Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-9860 State: PUBLISHED Published: 2019-03-27T14:01:34 Last Updated: 2024-08-04T22:01:54.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Due to unencrypted signal communication and predictability of rolling codes, an attacker can "desynchronize" an ABUS Secvest wireless remote control (FUBE50014 or FUBE50015) relative to its controlled Secvest wireless alarm system FUAA50000 3.01.01, so that sent commands by the remote control are not accepted anymore. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-036.txt
CVE ID: CVE-2019-9861 State: PUBLISHED Published: 2019-05-14T16:03:38 Last Updated: 2024-08-04T22:01:55.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Due to the use of an insecure RFID technology (MIFARE Classic), ABUS proximity chip keys (RFID tokens) of the ABUS Secvest FUAA50000 wireless alarm system can easily be cloned and used to deactivate the alarm system in an unauthorized way. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-005.txt - https://seclists.org/bugtraq/2019/May/1 - http://packetstormsecurity.com/files/152714/ABUS-Secvest-3.01.01-Cryptographic-Issues.html - http://
ugtraq/2019/May/1 - http://packetstormsecurity.com/files/152714/ABUS-Secvest-3.01.01-Cryptographic-Issues.html - http://seclists.org/fulldisclosure/2019/May/3
CVE ID: CVE-2019-9862 State: PUBLISHED Published: 2019-03-27T13:52:47 Last Updated: 2024-08-04T22:01:54.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on ABUS Secvest wireless alarm system FUAA50000 3.01.01 in conjunction with Secvest remote control FUBE50014 or FUBE50015. Because "encrypted signal transmission" is missing, an attacker is able to eavesdrop sensitive data as cleartext (for instance, the current rolling code state). Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-035.txt
CVE ID: CVE-2019-9863 State: PUBLISHED Published: 2019-03-27T13:41:32 Last Updated: 2024-08-04T22:01:54.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Due to the use of an insecure algorithm for rolling codes in the ABUS Secvest wireless alarm system FUAA50000 3.01.01 and its remote controls FUBE50014 and FUBE50015, an attacker is able to predict valid future rolling codes, and can thus remotely control the alarm system in an unauthorized way. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-034.txt
CVE ID: CVE-2019-9864 State: PUBLISHED Published: 2019-03-28T14:18:03 Last Updated: 2024-08-04T22:01:55.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Amazon Affiliate Store 2.1.6 allows Parameter Tampering of the payment amount. Additional Analyst Notes: - CVE Program Container: References: - https://hackingvila.wordpress.com/2019/03/19/php-scripts-mall-amazon-affiliate-store-2-1-6-allows-parameter-tampering-of-the-payment-amountcve-2019-9864/
CVE ID: CVE-2019-9865 State: PUBLISHED Published: 2019-05-29T16:33:27 Last Updated: 2024-08-04T22:01:54.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: When RPC is enabled in Wind River VxWorks 6.9 prior to 6.9.1, a specially crafted RPC request can trigger an integer overflow leading to an out-of-bounds memory copy. It may allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://support2.windriver.com/index.php?page=security-notices - https://www.windriver.com/feeds/wind_river_security_notices.xml
CVE ID: CVE-2019-9866 State: PUBLISHED Published: 2019-05-29T16:28:16 Last Updated: 2024-08-04T22:01:55.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.7.7 and 11.8.x before 11.8.3. It allows Information Disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/03/20/critical-security-release-gitlab-11-dot-8-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/59003
CVE ID: CVE-2019-9867 State: PUBLISHED Published: 2019-03-19T15:53:29 Last Updated: 2024-08-04T22:01:54.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The proxy server password is displayed to an administrator. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS19-001.html#Issue2 - http://www.securityfocus.com/bid/107567
CVE ID: CVE-2019-9868 State: PUBLISHED Published: 2019-03-19T15:54:00 Last Updated: 2024-08-04T22:01:54.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP password is displayed to an administrator. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS19-001.html#Issue1 - http://www.securityfocus.com/bid/107567
CVE ID: CVE-2019-9870 State: PUBLISHED Published: 2019-03-19T16:27:07 Last Updated: 2024-08-04T22:01:54.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugin.js in the w8tcha oEmbed plugin before 2019-03-14 for CKEditor mishandles SCRIPT elements. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/w8tcha/CKEditor-oEmbed-Plugin/issues/94 - https://github.com/w8tcha/CKEditor-oEmbed-Plugin/commit/10f6169e39510bbf5af913886037044458b9dc9b
CVE ID: CVE-2019-9871 State: PUBLISHED Published: 2019-05-31T19:55:18 Last Updated: 2024-08-04T22:01:54.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jector Smart TV FM-K75 devices allow remote code execution because there is an adb open port with root permission. Additional Analyst Notes: - CVE Program Container: References: - http://www.nccst.nat.gov.tw - https://github.com/cvereveal/CVEs/tree/master/CVE-2019-9871
CVE ID: CVE-2019-9872 State: PUBLISHED Published: 2019-07-03T18:40:17 Last Updated: 2024-08-04T22:01:55.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: In several versions of JetBrains IntelliJ IDEA Ultimate, creating run configurations for cloud application servers leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. If the Settings Repository plugin was then used and configured to synchronize IDE settings using a public repository, these credentials were published to this repository. The issue has been fixed in the following versions: 2019.1, 2018.3.5, 2018.2.8, and 2018.1.8. Additional Analyst Notes: - CVE Program Contain
xed in the following versions: 2019.1, 2018.3.5, 2018.2.8, and 2018.1.8. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/
CVE ID: CVE-2019-9873 State: PUBLISHED Published: 2019-07-03T18:43:42 Last Updated: 2024-08-04T22:01:54.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: In several versions of JetBrains IntelliJ IDEA Ultimate, creating Task Servers configurations leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2019.1, 2018.3.5, 2018.2.8, and 2018.1.8. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/
CVE ID: CVE-2019-9874 State: PUBLISHED Published: 2019-05-31T20:11:49.000Z Last Updated: 2025-10-21T23:45:35.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in Sitecore CMS 7.0 to 7.2 and Sitecore XP 7.5 to 8.2 allows an unauthenticated attacker to execute arbitrary code by sending a serialized .NET object in the HTTP POST parameter __CSRFTOKEN. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://dev.sitecore.net/Downloads.aspx - https://www.synacktiv.com/blog.html - https://www.synacktiv.com/ressources/advisories/Sitecore_CSRF_deserialize_R
aspx - https://www.synacktiv.com/blog.html - https://www.synacktiv.com/ressources/advisories/Sitecore_CSRF_deserialize_RCE.pdf
CVE ID: CVE-2019-9875 State: PUBLISHED Published: 2019-05-31T20:34:46.000Z Last Updated: 2025-10-21T23:45:35.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an authenticated attacker to execute arbitrary code by sending a serialized .NET object in an HTTP POST parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://dev.sitecore.net/Downloads.aspx - https://www.synacktiv.com/blog.html - https://www.synacktiv.com/ressources/advisories/Sitecore_CSRF_deserialize_RCE.pdf
CVE ID: CVE-2019-9877 State: PUBLISHED Published: 2019-03-19T18:16:29 Last Updated: 2024-08-04T22:01:55.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an invalid memory access vulnerability in the function TextPage::findGaps() located at TextOutputDev.c in Xpdf 4.01, which can (for example) be triggered by sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://research.loginsoft.com/bugs/invalid-memory-access-in-textpagefindgaps-xpdf-4-01/ - https://forum.xpdfreader.com/viewtopic.php?f=3&
oginsoft.com/bugs/invalid-memory-access-in-textpagefindgaps-xpdf-4-01/ - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41265
CVE ID: CVE-2019-9878 State: PUBLISHED Published: 2019-03-19T18:16:53 Last Updated: 2024-08-04T22:01:55.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kermitt2/pdfalto/issues/46 - https://research.loginsoft.com/bugs/invalid-memory-access-in-gfxinde
: - https://github.com/kermitt2/pdfalto/issues/46 - https://research.loginsoft.com/bugs/invalid-memory-access-in-gfxindexedcolorspacemapcolortobase-pdfalto-0-2/
CVE ID: CVE-2019-9879 State: PUBLISHED Published: 2019-06-10T17:28:53 Last Updated: 2024-08-04T22:01:55.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever new user registrations are allowed. This is related to the registerUser mutation. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9282 - http://packetstormsecurity.com/files/153025/WordPress-WPGraphQL-0.2.3-Authentication-Bypass-Information-Disclosure.html - https://www.pentestpartners.com/security-blog/pwning-wordpress-graphql/ - https://github.com/pentes
on-Disclosure.html - https://www.pentestpartners.com/security-blog/pwning-wordpress-graphql/ - https://github.com/pentestpartners/snippets/blob/master/wp-graphql0.2.3_exploit.py - https://github.com/wp-graphql/wp-graphql/releases/tag/v0.3.0
CVE ID: CVE-2019-9880 State: PUBLISHED Published: 2019-06-10T17:32:39 Last Updated: 2024-11-15T15:18:44.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the 'users' RootQuery, it is possible, for an unauthenticated attacker, to retrieve all WordPress users details such as email address, role, and username. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpvulndb.com/vulnerabilities/9282 - http://packetstormsecurity.com/files/153025/WordPress-WPGraphQL-0.2.3-Authentication-Bypass-Information-Disclosure.html - https://www.pentestpartners.com/security
5/WordPress-WPGraphQL-0.2.3-Authentication-Bypass-Information-Disclosure.html - https://www.pentestpartners.com/security-blog/pwning-wordpress-graphql/ - https://github.com/pentestpartners/snippets/blob/master/wp-graphql0.2.3_exploit.py - https://github.com/wp-graphql/wp-graphql/releases/tag/v0.3.0
CVE ID: CVE-2019-9881 State: PUBLISHED Published: 2019-06-10T17:37:26 Last Updated: 2024-08-04T22:01:55.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when 'allow comment' is disabled. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9282 - http://packetstormsecurity.com/files/153025/WordPress-WPGraphQL-0.2.3-Authentication-Bypass-Information-Disclosure.html - https://www.pentestpartners.com/security-blog/pwning-wordpress-graphql/ - https://github.com/pentestpartners/snippets/blob/master
ww.pentestpartners.com/security-blog/pwning-wordpress-graphql/ - https://github.com/pentestpartners/snippets/blob/master/wp-graphql0.2.3_exploit.py - https://github.com/wp-graphql/wp-graphql/releases/tag/v0.3.0
CVE ID: CVE-2019-9882 State: PUBLISHED Published: 2019-06-03T18:03:21 Last Updated: 2024-08-04T22:01:54.950Z Vendors: OAKlouds Products: MailSherlock MSR35, MailSherlock MSR45 Problem Types: CWE-352 Description: Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to add malicious email sources into whitelist via user/save_list.php?ACSION=&type=email&category=white&locate=big5&cmd=add&new=hacker@socialengineering.com&new_memo=&add=%E6%96%B0%E5%A2%9E without any authorizes. Additional Analyst Notes: - CVE Program Container: References: - https://tvn.twcert.org.tw/taiwanvn/TVN-201904002 - http://surl.twcert.org.tw/MtWeJ
CVE ID: CVE-2019-9883 State: PUBLISHED Published: 2019-06-03T18:03:21 Last Updated: 2024-08-04T22:01:54.986Z Vendors: OAKlouds Products: MailSherlock MSR35, MailSherlock MSR45 Problem Types: CWE-352 Description: Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account via useradmin/cf_new.cgi?chief=&wk_group=full&cf_name=test&cf_account=test&cf_email=&cf_acl=Management&apply_lang=&dn= without any authorizes. Additional Analyst Notes: - CVE Program Container: References: - https://tvn.twcert.org.tw/taiwanvn/TVN-201904003 - http://surl.twcert.org.tw/mChNi
CVE ID: CVE-2019-9884 State: PUBLISHED Published: 2019-07-25T16:25:39.710313Z Last Updated: 2024-09-17T03:59:32.329Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: BroadLearning Products: eclass Problem Types: CWE-284 Description: eClass platform < ip.2.5.10.2.1 allows an attacker to use GETS method to request /admin page to bypass the password validation and access management page. Additional Analyst Notes: - CVE Program Container: References: - https://tvn.twcert.org.tw/taiwanvn/TVN-201904004 - http://surl.twcert.org.tw/b7jfz - https://zeroday.hitcon.org/vulnerability/ZD-2019-00332
CVE ID: CVE-2019-9885 State: PUBLISHED Published: 2019-07-25T16:25:39.770297Z Last Updated: 2024-09-17T00:31:21.052Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: BroadLearning Products: eclass Problem Types: CWE-89 Description: eClass platform < ip.2.5.10.2.1 allows an attacker to execute SQL command via /admin/academic/studenview_left.php StudentID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://tvn.twcert.org.tw/taiwanvn/TVN-201904005 - http://surl.twcert.org.tw/eBDZP - https://zeroday.hitcon.org/vulnerability/ZD-2019-00333
CVE ID: CVE-2019-9886 State: PUBLISHED Published: 2019-07-11T18:21:51.743994Z Last Updated: 2024-09-16T16:53:38.342Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: BroadLearning Products: eclass Problem Types: CWE-22, CWE-284 Description: Any URLs with download_attachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before version ip.2.5.10.2.1. Additional Analyst Notes: - CVE Program Container: References: - https://tvn.twcert.org.tw/taiwanvn/TVN-201906004 - http://surl.twcert.org.tw/aTxze - https://zeroday.hitcon.org/vulnerability/ZD-2019-00423
CVE ID: CVE-2019-9889 State: PUBLISHED Published: 2019-03-20T22:12:27 Last Updated: 2024-08-04T22:01:55.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager class. The issue results in a require call using a crafted type value, leading to Directory Traversal with File Inclusion. An attacker can leverage this vulnerability to execute code under the context of the web server. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/411140 - https://github.com/vanilla/vanilla/pull/7840 - https://github.com/vanilla/vanilla/compare/b043ae8...9f12b22
CVE ID: CVE-2019-9890 State: PUBLISHED Published: 2019-04-17T16:34:05 Last Updated: 2024-08-04T22:01:55.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Permissions. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/
CVE ID: CVE-2019-9891 State: PUBLISHED Published: 2019-05-31T20:42:48 Last Updated: 2024-08-04T22:01:55.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: The function getopt_simple as described in Advanced Bash Scripting Guide (ISBN 978-1435752184) allows privilege escalation and execution of commands when used in a shell script called, for example, via sudo. Additional Analyst Notes: - CVE Program Container: References: - https://www.redteam-pentesting.de/advisories/rt-sa-2019-007
CVE ID: CVE-2019-9892 State: PUBLISHED Published: 2019-05-21T23:17:49 Last Updated: 2024-08-04T22:01:54.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.0.6. An attacker who is logged into OTRS as an agent user with appropriate permissions may try to import carefully crafted Report Statistics XML that will result in reading of arbitrary files on the OTRS filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/05/msg00003.html - https://community.otrs.com/security-advisory-2019-04-security-u
s.debian.org/debian-lts-announce/2019/05/msg00003.html - https://community.otrs.com/security-advisory-2019-04-security-update-for-otrs-framework/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html
CVE ID: CVE-2019-9893 State: PUBLISHED Published: 2019-03-21T02:30:42 Last Updated: 2024-08-04T22:01:55.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/seccomp/libseccomp/issues/139 - https://seclists.org/oss-sec/2019/q1/179 - https://security.gentoo.org/glsa/201904-18 - https://usn.ubuntu.com/4001-1/ - https://usn.ubuntu.com/4001-2/ - http://lists.opensuse.org/opensuse-
g/glsa/201904-18 - https://usn.ubuntu.com/4001-1/ - https://usn.ubuntu.com/4001-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html - https://access.redhat.com/errata/RHSA-2019:3624
CVE ID: CVE-2019-9894 State: PUBLISHED Published: 2019-03-21T02:30:54 Last Updated: 2024-08-04T22:01:55.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification. Additional Analyst Notes: - CVE Program Container: References: - https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LDO3F267P347E6U2IILFCYW7JPTLCCES/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36LWQ3NPFIV7DC7TC4KFPRYRH2OR7SZ2/ - http://lists.o
.org/archives/list/package-announce%40lists.fedoraproject.org/message/36LWQ3NPFIV7DC7TC4KFPRYRH2OR7SZ2/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html - https://seclists.org/bugtraq/2019/Apr/6 - https://security.netapp.com/advisory/ntap-20190404-0001/ - https://www.debian.org/security/2019/dsa-4423 - https://lists.debian.org/debian-lts-announce/2019/04/msg00023.html
CVE ID: CVE-2019-9895 State: PUBLISHED Published: 2019-03-21T02:31:06 Last Updated: 2024-08-04T22:01:55.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding. Additional Analyst Notes: - CVE Program Container: References: - https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LDO3F267P347E6U2IILFCYW7JPTLCCES/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36LWQ3NPFIV7DC7TC4KFPRYRH2OR7SZ2/ - http:/
aproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36LWQ3NPFIV7DC7TC4KFPRYRH2OR7SZ2/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html - https://seclists.org/bugtraq/2019/Apr/6 - https://security.netapp.com/advisory/ntap-20190404-0001/ - https://www.debian.org/security/2019/dsa-4423
CVE ID: CVE-2019-9896 State: PUBLISHED Published: 2019-03-21T02:31:32 Last Updated: 2024-08-04T22:01:55.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file in the same directory as the executable. Additional Analyst Notes: - CVE Program Container: References: - https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html - https://security.netapp.com/advisory/ntap-20190404-0001/