Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-16089 State: PUBLISHED Published: 2019-09-06T22:02:03 Last Updated: 2024-08-05T01:03:32.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value. Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/patchwork/patch/1106884/ - https://security.netapp.com/advisory/ntap-20191004-0001/ - https://support.f5.com/csp/article/K03814795?utm_source=f5support&amp%3Butm_medium=RSS - https://lore.kernel.org/patchwork/patch/1126650/ - https://usn.ubuntu.com/4414-1/ - https://usn.ubuntu.com/4425-1
=RSS - https://lore.kernel.org/patchwork/patch/1126650/ - https://usn.ubuntu.com/4414-1/ - https://usn.ubuntu.com/4425-1/ - https://usn.ubuntu.com/4439-1/ - https://usn.ubuntu.com/4440-1/
CVE ID: CVE-2019-16091 State: PUBLISHED Published: 2019-09-08T02:41:28 Last Updated: 2024-08-05T01:03:32.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symonics libmysofa 0.7 has an out-of-bounds read in directblockRead in hdf/fractalhead.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hoene/libmysofa/compare/f571522...e07edb3 - https://usn.ubuntu.com/4473-1/
CVE ID: CVE-2019-16092 State: PUBLISHED Published: 2019-09-08T02:41:16 Last Updated: 2024-08-05T01:03:32.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hoene/libmysofa/compare/f571522...e07edb3 - https://usn.ubuntu.com/4473-1/
CVE ID: CVE-2019-16093 State: PUBLISHED Published: 2019-09-08T02:41:07 Last Updated: 2024-08-05T01:03:32.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hoene/libmysofa/compare/f571522...e07edb3 - https://usn.ubuntu.com/4473-1/
CVE ID: CVE-2019-16094 State: PUBLISHED Published: 2019-09-08T02:40:58 Last Updated: 2024-08-05T01:03:32.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hoene/libmysofa/compare/f571522...e07edb3 - https://usn.ubuntu.com/4473-1/
CVE ID: CVE-2019-16095 State: PUBLISHED Published: 2019-09-08T02:40:47 Last Updated: 2024-08-05T01:03:32.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hoene/libmysofa/compare/f571522...e07edb3 - https://usn.ubuntu.com/4473-1/
CVE ID: CVE-2019-16096 State: PUBLISHED Published: 2019-09-08T03:46:40 Last Updated: 2024-08-05T01:03:32.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kilo 0.0.1 has a heap-based buffer overflow because there is an integer overflow in a calculation involving the number of tabs in one row. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/antirez/kilo/issues/60 - https://vuldb.com/?id.141388 - https://vulmon.com/vulnerabilitydetails?qid=CVE-2019-16096 - http://www.security-database.com/detail.php?alert=CVE-2019-16096
CVE ID: CVE-2019-16097 State: PUBLISHED Published: 2019-09-08T15:22:49 Last Updated: 2024-08-05T01:03:32.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: core/api/user.go in Harbor 1.7.0 through 1.8.2 allows non-admin users to create admin accounts via the POST /api/users API, when Harbor is setup with DB as authentication backend and allow user to do self-registration. Fixed version: v1.7.6 v1.8.3. v.1.9.0. Workaround without applying the fix: configure Harbor to use non-DB authentication backend such as LDAP. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/goharbor/harbor/commit/b6db8a8a106259ec9a2c48be8a380cb3b37cf517 - https://github.com
r: References: - https://github.com/goharbor/harbor/commit/b6db8a8a106259ec9a2c48be8a380cb3b37cf517 - https://github.com/goharbor/harbor/compare/v1.8.2...v1.9.0-rc1 - https://unit42.paloaltonetworks.com/critical-vulnerability-in-harbor-enables-privilege-escalation-from-zero-to-admin-cve-2019-16097/ - https://github.com/goharbor/harbor/releases/tag/v1.8.3 - https://github.com/goharbor/harbor/releases/tag/v1.7.6 - http://www.vmware.com/security/advisories/VMSA-2019-0015.html
CVE ID: CVE-2019-16098 State: PUBLISHED Published: 2019-09-11T16:20:16 Last Updated: 2024-08-05T01:03:32.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: The driver in Micro-Star MSI Afterburner 4.6.2.15658 (aka RTCore64.sys and RTCore32.sys) allows any authenticated user to read and write to arbitrary memory, I/O ports, and MSRs. This can be exploited for privilege escalation, code execution under high privileges, and information disclosure. These signed drivers can also be used to bypass the Microsoft driver-signing policy to deploy malicious code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Barakat/CVE-2019-16098
CVE ID: CVE-2019-16099 State: PUBLISHED Published: 2019-09-08T16:37:58 Last Updated: 2024-08-05T01:03:32.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows CSRF via JSON data to a .swf file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sdnewhop/sdwannewhope/blob/master/reports/Silverpeak%20EdgeConnect%20Multiple%20Vulnerabilities%20-%20032018.pdf
CVE ID: CVE-2019-16100 State: PUBLISHED Published: 2019-09-08T16:37:43 Last Updated: 2024-08-05T01:03:32.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client-side HTTP traffic from a single source. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sdnewhop/sdwannewhope/blob/master/reports/Silverpeak%20EdgeConnect%20Multiple%20Vulnerabilities%20-%20032018.pdf
CVE ID: CVE-2019-16101 State: PUBLISHED Published: 2019-09-08T16:37:34 Last Updated: 2024-08-05T01:03:32.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially sensitive stack traces by sending incorrect JSON data to the REST API, such as the rest/json/banners URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sdnewhop/sdwannewhope/blob/master/reports/Silverpeak%20EdgeConnect%20Multiple%20Vulnerabilities%20-%20032018.pdf
CVE ID: CVE-2019-16102 State: PUBLISHED Published: 2019-09-08T16:37:23 Last Updated: 2024-08-05T01:03:32.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Silver Peak EdgeConnect SD-WAN before 8.1.7.x has an SNMP service with a public value for rocommunity and trapcommunity. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sdnewhop/sdwannewhope/blob/master/reports/Silverpeak%20EdgeConnect%20Multiple%20Vulnerabilities%20-%20032018.pdf
CVE ID: CVE-2019-16103 State: PUBLISHED Published: 2019-09-08T16:37:15 Last Updated: 2024-08-05T01:03:32.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation (by administrators) from the menu to a root Bash OS shell via the spsshell feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sdnewhop/sdwannewhope/blob/master/reports/Silverpeak%20EdgeConnect%20Multiple%20Vulnerabilities%20-%20032018.pdf
CVE ID: CVE-2019-16104 State: PUBLISHED Published: 2019-09-08T16:37:05 Last Updated: 2024-08-05T01:03:32.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sdnewhop/sdwannewhope/blob/master/reports/Silverpeak%20EdgeConnect%20Multiple%20Vulnerabilities%20-%20032018.pdf
CVE ID: CVE-2019-16105 State: PUBLISHED Published: 2019-09-08T16:36:56 Last Updated: 2024-08-05T01:03:32.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sdnewhop/sdwannewhope/blob/master/reports/Silverpeak%20EdgeConnect%20Multiple%20Vulnerabilities%20-%20032018.pdf
CVE ID: CVE-2019-16106 State: PUBLISHED Published: 2019-09-10T15:30:01 Last Updated: 2024-08-05T01:03:32.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to change the password of any user via the recruitment_online/personalData/act_acounttab.cfm txtNewUserName and hdNP fields. Additional Analyst Notes: - CVE Program Container: References: - https://www.humatrix7.com/sunfish5/ehrm/humanica/recruitment_online/personalData/qry_account.cfm - https://gist.github.com/suphapholt/5bac4f5cabadfc44746e2bc93c1be91d
CVE ID: CVE-2019-16107 State: PUBLISHED Published: 2020-03-11T12:46:39 Last Updated: 2024-08-05T01:03:32.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpbb.com/community/viewforum.php?f=14 - https://www.phpbb.com/community/viewtopic.php?t=2523271
CVE ID: CVE-2019-16108 State: PUBLISHED Published: 2020-03-19T23:03:08 Last Updated: 2024-08-05T01:03:32.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpBB 3.2.7 allows adding an arbitrary Cascading Style Sheets (CSS) token sequence to a page through BBCode. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpbb.com/community/viewtopic.php?t=2523271
CVE ID: CVE-2019-16109 State: PUBLISHED Published: 2019-09-08T19:57:27 Last Updated: 2024-08-05T01:03:32.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Plataformatec Devise before 4.7.1. It confirms accounts upon receiving a request with a blank confirmation_token, if a database record has a blank value in the confirmation_token column. (However, there is no scenario within Devise itself in which such database records would exist.) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plataformatec/devise/pull/5132 - https://github.com/plataformatec/devise/issues/5071 - https://github.com/plataformatec/devise/compare/v
vise/pull/5132 - https://github.com/plataformatec/devise/issues/5071 - https://github.com/plataformatec/devise/compare/v4.7.0...v4.7.1
CVE ID: CVE-2019-16110 State: PUBLISHED Published: 2019-11-14T16:56:52 Last Updated: 2024-08-05T01:03:32.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: The network protocol of Blade Shadow though 2.13.3 allows remote attackers to take control of a Shadow instance and execute arbitrary code by only knowing the victim's IP address, because packet data can be injected into the unencrypted UDP packet stream. Additional Analyst Notes: - CVE Program Container: References: - https://sigint.sh/#/cve-2019-16110
CVE ID: CVE-2019-16112 State: PUBLISHED Published: 2020-05-13T14:48:31 Last Updated: 2024-08-05T01:03:32.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: TylerTech Eagle 2018.3.11 deserializes untrusted user input, resulting in remote code execution via a crafted Java object to the recorder/ServiceManager?service=tyler.empire.settings.SettingManager URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/48462
CVE ID: CVE-2019-16113 State: PUBLISHED Published: 2019-09-08T20:50:28 Last Updated: 2024-08-05T01:03:32.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and then this PHP code can write other PHP code to a ../ pathname. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bludit/bludit/issues/1081 - http://packetstormsecurity.com/files/155295/Bludit-Directory-Traversal-Image-File-Upload.html - http://packetstormsecurity.com/files/157988/Bludit-3.9.12-Directory-Traversal.html - http://packetstormsecurity.com/files/
tp://packetstormsecurity.com/files/157988/Bludit-3.9.12-Directory-Traversal.html - http://packetstormsecurity.com/files/158569/Bludit-3.9.2-Directory-Traversal.html
CVE ID: CVE-2019-16114 State: PUBLISHED Published: 2019-09-09T12:15:29 Last Updated: 2024-08-05T01:03:32.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ATutor 2.2.4, an unauthenticated attacker can change the application settings and force it to use his crafted database, which allows him to gain access to the application. Next, he can change the directory that the application uploads files to, which allows him to achieve remote code execution. This occurs because install/include/header.php does not restrict certain changes (to db_host, db_login, db_password, and content_dir) within install/include/step5.php. Additional Analyst Notes: - CVE Program Container: References: -
ord, and content_dir) within install/include/step5.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/atutor/ATutor/commits/master - https://github.com/MostafaSoliman/Security-Advisories/blob/master/CVE-2019-16114/README.md
CVE ID: CVE-2019-16115 State: PUBLISHED Published: 2019-09-08T21:47:57 Last Updated: 2024-08-05T01:03:32.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::getColor. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It allows an attacker to use a crafted PDF file to cause Denial of Service or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41872
CVE ID: CVE-2019-16116 State: PUBLISHED Published: 2019-10-02T15:29:44 Last Updated: 2024-08-05T01:03:32.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file. This allows an attacker to obtain the administrator password hash. Additional Analyst Notes: - CVE Program Container: References: - https://enterprisedt.com/products/completeftp/doc/guide/html/history.html - https://rhinosecuritylabs.com/application-security/completeftp-server-local-privesc-cve-2019-16116/
CVE ID: CVE-2019-16117 State: PUBLISHED Published: 2019-09-08T22:49:24 Last Updated: 2024-08-05T01:03:32.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via admin/models/Galleries.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/photo-gallery/#developers - https://plugins.trac.wordpress.org/changeset/2150912/photo-gallery/trunk/admin/models/Galleries.php?old=2135029&old_path=photo-gallery%2Ftrunk%2Fadmin%2Fmodels%2FGalleries.php - https://wpvulndb.com/vulnerabilities/9872 - http://packetstormsecurity.com/files/15443
Fadmin%2Fmodels%2FGalleries.php - https://wpvulndb.com/vulnerabilities/9872 - http://packetstormsecurity.com/files/154433/WordPress-Photo-Gallery-1.5.34-Cross-Site-Scripting.html
CVE ID: CVE-2019-16118 State: PUBLISHED Published: 2019-09-08T22:49:11 Last Updated: 2024-08-05T01:03:32.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via admin/controllers/Options.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/photo-gallery/#developers - https://plugins.trac.wordpress.org/changeset/2150912/photo-gallery/trunk/admin/controllers/Options.php?old=2142624&old_path=photo-gallery%2Ftrunk%2Fadmin%2Fcontrollers%2FOptions.php - https://plugins.trac.wordpress.org/changeset/2150912/photo-gallery/trunk/js/b
runk%2Fadmin%2Fcontrollers%2FOptions.php - https://plugins.trac.wordpress.org/changeset/2150912/photo-gallery/trunk/js/bwg.js?old=2135029&old_path=photo-gallery%2Ftrunk%2Fjs%2Fbwg.js - https://wpvulndb.com/vulnerabilities/9872 - http://packetstormsecurity.com/files/154433/WordPress-Photo-Gallery-1.5.34-Cross-Site-Scripting.html
CVE ID: CVE-2019-16119 State: PUBLISHED Published: 2019-09-08T22:48:58 Last Updated: 2024-08-05T01:10:39.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries.php album_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/photo-gallery/#developers - https://plugins.trac.wordpress.org/changeset/2150912/photo-gallery/trunk/admin/controllers/Albumsgalleries.php?old=1845136&old_path=photo-gallery%2Ftrunk%2Fadmin%2Fcontrollers%2FAlbumsgalleries.php - https://wpvulndb.com/vulnerabilities/9872 -
old_path=photo-gallery%2Ftrunk%2Fadmin%2Fcontrollers%2FAlbumsgalleries.php - https://wpvulndb.com/vulnerabilities/9872 - http://packetstormsecurity.com/files/154432/WordPress-Photo-Gallery-1.5.34-SQL-Injection.html
CVE ID: CVE-2019-16120 State: PUBLISHED Published: 2019-09-08T22:48:39 Last Updated: 2024-08-05T01:10:39.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSV injection in the event-tickets (Event Tickets) plugin before 4.10.7.2 for WordPress exists via the "All Post> Ticketed > Attendees" Export Attendees feature. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9858 - https://wordpress.org/plugins/event-tickets/#developers - https://www.exploit-db.com/exploits/47335
CVE ID: CVE-2019-16123 State: PUBLISHED Published: 2019-09-09T01:00:56 Last Updated: 2024-08-05T01:10:41.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Kartatopia PilusCart 1.4.1, the parameter filename in the file catalog.php is mishandled, leading to ../ Local File Disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://zerodays.lol/ - https://www.exploit-db.com/exploits/47315
CVE ID: CVE-2019-16124 State: PUBLISHED Published: 2019-09-09T01:02:08 Last Updated: 2024-08-05T01:10:39.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, and insert malicious PHP code. Additional Analyst Notes: - CVE Program Container: References: - https://zerodays.lol/ - https://www.exploit-db.com/exploits/47326 - https://github.com/YouPHPTube/YouPHPTube/commit/b32b410c9191c3c5db888514c29d7921f124d883
CVE ID: CVE-2019-16125 State: PUBLISHED Published: 2019-09-09T01:01:46 Last Updated: 2024-08-05T01:10:41.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jobberbase 2.0, the parameter category is not sanitized in public/page_subscribe.php, leading to /subscribe SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://zerodays.lol/ - https://www.exploit-db.com/exploits/47314
CVE ID: CVE-2019-16126 State: PUBLISHED Published: 2019-09-09T01:01:23 Last Updated: 2024-08-05T01:10:39.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grav through 1.6.15 allows (Stored) Cross-Site Scripting due to JavaScript execution in SVG images. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/getgrav/grav/issues/2657
CVE ID: CVE-2019-16127 State: PUBLISHED Published: 2020-10-22T18:11:30 Last Updated: 2024-08-05T01:10:40.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atmel Advanced Software Framework (ASF) 4 has an Integer Overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.microchip.com/mplab/avr-support/advanced-software-framework - https://census-labs.com/news/2020/10/21/microchip-asf4-integer-overflows-in-flash_read-flash_write-and-flash_append/ - https://www.openwall.com/lists/oss-security/2020/10/22/1
CVE ID: CVE-2019-16128 State: PUBLISHED Published: 2020-10-22T19:07:19 Last Updated: 2024-08-05T01:10:40.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow (issue 1 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://www.microchip.com/design-centers/security-ics/cryptoauthentication - http://www.openwall.com/lists/oss-security/2020/10/22/1 - https://census-labs.com/news/2020/10/21/microchip-cryptoauthlib-atcab_sign_base-buffer-overflow/
CVE ID: CVE-2019-16129 State: PUBLISHED Published: 2020-10-22T18:26:38 Last Updated: 2024-08-05T01:10:41.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow (issue 2 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://www.microchip.com/design-centers/security-ics/cryptoauthentication - http://www.openwall.com/lists/oss-security/2020/10/22/1 - https://census-labs.com/news/2020/10/21/microchip-cryptoauthlib-atcab_genkey_base-buffer-overflow/
CVE ID: CVE-2019-16130 State: PUBLISHED Published: 2019-09-09T02:05:24 Last Updated: 2024-08-05T01:10:39.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/277/ - https://github.com/weison-tech/yii2-cms/issues/2
CVE ID: CVE-2019-16131 State: PUBLISHED Published: 2019-09-09T02:05:13 Last Updated: 2024-08-05T01:10:41.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: framework/admin/modulec_control.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file from a ZIP archive can be written to /data/cache/. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/289/
CVE ID: CVE-2019-16132 State: PUBLISHED Published: 2019-09-09T02:04:57 Last Updated: 2024-08-05T01:10:39.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OKLite v1.2.25. framework/admin/tpl_control.php allows remote attackers to delete arbitrary files via a title directory-traversal pathname followed by a crafted substring. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/296/
CVE ID: CVE-2019-16133 State: PUBLISHED Published: 2019-09-09T02:04:46 Last Updated: 2024-08-05T01:10:41.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in eteams OA v4.0.34. Because the session is not strictly checked, the account names and passwords of all employees in the company can be obtained by an ordinary account. Specifically, the attacker sends a jsessionid value for URIs under app/profile/summary/. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/271/