Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-1010095 State: PUBLISHED Published: 2019-07-18T12:36:28 Last Updated: 2024-08-05T03:07:18.033Z Vendors: DomainMOD Products: DomainMOD Problem Types: Cross ite Request Forgery (CSRF) Description: DomainMOD v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can add the administrator account. The component is: admin/users/add.php. The attack vector is: After the administrator logged in, open the html page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/domainmod/domainmod/issues/65
CVE ID: CVE-2019-1010096 State: PUBLISHED Published: 2019-07-18T12:37:34 Last Updated: 2024-08-05T03:07:18.223Z Vendors: DomainMOD Products: DomainMOD Problem Types: Cross ite Request Forgery (CSRF) Description: DomainMOD v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can change the read-only user to admin. The component is: admin/users/edit.php?uid=2. The attack vector is: After the administrator logged in, open the html page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/domainmod/domainmod/issues/65
CVE ID: CVE-2019-1010100 State: PUBLISHED Published: 2019-07-19T15:37:12 Last Updated: 2024-08-05T03:07:18.327Z Vendors: Akeo Consulting Products: Rufus Problem Types: DLL search order hijacking Description: Akeo Consulting Rufus 3.0 and earlier is affected by: DLL search order hijacking. The impact is: Arbitrary code execution WITH escalation of privilege. The component is: Executable installers, portable executables (ALL executables on the web site). The attack vector is: CAPEC-471, CWE-426, CWE-427. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2018/q2/146
CVE ID: CVE-2019-1010101 State: PUBLISHED Published: 2019-07-19T15:38:13 Last Updated: 2024-08-05T03:07:18.332Z Vendors: Akeo Consulting Products: Rufus Problem Types: Insecure Permissions Description: Akeo Consulting Rufus 3.0 and earlier is affected by: Insecure Permissions. The impact is: arbitrary code execution with escalation of privilege. The component is: Executable installer, portable executable (ALL executables available). The attack vector is: CWE-29, CWE-377, CWE-379. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2018/q2/146
CVE ID: CVE-2019-1010104 State: PUBLISHED Published: 2019-07-18T15:49:16 Last Updated: 2024-08-05T03:07:18.415Z Vendors: TechyTalk Products: Quick Chat WordPress Plugin Problem Types: SQL Injection Description: TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection. The impact is: Access to the database. The component is: like_escape is used in Quick-chat.php line 399. The attack vector is: Crafted ajax request. Additional Analyst Notes: - CVE Program Container: References: - https://metalamin.github.io/Quick-Chat-SQLi-EN/
CVE ID: CVE-2019-1010112 State: PUBLISHED Published: 2019-07-18T18:31:51 Last Updated: 2024-08-05T03:07:18.133Z Vendors: OECMS Products: OECMS Problem Types: Cross ite Request Forgery (CSRF) Description: OECMS v4.3.R60321 and v4.3 later is affected by: Cross Site Request Forgery (CSRF). The impact is: The victim clicks on adding an administrator account. The component is: admincp.php. The attack vector is: network connectivity. The fixed version is: v4.3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LiodAir/images/blob/master/csrf.md
CVE ID: CVE-2019-1010113 State: PUBLISHED Published: 2019-07-19T15:22:07 Last Updated: 2024-08-05T03:07:17.997Z Vendors: Premium Software Products: CLEditor Problem Types: Cross Site Scripting (XSS) Description: Premium Software CLEditor 1.4.5 and earlier is affected by: Cross Site Scripting (XSS). The impact is: An attacker might be able to inject arbitrary html and script code into the web site. The component is: jQuery plug-in. The attack vector is: the victim must open a crafted href attribute of a link (A) element. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/drive/folders/1UxgdL8SJO6KKnG3bh0-LTl7C6i41VwoW?usp=sharing
CVE ID: CVE-2019-1010123 State: PUBLISHED Published: 2019-07-23T12:36:44 Last Updated: 2024-08-05T03:07:18.178Z Vendors: MODX Revolution Products: Gallery Problem Types: CWE-434 Description: MODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous Type. The impact is: Creating file with custom a filename and content. The component is: Filtering user parameters before passing them into phpthumb class. The attack vector is: web request via /assets/components/gallery/connector.php. Additional Analyst Notes: - CVE Program Container: References: - https://modx.pro/security/15912#comment-99640 - https://modx.today/posts/2018/07/critical-security-vulnerabili
rences: - https://modx.pro/security/15912#comment-99640 - https://modx.today/posts/2018/07/critical-security-vulnerability-in-gallery-1.7.1
CVE ID: CVE-2019-1010124 State: PUBLISHED Published: 2019-07-23T00:00:00 Last Updated: 2024-08-05T03:07:18.228Z Vendors: WebAppick Products: WooCommerce Product Feed Problem Types: Cross Site Scripting (XSS) Description: WebAppick WooCommerce Product Feed 2.2.18 and earlier is affected by: Cross Site Scripting (XSS). The impact is: XSS to RCE via editing theme files in WordPress. The component is: admin/partials/woo-feed-manage-list.php:63. The attack vector is: Administrator must be logged in. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=T-sqQDFRRBg - https://wpvulndb.com/vulnerabilities/9856 - http://packetstormsecurity.com/files/154263/W
tube.com/watch?v=T-sqQDFRRBg - https://wpvulndb.com/vulnerabilities/9856 - http://packetstormsecurity.com/files/154263/WordPress-WooCommerce-Product-Feed-2.2.18-Cross-Site-Scripting.html
CVE ID: CVE-2019-1010127 State: PUBLISHED Published: 2019-07-25T18:35:30 Last Updated: 2024-08-05T03:07:18.079Z Vendors: VCFTools Products: vcftools Problem Types: Use-after-free Description: VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact (eg. code execution or information disclosure). The component is: The header::add_FILTER_descriptor method in header.cpp. The attack vector is: The victim must open a specially crafted VCF file. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/document/d/e/2PACX-1vQJveVcGMp_NMdBY5Je2K2k63RoCYznvKjJk5u1wJRmLotvwQkG5qiqZjpABcOkjzj49wkwG
: - https://docs.google.com/document/d/e/2PACX-1vQJveVcGMp_NMdBY5Je2K2k63RoCYznvKjJk5u1wJRmLotvwQkG5qiqZjpABcOkjzj49wkwGweiFwrc/pub - https://github.com/vcftools/vcftools/issues/141
CVE ID: CVE-2019-1010129 State: REJECTED Published: 2019-07-23T12:20:26 Last Updated: 2019-07-29T21:35:30 Description: No description available.
CVE ID: CVE-2019-1010136 State: PUBLISHED Published: 2019-07-19T15:42:04 Last Updated: 2024-08-05T03:07:18.246Z Vendors: ChinaMobile Products: GPN2.4P21-C-CN Problem Types: Incorrect Access Control - Unauthenticated Remote Reboot Description: ChinaMobile GPN2.4P21-C-CN W2001EN-00 is affected by: Incorrect Access Control - Unauthenticated Remote Reboot. The impact is: PLC Wireless Router's are vulnerable to an unauthenticated remote reboot due. The component is: Reboot settings are available to unauthenticated users instead of only authenticaed users. The attack vector is: Remote. Additional Analyst Notes: - CVE Program Container: References: - https://www.shodan.io/search?query=title%3APLC++
emote. Additional Analyst Notes: - CVE Program Container: References: - https://www.shodan.io/search?query=title%3APLC++pstVal-%3Evalue%3Ahtml%2Findex.html - https://www.exploit-db.com/exploits/45187/
CVE ID: CVE-2019-1010142 State: PUBLISHED Published: 2019-07-19T15:45:09 Last Updated: 2024-08-05T03:07:18.093Z Vendors: SecDev Products: scapy Problem Types: Denial of Service Description: scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: _RADIUSAttrPacketListField.getfield(self..). The attack vector is: over the network or in a pcap. both work. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/secdev/scapy/pull/1409/files#diff-441eff981e466959968111fc6314fe93L1058 - https://www.imperva.com/blog/scapy-sploit-python-network-tool-is-vulnerable-to-denial-of-service-dos-
1fc6314fe93L1058 - https://www.imperva.com/blog/scapy-sploit-python-network-tool-is-vulnerable-to-denial-of-service-dos-attack-cve-pending/ - https://github.com/secdev/scapy/pull/1409 - http://www.securityfocus.com/bid/106674 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T46XW4S5BCA3VV3JT3C5Q6LBEXSIACLN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42NRPMC3NS2QVFNIXYP6WV2T3LMLLY7E/
CVE ID: CVE-2019-1010147 State: PUBLISHED Published: 2019-07-25T23:02:40 Last Updated: 2024-08-05T03:07:18.348Z Vendors: Yellowfin Products: Smart Reporting Problem Types: Incorrect Access Control - Privileges Escalation Description: Yellowfin Smart Reporting All Versions Prior to 7.3 is affected by: Incorrect Access Control - Privileges Escalation. The impact is: Victim attacked and access admin functionality through their browser and control browser. The component is: MIAdminStyles.i4. The attack vector is: Victims are typically lured to a web site under the attacker's control; the XSS vulnerability on the target domain is silently exploited without the victim's knowledge. The fixed versio
ntrol; the XSS vulnerability on the target domain is silently exploited without the victim's knowledge. The fixed version is: 7.4 and later. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1sk5IklziyEggeWpWE4Wyk9xqa30CjNpS
CVE ID: CVE-2019-1010148 State: PUBLISHED Published: 2019-07-23T13:06:24 Last Updated: 2024-08-05T03:07:18.271Z Vendors: zzcms Products: zzcms Problem Types: SQL Injection Description: zzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/Lz1y/acd1bfd0cc0e0f53b8f781840e7bf368
CVE ID: CVE-2019-1010149 State: PUBLISHED Published: 2019-07-23T13:07:45 Last Updated: 2024-08-05T03:07:18.227Z Vendors: zzcms Products: zzcms Problem Types: File Delete to Code Execution Description: zzcms version 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: zzcms File Delete to Code Execution. The component is: user/licence_save.php. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/Lz1y/e82eb9cc776e629b9d1874dc689421eb
CVE ID: CVE-2019-1010150 State: PUBLISHED Published: 2019-07-23T13:09:12 Last Updated: 2024-08-05T03:07:18.256Z Vendors: zzcms Products: zzcms Problem Types: File Delete to Code Execution Description: zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: /user/zssave.php. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/Lz1y/7ab529230c43dfc5441ac32dd13e3e5b
CVE ID: CVE-2019-1010151 State: PUBLISHED Published: 2019-07-19T13:56:32 Last Updated: 2024-08-05T03:07:18.089Z Vendors: zzcms Products: zzmcms Problem Types: File Delete to getshell Description: zzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell. The impact is: getshell. The component is: /user/ppsave.php. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/Lz1y/24a6368c7ffdc1af7292035dd16a97f5
CVE ID: CVE-2019-1010152 State: PUBLISHED Published: 2019-07-23T13:10:53 Last Updated: 2024-08-05T03:07:18.291Z Vendors: zzcms Products: zzcms Problem Types: File Delete to Code Execution Description: zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: user/manage.php line 31-80. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/Lz1y/cfb2f8179003b91404ad029333508f4c
CVE ID: CVE-2019-1010153 State: PUBLISHED Published: 2019-07-23T13:12:12 Last Updated: 2024-08-05T03:07:18.297Z Vendors: zzcms Products: zzcms Problem Types: SQL Injection Description: zzcms 8.3 and earlier is affected by: SQL Injection. The impact is: sql inject. The component is: zs/subzs.php. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/Lz1y/31595b060cd6a031896fdf2b3a1273f5
CVE ID: CVE-2019-1010155 State: PUBLISHED Published: 2019-07-23T13:18:36 Last Updated: 2024-08-05T03:07:18.235Z Vendors: D-Link Products: DSL-2750U Problem Types: Authentication Bypass Description: D-Link DSL-2750U 1.11 is affected by: Authentication Bypass. The impact is: denial of service and information leakage. The component is: login. NOTE: Third parties dispute this issues as not being a vulnerability because although the wizard is accessible without authentication, it can't actually configure anything. Thus, there is no denial of service or information leakage Additional Analyst Notes: - CVE Program Container: References: - https://youtu.be/BQQbp2vn_wY - http://www.securityfocus.com/b
onal Analyst Notes: - CVE Program Container: References: - https://youtu.be/BQQbp2vn_wY - http://www.securityfocus.com/bid/109351 - https://cxsecurity.com/issue/WLB-2018080199 - https://www.youtube.com/watch?v=7sk6agpcA_s
CVE ID: CVE-2019-1010156 State: REJECTED Published: 2019-07-23T13:20:57 Last Updated: 2019-07-29T14:43:31 Description: No description available.
CVE ID: CVE-2019-1010161 State: PUBLISHED Published: 2019-07-25T13:17:52 Last Updated: 2024-08-05T03:07:18.377Z Vendors: perl-CRYPT-JWT Products: perl-CRYPT-JWT Problem Types: Incorrect Access Control Description: perl-CRYPT-JWT 0.022 and earlier is affected by: Incorrect Access Control. The impact is: bypass authentication. The component is: JWT.pm for JWT security token, line 614 in _decode_jws(). The attack vector is: network connectivity(crafting user-controlled input to bypass authentication). The fixed version is: 0.023. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DCIT/perl-Crypt-JWT/issues/3#issuecomment-417947483
CVE ID: CVE-2019-1010162 State: PUBLISHED Published: 2019-07-23T13:28:53 Last Updated: 2024-08-05T03:07:18.222Z Vendors: jsi Products: jsi Problem Types: CWE-476 Description: jsish 2.4.74 2.0474 is affected by: CWE-476: NULL Pointer Dereference. The impact is: denial of service. The component is: function Jsi_StrcmpDict (jsiChar.c:121). The attack vector is: The victim must execute crafted javascript code. The fixed version is: 2.4.77. Additional Analyst Notes: - CVE Program Container: References: - https://jsish.org/fossil/jsi/tktview/5533c4d665b9683eebe4d662493f15eb911d1c8f
CVE ID: CVE-2019-1010163 State: PUBLISHED Published: 2019-07-24T11:42:32 Last Updated: 2024-08-05T03:07:18.512Z Vendors: Socusoft Co Products: Photo 2 Video Converter Problem Types: Buffer Overflow - Local shell-code execution and Denial of Service Description: Socusoft Co Photo 2 Video Converter 8.0.0 is affected by: Buffer Overflow - Local shell-code execution and Denial of Service. The impact is: Local privilege escalation (dependant upon conditions), shell code execution and denial-of-service. The component is: pdmlog.dll library. The attack vector is: The attacker must have access to local system (either directly, or remotley). Additional Analyst Notes: - CVE Program Container: Referenc
have access to local system (either directly, or remotley). Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/145181/SocuSoft-Co.-Photo-2-Video-Converter-8.0.0-Code-Execution-DoS.html - https://ret2eax.github.io/posts/socusoft-bof.html - https://www.exploit-db.com/exploits/43208/
CVE ID: CVE-2019-1010169 State: PUBLISHED Published: 2019-07-23T13:40:08 Last Updated: 2024-08-05T03:07:18.361Z Vendors: Jsish Products: Jsi Problem Types: Out-of-bounds Read Description: Jsish 2.4.77 2.0477 is affected by: Out-of-bounds Read. The impact is: denial of service. The component is: function lexer_getchar (jsiLexer.c:9). The attack vector is: executing crafted javascript code. The fixed version is: 2.4.78. Additional Analyst Notes: - CVE Program Container: References: - https://jsish.org/fossil/jsi/tktview/3a069014976f3422d9d96821dc555c8326c02ae3
CVE ID: CVE-2019-1010170 State: PUBLISHED Published: 2019-07-23T13:41:54 Last Updated: 2024-08-05T03:07:18.287Z Vendors: Jsish Products: Jsi Problem Types: Use After Free Description: Jsish 2.4.77 2.0477 is affected by: Use After Free. The impact is: denial of service. The component is: function Jsi_ObjFree (jsiObj.c:230). The attack vector is: executing crafted javascript code. The fixed version is: 2.4.78. Additional Analyst Notes: - CVE Program Container: References: - https://jsish.org/fossil/jsi/tktview/870f496bb8a707491df8026e2ff78b33a5cf44c1
CVE ID: CVE-2019-1010171 State: PUBLISHED Published: 2019-07-23T13:43:28 Last Updated: 2024-08-05T03:07:18.489Z Vendors: Jsish Products: Jsi Problem Types: Nullpointer dereference Description: Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference. The impact is: denial of service. The component is: function jsi_DumpFunctions (jsiEval.c:567). The attack vector is: executing crafted javascript code. The fixed version is: 2.4.84. Additional Analyst Notes: - CVE Program Container: References: - https://jsish.org/fossil/jsi/tktview/a3026a7c06e0f41af461aa0bc2f7a7e886209390
CVE ID: CVE-2019-1010172 State: PUBLISHED Published: 2019-07-25T13:13:15 Last Updated: 2024-08-05T03:07:18.489Z Vendors: Jsish Products: Jsish Problem Types: Uncontrolled Resource Consumption Description: Jsish 2.4.84 2.0484 is affected by: Uncontrolled Resource Consumption. The impact is: denial of service. The component is: function jsiValueGetString (jsiUtils.c). The attack vector is: executing crafted javascript code. The fixed version is: after commit f3a8096e0ce44bbf36c1dcb6e603adf9c8670c39. Additional Analyst Notes: - CVE Program Container: References: - https://jsish.org/fossil/jsi/tktview/16f01b0177c2e309ab01102feb76b39d57a3eb66
CVE ID: CVE-2019-1010173 State: PUBLISHED Published: 2019-07-23T14:00:56 Last Updated: 2024-08-05T03:07:18.383Z Vendors: Jsish Products: Jsi Problem Types: Reachable Assertion Description: Jsish 2.4.84 2.0484 is affected by: Reachable Assertion. The impact is: denial of service. The component is: function Jsi_ValueArrayIndex (jsiValue.c:366). The attack vector is: executing crafted javascript code. The fixed version is: after commit 738ead193aff380a7e3d7ffb8e11e446f76867f3. Additional Analyst Notes: - CVE Program Container: References: - https://jsish.org/fossil/jsi/tktview/b3278d1a441477d50363d28df79bbf58de2448af
CVE ID: CVE-2019-1010174 State: PUBLISHED Published: 2019-07-25T13:12:03 Last Updated: 2024-08-05T03:07:18.472Z Vendors: CImg Products: The CImg Library Problem Types: command injection Description: CImg The CImg Library v.2.3.3 and earlier is affected by: command injection. The impact is: RCE. The component is: load_network() function. The attack vector is: Loading an image from a user-controllable url can lead to command injection, because no string sanitization is done on the url. The fixed version is: v.2.3.4. Additional Analyst Notes: - CVE Program Container: References: - https://framagit.org/dtschump/CImg/commit/5ce7a426b77f814973e56182a0e76a2b04904146 - https://lists.debian.org/debia
s: - https://framagit.org/dtschump/CImg/commit/5ce7a426b77f814973e56182a0e76a2b04904146 - https://lists.debian.org/debian-lts-announce/2019/09/msg00030.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00033.html
CVE ID: CVE-2019-1010176 State: PUBLISHED Published: 2019-07-25T13:05:09 Last Updated: 2024-08-05T03:07:18.367Z Vendors: JerryScript Products: JerryScript Problem Types: Buffer Overflow Description: JerryScript commit 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 is affected by: Buffer Overflow. The impact is: denial of service and possibly arbitrary code execution. The component is: function lit_char_to_utf8_bytes (jerry-core/lit/lit-char-helpers.c:377). The attack vector is: executing crafted javascript code. The fixed version is: after commit 505dace719aebb3308a3af223cfaa985159efae0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jerryscript-project/jerrysc
59efae0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jerryscript-project/jerryscript/issues/2476
CVE ID: CVE-2019-1010177 State: PUBLISHED Published: 2019-07-24T11:52:20 Last Updated: 2024-08-05T03:07:18.412Z Vendors: Jsish Products: Jsi Problem Types: Use After Free Description: Jsish 2.4.70 2.047 is affected by: Use After Free. The impact is: denial of service and possibly arbitrary code execution. The component is: function Jsi_RegExpNew (jsi/jsiRegexp.c:39). The attack vector is: executing crafted javascript code. The fixed version is: after commit 48a66c798d. Additional Analyst Notes: - CVE Program Container: References: - https://jsish.org/fossil/jsi/tktview?name=65c8965977
CVE ID: CVE-2019-1010178 State: PUBLISHED Published: 2019-07-24T13:50:45 Last Updated: 2024-08-05T03:07:18.450Z Vendors: Fred Products: MODX Revolution Problem Types: CWE-648 Description: Fred MODX Revolution < 1.0.0-beta5 is affected by: Incorrect Access Control - CWE-648. The impact is: Remote Code Execution. The component is: assets/components/fred/web/elfinder/connector.php. The attack vector is: Uploading a PHP file or change data in the database. The fixed version is: https://github.com/modxcms/fred/commit/139cefac83b2ead90da23187d92739dec79d3ccd and https://github.com/modxcms/fred/commit/01f0a3d1ae7f3970639c2a0db1887beba0065246. Additional Analyst Notes: - CVE Program Container: Refer
m/modxcms/fred/commit/01f0a3d1ae7f3970639c2a0db1887beba0065246. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=vOlw2DP9WbE
CVE ID: CVE-2019-1010179 State: PUBLISHED Published: 2019-07-24T13:44:50 Last Updated: 2024-08-05T03:07:18.485Z Vendors: PHKP Products: PHKP Problem Types: Improper Neutralization of Special Elements used in a Command ('Command Injection') Description: PHKP including commit 88fd9cfdf14ea4b6ac3e3967feea7bcaabb6f03b is affected by: Improper Neutralization of Special Elements used in a Command ('Command Injection'). The impact is: It is possible to manipulate gpg-keys or execute commands remotely. The component is: function pgp_exec() phkp.php:98. The attack vector is: HKP-Api: /pks/lookup?search. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/remko/phkp/iss
: /pks/lookup?search. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/remko/phkp/issues/1
CVE ID: CVE-2019-1010180 State: PUBLISHED Published: 2019-07-24T12:01:08 Last Updated: 2024-08-05T03:07:18.377Z Vendors: GNU Products: gdb Problem Types: Buffer Overflow - Out of bound memory access Description: GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=23657 - http://www.securityfocus.com/bid/109367 - http://lists.opensuse.org/opensuse-se
are.org/bugzilla/show_bug.cgi?id=23657 - http://www.securityfocus.com/bid/109367 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00028.html - https://security.gentoo.org/glsa/202003-31