Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
erflow_JBIG2Stream__readTextRegionSeg - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FWEWFUVITPA3Y6F4A5SJSROKYT7PRH7Q/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNIJWRYTCLGV35WGIHYTMMOPEEOOTIPT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJJD7X3ES7ZHJUY2R3DAVCJPV23R64VK/
CVE ID: CVE-2019-13287 State: PUBLISHED Published: 2019-07-04T21:06:50 Last Updated: 2024-08-04T23:49:24.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Xpdf 4.01.01, there is an out-of-bounds read vulnerability in the function SplashXPath::strokeAdjust() located at splash/SplashXPath.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure. This is related to CVE-2018-16368. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PanguL4b/pocs/tree/master/xpdf/out-of-bounds-read-in-SplashXPath__strokeAdjust
CVE ID: CVE-2019-13288 State: PUBLISHED Published: 2019-07-04T21:06:59 Last Updated: 2024-08-04T23:49:24.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Xpdf 4.01.01, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PanguL4b/pocs/tree/master/xpdf/stack-overflow_dos_Parser__getObj
CVE ID: CVE-2019-13289 State: PUBLISHED Published: 2019-07-04T21:07:06 Last Updated: 2024-08-04T23:49:24.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Xpdf 4.01.01, there is a use-after-free vulnerability in the function JBIG2Stream::close() located at JBIG2Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PanguL4b/pocs/tree/master/xpdf/heap-use-after-free_JBIG2Stream
CVE ID: CVE-2019-13290 State: PUBLISHED Published: 2019-07-04T21:07:14 Last Updated: 2024-08-04T23:49:24.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing remote attackers to execute arbitrary code via a crafted PDF file. This occurs with a large BDC property name that overflows the allocated size of a display list node. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701118 - http://git.ghostscript.com/?p=mupdf.git%3Bh=aaf794439e40a2ef544f15b50c20e657414dec7a - http://git.ghostscript.com/?p=mupdf.g
://git.ghostscript.com/?p=mupdf.git%3Bh=aaf794439e40a2ef544f15b50c20e657414dec7a - http://git.ghostscript.com/?p=mupdf.git%3Bh=ed19bc806809ad10c4ddce515d375581b86ede85 - https://archive.today/oi6bm - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUXKCY35PKC32IFHN4RBUCZ75OWEYVJH/ - https://lists.debian.org/debian-lts-announce/2020/07/msg00019.html - https://www.debian.org/security/2020/dsa-4753
CVE ID: CVE-2019-13291 State: PUBLISHED Published: 2019-07-04T21:07:21 Last Updated: 2024-08-04T23:49:24.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan() located at Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It might allow an attacker to cause Information Disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=41818
CVE ID: CVE-2019-13292 State: PUBLISHED Published: 2019-07-04T21:56:07 Last Updated: 2024-08-04T23:49:24.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection issue was discovered in webERP 4.15. Payments.php accepts payment data in base64 format. After this is decoded, it is deserialized. Then, this deserialized data goes directly into a SQL query, with no sanitizing checks. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47013
CVE ID: CVE-2019-13294 State: PUBLISHED Published: 2019-07-04T22:09:54 Last Updated: 2024-08-04T23:49:24.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: AROX School-ERP Pro has a command execution vulnerability. import_stud.php and upload_fille.php do not have session control. Therefore an unauthenticated user can execute a command on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46999 - http://www.pentest.com.tr/exploits/AROX-School-ERP-Pro-Unauthenticated-RCE-Metasploit.html
CVE ID: CVE-2019-13295 State: PUBLISHED Published: 2019-07-05T00:50:46 Last Updated: 2024-08-04T23:49:24.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1608 - https://github.com/ImageMagick/ImageMagick/commit/a7759f410b773a1dd57b0e1fb28112e1cd8b97bc - https://github.com/ImageMagick/ImageMagick6/commit/55e6dc49f1a381d9d511ee2f888fdc3e3c3e3953 - https://lists.debian.org/debian-lts-announce/2019/08/msg00021.html - htt
mmit/55e6dc49f1a381d9d511ee2f888fdc3e3c3e3953 - https://lists.debian.org/debian-lts-announce/2019/08/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - https://usn.ubuntu.com/4192-1/ - https://www.debian.org/security/2020/dsa-4712 - https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html
CVE ID: CVE-2019-13296 State: PUBLISHED Published: 2019-07-05T00:50:58 Last Updated: 2024-08-04T23:49:24.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c for a NULL value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1604 - https://github.com/ImageMagick/ImageMagick/commit/ce08a3691a8ac29125e29fc41967b3737fa3f425 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html
CVE ID: CVE-2019-13297 State: PUBLISHED Published: 2019-07-05T00:51:07 Last Updated: 2024-08-04T23:49:24.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1609 - https://github.com/ImageMagick/ImageMagick6/commit/35c7032723d85eee7318ff6c82f031fa2666b773 - https://github.com/ImageMagick/ImageMagick/commit/604588fc35c7585abb7a9e71f69bb82e4389fefc - https://lists.debian.org/debian-lts-announce/2019/08/msg00021.html - ht
ommit/604588fc35c7585abb7a9e71f69bb82e4389fefc - https://lists.debian.org/debian-lts-announce/2019/08/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - https://usn.ubuntu.com/4192-1/ - https://www.debian.org/security/2020/dsa-4712 - https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html
CVE ID: CVE-2019-13298 State: PUBLISHED Published: 2019-07-05T00:51:52 Last Updated: 2024-08-04T23:49:24.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo because of a MagickCore/enhance.c error. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1611 - https://github.com/ImageMagick/ImageMagick/commit/d4fc44b58a14f76b1ac997517d742ee12c9dc5d3 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html
CVE ID: CVE-2019-13299 State: PUBLISHED Published: 2019-07-05T00:52:07 Last Updated: 2024-08-04T23:49:24.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1610 - https://github.com/ImageMagick/ImageMagick/commit/8187d2d8fd010d2d6b1a3a8edd935beec404dddc - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html
CVE ID: CVE-2019-13300 State: PUBLISHED Published: 2019-07-05T00:52:17 Last Updated: 2024-08-04T23:49:24.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1586 - https://github.com/ImageMagick/ImageMagick6/commit/5e409ae7a389cdf2ed17469303be3f3f21cec450 - https://github.com/ImageMagick/ImageMagick/commit/a906fe9298bf89e01d5272023db687935068849a - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - https://usn
f89e01d5272023db687935068849a - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - https://usn.ubuntu.com/4192-1/ - https://www.debian.org/security/2020/dsa-4712 - https://www.debian.org/security/2020/dsa-4715
CVE ID: CVE-2019-13301 State: PUBLISHED Published: 2019-07-05T00:52:28 Last Updated: 2024-08-04T23:49:24.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1585 - https://github.com/ImageMagick/ImageMagick/issues/1589 - https://github.com/ImageMagick/ImageMagick/commit/f595a1985233c399a05c0c37cc41de16a90dd025 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - https://usn.ubuntu.com/4192-1/ - https://www.debian.org/security/2020/dsa-4712
CVE ID: CVE-2019-13302 State: PUBLISHED Published: 2019-07-05T00:52:44 Last Updated: 2024-08-04T23:49:24.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1597 - https://github.com/ImageMagick/ImageMagick/commit/d5089971bd792311aaab5cb73460326d7ef7f32d - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html
CVE ID: CVE-2019-13303 State: PUBLISHED Published: 2019-07-05T00:53:02 Last Updated: 2024-08-04T23:49:24.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/composite.c in CompositeImage. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1603 - https://github.com/ImageMagick/ImageMagick/commit/d29148fae06c01ef215940e084cf41853c117bab - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html
CVE ID: CVE-2019-13304 State: PUBLISHED Published: 2019-07-05T00:53:10 Last Updated: 2024-08-04T23:49:24.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1614 - https://github.com/ImageMagick/ImageMagick6/commit/bfa3b9610c83227894c92b0d312ad327fceb6241 - https://github.com/ImageMagick/ImageMagick/commit/7689875ef64f34141e7292f6945efdf0530b4a5e - https://lists.debian.org/debian-lts-announce/2019/08/msg00021.html - http://lists.opensuse.org/
7292f6945efdf0530b4a5e - https://lists.debian.org/debian-lts-announce/2019/08/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - https://usn.ubuntu.com/4192-1/ - https://www.debian.org/security/2020/dsa-4712 - https://www.debian.org/security/2020/dsa-4715
CVE ID: CVE-2019-13305 State: PUBLISHED Published: 2019-07-05T00:53:20 Last Updated: 2024-08-04T23:49:24.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strncpy and an off-by-one error. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1613 - https://github.com/ImageMagick/ImageMagick6/commit/5c7fbf9a14fb83c9685ad69d48899f490a37609d - https://github.com/ImageMagick/ImageMagick/commit/29efd648f38b73a64d73f14cd2019d869a585888 - https://lists.debian.org/debian-lts-announce/2019/08/msg00021.html - http:
it/29efd648f38b73a64d73f14cd2019d869a585888 - https://lists.debian.org/debian-lts-announce/2019/08/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - https://usn.ubuntu.com/4192-1/ - https://www.debian.org/security/2020/dsa-4712 - https://www.debian.org/security/2020/dsa-4715
CVE ID: CVE-2019-13306 State: PUBLISHED Published: 2019-07-05T00:53:29 Last Updated: 2024-08-04T23:49:24.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one errors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1612 - https://github.com/ImageMagick/ImageMagick6/commit/cb5ec7d98195aa74d5ed299b38eff2a68122f3fa - https://github.com/ImageMagick/ImageMagick/commit/e92040ea6ee2a844ebfd2344174076795a4787bd - https://lists.debian.org/debian-lts-announce/2019/08/msg00021.html - http://lists.opensuse.org/opens
4174076795a4787bd - https://lists.debian.org/debian-lts-announce/2019/08/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - https://usn.ubuntu.com/4192-1/ - https://www.debian.org/security/2020/dsa-4715
CVE ID: CVE-2019-13307 State: PUBLISHED Published: 2019-07-05T00:53:35 Last Updated: 2024-08-04T23:49:24.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling rows. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1615 - https://github.com/ImageMagick/ImageMagick6/commit/91e58d967a92250439ede038ccfb0913a81e59fe - https://github.com/ImageMagick/ImageMagick/commit/025e77fcb2f45b21689931ba3bf74eac153afa48 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - https://usn.ub
21689931ba3bf74eac153afa48 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - https://usn.ubuntu.com/4192-1/ - https://www.debian.org/security/2020/dsa-4712 - https://www.debian.org/security/2020/dsa-4715
CVE ID: CVE-2019-13308 State: PUBLISHED Published: 2019-07-05T00:53:43 Last Updated: 2024-08-04T23:49:24.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow in MagickCore/fourier.c in ComplexImage. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1595 - https://github.com/ImageMagick/ImageMagick/commit/61135001a625364e29bdce83832f043eebde7b5a - https://github.com/ImageMagick/ImageMagick6/commit/19651f3db63fa1511ed83a348c4c82fa553f8d01 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - https://usn.ubuntu.com/4192-1/ - https://www.d
p://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - https://usn.ubuntu.com/4192-1/ - https://www.debian.org/security/2020/dsa-4712 - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2019-13309 State: PUBLISHED Published: 2019-07-05T00:53:50 Last Updated: 2024-08-04T23:49:24.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the NoSuchImage error in CLIListOperatorImages in MagickWand/operation.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1616 - https://github.com/ImageMagick/ImageMagick/commit/5f21230b657ccd65452dd3d94c5b5401ba691a2d - https://github.com/ImageMagick/ImageMagick6/commit/5982632109cad48bc6dab867298fdea4dea57c51 - http://lists.opensuse.org/opensuse-security-announce/2019-08
geMagick6/commit/5982632109cad48bc6dab867298fdea4dea57c51 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - https://usn.ubuntu.com/4192-1/ - https://www.debian.org/security/2020/dsa-4712
CVE ID: CVE-2019-13310 State: PUBLISHED Published: 2019-07-05T00:53:57 Last Updated: 2024-08-04T23:49:24.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1616 - https://github.com/ImageMagick/ImageMagick/commit/5f21230b657ccd65452dd3d94c5b5401ba691a2d - https://github.com/ImageMagick/ImageMagick6/commit/5982632109cad48bc6dab867298fdea4dea57c51 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - https://usn.ubuntu.com/4192-1/
CVE ID: CVE-2019-13311 State: PUBLISHED Published: 2019-07-05T00:54:05 Last Updated: 2024-08-04T23:49:24.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1623 - https://github.com/ImageMagick/ImageMagick6/commit/bb812022d0bc12107db215c981cab0b1ccd73d91 - https://github.com/ImageMagick/ImageMagick/commit/4a334bbf5584de37c6f5a47c380a531c8c4b140a - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - https://usn.ubuntu.com/4192-1/ - https://www.
tp://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html - https://usn.ubuntu.com/4192-1/ - https://www.debian.org/security/2020/dsa-4712
CVE ID: CVE-2019-13312 State: PUBLISHED Published: 2019-07-05T00:54:13 Last Updated: 2024-08-04T23:49:24.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: block_cmp() in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/7980 - https://security.gentoo.org/glsa/202003-65 - https://usn.ubuntu.com/4431-1/ - https://security.gentoo.org/glsa/202007-58
CVE ID: CVE-2019-13313 State: PUBLISHED Published: 2019-07-05T13:22:02 Last Updated: 2024-08-04T23:49:24.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/libosinfo/2019-July/msg00026.html - https://libosinfo.org/download/ - https://gitlab.com/libosinfo/libosinfo/-/tags - https://gitlab.com/libosinfo/libosinfo/blob/master/NEWS - http://www.openwall.com/lists/oss-security/2019/07/08/3 - https://lists.fedoraproject.org/archives/
o/blob/master/NEWS - http://www.openwall.com/lists/oss-security/2019/07/08/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G4AD73NGYBV7GYT4LFC3TC7AYBWOJTG4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AZU4IPPIR73NYC6E733QR26O5ZI6MMKJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EEZUZKC6YK4E3NXM7XKZOXY5X5PJSPIR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT44EYZZQFTK7XM6GKCYC4WUE7HYZVXM/ - https://access.redhat.com/errata/RHSA-2019:3387
CVE ID: CVE-2019-13314 State: PUBLISHED Published: 2019-07-05T13:22:12 Last Updated: 2024-08-04T23:49:24.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: virt-bootstrap 1.1.0 allows local users to discover a root password by listing a process, because this password may be present in the --root-password option to virt_bootstrap.py. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/virt-tools-list/2019-July/msg00043.html - https://github.com/virt-manager/virt-bootstrap/releases - http://www.openwall.com/lists/oss-security/2019/07/08/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/
ecurity/2019/07/08/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D2PQSLGSTPVQ5WQ4DDKFV4I262JIFXY6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YKMQLYAHCDIE5TBXWDNBG7554KWI5QT3/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00080.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00026.html
CVE ID: CVE-2019-13315 State: PUBLISHED Published: 2019-10-04T17:37:01 Last Updated: 2024-08-04T23:49:24.586Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: Reader Problem Types: CWE-416 Description: This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the removeField method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can lever
om the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-8656. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://www.zerodayinitiative.com/advisories/ZDI-19-632/
CVE ID: CVE-2019-13316 State: PUBLISHED Published: 2019-10-04T17:35:53 Last Updated: 2024-08-04T23:49:24.539Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: PhantomPDF Problem Types: CWE-416 Description: This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Calculate actions. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An
he issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-8757. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://www.zerodayinitiative.com/advisories/ZDI-19-633/