Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
x/kernel/git/torvalds/linux.git/commit/?id=003b686ace820ce2d635a83f10f2d7f9c147dabc - https://security.netapp.com/advisory/ntap-20200204-0002/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
CVE ID: CVE-2019-20096 State: PUBLISHED Published: 2019-12-30T04:39:35 Last Updated: 2024-08-05T02:32:10.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.1, there is a memory leak in __feat_register_sp() in net/dccp/feat.c, which may cause denial of service, aka CID-1d3ff0950e2b. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1d3ff0950e2b40dc861b1739029649d03f591820 - http://packetstormsecurity.com/files/156455/Kernel-Live-Patch-Security-Notice-LSN-0063-1.html - https://usn.ubuntu.com/4285-1/ -
acketstormsecurity.com/files/156455/Kernel-Live-Patch-Security-Notice-LSN-0063-1.html - https://usn.ubuntu.com/4285-1/ - https://usn.ubuntu.com/4287-1/ - https://usn.ubuntu.com/4286-2/ - https://usn.ubuntu.com/4287-2/ - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - https://usn.ubuntu.com/4286-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
CVE ID: CVE-2019-20097 State: PUBLISHED Published: 2020-01-15T20:46:56.225730Z Last Updated: 2024-09-16T18:48:48.325Z Vendors: Atlassian Products: Bitbucket Server, Bitbucket Data Center Problem Types: Argument Injection Description: Bitbucket Server and Bitbucket Data Center versions starting from 1.0.0 before 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.1.9, from version 6.2.0 before 6.2.7, from version 6.3.0 before 6.3.6, from version 6.4.0 before 6.4.4, from version 6.5.0 before 6.5.3, from version 6.6.0 before 6.6.3, from version 6.7.0 before 6.7.3, from version 6.8.0 before 6.8.2, from version 6.9.0 before 6.9.1 had a Remote Code Execution vulnerability via th
6.7.3, from version 6.8.0 before 6.8.2, from version 6.9.0 before 6.9.1 had a Remote Code Execution vulnerability via the post-receive hook. A remote attacker with permission to clone and push files to a repository on the victim's Bitbucket Server or Bitbucket Data Center instance, can exploit this vulnerability to execute arbitrary commands on the Bitbucket Server or Bitbucket Data Center systems, using a file with specially crafted content. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/BSERV-12099
CVE ID: CVE-2019-20098 State: PUBLISHED Published: 2020-02-12T14:07:54.363183Z Last Updated: 2024-09-16T20:12:46.255Z Vendors: Atlassian Products: Jira Server Problem Types: Cross Site Scripting (CSRF) Description: The VerifySmtpServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulnerable to cross-site request forgery (CSRF). An attacker could exploit this by tricking an administrative user into making malicious HTTP requests, allowing the attacker to enumerate hosts and open ports on the internal network where Jira server is present. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/t
is present. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-05 - https://jira.atlassian.com/browse/JRASERVER-70605
CVE ID: CVE-2019-20099 State: PUBLISHED Published: 2020-02-12T14:07:54.400791Z Last Updated: 2024-09-16T20:03:50.700Z Vendors: Atlassian Products: Jira Server Problem Types: Cross Site Scripting (CSRF) Description: The VerifyPopServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulnerable to cross-site request forgery (CSRF). An attacker could exploit this by tricking an administrative user into making malicious HTTP requests, allowing the attacker to enumerate hosts and open ports on the internal network where Jira server is present. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tr
s present. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-05 - https://jira.atlassian.com/browse/JRASERVER-70606
CVE ID: CVE-2019-20100 State: PUBLISHED Published: 2020-02-12T14:07:54.434471Z Last Updated: 2024-09-17T00:40:31.695Z Vendors: Atlassian Products: Application Links, Jira Server Problem Types: Cross Site Scripting (CSRF) Description: The Atlassian Application Links plugin is vulnerable to cross-site request forgery (CSRF). The following versions are affected: all versions prior to 5.4.21, from version 6.0.0 before version 6.0.12, from version 6.1.0 before version 6.1.2, from version 7.0.0 before version 7.0.2, and from version 7.1.0 before version 7.1.3. The vulnerable plugin is used by Atlassian Jira Server and Data Center before version 8.7.0. An attacker could exploit this by tricking an
in is used by Atlassian Jira Server and Data Center before version 8.7.0. An attacker could exploit this by tricking an administrative user into making malicious HTTP requests, allowing the attacker to enumerate hosts and open ports on the internal network where Jira server is present. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-06 - https://ecosystem.atlassian.net/browse/APL-1390 - https://jira.atlassian.com/browse/JRASERVER-70607
CVE ID: CVE-2019-20101 State: PUBLISHED Published: 2021-09-14T05:10:10.380444Z Last Updated: 2024-10-09T16:22:27.184Z Vendors: Atlassian Products: Jira Server, Jira Data Center Problem Types: Improper Authorization Description: Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules via a Broken Access Control vulnerability in the /rest/whitelist/<version>/check endpoint. The affected versions are before version 8.13.3, and from version 8.14.0 before 8.14.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.atlassian.com/browse/JRASERVER-72618 - https://ecosystem.atlassian.net/bro
ADP Vulnrichment: References: - https://jira.atlassian.com/browse/JRASERVER-72618 - https://ecosystem.atlassian.net/browse/AW-20
CVE ID: CVE-2019-20102 State: PUBLISHED Published: 2020-04-22T03:30:15.017973Z Last Updated: 2024-09-16T16:57:45.935Z Vendors: Atlassian Products: Confluence Server Problem Types: Cross Site Scripting (XSS) Description: The attachment-uploading feature in Atlassian Confluence Server from version 6.14.0 through version 6.14.3, and version 6.15.0 before version 6.15.5 allows remote attackers to achieve stored cross-site- scripting (SXSS) via a malicious attachment with a modified `mimeType` parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/CONFSERVER-59358
CVE ID: CVE-2019-20104 State: PUBLISHED Published: 2020-02-06T03:10:24.881912Z Last Updated: 2024-09-16T17:04:16.877Z Vendors: Atlassian Products: Crowd Problem Types: Improper Restriction of XML External Entity Reference Description: The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before 3.7.1 allows remote attackers to perform a Denial of Service attack via an XML Entity Expansion vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/CWD-5526 - https://zeroauth.ltd/blog/2020/02/07/cve-2019-20104-atlassian-crowd-openid-client-vulnerable-to-remote-dos-via-xml-entity-expansion/
CVE ID: CVE-2019-20105 State: PUBLISHED Published: 2020-03-17T02:40:13.819495Z Last Updated: 2024-09-16T19:25:54.920Z Vendors: Atlassian Products: Application Links, Jira Server and Data Center Problem Types: Improper Authorization Description: The EditApplinkServlet resource in the Atlassian Application Links plugin before version 5.4.20, from version 6.0.0 before version 6.0.12, from version 6.1.0 before version 6.1.2, from version 7.0.0 before version 7.0.1, and from version 7.1.0 before version 7.1.3 allows remote attackers who have obtained access to administrator's session to access the EditApplinkServlet resource without needing to re-authenticate to pass "WebSudo" in products that su
ssion to access the EditApplinkServlet resource without needing to re-authenticate to pass "WebSudo" in products that support "WebSudo" through an improper access control vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://ecosystem.atlassian.net/browse/APL-1391 - https://jira.atlassian.com/browse/JRASERVER-70526
CVE ID: CVE-2019-20106 State: PUBLISHED Published: 2020-02-06T03:10:25.647528Z Last Updated: 2024-09-17T02:12:10.048Z Vendors: Atlassian Products: Jira Server and Data Center Problem Types: Information Disclosure Description: Comment properties in Atlassian Jira Server and Data Center before version 7.13.12, from 8.0.0 before version 8.5.4, and 8.6.0 before version 8.6.1 allows remote attackers to make comments on a ticket to which they do not have commenting permissions via a broken access control bug. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-70543
CVE ID: CVE-2019-20107 State: PUBLISHED Published: 2020-03-05T12:50:19 Last Updated: 2024-08-05T02:32:10.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary SQL commands via the (1) tproject_id parameter to keywordsView.php; the (2) req_spec_id parameter to reqSpecCompareRevisions.php; the (3) requirement_id parameter to reqCompareVersions.php; the (4) build_id parameter to planUpdateTC.php; the (5) tplan_id parameter to newest_tcversions.php; the (6) tplan_id parameter to tcCreatedPerUserGUI.php; the (7) tcase_id parameter to tcAssign2Tplan.php; or the (8) tes
the (6) tplan_id parameter to tcCreatedPerUserGUI.php; the (7) tcase_id parameter to tcAssign2Tplan.php; or the (8) testcase_id parameter to tcCompareVersions.php. Authentication is often easy to achieve: a guest account, that can execute this attack, can be created by anyone in the default configuration. Additional Analyst Notes: - CVE Program Container: References: - http://mantis.testlink.org/view.php?id=8829 - https://twitter.com/TLOpenSource/status/1212394020946751489 - https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/e2d88c9d7f8e02640ba65e5ff74b55d0399a53d0 - https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/7647a7b53ceab31524cfcfb3beb8435af0a30fc1 - https:/
53d0 - https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/7647a7b53ceab31524cfcfb3beb8435af0a30fc1 - https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/d27690c6cb7708a6db0701b6428381d32d51495a - https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/942c406fcee5d376235a264cb8a79300a0002d20 - https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/146b4f38010a48c36b7d9650060ca354c92ab4ac - https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/bcf7b971b5c88ea08d2dc47685f319be3b02cea8 - http://mantis.testlink.org/view.php?id=8829#c29360
CVE ID: CVE-2019-20138 State: PUBLISHED Published: 2019-12-30T13:56:26 Last Updated: 2024-08-05T02:32:10.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP Authentication library before 2019-12-27 for Nim has weak password hashing because the default algorithm for libsodium's crypto_pwhash_str is not used. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FedericoCeratto/nim-httpauth/commit/15fd0686dc363075c08976ad897d6c92e1e6283c
CVE ID: CVE-2019-20139 State: PUBLISHED Published: 2019-12-30T14:57:34 Last Updated: 2024-08-05T02:32:10.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter. Any authenticated user can attack the admin user. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/12/multiple-xss-bugs-in-nagios-569.html
CVE ID: CVE-2019-20140 State: PUBLISHED Published: 2019-12-30T16:35:23 Last Updated: 2024-08-05T02:39:09.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libsixel 1.8.4. There is a heap-based buffer overflow in the function gif_out_code at fromgif.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/122
CVE ID: CVE-2019-20141 State: PUBLISHED Published: 2019-12-30T16:47:39 Last Updated: 2024-08-05T02:39:08.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in the Laborator Neon theme 2.0 for WordPress via the data/autosuggest-remote.php q parameter. Additional Analyst Notes: - CVE Program Container: References: - https://knassar7o2.blogspot.com/2019/12/neon-dashboard-xss-reflected.html - https://knassar702.github.io/cve/neon/
CVE ID: CVE-2019-20142 State: PUBLISHED Published: 2020-01-13T20:04:21 Last Updated: 2024-08-05T02:39:07.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 12.3 through 12.6.1. It allows Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/releases/2020/01/02/security-release-gitlab-12-6-2-released/
CVE ID: CVE-2019-20143 State: PUBLISHED Published: 2020-01-13T20:03:27 Last Updated: 2024-08-05T02:39:08.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 12.6. It has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/releases/2020/01/02/security-release-gitlab-12-6-2-released/
CVE ID: CVE-2019-20144 State: PUBLISHED Published: 2020-01-13T20:01:45 Last Updated: 2024-08-05T02:39:08.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 10.8 through 12.6.1. It has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/releases/2020/01/02/security-release-gitlab-12-6-2-released/
CVE ID: CVE-2019-20145 State: PUBLISHED Published: 2020-01-13T20:00:39 Last Updated: 2024-08-05T02:39:08.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 11.4 through 12.6.1. It has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/releases/2020/01/02/security-release-gitlab-12-6-2-released/
CVE ID: CVE-2019-20146 State: PUBLISHED Published: 2020-01-13T19:59:11 Last Updated: 2024-08-05T02:39:09.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 11.0 through 12.6. It allows Uncontrolled Resource Consumption. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/releases/2020/01/02/security-release-gitlab-12-6-2-released/
CVE ID: CVE-2019-20147 State: PUBLISHED Published: 2020-01-13T19:56:40 Last Updated: 2024-08-05T02:39:08.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 9.1 through 12.6.1. It has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/releases/2020/01/02/security-release-gitlab-12-6-2-released/
CVE ID: CVE-2019-20148 State: PUBLISHED Published: 2020-01-13T19:52:52 Last Updated: 2024-08-05T02:39:09.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 8.13 through 12.6.1. It has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/releases/2020/01/02/security-release-gitlab-12-6-2-released/
CVE ID: CVE-2019-20149 State: PUBLISHED Published: 2019-12-30T18:25:10 Last Updated: 2024-08-05T02:39:08.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}. Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jonschlinkert/kind-of/issues/30 - https://github.com/jonschlinkert/kind-of/pull/31
CVE ID: CVE-2019-20150 State: PUBLISHED Published: 2020-08-20T12:35:01 Last Updated: 2024-08-05T02:39:08.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TreasuryXpress 19191105, a logged-in user can discover saved credentials, even though the UI hides them. Using functionality within the application and a malicious host, it is possible to force the application to expose saved SSH/SFTP credentials. This can be done by using the application's editor to change the expected SFTP Host IP to a malicious host, and then using the Check Connectivity option. The application then sends these saved credentials to the malicious host. Additional Analyst Notes: - CVE Program Container: R
plication then sends these saved credentials to the malicious host. Additional Analyst Notes: - CVE Program Container: References: - https://sion-evans.com/blog/CVE-2019-20150.html
CVE ID: CVE-2019-20151 State: PUBLISHED Published: 2020-08-20T12:36:21 Last Updated: 2024-08-05T02:39:09.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in TreasuryXpress 19191105. Due to the lack of filtering and sanitization of user input, malicious JavaScript can be executed by the application's administrator(s). A malicious payload can be injected within the Multi Approval security component and inserted via the Note field. As a result, the payload is executed by the application's administrator(s). Additional Analyst Notes: - CVE Program Container: References: - https://sion-evans.com/blog/CVE-2019-20151.html
CVE ID: CVE-2019-20152 State: PUBLISHED Published: 2020-08-20T12:37:38 Last Updated: 2024-08-05T02:39:08.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in TreasuryXpress 19191105. Due to the lack of filtering and sanitization of user input, malicious JavaScript can be executed throughout the application. A malicious payload can be injected within the Custom Workflow component and inserted via the Create New Workflow field. As a result, the payload is executed via the navigation bar throughout the application. Additional Analyst Notes: - CVE Program Container: References: - https://sion-evans.com/blog/CVE-2019-20152.html
CVE ID: CVE-2019-20153 State: PUBLISHED Published: 2020-01-05T22:12:32 Last Updated: 2024-08-05T02:39:07.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) in v5.4. An XML external entity (XXE) vulnerability in the upload definition feature in definition_upload_attach.jsp allows authenticated remote attackers to read arbitrary files (including configuration files containing administrative credentials). Additional Analyst Notes: - CVE Program Container: References: - https://www.n00py.io/2020/01/zero-day-exploit-in-determine-selectica-contract-lifecycle-management-sclm-v5-4/
CVE ID: CVE-2019-20154 State: PUBLISHED Published: 2020-01-05T22:15:53 Last Updated: 2024-08-05T02:39:09.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. A cross-site scripting (XSS) vulnerability in multiple getchart.jsp parameters allows remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://www.n00py.io/2020/01/zero-day-exploit-in-determine-selectica-contract-lifecycle-management-sclm-v5-4/
CVE ID: CVE-2019-20155 State: PUBLISHED Published: 2020-01-05T22:23:03 Last Updated: 2024-08-05T02:39:08.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in report_edit.jsp in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. Any authenticated user may execute Groovy code when generating a report, resulting in arbitrary code execution on the underlying server. Additional Analyst Notes: - CVE Program Container: References: - https://www.n00py.io/2020/01/zero-day-exploit-in-determine-selectica-contract-lifecycle-management-sclm-v5-4/
CVE ID: CVE-2019-20159 State: PUBLISHED Published: 2019-12-30T23:57:08 Last Updated: 2024-08-05T02:39:09.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory leak in dinf_New() in isomedia/box_code_base.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1321
CVE ID: CVE-2019-20160 State: PUBLISHED Published: 2019-12-30T23:56:59 Last Updated: 2024-08-05T02:39:07.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a stack-based buffer overflow in the function av1_parse_tile_group() in media_tools/av_parsers.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1334
CVE ID: CVE-2019-20161 State: PUBLISHED Published: 2019-12-30T23:56:46 Last Updated: 2024-08-05T02:39:09.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function ReadGF_IPMPX_WatermarkingInit() in odf/ipmpx_code.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1320 - https://lists.debian.org/debian-lts-announce/2020/01/msg00017.html
CVE ID: CVE-2019-20162 State: PUBLISHED Published: 2019-12-30T23:56:35 Last Updated: 2024-08-05T02:39:09.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function gf_isom_box_parse_ex() in isomedia/box_funcs.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1327 - https://lists.debian.org/debian-lts-announce/2020/01/msg00017.html
CVE ID: CVE-2019-20163 State: PUBLISHED Published: 2019-12-30T23:56:23 Last Updated: 2024-08-05T02:39:09.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_odf_avc_cfg_write_bs() in odf/descriptors.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1335 - https://lists.debian.org/debian-lts-announce/2020/01/msg00017.html
CVE ID: CVE-2019-20164 State: PUBLISHED Published: 2019-12-30T23:56:14 Last Updated: 2024-08-05T02:39:09.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_isom_box_del() in isomedia/box_funcs.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1332