.live555.com/liveMedia/public/changelog.txt - https://security.gentoo.org/glsa/202005-06
CVE ID: CVE-2019-15233 State: PUBLISHED Published: 2019-08-20T13:28:24 Last Updated: 2024-08-05T00:42:00.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for Confluence has XSS, leading to theft of the Administrator Session Cookie. Additional Analyst Notes: - CVE Program Container: References: - https://marketplace.atlassian.com/apps/1215287/live-input-macros?hosting=server&tab=versions - https://github.com/l0nax/CVE-2019-15233
CVE ID: CVE-2019-15234 State: PUBLISHED Published: 2020-04-27T16:13:10 Last Updated: 2024-08-05T00:42:00.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: SHAREit through 4.0.6.177 does not check the full message length from the received packet header (which is used to allocate memory for the next set of data). This could lead to a system denial of service due to uncontrolled memory allocation. This is different from CVE-2019-14941. Additional Analyst Notes: - CVE Program Container: References: - https://shareit.one/blog/ - https://github.com/nathunandwani/shareit-cwe-789
CVE ID: CVE-2019-15235 State: PUBLISHED Published: 2019-12-17T15:20:18 Last Updated: 2024-08-05T00:42:03.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.864 allows an attacker to get a victim's session file name from /home/[USERNAME]/tmp/session/sess_xxxxxx, and the victim's token value from /usr/local/cwpsrv/logs/access_log, then use them to gain access to the victim's password (for the OS and phpMyAdmin) via an attacker account. This is different from CVE-2019-14782. Additional Analyst Notes: - CVE Program Container: References: - https://centos-webpanel.com/changelog-cwp7 - https://packetstormsecurity.com/files/155676/Co
am Container: References: - https://centos-webpanel.com/changelog-cwp7 - https://packetstormsecurity.com/files/155676/Control-Web-Panel-0.9.8.864-phpMyAdmin-Password-Disclosure.html
CVE ID: CVE-2019-15237 State: PUBLISHED Published: 2019-08-20T00:39:53 Last Updated: 2024-08-05T00:42:03.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/roundcube/roundcubemail/issues/6891 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFFMSO5WKEYSGMTZPZFF4ZADUJ57PRN5/
CVE ID: CVE-2019-15238 State: PUBLISHED Published: 2019-08-20T14:54:59 Last Updated: 2024-08-05T00:42:00.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9505 - https://wordpress.org/plugins/cforms2/#developers
CVE ID: CVE-2019-15239 State: PUBLISHED Published: 2019-08-20T07:25:56 Last Updated: 2024-08-05T00:42:04.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into 4.16.12, was incorrectly backported to the earlier longterm kernels, introducing a new vulnerability that was potentially more severe than the issue that was intended to be fixed by backporting. Specifically, by adding to a write queue between disconnection and re-connection, a local attacker can trigger multiple use-after-free conditions. This can result in a kernel crash, or potentially in privilege escalation. NOTE: this affec
e use-after-free conditions. This can result in a kernel crash, or potentially in privilege escalation. NOTE: this affects (for example) Linux distributions that use 4.9.x longterm kernels before 4.9.190 or 4.14.x longterm kernels before 4.14.139. Additional Analyst Notes: - CVE Program Container: References: - https://pulsesecurity.co.nz/advisories/linux-kernel-4.9-tcpsocketsuaf - https://www.debian.org/security/2019/dsa-4497 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7f582b248d0a86bae5788c548d7bb5bca6f7691a - https://lore.kernel.org/stable/41a61a2f87691d2bc839f26cdfe6f5ff2f51e472.camel%40decadent.org.uk/ - https://salsa.debian.org/kernel-team/kernel-sec
able/41a61a2f87691d2bc839f26cdfe6f5ff2f51e472.camel%40decadent.org.uk/ - https://salsa.debian.org/kernel-team/kernel-sec/blob/f6273af2d956a87296b6b60379d0a186c9be4bbc/active/CVE-2019-15239 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html - https://access.redhat.com/errata/RHSA-2019:3978 - https://access.redhat.com/errata/RHSA-2019:3979 - https://access.redhat.com/errata/RHSA-2020:0027
CVE ID: CVE-2019-15240 State: PUBLISHED Published: 2019-10-16T18:36:30.976995Z Last Updated: 2024-11-20T17:06:47.206Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco Products: Cisco SPA112 2-Port Phone Adapter Problem Types: CWE-119 Description: Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted
ttacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code with elevated privileges. Note: The web-based management interface is enabled by default. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-spa-rce
CVE ID: CVE-2019-15241 State: PUBLISHED Published: 2019-10-16T18:36:31.414229Z Last Updated: 2024-11-20T17:06:40.283Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco Products: Cisco SPA112 2-Port Phone Adapter Problem Types: CWE-119 Description: Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted
CVE ID: CVE-2019-15242 State: PUBLISHED Published: 2019-10-16T18:36:31.850186Z Last Updated: 2024-11-20T17:06:32.987Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco Products: Cisco SPA112 2-Port Phone Adapter Problem Types: CWE-119 Description: Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted
CVE ID: CVE-2019-15243 State: PUBLISHED Published: 2019-10-16T18:36:32.324245Z Last Updated: 2024-11-20T17:06:27.049Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco Products: Cisco SPA112 2-Port Phone Adapter Problem Types: CWE-119 Description: Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted
CVE ID: CVE-2019-15244 State: PUBLISHED Published: 2019-10-16T18:36:33.017393Z Last Updated: 2024-11-20T17:06:20.909Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco Products: Cisco SPA112 2-Port Phone Adapter Problem Types: CWE-119 Description: Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted
CVE ID: CVE-2019-15245 State: PUBLISHED Published: 2019-10-16T18:36:33.455453Z Last Updated: 2024-11-20T17:06:13.830Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco Products: Cisco SPA112 2-Port Phone Adapter Problem Types: CWE-119 Description: Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted
CVE ID: CVE-2019-15246 State: PUBLISHED Published: 2019-10-16T18:36:33.882430Z Last Updated: 2024-11-20T17:06:07.175Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco Products: Cisco SPA112 2-Port Phone Adapter Problem Types: CWE-119 Description: Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted
CVE ID: CVE-2019-15247 State: PUBLISHED Published: 2019-10-16T18:36:34.526160Z Last Updated: 2024-11-20T17:05:58.143Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco Products: Cisco SPA112 2-Port Phone Adapter Problem Types: CWE-119 Description: Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted
CVE ID: CVE-2019-15248 State: PUBLISHED Published: 2019-10-16T18:36:35.074171Z Last Updated: 2024-11-20T17:05:51.298Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco Products: Cisco SPA112 2-Port Phone Adapter Problem Types: CWE-119 Description: Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted
CVE ID: CVE-2019-15249 State: PUBLISHED Published: 2019-10-16T18:36:35.562077Z Last Updated: 2024-11-20T17:05:44.745Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco Products: Cisco SPA112 2-Port Phone Adapter Problem Types: CWE-119 Description: Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted
CVE ID: CVE-2019-15250 State: PUBLISHED Published: 2019-10-16T18:36:36.053463Z Last Updated: 2024-11-20T17:05:38.207Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco Products: Cisco SPA112 2-Port Phone Adapter Problem Types: CWE-119 Description: Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted
CVE ID: CVE-2019-15251 State: PUBLISHED Published: 2019-10-16T18:36:36.493116Z Last Updated: 2024-11-20T17:05:31.855Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco Products: Cisco SPA112 2-Port Phone Adapter Problem Types: CWE-119 Description: Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted
CVE ID: CVE-2019-15252 State: PUBLISHED Published: 2019-10-16T18:36:37.146153Z Last Updated: 2024-11-20T17:05:24.829Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco Products: Cisco SPA112 2-Port Phone Adapter Problem Types: CWE-119 Description: Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit these vulnerabilities by authenticating to the web-based management interface and sending crafted