Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-17336 State: PUBLISHED Published: 2019-12-17T20:55:18.061334Z Last Updated: 2024-09-17T02:06:23.402Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: TIBCO Software Inc. Products: TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server Problem Types: The impact of this vulnerability includes the theoretical possibility that an attacker recovers credentials used to access Spotfire data sources. Description: The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to inf
rketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to information that can lead to obtaining credentials used to access Spotfire data sources. The attacker would need privileges to save a Spotfire file to the library, and only applies in a situation where NTLM credentials, or a credentials profile is in use. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: version 10.6.0 and TIBCO Spotfire Server: versions 7.11.7 and below, versions 7.12.0, 7.13.0, 7.14.0, 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.2.1, 10.3.0, 10.3.1, 10.3.2, 10.3.3, and 10.3.4, versions 10.4.0, 10.5.0, and 10.6.0. Addit
, 10.0.1, 10.1.0, 10.2.0, 10.2.1, 10.3.0, 10.3.1, 10.3.2, 10.3.3, and 10.3.4, versions 10.4.0, 10.5.0, and 10.6.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/12/tibco-security-advisory-december-17-2019-tibco-spotfire-2019-17336
CVE ID: CVE-2019-17337 State: PUBLISHED Published: 2019-12-17T20:55:18.595101Z Last Updated: 2024-09-16T21:02:56.222Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: TIBCO Software Inc. Products: TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server Problem Types: The impact of the vulnerability includes the theoretical possibility that an attacker could gain full administrative access to the web interface of the affected component. Description: The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attac
ytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker to perform a reflected cross-site scripting (XSS) attack. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: version 10.6.0 and TIBCO Spotfire Server: versions 7.11.7 and below, versions 7.12.0, 7.13.0, 7.14.0, 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.2.1, 10.3.0, 10.3.1, 10.3.2, 10.3.3, and 10.3.4, versions 10.4.0, 10.5.0, and 10.6.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/12/tibco-security-advisory-decembe
tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/12/tibco-security-advisory-december-17-2019-tibco-spotfire-2019-17337
CVE ID: CVE-2019-17338 State: PUBLISHED Published: 2020-01-28T18:00:20.291572Z Last Updated: 2024-09-17T01:36:54.758Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: TIBCO Software Inc. Products: TIBCO Patterns - Search Problem Types: The impact of these vulnerabilities includes the theoretical possibility that an attacker could gain all privileges available via the affected component. Description: The user interface component of TIBCO Software Inc.'s TIBCO Patterns - Search contains multiple vulnerabilities that theoretically allow authenticated users to perform persistent cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO P
ated users to perform persistent cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Patterns - Search: versions 5.4.0 and below. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2020/01/tibco-security-advisory-january-28-2020-tibco-patterns
CVE ID: CVE-2019-17339 State: PUBLISHED Published: 2020-08-11T19:30:14.315714Z Last Updated: 2024-09-17T00:45:44.564Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: TIBCO Software Inc. Products: TIBCO Silver Fabric Problem Types: The impact of this vulnerability includes the possibility that an attacker could steal session tokens of the authenticated user which would allow the attacker to hijack the session and perform whatever tasks the user has permission to execute. Description: The VirtualRouter component of TIBCO Software Inc.'s TIBCO Silver Fabric contains a vulnerability that theoretically allows an attacker to inject scripts via URLs. The attacker c
Silver Fabric contains a vulnerability that theoretically allows an attacker to inject scripts via URLs. The attacker could theoretically social engineer an authenticated user into submitting the URL, thus executing the script on the affected system with the privileges of the user. Affected releases are TIBCO Software Inc.'s TIBCO Silver Fabric: versions 6.0.0 and below. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories
CVE ID: CVE-2019-17340 State: PUBLISHED Published: 2019-10-08T00:03:29 Last Updated: 2024-08-05T01:40:14.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.11.x allowing x86 guest OS users to cause a denial of service or gain privileges because grant-table transfer requests are mishandled. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-284.html - https://xenbits.xen.org/xsa/advisory-284.html - http://www.openwall.com/lists/oss-security/2019/10/25/1 - https://www.debian.org/security/2020/dsa-4602 - https://seclists.org/bugtraq/2020/Jan/21
CVE ID: CVE-2019-17341 State: PUBLISHED Published: 2019-10-08T00:03:17 Last Updated: 2024-08-05T01:40:14.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a page-writability race condition during addition of a passed-through PCI device. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-285.html - https://xenbits.xen.org/xsa/advisory-285.html - http://www.openwall.com/lists/oss-security/2019/10/25/6 - https://www.debian.org/security/2020/dsa-4602 - https://seclists.org/bugtraq/2020/Jan/21
CVE ID: CVE-2019-17342 State: PUBLISHED Published: 2019-10-08T00:03:03 Last Updated: 2024-08-05T01:40:15.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a race condition that arose when XENMEM_exchange was introduced. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-287.html - https://xenbits.xen.org/xsa/advisory-287.html - http://www.openwall.com/lists/oss-security/2019/10/25/2 - https://www.debian.org/security/2020/dsa-4602 - https://seclists.org/bugtraq/2020/Jan/21
CVE ID: CVE-2019-17343 State: PUBLISHED Published: 2019-10-08T00:02:51 Last Updated: 2024-08-05T01:40:15.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging incorrect use of the HVM physmap concept for PV domains. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-288.html - https://xenbits.xen.org/xsa/advisory-288.html - http://www.openwall.com/lists/oss-security/2019/10/25/10 - https://www.debian.org/security/2020/dsa-4602 - https://seclists.org/bugtraq/2020/Jan/21
CVE ID: CVE-2019-17344 State: PUBLISHED Published: 2019-10-08T00:02:40 Last Updated: 2024-08-05T01:40:15.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service by leveraging a long-running operation that exists to support restartability of PTE updates. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-290.html - https://xenbits.xen.org/xsa/advisory-290.html - http://www.openwall.com/lists/oss-security/2019/10/25/3 - https://www.debian.org/security/2020/dsa-4602 - https://seclists.org/bugtraq/2020/Jan/21
CVE ID: CVE-2019-17345 State: PUBLISHED Published: 2019-10-08T00:02:29 Last Updated: 2024-08-05T01:40:14.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen 4.8.x through 4.11.x allowing x86 PV guest OS users to cause a denial of service because mishandling of failed IOMMU operations causes a bug check during the cleanup of a crashed guest. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-291.html - https://xenbits.xen.org/xsa/advisory-291.html - http://www.openwall.com/lists/oss-security/2019/10/25/4 - https://www.debian.org/security/2020/dsa-4602 - https://seclists.org/bugtraq/2020/Jan/21
CVE ID: CVE-2019-17346 State: PUBLISHED Published: 2019-10-08T00:02:15 Last Updated: 2024-08-05T01:40:15.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because of an incompatibility between Process Context Identifiers (PCID) and TLB flushes. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-292.html - https://xenbits.xen.org/xsa/advisory-292.html - http://www.openwall.com/lists/oss-security/2019/10/25/5 - https://www.debian.org/security/2020/dsa-4602 - https://seclists.org/bugtraq/2020/Jan/21
CVE ID: CVE-2019-17347 State: PUBLISHED Published: 2019-10-08T00:02:04 Last Updated: 2024-08-05T01:40:14.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because a guest can manipulate its virtualised %cr4 in a way that is incompatible with Linux (and possibly other guest kernels). Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-293.html - https://xenbits.xen.org/xsa/advisory-293.html - http://www.openwall.com/lists/oss-security/2019/10/25/8 - https://www.debian.org/security/2020/dsa-4602 - https://sec
- http://www.openwall.com/lists/oss-security/2019/10/25/8 - https://www.debian.org/security/2020/dsa-4602 - https://seclists.org/bugtraq/2020/Jan/21
CVE ID: CVE-2019-17348 State: PUBLISHED Published: 2019-10-08T00:01:46 Last Updated: 2024-08-05T01:40:15.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service because of an incompatibility between Process Context Identifiers (PCID) and shadow-pagetable switching. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-294.html - https://xenbits.xen.org/xsa/advisory-294.html - http://www.openwall.com/lists/oss-security/2019/10/25/7 - https://www.debian.org/security/2020/dsa-4602 - https://seclists.org/bugtraq/2020/Jan/21
CVE ID: CVE-2019-17349 State: PUBLISHED Published: 2019-10-08T00:00:58 Last Updated: 2024-08-05T01:40:15.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) involving a LoadExcl or StoreExcl operation. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-295.html - https://xenbits.xen.org/xsa/advisory-295.html - https://www.debian.org/security/2020/dsa-4602 - https://seclists.org/bugtraq/2020/Jan/21
CVE ID: CVE-2019-17350 State: PUBLISHED Published: 2019-10-08T00:00:47 Last Updated: 2024-08-05T01:40:15.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) involving a compare-and-exchange operation. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-295.html - https://xenbits.xen.org/xsa/advisory-295.html - https://www.debian.org/security/2020/dsa-4602 - https://seclists.org/bugtraq/2020/Jan/21
CVE ID: CVE-2019-17351 State: PUBLISHED Published: 2019-10-08T00:00:30 Last Updated: 2024-08-05T01:40:15.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in drivers/xen/balloon.c in the Linux kernel before 5.2.3, as used in Xen through 4.12.x, allowing guest OS users to cause a denial of service because of unrestricted resource consumption during the mapping of guest memory, aka CID-6ef36ab967c7. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-300.html - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3 - https://xenbits.xen.org/xsa/advisory-300.html - https://github.com/torvalds/linux/comm
nux/kernel/v5.x/ChangeLog-5.2.3 - https://xenbits.xen.org/xsa/advisory-300.html - https://github.com/torvalds/linux/commit/6ef36ab967c71690ebe7e5ef997a8be4da3bc844 - http://www.openwall.com/lists/oss-security/2019/10/25/9 - https://security.netapp.com/advisory/ntap-20191031-0005/ - https://usn.ubuntu.com/4286-2/ - https://usn.ubuntu.com/4286-1/
CVE ID: CVE-2019-17352 State: PUBLISHED Published: 2019-10-08T12:13:36 Last Updated: 2024-08-05T01:40:15.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JFinal cos before 2019-08-13, as used in JFinal 4.4, there is a vulnerability that can bypass the isSafeFile() function: one can upload any type of file. For example, a .jsp file may be stored and almost immediately deleted, but this deletion step does not occur for certain exceptions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jfinal/jfinal/issues/171 - https://gitee.com/jfinal/cos/commit/5eb23d6e384abaad19faa7600d14c9a2f525946a - https://gitee.com/jfinal/cos/commit/8d26eec61f0d072
tee.com/jfinal/cos/commit/5eb23d6e384abaad19faa7600d14c9a2f525946a - https://gitee.com/jfinal/cos/commit/8d26eec61f0d072a68bf7393cf3a8544a1112130
CVE ID: CVE-2019-17353 State: PUBLISHED Published: 2019-10-09T11:55:38 Last Updated: 2024-08-05T01:40:15.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered on D-Link DIR-615 devices with firmware version 20.05 and 20.07. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page. Additional Analyst Notes: - CVE Program Container: References: - https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf - https://us.dlink.com/en/security-advisory - https://www.dlink.com/en/security-bulletin -
rder_and_judgment_7-2-19.pdf - https://us.dlink.com/en/security-advisory - https://www.dlink.com/en/security-bulletin - https://github.com/d0x0/D-Link-DIR-615/blob/master/CVE-2019-17353
CVE ID: CVE-2019-17354 State: PUBLISHED Published: 2019-10-09T11:57:13 Last Updated: 2024-08-05T01:40:15.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: wan.htm page on Zyxel NBG-418N v2 with firmware version V1.00(AARP.9)C0 can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify data fields of the page. Additional Analyst Notes: - CVE Program Container: References: - https://www.zyxel.com/us/en/ - https://github.com/d0x0/Zyxel-NBG-418N-v2/blob/master/CVE-2019-17354
CVE ID: CVE-2019-17355 State: PUBLISHED Published: 2019-10-15T20:46:24 Last Updated: 2024-08-05T01:40:15.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Orbitz application 19.31.1 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/GgpFz3ZW
CVE ID: CVE-2019-17356 State: PUBLISHED Published: 2019-10-15T20:33:30 Last Updated: 2024-08-05T01:40:15.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Infinite Design application 3.4.12 for Android sends a username and password via TCP without any encryption during login, as demonstrated by sniffing of a public Wi-Fi network. Additional Analyst Notes: - CVE Program Container: References: - https://bit.ly/2kfL7xE - https://pastebin.com/yUFxs2J7
CVE ID: CVE-2019-17357 State: PUBLISHED Published: 2020-01-21T18:35:44 Last Updated: 2024-08-05T01:40:15.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability affecting how template identifiers are handled when a string and id composite value are used to identify the template type and id. An authenticated attacker can exploit this to extract data from the database, or an unauthenticated remote attacker could exploit this via Cross-Site Request Forgery. Additional Analyst Notes: - CVE Program Container: References: - https://www.darkmatter.ae/xen1thlabs/ - https://github.com/Cacti/cacti/issues/3
: - CVE Program Container: References: - https://www.darkmatter.ae/xen1thlabs/ - https://github.com/Cacti/cacti/issues/3025 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947374 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00005.html - https://security.gentoo.org/glsa/202003-40 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00048.html
CVE ID: CVE-2019-17358 State: PUBLISHED Published: 2019-12-12T13:53:51 Last Updated: 2024-08-05T01:40:15.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cacti through 1.2.7 is affected by multiple instances of lib/functions.php unsafe deserialization of user-controlled data to populate arrays. An authenticated attacker could use this to influence object data values and control actions taken by Cacti or potentially cause memory corruption in the PHP module. Additional Analyst Notes: - CVE Program Container: References: - https://www.darkmatter.ae/xen1thlabs/ - https://github.com/Cacti/cacti/blob/79f29cddb5eb05cbaff486cd634285ef1fed9326/lib/functions.php#L3109 - https://lists.d
- https://github.com/Cacti/cacti/blob/79f29cddb5eb05cbaff486cd634285ef1fed9326/lib/functions.php#L3109 - https://lists.debian.org/debian-lts-announce/2019/12/msg00014.html - https://github.com/Cacti/cacti/issues/3026 - https://github.com/Cacti/cacti/commit/adf221344359f5b02b8aed43dfb6b33ae5d708c8 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2019-17358 - https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-17358.html - https://seclists.org/bugtraq/2020/Jan/25 - https://www.debian.org/security/2020/dsa-4604 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00005.html - https://security.ge
2020-03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00005.html - https://security.gentoo.org/glsa/202003-40 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00048.html
CVE ID: CVE-2019-17359 State: PUBLISHED Published: 2019-10-08T13:39:54 Last Updated: 2024-08-05T01:40:15.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r467ade3fef3493f1fff1a68a256d087874e1f858ad1de7a49fe05d27%40%3Ccommits.tomee.apache.org%3E - https://lists.apache.org/thread.html/r4d475dcaf4f57115fa57d8e06c3823ca398b35468429e7946ebaefdc%40%3Ccommits.tomee.apache.org%3E - https://list
rg/thread.html/r4d475dcaf4f57115fa57d8e06c3823ca398b35468429e7946ebaefdc%40%3Ccommits.tomee.apache.org%3E - https://lists.apache.org/thread.html/r16c3a90cb35ae8a9c74fd5c813c16d6ac255709c9f9d71cd409e007d%40%3Ccommits.tomee.apache.org%3E - https://lists.apache.org/thread.html/r02f887807a49cfd1f1ad53f7a61f3f8e12f60ba2c930bec163031209%40%3Ccommits.tomee.apache.org%3E - https://lists.apache.org/thread.html/r91b07985b1307390a58c5b9707f0b28ef8e9c9e1c86670459f20d601%40%3Ccommits.tomee.apache.org%3E - https://lists.apache.org/thread.html/re60f980c092ada4bfe236dcfef8b6ca3e8f3b150fc0f51b8cc13d59d%40%3Ccommits.tomee.apache.org%3E - https://lists.apache.org/thread.html/r8ecb5b76347f84b6e3c693f980dbbead88
51b8cc13d59d%40%3Ccommits.tomee.apache.org%3E - https://lists.apache.org/thread.html/r8ecb5b76347f84b6e3c693f980dbbead88c25f77b815053c4e6f2c30%40%3Ccommits.tomee.apache.org%3E - https://lists.apache.org/thread.html/r79b6a6aa0dd1aeb57bd253d94794bc96f1ec005953c4bd5414cc0db0%40%3Ccommits.tomee.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.bouncycastle.org/releasenotes.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://www.bouncycastle.org/latest_releases.html - https://security.netapp.com/advisory/ntap-20191024-0006/ - https://www.oracle.com/security-alerts/cpuoct2020.html - http
https://security.netapp.com/advisory/ntap-20191024-0006/ - https://www.oracle.com/security-alerts/cpuoct2020.html - https://www.oracle.com/security-alerts/cpujan2021.html
CVE ID: CVE-2019-17360 State: PUBLISHED Published: 2019-11-12T17:39:36 Last Updated: 2024-08-05T01:40:15.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.7.0-00 allows an unauthenticated remote user to trigger a denial of service (DoS) condition because of Uncontrolled Resource Consumption. Additional Analyst Notes: - CVE Program Container: References: - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/index.html - https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2019-125/
CVE ID: CVE-2019-17361 State: PUBLISHED Published: 2020-01-17T01:16:29 Last Updated: 2024-08-05T01:40:15.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saltstack/salt/commits/master - https://docs.saltstack.com/en/latest/topics/releases/2019.2.3.html#security-fix - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00026.html - https:/
leases/2019.2.3.html#security-fix - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00026.html - https://www.debian.org/security/2020/dsa-4676 - https://usn.ubuntu.com/4459-1/