Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ve.com/sqlite-users%40mailinglists.sqlite.org/msg114393.html - https://sqlite.org/src/info/45c73deb440496e8 - http://www.securityfocus.com/bid/107562 - https://security.netapp.com/advisory/ntap-20190416-0005/ - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00026.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXD2GYJVTDGEQPUNMMMC5TB7MQXOBBMO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N66U5PY5UJU4XBFZJH7QNKIDNAVIB4OP/ - https://usn.ubuntu.com/4019-1/ - https://security.gentoo.org/glsa/201908-09 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072
9-1/ - https://security.gentoo.org/glsa/201908-09 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html
CVE ID: CVE-2019-9938 State: PUBLISHED Published: 2019-03-22T07:07:32 Last Updated: 2024-08-04T22:10:08.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SHAREit application before 4.0.42 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated) to download arbitrary files from the device including contacts, photos, videos, sound clips, etc. The attacker must be authenticated as a "recognized device." Additional Analyst Notes: - CVE Program Container: References: - https://blog.redforce.io/shareit-vulnerabilities-enable-unrestricted-access-to-adjacent-devices-files/
CVE ID: CVE-2019-9939 State: PUBLISHED Published: 2019-03-22T07:07:41 Last Updated: 2024-08-04T22:10:08.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SHAREit application before 4.0.36 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated) to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requested, the application responds with a 200 status code and empty page, and adds the requesting client device into the list of recognized devices. Additional Analyst Notes: - CVE Program Container: References: - https://blog.redforce.io/s
list of recognized devices. Additional Analyst Notes: - CVE Program Container: References: - https://blog.redforce.io/shareit-vulnerabilities-enable-unrestricted-access-to-adjacent-devices-files/
CVE ID: CVE-2019-9942 State: PUBLISHED Published: 2019-03-23T14:31:53 Last Updated: 2024-08-04T22:10:08.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: A sandbox information disclosure exists in Twig before 1.38.0 and 2.x before 2.7.0 because, under some circumstances, it is possible to call the __toString() method on an object even if not allowed by the security policy in place. Additional Analyst Notes: - CVE Program Container: References: - https://symfony.com/blog/twig-sandbox-information-disclosure - https://github.com/twigphp/Twig/commit/eac5422956e1dcca89a3669a03a3ff32f0502077 - https://www.debian.org/security/2019/dsa-4419 - https://seclists.org/bugtraq/2019/Mar/60
CVE ID: CVE-2019-9943 State: PUBLISHED Published: 2020-06-17T16:12:42 Last Updated: 2024-08-04T22:10:08.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment OMERO.server 5.1.0 through 5.6.0, permissions on OMERO model objects may be circumvented during certain operations such as move and delete, because group permissions are mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://www.openmicroscopy.org/security/advisories/2019-SV2/
CVE ID: CVE-2019-9944 State: PUBLISHED Published: 2020-06-17T16:10:25 Last Updated: 2024-08-04T22:10:08.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files from imported image filesets may circumvent OMERO permissions restrictions. This occurs because the Bio-Formats feature allows an image file to have embedded pathnames. Additional Analyst Notes: - CVE Program Container: References: - https://www.openmicroscopy.org/security/advisories/2019-SV1/
CVE ID: CVE-2019-9945 State: PUBLISHED Published: 2019-03-23T15:03:06 Last Updated: 2024-08-04T22:10:08.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: SoftNAS Cloud 4.2.0 and 4.2.1 allows remote command execution. The NGINX default configuration file has a check to verify the status of a user cookie. If not set, a user is redirected to the login page. An arbitrary value can be provided for this cookie to access the web interface without valid user credentials. If customers have not followed SoftNAS deployment best practices and expose SoftNAS StorageCenter ports directly to the internet, this vulnerability allows an attacker to gain access to the Webadmin interface to create
ports directly to the internet, this vulnerability allows an attacker to gain access to the Webadmin interface to create new users or execute arbitrary commands with administrative privileges, compromising both the platform and the data. Additional Analyst Notes: - CVE Program Container: References: - https://www.digitaldefense.com/blog/2019-softnas-cloud-zero-day-blog/
CVE ID: CVE-2019-9946 State: PUBLISHED Published: 2019-04-02T17:22:52 Last Updated: 2024-08-04T22:10:08.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI 'portmap' plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE- SERVICES chain. Because of this, the HostPort/portmap rule could match incoming traffic even if there were better fitting, more specific service definition rules like NodePorts later in the chain. The issue is fixed in CNI 0.7.5 an
er fitting, more specific service definition rules like NodePorts later in the chain. The issue is fixed in CNI 0.7.5 and Kubernetes 1.11.9, 1.12.7, 1.13.5, and 1.14.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/containernetworking/plugins/pull/269#issuecomment-477683272 - https://security.netapp.com/advisory/ntap-20190416-0002/ - https://access.redhat.com/errata/RHBA-2019:0862 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FCN66VYB3XS76SYH567SO7N3I254JOCT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGOOWAELGH3F7OXRBPH3HCNZELNLXYTW/
CVE ID: CVE-2019-9947 State: PUBLISHED Published: 2019-03-23T17:06:47 Last Updated: 2024-08-04T22:10:08.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the path component of a URL that lacks a ? character) followed by an HTTP header or a Redis command. This is similar to the CVE-2019-9740 query string issue. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2,
ng issue. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.python.org/issue35906 - https://security.netapp.com/advisory/ntap-20190404-0004/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXASHCDD4PQFKTMKQN4YOP5ZH366ABN4/ - https://access.redhat.com/errata/RHSA-2019:1260 - https://lists.fedoraproject.org/archives/li
PQFKTMKQN4YOP5ZH366ABN4/ - https://access.redhat.com/errata/RHSA-2019:1260 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/ - https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html - https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html - https://lists.debian.org/debian-lts-announce/2019/06/msg00026.html - https://access.redhat.com/errata/RHSA-2019:2030 - https://usn.ubuntu.com/4127-2/ - https://usn.ubuntu.com/4127-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html - https://acces
ounce/2019-10/msg00062.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html - https://access.redhat.com/errata/RHSA-2019:3335 - https://access.redhat.com/errata/RHSA-2019:3520 - https://access.redhat.com/errata/RHSA-2019:3725 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html - https://security.gentoo.org/glsa/202003-26 - https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html - http://www.openwall.com/lists/oss-security/2021/02/04/2
CVE ID: CVE-2019-9948 State: PUBLISHED Published: 2019-03-23T17:07:08 Last Updated: 2024-08-04T22:10:08.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.python.org/issue35907 - https://github.com/python/cpython/pull/11842 - http://www.securityfocus.com/bid/107549 - https://security.netapp.com/advisory/ntap-20190404-0004/ - http://lists.opensuse.org/open
securityfocus.com/bid/107549 - https://security.netapp.com/advisory/ntap-20190404-0004/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00092.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00050.html - https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html - https://access.redhat.com/errata/RHSA-2019:1700 - https://lists.debian.org/debian-lts-announce/2019/07/msg00011.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KRYFIMISZ47NTAU3XWZUOFB7CYL62KES/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQEQLXLOCR3SNM3AA5RRYJFQ5AZBYJ4L/ - ht
edoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQEQLXLOCR3SNM3AA5RRYJFQ5AZBYJ4L/ - https://access.redhat.com/errata/RHSA-2019:2030 - https://usn.ubuntu.com/4127-2/ - https://usn.ubuntu.com/4127-1/ - https://seclists.org/bugtraq/2019/Oct/29 - http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html - https://access.redhat.com/errata/RHSA-2019:3335 - https://access.redhat.com/errata/RHSA-2019:3520 - https://security.gentoo.org/glsa/202003-26 - https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html - https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeep
ml - https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E - https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html
CVE ID: CVE-2019-9949 State: PUBLISHED Published: 2019-05-23T13:22:27 Last Updated: 2024-08-04T22:10:08.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution (as root, starting from a low-privilege user session) vulnerability. The cgi-bin/webfile_mgr.cgi file allows arbitrary file write by abusing symlinks. Specifically, this occurs by uploading a tar archive that contains a symbolic link, then uploading another archive that writes a file to the link using the "cgi_untar" command. Other commands might also be susceptible
g another archive that writes a file to the link using the "cgi_untar" command. Other commands might also be susceptible. Code can be executed because the "name" parameter passed to the cgi_unzip command is not sanitized. Additional Analyst Notes: - CVE Program Container: References: - https://community.wd.com/t/new-release-my-cloud-firmware-versions-2-31-183-05-20-2019/237717 - https://bnbdr.github.io/posts/wd/ - https://github.com/bnbdr/wd-rce/
CVE ID: CVE-2019-9950 State: PUBLISHED Published: 2019-04-24T17:17:57 Last Updated: 2024-08-04T22:10:08.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware before 2.31.174 is affected by an authentication bypass vulnerability. The login_mgr.cgi file checks credentials against /etc/shadow. However, the "nobody" account (which can be used to access the control panel API as a low-privilege logged-in user) has a default empty password, allowing an attacker to modify the My Cloud EX2 Ultra web page source c
ge logged-in user) has a default empty password, allowing an attacker to modify the My Cloud EX2 Ultra web page source code and obtain access to the My Cloud as a non-Admin My Cloud device user. Additional Analyst Notes: - CVE Program Container: References: - https://community.wd.com/t/new-release-my-cloud-firmware-versions-2-31-174-3-26-19/235932 - https://support.wdc.com/downloads.aspx?g=2702&lang=en - https://bnbdr.github.io/posts/wd/ - https://github.com/bnbdr/wd-rce/
CVE ID: CVE-2019-9951 State: PUBLISHED Published: 2019-04-24T17:26:16 Last Updated: 2024-08-04T22:10:08.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware before 2.31.174 is affected by an unauthenticated file upload vulnerability. The page web/jquery/uploader/uploadify.php can be accessed without any credentials, and allows uploading arbitrary files to any location on the attached storage. Additional Analyst Notes: - CVE Program Container: References: - https://community.wd.com/t/new-release-my-cloud
torage. Additional Analyst Notes: - CVE Program Container: References: - https://community.wd.com/t/new-release-my-cloud-firmware-versions-2-31-174-3-26-19/235932 - https://support.wdc.com/downloads.aspx?g=2702&lang=en - https://bnbdr.github.io/posts/wd/ - https://github.com/bnbdr/wd-rce/
CVE ID: CVE-2019-9955 State: PUBLISHED Published: 2019-04-22T19:38:59 Last Updated: 2024-08-04T22:10:08.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, ZyWALL 1100 devices, the security firewall login page is vulnerable to Reflected XSS via the unsanitized 'mp_idx' parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.securitymetrics.com/blog/Zyxel-Devices-Vulnerable-Cross-Site-Scripting-Login-page - http://seclists.org/fulldisclosure/2019/Apr/22 - https://www.exploit-db.com/explo
able-Cross-Site-Scripting-Login-page - http://seclists.org/fulldisclosure/2019/Apr/22 - https://www.exploit-db.com/exploits/46706/ - http://packetstormsecurity.com/files/152525/Zyxel-ZyWall-Cross-Site-Scripting.html - https://www.zyxel.com/support/reflected-cross-site-scripting-vulnerability-of-firewalls.shtml
CVE ID: CVE-2019-9956 State: PUBLISHED Published: 2019-03-23T23:14:54 Last Updated: 2024-08-04T22:10:08.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer overflow in the function PopHexPixel of coders/ps.c, which allows an attacker to cause a denial of service or code execution via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1523 - http://www.securityfocus.com/bid/107546 - http://www.securityfocus.com/bid/107672 - https://www.debian.org/security/2019/dsa-4436 - https://seclists.org/bugtraq/2019/Apr/37 - http://lists.opensuse.org
2 - https://www.debian.org/security/2019/dsa-4436 - https://seclists.org/bugtraq/2019/Apr/37 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00010.html - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://usn.ubuntu.com/4034-1/
CVE ID: CVE-2019-9957 State: PUBLISHED Published: 2019-06-24T18:14:12 Last Updated: 2024-08-04T22:10:08.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS within Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote attackers to execute malicious JavaScript and inject arbitrary source code into the target pages. The XSS payload is stored by creating a new user account, and setting the username to an XSS payload. The stored payload can then be triggered by accessing the "Set Security Levels" or "View User/Group Relationships" page. If the attacker does not currently have permission to create a new user, another vulnerability such as CSRF must be exploited first.
ker does not currently have permission to create a new user, another vulnerability such as CSRF must be exploited first. Additional Analyst Notes: - CVE Program Container: References: - https://crawl3r.xyz/cve/cve-2019-9957/
CVE ID: CVE-2019-9958 State: PUBLISHED Published: 2019-06-24T18:10:08 Last Updated: 2024-08-04T22:10:08.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSRF within the admin panel in Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote attackers to escalate privileges, or create new admin accounts by crafting a malicious web page that issues specific requests, using a target admin's session to process their requests. Additional Analyst Notes: - CVE Program Container: References: - https://crawl3r.xyz/cve/cve-2019-9958/
CVE ID: CVE-2019-9959 State: PUBLISHED Published: 2019-07-22T14:18:19 Last Updated: 2024-08-04T22:10:08.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap, with a size controlled by an attacker, as demonstrated by pdftocairo. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/poppler/poppler/blob/master/NEWS - http://www.securityfocus.com/bid/109342 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fe
WS - http://www.securityfocus.com/bid/109342 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6NX2XPMMV7O52F4NBNCHGILGJXM3OJZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5ZOYOZTGU4RGZW4E63OZ7LW4SMPEWGBV/ - https://access.redhat.com/errata/RHSA-2019:2713 - https://lists.debian.org/debian-lts-announce/2019/10/msg00024.html - https://lists.debian.org/debian-lts-announce/2020/11/msg00014.html - https://lists.debian.org/debian-lts-announce/2022/09/msg00030.html
CVE ID: CVE-2019-9960 State: PUBLISHED Published: 2019-03-24T00:27:05 Last Updated: 2024-08-04T22:10:08.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LimeSurvey/LimeSurvey/commit/1ed10d3c423187712b8f6a8cb2bc9d5cc3b2deb8
CVE ID: CVE-2019-9961 State: PUBLISHED Published: 2019-03-26T18:45:13 Last Updated: 2024-08-04T22:10:08.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in ressource view in core/modules/resource/RESOURCEVIEW.php in Wikindx prior to version 5.7.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/wikindx/code/2624/ - https://sourceforge.net/p/wikindx/code/2656/
CVE ID: CVE-2019-9962 State: PUBLISHED Published: 2019-03-24T01:21:42 Last Updated: 2024-08-04T22:10:08.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to VCRUNTIME140!memcpy. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/03/crashing-xnview-248.html
CVE ID: CVE-2019-9963 State: PUBLISHED Published: 2019-03-24T01:21:53 Last Updated: 2024-08-04T22:10:08.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlFreeHeap. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/03/crashing-xnview-248.html
CVE ID: CVE-2019-9964 State: PUBLISHED Published: 2019-03-24T01:22:10 Last Updated: 2024-08-04T22:10:08.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlpNtMakeTemporaryKey. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/03/crashing-xnview-248.html
CVE ID: CVE-2019-9965 State: PUBLISHED Published: 2019-03-24T01:22:21 Last Updated: 2024-08-04T22:10:08.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlReAllocateHeap. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/03/crashing-xnview-248.html
CVE ID: CVE-2019-9966 State: PUBLISHED Published: 2019-03-24T01:22:30 Last Updated: 2024-08-04T22:10:08.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to xnview+0x38536c. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/03/crashing-xnview-248.html
CVE ID: CVE-2019-9967 State: PUBLISHED Published: 2019-03-24T01:22:45 Last Updated: 2024-08-04T22:10:08.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlPrefixUnicodeString. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/03/crashing-xnview-248.html
CVE ID: CVE-2019-9968 State: PUBLISHED Published: 2019-03-24T01:22:53 Last Updated: 2024-08-04T22:10:08.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlQueueWorkItem. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/03/crashing-xnview-248.html