Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-11988 State: PUBLISHED Published: 2019-06-05T17:58:37 Last Updated: 2024-08-04T23:10:30.174Z Vendors: n/a Products: HPE Smart Update Manager Problem Types: Remote Unauthorized Access Description: A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager (SUM) earlier than version 8.3.5. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03922en_us
CVE ID: CVE-2019-11989 State: PUBLISHED Published: 2019-07-19T21:21:22 Last Updated: 2024-08-04T23:10:30.180Z Vendors: n/a Products: IceWall SSO Agent Option; HPE IceWall MFA 4.0EE MFA. Server LTU; HPE IceWall.MFA4.0SE MFA. Server LTU Problem Types: remote Denial of Service (DoS) Description: A security vulnerability in HPE IceWall SSO Agent Option and IceWall MFA (Agent module ) could be exploited remotely to cause a denial of service. The versions and platforms of Agent Option modules that are impacted are as follows: 10.0 for Apache 2.2 on RHEL 5 and 6, 10.0 for Apache 2.4 on RHEL 7, 10.0 for Apache 2.4 on HP-UX 11i v3, 10.0 for IIS on Windows, 11.0 for Apache 2.4 on RHEL 7, MFA Proxy 4.0
.4 on RHEL 7, 10.0 for Apache 2.4 on HP-UX 11i v3, 10.0 for IIS on Windows, 11.0 for Apache 2.4 on RHEL 7, MFA Proxy 4.0 (Agent module only) for Apache 2.4 on RHEL 7. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03941en_us
CVE ID: CVE-2019-11990 State: PUBLISHED Published: 2019-07-19T21:30:01 Last Updated: 2024-08-04T23:10:30.151Z Vendors: n/a Products: HPE IOT and GCP Problem Types: remote Unauthorized Data Access Description: Security vulnerabilities in HPE UIoT versions 1.6, 1.5, 1.4.2, 1.4.1, 1.4.0, and 1.2.4.2 could allow unauthorized remote access and access to sensitive data. HPE has addressed this issue in HPE UIoT: * For customers with release UIoT 1.6, fixes are made available with 1.6 RP603 * For customers with release UIoT 1.5, fixes are made available with 1.5 RP503 HF3 * For customers with release older than 1.5, such as 1.4.0, 1.4.1, 1.4.2 and 1.2.4.2, the resolution will be to upgrade to 1.5 RP
tomers with release older than 1.5, such as 1.4.0, 1.4.1, 1.4.2 and 1.2.4.2, the resolution will be to upgrade to 1.5 RP503 HF3 or 1.6 RP603 Customers are requested to upgrade to the updated versions or contact HPE support for further assistance. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03937en_us
CVE ID: CVE-2019-11991 State: PUBLISHED Published: 2019-07-09T18:32:04 Last Updated: 2024-08-04T23:10:30.170Z Vendors: Hewlett Packard Enterprise Products: HPE 3PAR Service Processors Problem Types: remote disclosure of privileged information Description: HPE has identified a vulnerability in HPE 3PAR Service Processor (SP) version 4.1 through 4.4. HPE 3PAR Service Processor (SP) version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service Processor and any managed 3PAR arrays. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/publi
ged 3PAR arrays. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03918en_us
CVE ID: CVE-2019-11992 State: PUBLISHED Published: 2019-12-18T15:59:05 Last Updated: 2024-08-04T23:10:29.972Z Vendors: n/a Products: HPE OneView for VMware vCenter with Operations Manager and Log Insight Problem Types: remote cross-site scripting (xss) Description: A security vulnerability in HPE OneView for VMware vCenter 9.5 could be exploited remotely to allow Cross-Site Scripting. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03957en_us
CVE ID: CVE-2019-11993 State: PUBLISHED Published: 2020-01-03T17:18:03 Last Updated: 2024-08-04T23:10:30.154Z Vendors: n/a Products: SimpliVity OmniCube; HPE SimpliVity 380 Gen9; HPE SimpliVity 380 Gen9; HPE SimpliVity 380 Gen10; HPE SimpliVity 380 Gen10 G; SimpliVity OmniStack for Lenovo; SimpliVity OmniStack for Cisco; SimpliVity OmniStack for Dell; HPE SimpliVity 2600 Gen10 Problem Types: remote creation and deletion of arbitrary files; remote creation and deletion of arbitrary files Description: A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380 Gen 10 G, HPE SimpliVity 2600 Gen 10, SimpliVity OmniCube, SimpliVity OmniS
PE SimpliVity 380 Gen 10, HPE SimpliVity 380 Gen 10 G, HPE SimpliVity 2600 Gen 10, SimpliVity OmniCube, SimpliVity OmniStack for Cisco, SimpliVity OmniStack for Lenovo and SimpliVity OmniStack for Dell nodes. Two now deprecated APIs run as root, accept a file name path, and can be used to create or delete arbitrary files on the nodes. These APIs do not require user authentication and are accessible over the management network, resulting in remote availability and integrity vulnerabilities For all customers running HPE OmniStack version 3.7.9 and earlier. HPE recommends upgrading the OmniStack software to version 3.7.10 or later, which contains a permanent resolution. Customers and partners w
ading the OmniStack software to version 3.7.10 or later, which contains a permanent resolution. Customers and partners who can upgrade to 3.7.10 should upgrade at the earliest convenience. For all customers and partners unable to upgrade their environments to the recommended version 3.7.10, HPE has created a Temporary Workaround https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=mmr_sf-EN_US000061675&withFrame for you to implement. All customer should upgrade to the recommended 3.7.10 or later version at the earliest convenience. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpe
- CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03955en_us
CVE ID: CVE-2019-11994 State: PUBLISHED Published: 2020-01-03T17:23:49 Last Updated: 2024-08-04T23:10:30.051Z Vendors: n/a Products: HPE SimpliVity 2600 Gen10; HPE SimpliVity 380 Gen10; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 380 Gen9; SimpliVity OmniCube; SimpliVity OmniStack for Cisco; SimpliVity OmniStack for Dell; SimpliVity OmniStack for Lenovo Problem Types: remote arbitrary command execution; remote arbitrary command execution Description: A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380 Gen 10 G, HPE SimpliVity 2600 Gen 10, SimpliVity OmniCube, SimpliVity OmniStack for Cisco, SimpliVity OmniStack for Lenovo and
G, HPE SimpliVity 2600 Gen 10, SimpliVity OmniCube, SimpliVity OmniStack for Cisco, SimpliVity OmniStack for Lenovo and SimpliVity OmniStack for Dell nodes. An API is used to execute a command manifest file during upgrade does not correctly prevent directory traversal and so can be used to execute manifest files in arbitrary locations on the node. The API does not require user authentication and is accessible over the management network, resulting in the potential for unauthenticated remote execution of manifest files. For all customers running HPE OmniStack version 3.7.9 and earlier. HPE recommends upgrading the OmniStack software to version 3.7.10 or later, which contains a permanent reso
and earlier. HPE recommends upgrading the OmniStack software to version 3.7.10 or later, which contains a permanent resolution. Customers and partners who can upgrade to 3.7.10 should upgrade at the earliest convenience. For all customers and partners unable to upgrade their environments to the recommended version 3.7.10, HPE has created a Temporary Workaround https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=mmr_sf-EN_US000061901&withFrame for you to implement. All customer should upgrade to the recommended 3.7.10 or later version at the earliest convenience. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?
ience. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03956en_us
CVE ID: CVE-2019-11995 State: PUBLISHED Published: 2019-12-18T19:46:26 Last Updated: 2024-08-04T23:10:30.027Z Vendors: n/a Products: HPE IOT + GCP Problem Types: remote unauthorized access to sensitive information; remote unauthorized remote access Description: Security vulnerabilities in HPE UIoT version 1.2.4.2 could allow unauthorized remote access and access to sensitive data. HPE has addressed this issue in HPE UIoT: For customers with release UIoT 1.2.4.2 fixes are made available with 1.2.4.2 RP3 HF1. For customers with release older than 1.2.4.2, such as 1.2.4.1, 1.2.4.0, the resolution will be to upgrade to 1.2.4.2 RP3 HF1 Customers are requested to upgrade to the updated versions or
.4.0, the resolution will be to upgrade to 1.2.4.2 RP3 HF1 Customers are requested to upgrade to the updated versions or contact HPE support for further assistance. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03954en_us
CVE ID: CVE-2019-11996 State: PUBLISHED Published: 2019-11-07T18:23:20 Last Updated: 2024-08-04T23:10:30.125Z Vendors: n/a Products: HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage All Flash Arrays; Nimble Storage Secondary Flash Arrays Problem Types: remote disclosure of information; remote elevation of privilege; remote multiple vulnerabilities Description: Potential security vulnerabilities have been identified with HPE Nimble Storage systems in multi array group configurations. The vulnerabilities could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 3
he array. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 3.9.2.0, 4.5.5.0, 5.0.8.0 and 5.1.3.0. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03964en_us
CVE ID: CVE-2019-11997 State: PUBLISHED Published: 2020-01-16T18:55:52 Last Updated: 2024-08-04T23:10:30.126Z Vendors: HPE Products: HPE enhanced Internet Usage Manager (eIUM) Problem Types: remote cross-site scripting (xss) Description: A potential security vulnerability has been identified in HPE enhanced Internet Usage Manager (eIUM) versions 8.3 and 9.0. The vulnerability could be used for unauthorized access to information via cross site scripting. HPE has made the following software updates to resolve the vulnerability in eIUM. The eIUM 8.3 FP01 customers are advised to install eIUM83FP01Patch_QXCR1001711284.20190806-1244 patch. The eIUM 9.0 customers are advised to upgrade to eIUM 9.0
to install eIUM83FP01Patch_QXCR1001711284.20190806-1244 patch. The eIUM 9.0 customers are advised to upgrade to eIUM 9.0 FP02 PI5 or later versions. For other versions, please, contact the product support. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03975en_us
CVE ID: CVE-2019-11998 State: PUBLISHED Published: 2020-01-16T18:56:51 Last Updated: 2024-08-04T23:10:30.112Z Vendors: HPE Products: HPE Superdome Flex Server Problem Types: local multiple vulnerabilities Description: HPE Superdome Flex Server is vulnerable to multiple remote vulnerabilities via improper input validation of administrator commands. This vulnerability could allow an Administrator to bypass security restrictions and access multiple remote vulnerabilities including information disclosure, or denial of service. HPE has provided firmware updates that address the above vulnerabilities for the HPE Superdome Flex Server starting with firmware version v3.20.186 (not available online)
above vulnerabilities for the HPE Superdome Flex Server starting with firmware version v3.20.186 (not available online) and v3.20.206 (available online). Apply v3.20.206 (4 December 2019) or a newer version to resolve this issue. Please visit HPE Support Center https://support.hpe.com/hpesc/public/home to obtain the updated firmware for your product. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03978en_us
CVE ID: CVE-2019-11999 State: PUBLISHED Published: 2020-04-16T18:48:44 Last Updated: 2024-08-04T23:10:29.951Z Vendors: n/a Products: HPE OC Media Platform (OCMP) Problem Types: remote arbitrary file download; remote cross-site scripting (xss) Description: Potential security vulnerabilities have been identified in HPE OpenCall Media Platform (OCMP) resulting in remote arbitrary file download and cross site scripting. HPE has made the following updates available to resolve the vulnerability in the impacted versions of OCMP. * For OCMP version 4.4.X - please upgrade to OCMP 4.4.8 and then install RP806 * For OCMP 4.5.x please contact HPE Technical Support to obtain the necessary software update
4.8 and then install RP806 * For OCMP 4.5.x please contact HPE Technical Support to obtain the necessary software updates. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03984en_us
CVE ID: CVE-2019-12000 State: PUBLISHED Published: 2020-07-17T21:12:55 Last Updated: 2024-08-04T23:10:30.180Z Vendors: HPE Products: HPE MSE Msg Gw application E-LTU Problem Types: remote access restriction bypass; remote user validation failure Description: HPE has found a potential Remote Access Restriction Bypass in HPE MSE Msg Gw application E-LTU prior to version 3.2 when HTTPS is used between the USSD and an external USSD service logic application. Update to version 3.2 and update the HTTPS configuration as described in the HPE MSE Messaging Gateway Configuration and Operations Guide. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/publ
Operations Guide. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03979en_us
CVE ID: CVE-2019-12001 State: PUBLISHED Published: 2020-04-17T13:53:54 Last Updated: 2024-08-04T23:10:30.048Z Vendors: n/a Products: HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage Problem Types: Remote: Session Reuse Description: A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage version(s): GL225P001 and earlier; GL225P001 and earlier; VE270R001-01 and earlier; GL225P001 and earlier; VL270R00
rage version(s): GL225P001 and earlier; GL225P001 and earlier; VE270R001-01 and earlier; GL225P001 and earlier; VL270R001-01 and earlier; VL270R001-01 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03940en_us
CVE ID: CVE-2019-12002 State: PUBLISHED Published: 2020-04-17T13:58:32 Last Updated: 2024-08-04T23:10:30.210Z Vendors: n/a Products: HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage Problem Types: Remote: Session Reuse Description: A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage version(s): GL225P001 and earlier; GL225P001 and earlier; VE270R001-01 and earlier; GL225P001 and earlier; VL270R00
CVE ID: CVE-2019-12003 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12004 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12005 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12006 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12007 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12008 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12009 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12010 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12011 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12012 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12013 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12014 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12015 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12016 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12017 State: PUBLISHED Published: 2019-10-24T14:28:12 Last Updated: 2024-08-04T23:10:30.177Z Vendors: n/a Products: MapR-MFS/CLDB Problem Types: Remote code execution vulnerability in MapR-MFS/CLDB Description: A remote code execution vulnerability exists in MapR CLDB code, specifically in the JSON framework that is used in the CLDB code that handles login and ticket issuance. An attacker can use the 'class' property of the JSON request sent to the CLDB to influence the JSON library's decision on which Java class this JSON request is deserialized to. By doing so, the attacker can force the MapR CLDB to construct a URLClassLoader which loads a malicious Java class from a remo
ng so, the attacker can force the MapR CLDB to construct a URLClassLoader which loads a malicious Java class from a remote path and instantiate this object in the MapR CLDB, thus executing arbitrary code on the machine running the MapR CLDB and take over the cluster. By switching to the newer Jackson library and ensuring that all incoming JSON requests are only deserialized to the same class that it was serialized from, the vulnerability is fixed. This vulnerability affects the entire MapR core platform. Additional Analyst Notes: - CVE Program Container: References: - https://mapr.com/support/s/article/Remote-code-execution-vulnerability-in-MapR-MFS-CLDB?language=en_US
CVE ID: CVE-2019-12018 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12019 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12020 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12021 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12022 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12023 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12024 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12025 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12026 State: REJECTED Published: 2020-06-01T14:55:51 Last Updated: 2020-06-01T14:55:51 Description: No description available.
CVE ID: CVE-2019-12027 State: REJECTED Published: 2020-06-01T14:55:52 Last Updated: 2020-06-01T14:55:52 Description: No description available.
CVE ID: CVE-2019-12028 State: REJECTED Published: 2020-06-01T14:55:52 Last Updated: 2020-06-01T14:55:52 Description: No description available.
CVE ID: CVE-2019-12029 State: REJECTED Published: 2020-06-01T14:55:52 Last Updated: 2020-06-01T14:55:52 Description: No description available.
CVE ID: CVE-2019-12030 State: REJECTED Published: 2020-06-01T14:55:52 Last Updated: 2020-06-01T14:55:52 Description: No description available.
CVE ID: CVE-2019-12031 State: REJECTED Published: 2020-06-01T14:55:52 Last Updated: 2020-06-01T14:55:52 Description: No description available.
CVE ID: CVE-2019-12032 State: REJECTED Published: 2020-06-01T14:55:52 Last Updated: 2020-06-01T14:55:52 Description: No description available.
CVE ID: CVE-2019-12033 State: REJECTED Published: 2020-06-01T14:55:52 Last Updated: 2020-06-01T14:55:52 Description: No description available.
CVE ID: CVE-2019-12034 State: REJECTED Published: 2020-06-01T14:55:52 Last Updated: 2020-06-01T14:55:52 Description: No description available.
CVE ID: CVE-2019-12035 State: REJECTED Published: 2020-06-01T14:55:52 Last Updated: 2020-06-01T14:55:52 Description: No description available.
CVE ID: CVE-2019-12036 State: REJECTED Published: 2020-06-01T14:55:52 Last Updated: 2020-06-01T14:55:52 Description: No description available.
CVE ID: CVE-2019-12037 State: REJECTED Published: 2020-06-01T14:55:52 Last Updated: 2020-06-01T14:55:52 Description: No description available.
CVE ID: CVE-2019-12038 State: REJECTED Published: 2020-06-01T14:55:52 Last Updated: 2020-06-01T14:55:52 Description: No description available.
CVE ID: CVE-2019-12039 State: REJECTED Published: 2020-06-01T14:55:52 Last Updated: 2020-06-01T14:55:52 Description: No description available.
CVE ID: CVE-2019-12040 State: REJECTED Published: 2020-06-01T14:55:52 Last Updated: 2020-06-01T14:55:52 Description: No description available.
CVE ID: CVE-2019-12041 State: PUBLISHED Published: 2019-05-13T12:07:49 Last Updated: 2024-08-04T23:10:30.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/common/html_re.js in remarkable 1.7.1 allows Regular Expression Denial of Service (ReDoS) via a CDATA section. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jonschlinkert/remarkable/issues/331
CVE ID: CVE-2019-12042 State: PUBLISHED Published: 2019-05-23T13:30:44 Last Updated: 2024-08-04T23:10:30.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the event Global\PandaDevicesAgentSharedMemoryChange in Panda products before 18.07.03 allow attackers to queue an event (as an encrypted JSON string) to the system service AgentSvc.exe, which leads to privilege escalation when the CmdLineExecute event is queued. This affects Panda Antivirus, Panda Antivirus Pro, Panda Dome, Panda Global Protection, Panda Gold Protection, and Panda Internet Security. Additional Analyst Notes: - CVE Program Con