Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-11380 State: PUBLISHED Published: 2019-09-05T20:38:59 Last Updated: 2024-08-04T22:48:09.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.ESFtpShortcut intent, leading to remote FTP access to the entirety of local storage. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40bhaveshthakur2015/cve-2019-11380-how-i-was-able-to-access-complete-storage-of-es-fileexplorer-end-user-9bd8da5ac3b8
CVE ID: CVE-2019-11383 State: PUBLISHED Published: 2019-04-22T21:04:42 Last Updated: 2024-08-04T22:48:09.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Medha WiFi FTP Server application 1.8.3 for Android. An attacker can read the username/password of a valid user via /data/data/com.medhaapps.wififtpserver/shared_prefs/com.medhaapps.wififtpserver_preferences.xml Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/6uT9jhDR
CVE ID: CVE-2019-11384 State: PUBLISHED Published: 2019-04-22T20:57:40 Last Updated: 2024-08-04T22:48:09.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zalora application 6.15.1 for Android stores confidential information insecurely on the system (i.e. plain text), which allows a non-root user to find out the username/password of a valid user via /data/data/com.zalora.android/shared_prefs/login_data.xml. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/c90h9WfB
CVE ID: CVE-2019-11387 State: PUBLISHED Published: 2019-04-21T01:14:49 Last Updated: 2024-08-04T22:48:09.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf allows remote attackers to cause a denial of service (ReDOS) by entering a specially crafted string with nested repetition operators. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1359 - https://coreruleset.org/20190627/announcement-owasp-modsecurity-core-rule-set-version-3-1-1/ - https://github.com/SpiderLabs/owasp-modsecu
t.org/20190627/announcement-owasp-modsecurity-core-rule-set-version-3-1-1/ - https://github.com/SpiderLabs/owasp-modsecurity-crs/blob/v3.1/dev/CHANGES
CVE ID: CVE-2019-11388 State: PUBLISHED Published: 2019-04-21T01:15:03 Last Updated: 2024-08-28T13:17:14.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf allows remote attackers to cause a denial of service (ReDOS) by entering a specially crafted string with nested repetition operators. NOTE: the software maintainer disputes that this is a vulnerability because the issue cannot be exploited via ModSecurity Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/SpiderLabs/owasp-modsecurity-crs/issues
CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1354 - https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1372
CVE ID: CVE-2019-11389 State: PUBLISHED Published: 2019-04-21T01:15:45 Last Updated: 2024-08-04T22:48:09.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause a denial of service (ReDOS) by entering a specially crafted string with next# at the beginning and nested repetition operators. NOTE: the software maintainer disputes that this is a vulnerability because the issue cannot be exploited via ModSecurity Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SpiderLabs/owasp-modsecurity-crs/issu
dditional Analyst Notes: - CVE Program Container: References: - https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1356 - https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1372
CVE ID: CVE-2019-11390 State: PUBLISHED Published: 2019-04-21T01:16:04 Last Updated: 2024-08-04T22:48:09.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause a denial of service (ReDOS) by entering a specially crafted string with set_error_handler# at the beginning and nested repetition operators. NOTE: the software maintainer disputes that this is a vulnerability because the issue cannot be exploited via ModSecurity Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SpiderLabs/owasp-modsecu
ModSecurity Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1358 - https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1372
CVE ID: CVE-2019-11391 State: PUBLISHED Published: 2019-04-21T01:16:16 Last Updated: 2024-08-04T22:55:39.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause a denial of service (ReDOS) by entering a specially crafted string with $a# at the beginning and nested repetition operators. NOTE: the software maintainer disputes that this is a vulnerability because the issue cannot be exploited via ModSecurity Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/SpiderLabs/owa
itional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1357 - https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1372
CVE ID: CVE-2019-11392 State: PUBLISHED Published: 2019-06-21T18:22:20 Last Updated: 2024-08-04T22:55:39.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlogEngine.NET 3.3.7 and earlier allows XXE via an apml file to syndication.axd. Additional Analyst Notes: - CVE Program Container: References: - https://www.securitymetrics.com/blog/blogenginenet-xml-external-entity-attacks
CVE ID: CVE-2019-11393 State: PUBLISHED Published: 2019-04-21T13:50:14 Last Updated: 2024-08-04T22:55:39.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in /admin/users/update in M/Monit before 3.7.3. It allows unprivileged users to escalate their privileges to an administrator by requesting a password change and specifying the admin parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46404 - https://mmonit.com/wiki/MMonit/Release3-7-3
CVE ID: CVE-2019-11395 State: PUBLISHED Published: 2019-04-21T14:26:01 Last Updated: 2024-08-04T22:55:39.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long string, as demonstrated by SMTP RCPT TO, POP3 USER, POP3 LIST, POP3 TOP, or POP3 RETR. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/152502/MailCarrier-2.51-RCPT-TO-Buffer-Overflow.html - http://packetstormsecurity.com/files/152506/MailCarrier-2.51-TOP-Buffer-Overflow.html - http://packetstormsecurity.com/files/152505/MailCarrier-2.51-LIST-Buffer-Overflow.html - http://pack
fer-Overflow.html - http://packetstormsecurity.com/files/152505/MailCarrier-2.51-LIST-Buffer-Overflow.html - http://packetstormsecurity.com/files/152504/MailCarrier-2.51-USER-Buffer-Overflow.html - http://packetstormsecurity.com/files/152530/MailCarrier-2.51-RETR-Buffer-Overflow.html - https://packetstormsecurity.com/files/152502/MailCarrier-2.51-RCPT-TO-Buffer-Overflow.html - https://packetstormsecurity.com/files/152504/MailCarrier-2.51-USER-Buffer-Overflow.html - https://packetstormsecurity.com/files/152505/MailCarrier-2.51-LIST-Buffer-Overflow.html - https://packetstormsecurity.com/files/152506/MailCarrier-2.51-TOP-Buffer-Overflow.html - https://packetstormsecurity.com/files/152530/MailCa
ecurity.com/files/152506/MailCarrier-2.51-TOP-Buffer-Overflow.html - https://packetstormsecurity.com/files/152530/MailCarrier-2.51-RETR-Buffer-Overflow.html
CVE ID: CVE-2019-11396 State: PUBLISHED Published: 2019-08-29T19:06:02 Last Updated: 2024-08-04T22:55:39.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Avira Free Security Suite 10. The permissive access rights on the SoftwareUpdater folder (files / folders and configuration) are incompatible with the privileged file manipulation performed by the product. Files can be created that can be used by an unprivileged user to obtain SYSTEM privileges. Arbitrary file creation can be achieved by abusing the SwuConfig.json file creation: an unprivileged user can replace these files by pseudo-symbolic links to arbitrary files. When an update occurs, a privile
unprivileged user can replace these files by pseudo-symbolic links to arbitrary files. When an update occurs, a privileged service creates a file and sets its access rights, offering write access to the Everyone group in any directory. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/153868/Avira-Free-Security-Suite-2019-Software-Updater-2.0.6.13175-Improper-Access-Control.html - https://seclists.org/fulldisclosure/2019/Aug/1 - https://medium.com/sidechannel-br/vulnerabilidade-no-avira-security-suite-pode-levar-%C3%A0-escala%C3%A7%C3%A3o-de-privil%C3%A9gios-no-windows-71964236c077
CVE ID: CVE-2019-11397 State: PUBLISHED Published: 2019-05-14T20:18:42 Last Updated: 2024-08-04T22:55:39.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: GetFile.aspx in Rapid4 RapidFlows Enterprise Application Builder 4.5M.23 (when used with .NET Framework 4.5) allows Local File Inclusion via the FileDesc parameter. Additional Analyst Notes: - CVE Program Container: References: - http://rapidflows.com/ - https://medium.com/%40javarmutt/rapid4-local-file-inclusion-0day-151c830ac74a
CVE ID: CVE-2019-11398 State: PUBLISHED Published: 2019-05-08T17:36:54 Last Updated: 2024-08-04T22:55:39.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in UliCMS 2019.2 and 2019.1 allow remote attackers to inject arbitrary web script or HTML via the go parameter to admin/index.php, the go parameter to /admin/index.php?register=register, or the error parameter to admin/index.php?action=favicon. Additional Analyst Notes: - CVE Program Container: References: - https://en.ulicms.de/ - https://www.exploit-db.com/exploits/46741/ - http://packetstormsecurity.com/files/153219/UliCMS-2019.1-Cross-Site-Scripting.html
CVE ID: CVE-2019-11399 State: PUBLISHED Published: 2019-12-18T14:52:41 Last Updated: 2024-08-04T22:55:40.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. OS command injection occurs through the get_set.ccp lanHostCfg_HostName_1.1.1.0.0 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.trendnet.com/support/ - https://github.com/pr0v3rbs/CVE/blob/master/CVE-2019-11399/ticket.png
CVE ID: CVE-2019-11400 State: PUBLISHED Published: 2019-12-18T14:57:51 Last Updated: 2024-08-04T22:55:39.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. A buffer overflow occurs through the get_set.ccp ccp_act parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.trendnet.com/support/ - https://github.com/pr0v3rbs/CVE/blob/master/CVE-2019-11400/ticket.png
CVE ID: CVE-2019-11401 State: PUBLISHED Published: 2019-04-21T15:37:38 Last Updated: 2024-08-04T22:55:39.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: A issue was discovered in SiteServer CMS 6.9.0. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extension .aassp, which is converted to .asp because the "as" substring is deleted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/siteserver/cms/issues/1858
CVE ID: CVE-2019-11402 State: PUBLISHED Published: 2019-04-21T16:06:16 Last Updated: 2024-08-04T22:55:39.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Gradle Enterprise before 2018.5.3, Build Cache Nodes did not store the credentials at rest in an encrypted format. Additional Analyst Notes: - CVE Program Container: References: - https://gradle.com/enterprise/releases/2018.5/#changes-3 - https://security.gradle.com/advisory/CVE-2019-11402
CVE ID: CVE-2019-11403 State: PUBLISHED Published: 2019-04-21T16:06:30 Last Updated: 2024-08-04T22:55:39.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Gradle Enterprise before 2018.5.2, Build Cache Nodes would reflect the configured password back when viewing the HTML page source of the settings page. Additional Analyst Notes: - CVE Program Container: References: - https://gradle.com/enterprise/releases/2018.5/#changes-2 - https://security.gradle.com/advisory/CVE-2019-11403
CVE ID: CVE-2019-11404 State: PUBLISHED Published: 2019-04-21T16:06:56 Last Updated: 2024-08-04T22:55:39.674Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts (for compiling and building the published JARs) over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by an MITM attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/arrow-kt/arrow/issues/1310 - https://github.com/arrow-kt/arrow/commit/74198dab522393487d5344f194dc21208ab71ae8 - https://github.com/arrow-kt/arrow/r
https://github.com/arrow-kt/arrow/commit/74198dab522393487d5344f194dc21208ab71ae8 - https://github.com/arrow-kt/arrow/releases/tag/0.9.0 - https://github.com/arrow-kt/ank/issues/35 - https://github.com/arrow-kt/ank/pull/36
CVE ID: CVE-2019-11405 State: PUBLISHED Published: 2019-04-21T16:07:22 Last Updated: 2024-08-04T22:55:40.800Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenAPITools/openapi-generator/issues/2253 - https://github.com/OpenAPITools/openapi-generator/pull/2248 - https://github.com/OpenAPITools/openapi-generator/pull/2697
CVE ID: CVE-2019-11406 State: PUBLISHED Published: 2019-05-08T17:27:38 Last Updated: 2024-08-04T22:55:40.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Subrion CMS 4.2.1 allows _core/en/contacts/ XSS via the name, email, or phone parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/intelliants/subrion/commits/develop - https://github.com/intelliants/subrion/issues/821
CVE ID: CVE-2019-11407 State: PUBLISHED Published: 2019-06-17T17:56:13 Last Updated: 2024-08-04T22:55:39.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/operator_panel/index_inc.php in the Operator Panel module in FusionPBX 4.4.3 suffers from an information disclosure vulnerability due to excessive debug information, which allows authenticated administrative attackers to obtain credentials and other sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fusionpbx/fusionpbx/commit/f38676b7b63bb1ec3a68d577fe23e6701f482aef - https://blog.gdssecurity.com/labs/2019/6/7/rce-using-caller-id-multiple-vulnerabilities-in-fusionpbx
7fe23e6701f482aef - https://blog.gdssecurity.com/labs/2019/6/7/rce-using-caller-id-multiple-vulnerabilities-in-fusionpbx.html
CVE ID: CVE-2019-11408 State: PUBLISHED Published: 2019-06-17T17:59:30 Last Updated: 2024-08-04T22:55:40.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS in app/operator_panel/index_inc.php in the Operator Panel module in FusionPBX 4.4.3 allows remote unauthenticated attackers to inject arbitrary JavaScript characters by placing a phone call using a specially crafted caller ID number. This can further lead to remote code execution by chaining this vulnerability with a command injection vulnerability also present in FusionPBX. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fusionpbx/fusionpbx/commit/391a23d070f3036d0c7760992f6970b0a76ee4
VE Program Container: References: - https://github.com/fusionpbx/fusionpbx/commit/391a23d070f3036d0c7760992f6970b0a76ee4d7 - http://packetstormsecurity.com/files/153256/FusionPBX-4.4.3-Remote-Command-Execution.html - https://blog.gdssecurity.com/labs/2019/6/7/rce-using-caller-id-multiple-vulnerabilities-in-fusionpbx.html
CVE ID: CVE-2019-11409 State: PUBLISHED Published: 2019-06-17T18:02:23 Last Updated: 2024-08-04T22:55:40.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation that allows authenticated non-administrative attackers to execute commands on the host. This can further lead to remote code execution when combined with an XSS vulnerability also present in the FusionPBX Operator Panel module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fusionpbx/fusionpbx/commit/e43ca27ba2d9c0109a6bf198fe2f8d79f63
- CVE Program Container: References: - https://github.com/fusionpbx/fusionpbx/commit/e43ca27ba2d9c0109a6bf198fe2f8d79f63e0611 - http://packetstormsecurity.com/files/153256/FusionPBX-4.4.3-Remote-Command-Execution.html - https://blog.gdssecurity.com/labs/2019/6/7/rce-using-caller-id-multiple-vulnerabilities-in-fusionpbx.html - http://packetstormsecurity.com/files/155344/FusionPBX-Operator-Panel-exec.php-Command-Execution.html
CVE ID: CVE-2019-11410 State: PUBLISHED Published: 2019-06-17T18:03:51 Last Updated: 2024-08-04T22:55:40.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/backup/index.php in the Backup Module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation, which allows authenticated administrative attackers to execute commands on the host. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fusionpbx/fusionpbx/commit/0f965c89288de449236ad6de4f97960814ce8c84 - https://blog.gdssecurity.com/labs/2019/6/7/rce-using-caller-id-multiple-vulnerabilities-in-fusionpbx.html
CVE ID: CVE-2019-11411 State: PUBLISHED Published: 2019-04-21T19:14:20 Last Updated: 2024-08-04T22:55:41.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Artifex MuJS 1.0.5. The Number#toFixed() and numtostr implementations in jsnumber.c have a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=700938 - http://www.ghostscript.com/cgi-bin/findgit.cgi?da632ca08f240590d2dec786722ed08486ce1be6 - https://github.com/ccxvii/mujs/commit/da632ca08f240590d2dec786722ed08486ce1be6 - http://www.securityfocus.com/bid/108093 - https://security.gentoo.org/glsa/202007-52 - https:/
2dec786722ed08486ce1be6 - http://www.securityfocus.com/bid/108093 - https://security.gentoo.org/glsa/202007-52 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/67PMOZV4DLVL2KGU2SV724QL7Y4PKWKU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3RQXMWEOWCGLOLFBQSXBM3MBN33T4I5H/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFCRO74ORRIVWNVAX2MAMRY3THCTWLQI/
CVE ID: CVE-2019-11412 State: PUBLISHED Published: 2019-04-21T19:14:37 Last Updated: 2024-08-04T22:55:40.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Artifex MuJS 1.0.5. jscompile.c can cause a denial of service (invalid stack-frame jump) because it lacks an ENDTRY opcode call. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=700947 - http://www.ghostscript.com/cgi-bin/findgit.cgi?1e5479084bc9852854feb1ba9bf68b52cd127e02 - https://github.com/ccxvii/mujs/commit/1e5479084bc9852854feb1ba9bf68b52cd127e02 - http://www.securityfocus.com/bid/108093 - https://security.gentoo.org/glsa/202007-52
4bc9852854feb1ba9bf68b52cd127e02 - http://www.securityfocus.com/bid/108093 - https://security.gentoo.org/glsa/202007-52 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/67PMOZV4DLVL2KGU2SV724QL7Y4PKWKU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3RQXMWEOWCGLOLFBQSXBM3MBN33T4I5H/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFCRO74ORRIVWNVAX2MAMRY3THCTWLQI/
CVE ID: CVE-2019-11413 State: PUBLISHED Published: 2019-04-21T19:14:47 Last Updated: 2024-08-04T22:55:39.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Artifex MuJS 1.0.5. It has unlimited recursion because the match function in regexp.c lacks a depth check. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=700937 - http://www.ghostscript.com/cgi-bin/findgit.cgi?00d4606c3baf813b7b1c176823b2729bf51002a2 - https://github.com/ccxvii/mujs/commit/00d4606c3baf813b7b1c176823b2729bf51002a2 - http://www.securityfocus.com/bid/108093 - https://security.gentoo.org/glsa/202007-52 - https://lists.fedora
9bf51002a2 - http://www.securityfocus.com/bid/108093 - https://security.gentoo.org/glsa/202007-52 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/67PMOZV4DLVL2KGU2SV724QL7Y4PKWKU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3RQXMWEOWCGLOLFBQSXBM3MBN33T4I5H/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFCRO74ORRIVWNVAX2MAMRY3THCTWLQI/
CVE ID: CVE-2019-11414 State: PUBLISHED Published: 2019-04-21T19:38:22 Last Updated: 2024-08-04T22:55:40.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. When the administrator password is changed from a certain client IP address, administrative authorization remains available to any client at that IP address, leading to complete control of the router. Additional Analyst Notes: - CVE Program Container: References: - http://1.337.zone/2019/04/07/intelbras-iwr-3000n-1-5-0-unproper-de-authorization/
CVE ID: CVE-2019-11415 State: PUBLISHED Published: 2019-04-21T19:38:33 Last Updated: 2024-08-04T22:55:39.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. A malformed login request allows remote attackers to cause a denial of service (reboot), as demonstrated by JSON misparsing of the \""} string to v1/system/login. Additional Analyst Notes: - CVE Program Container: References: - https://1.337.zone/2019/04/08/intelbras-iwr-3000n-any-version-dos-on-malformed-login-request/ - https://www.exploit-db.com/exploits/46768/ - http://packetstormsecurity.com/files/152680/Intelbras-IWR-3000N-Denial-Of-Service.html