Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-20000 State: PUBLISHED Published: 2019-12-26T04:07:45 Last Updated: 2024-08-05T02:32:10.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: The malware scan function in BullGuard Premium Protection 20.0.371.8 has a TOCTOU issue that enables a symbolic link attack, allowing privileged files to be deleted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NtRaiseHardError/Antimalware-Research/blob/master/BullGuard/Privileged%20File%20Delete/v20.0.371.8/README.md
CVE ID: CVE-2019-20001 State: PUBLISHED Published: 2020-08-04T12:22:40 Last Updated: 2024-08-05T02:32:10.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in RICOH Streamline NX Client Tool and RICOH Streamline NX PC Client that allows attackers to escalate local privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.ricoh-usa.com/en/support-and-download - https://support.ricoh.com/html_gen/util/STREAM/Streamline.html
CVE ID: CVE-2019-20002 State: PUBLISHED Published: 2020-04-27T14:29:28 Last Updated: 2024-08-05T02:32:10.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value (provided by a low-privileged user in the Subject field of a help request form) that is mishandled in a TicketActions/view?tab=group TSV export by an admin user. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40ayaan.saikia91/formula-injection-vulnerability-on-solarwinds-webhelpdesk-12-7-1-37569cd4cdc1
CVE ID: CVE-2019-20003 State: PUBLISHED Published: 2020-01-17T15:01:30 Last Updated: 2024-08-05T02:32:10.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Feldtech easescreen Crystal 9.0 Web-Services 9.0.1.16265 allows Stored XSS via the Debug-Log and Display-Log components. This could be exploited when an attacker sends an crafted string for FTP authentication. Additional Analyst Notes: - CVE Program Container: References: - https://easescreen.com/en/ - https://github.com/0xedh/someshit/blob/master/CVE-2019-20003.md
CVE ID: CVE-2019-20004 State: PUBLISHED Published: 2020-01-05T22:02:46 Last Updated: 2024-08-05T02:32:10.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. When the administrator password is changed from a certain client IP address, administrative authorization remains available to any client at that IP address, leading to complete control of the router. Additional Analyst Notes: - CVE Program Container: References: - http://en.intelbras.com.br/downloads - https://medium.com/%40rsantos_14778/remote-control-cve-2019-20004-21f77e976715
CVE ID: CVE-2019-20005 State: PUBLISHED Published: 2019-12-26T21:55:51 Last Updated: 2024-08-05T02:32:10.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to a heap-based buffer over-read while running strchr() starting with a pointer after a '\0' character (where the processing of a string was finished). Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/ezxml/bugs/14/
CVE ID: CVE-2019-20006 State: PUBLISHED Published: 2019-12-26T21:55:38 Last Updated: 2024-08-05T02:32:10.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content puts a pointer to the internal address of a larger block as xml->txt. This is later deallocated (using free), leading to a segmentation fault. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/ezxml/bugs/15/
CVE ID: CVE-2019-20007 State: PUBLISHED Published: 2019-12-26T21:55:23 Last Updated: 2024-08-05T02:32:10.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ezXML 0.8.2 through 0.8.6. The function ezxml_str2utf8, while parsing a crafted XML file, performs zero-length reallocation in ezxml.c, leading to returning a NULL pointer (in some compilers). After this, the function ezxml_parse_str does not check whether the s variable is not NULL in ezxml.c, leading to a NULL pointer dereference and crash (segmentation fault). Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/ezxml/bugs/13/
CVE ID: CVE-2019-20008 State: PUBLISHED Published: 2019-12-26T22:43:48 Last Updated: 2024-08-05T02:32:10.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Archery before 1.3, inserting an XSS payload into a project name (either by creating a new project or editing an existing one) will result in stored XSS on the vulnerability-scan scheduling page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/archerysec/archerysec/issues/338 - https://github.com/archerysec/archerysec/releases/tag/v1.3 - https://github.com/archerysec/archerysec/compare/archerysec-v1.2...v1.3
CVE ID: CVE-2019-20009 State: PUBLISHED Published: 2019-12-27T00:15:39 Last Updated: 2024-08-05T02:32:10.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_SPLINE_private in dwg.spec. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/compare/0.9.2...0.9.3 - https://github.com/LibreDWG/libredwg/issues/176 - https://github.com/LibreDWG/libredwg/issues/176#issue-541977765 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html - http://lists.opensuse.org/opensuse-security-annou
/lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html
CVE ID: CVE-2019-20010 State: PUBLISHED Published: 2019-12-27T00:14:23 Last Updated: 2024-08-05T02:32:10.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in resolve_objectref_vector in decode.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/176 - https://github.com/LibreDWG/libredwg/issues/176#issuecomment-568643383 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html
CVE ID: CVE-2019-20011 State: PUBLISHED Published: 2019-12-27T00:15:26 Last Updated: 2024-08-05T02:32:10.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in decode_R13_R2000 in decode.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/176 - https://github.com/LibreDWG/libredwg/issues/176#issuecomment-568643439 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html
CVE ID: CVE-2019-20012 State: PUBLISHED Published: 2019-12-27T00:15:16 Last Updated: 2024-08-05T02:32:10.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_HATCH_private in dwg.spec. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/176 - https://github.com/LibreDWG/libredwg/issues/176#issuecomment-568643088 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html
CVE ID: CVE-2019-20013 State: PUBLISHED Published: 2019-12-27T00:14:59 Last Updated: 2024-08-05T02:32:10.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in decode_3dsolid in dwg.spec. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/compare/0.9.2...0.9.3 - https://github.com/LibreDWG/libredwg/issues/176 - https://github.com/LibreDWG/libredwg/issues/176#issuecomment-568643060 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/
ts.opensuse.org/opensuse-security-announce/2020-01/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html
CVE ID: CVE-2019-20014 State: PUBLISHED Published: 2019-12-27T00:14:48 Last Updated: 2024-08-05T02:32:10.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/compare/0.9.2...0.9.3 - https://github.com/LibreDWG/libredwg/issues/176 - https://github.com/LibreDWG/libredwg/issues/176#issuecomment-568643172 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html
CVE ID: CVE-2019-20015 State: PUBLISHED Published: 2019-12-27T00:14:37 Last Updated: 2024-08-05T02:32:10.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_LWPOLYLINE_private in dwg.spec. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/176 - https://github.com/LibreDWG/libredwg/issues/176#issuecomment-568643028 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html
CVE ID: CVE-2019-20016 State: PUBLISHED Published: 2019-12-27T01:12:25 Last Updated: 2024-08-05T02:32:10.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHDRHeaderMessageDatatype in dataobject.c and directblockRead in fractalhead.c. NOTE: a download of v0.9 after 2019-12-06 should fully remediate this issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hoene/libmysofa/issues/83 - https://github.com/hoene/libmysofa/issues/84 - https://github.com/hoene/libmysofa/commit/2e6fac6ab6156dae8e8c6f417741388084b70
//github.com/hoene/libmysofa/issues/84 - https://github.com/hoene/libmysofa/commit/2e6fac6ab6156dae8e8c6f417741388084b70d6f
CVE ID: CVE-2019-20017 State: PUBLISHED Published: 2019-12-27T01:12:13 Last Updated: 2024-08-05T02:32:10.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer over-read was discovered in Mat_VarReadNextInfo5 in mat5.c in matio 1.5.17. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tbeu/matio/issues/127
CVE ID: CVE-2019-20018 State: PUBLISHED Published: 2019-12-27T01:11:59 Last Updated: 2024-08-05T02:32:10.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer over-read was discovered in ReadNextCell in mat5.c in matio 1.5.17. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tbeu/matio/issues/129
CVE ID: CVE-2019-20019 State: PUBLISHED Published: 2019-12-27T01:11:43 Last Updated: 2024-08-05T02:32:10.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: An attempted excessive memory allocation was discovered in Mat_VarRead5 in mat5.c in matio 1.5.17. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tbeu/matio/issues/130
CVE ID: CVE-2019-20020 State: PUBLISHED Published: 2019-12-27T01:11:26 Last Updated: 2024-08-05T02:32:10.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer over-read was discovered in ReadNextStructField in mat5.c in matio 1.5.17. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tbeu/matio/issues/128
CVE ID: CVE-2019-20021 State: PUBLISHED Published: 2019-12-27T01:11:17 Last Updated: 2024-08-05T02:32:10.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer over-read was discovered in canUnpack in p_mach.cpp in UPX 3.95 via a crafted Mach-O file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/upx/upx/issues/315 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D7XU42G6MUQQXHWRP7DCF2JSIBOJ5GOO/ - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00007.html - https://lists.fedoraproject.
sg00003.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00007.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EUTVSTXAFTD552NO2K2RIF6MDQEHP3BE/
CVE ID: CVE-2019-20022 State: PUBLISHED Published: 2019-12-27T01:11:07 Last Updated: 2024-08-05T02:32:10.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid memory address dereference was discovered in load_pnm in frompnm.c in libsixel before 1.8.3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/108
CVE ID: CVE-2019-20023 State: PUBLISHED Published: 2019-12-27T01:10:26 Last Updated: 2024-08-05T02:32:10.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak was discovered in image_buffer_resize in fromsixel.c in libsixel 1.8.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/120
CVE ID: CVE-2019-20024 State: PUBLISHED Published: 2019-12-27T01:10:55 Last Updated: 2024-08-05T02:32:10.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow was discovered in image_buffer_resize in fromsixel.c in libsixel before 1.8.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/121
CVE ID: CVE-2019-20025 State: PUBLISHED Published: 2020-07-29T17:28:31 Last Updated: 2024-08-05T02:32:10.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain builds of NEC SV9100 software could allow an unauthenticated, remote attacker to log into a device running an affected release with a hardcoded username and password, aka a Static Credential Vulnerability. The vulnerability is due to an undocumented user account with manufacturer privilege level. An attacker could exploit this vulnerability by using this account to remotely log into an affected device. A successful exploit could allow the attacker to log into the device with manufacturer level access. This vulnerabili
e. A successful exploit could allow the attacker to log into the device with manufacturer level access. This vulnerability affects SV9100 PBXes that are running software release 6.0 or higher. This vulnerability does not affect SV9100 software releases prior to 6.0. Additional Analyst Notes: - CVE Program Container: References: - https://shadytel.su/files/nec_cve.txt
CVE ID: CVE-2019-20026 State: PUBLISHED Published: 2020-07-29T17:28:36 Last Updated: 2024-08-05T02:32:10.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote attackers to reset all existing usernames and passwords to default values via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://shadytel.su/files/nec_cve.txt
CVE ID: CVE-2019-20027 State: PUBLISHED Published: 2020-07-29T17:29:23 Last Updated: 2024-08-05T02:32:10.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aspire-derived NEC PBXes, including the SV8100, SV9100, SL1100 and SL2100 with software releases 7.0 or higher contain the possibility if incorrectly configured to allow a blank username and password combination to be entered as a valid, successfully authenticating account. Additional Analyst Notes: - CVE Program Container: References: - https://shadytel.su/files/nec_cve.txt
CVE ID: CVE-2019-20028 State: PUBLISHED Published: 2020-07-29T17:29:44 Last Updated: 2024-08-05T02:32:10.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100, SL1100 and SL2100 devices allow unauthenticated read-only access to voicemails, greetings, and voice response system content through a system's WebPro administration interface. Additional Analyst Notes: - CVE Program Container: References: - https://shadytel.su/files/nec_cve.txt
CVE ID: CVE-2019-20029 State: PUBLISHED Published: 2020-07-29T17:29:49 Last Updated: 2024-08-05T02:32:10.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices. A specially crafted HTTP POST can cause privilege escalation resulting in a higher privileged account, including an undocumented developer level of access. Additional Analyst Notes: - CVE Program Container: References: - https://shadytel.su/files/nec_cve.txt
CVE ID: CVE-2019-20030 State: PUBLISHED Published: 2020-07-29T17:29:58 Last Updated: 2024-08-05T02:32:10.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard Linux utilities to gain access to the system's LAN port. All versions are affected. Additional Analyst Notes: - CVE Program Container: References: - https://shadytel.su/files/nec_cve.txt
CVE ID: CVE-2019-20031 State: PUBLISHED Published: 2020-07-29T17:30:02 Last Updated: 2024-08-05T02:32:10.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: NEC UM8000, UM4730 and prior non-InMail voicemail systems with all known software versions may permit an infinite number of login attempts in the telephone user interface (TUI), effectively allowing brute force attacks. Additional Analyst Notes: - CVE Program Container: References: - https://shadytel.su/files/nec_cve.txt
CVE ID: CVE-2019-20032 State: PUBLISHED Published: 2020-07-29T17:30:06 Last Updated: 2024-08-05T02:32:10.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices, may access the system's administration modem. Additional Analyst Notes: - CVE Program Container: References: - https://shadytel.su/files/nec_cve.txt
CVE ID: CVE-2019-20033 State: PUBLISHED Published: 2020-07-29T17:30:35 Last Updated: 2024-08-05T02:32:10.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Aspire-derived NEC PBXes, including all versions of SV8100 devices, a set of documented, static login credentials may be used to access the DIM interface. Additional Analyst Notes: - CVE Program Container: References: - https://shadytel.su/files/nec_cve.txt
CVE ID: CVE-2019-20041 State: PUBLISHED Published: 2019-12-27T07:14:52 Last Updated: 2024-08-05T02:32:10.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowing attackers to bypass input sanitization, as demonstrated by the javascript&colon; substring. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2019/12/wordpress-5-3-1-security-and-maintenance-release/ - https://github.com/WordPress/wordpress-develop/commit/b1975463dd995da19bb40d3fa0786498717e3c53 - https://seclists.org/bugtraq/2020/Jan/8 - https://www.debian.org/secu
/commit/b1975463dd995da19bb40d3fa0786498717e3c53 - https://seclists.org/bugtraq/2020/Jan/8 - https://www.debian.org/security/2020/dsa-4599 - https://lists.debian.org/debian-lts-announce/2020/01/msg00010.html - https://www.debian.org/security/2020/dsa-4677
CVE ID: CVE-2019-20042 State: PUBLISHED Published: 2019-12-27T07:14:37 Last Updated: 2024-08-05T02:32:10.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: In wp-includes/formatting.php in WordPress 3.7 to 5.3.0, the function wp_targeted_link_rel() can be used in a particular way to result in a stored cross-site scripting (XSS) vulnerability. This has been patched in WordPress 5.3.1, along with all the previous WordPress versions from 3.7 to 5.3 via a minor release. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9975 - https://wordpress.org/news/2019/12/wordpress-5-3-1-security-and-maintenance-release/ - https://core.trac.wo
ities/9975 - https://wordpress.org/news/2019/12/wordpress-5-3-1-security-and-maintenance-release/ - https://core.trac.wordpress.org/changeset/46894/trunk - https://github.com/WordPress/wordpress-develop/commit/1f7f3f1f59567e2504f0fbebd51ccf004b3ccb1d - https://blog.ripstech.com/filter/vulnerabilities/ - https://seclists.org/bugtraq/2020/Jan/8 - https://www.debian.org/security/2020/dsa-4599 - https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-xvg2-m2f4-83m7 - https://hackerone.com/reports/509930 - https://www.debian.org/security/2020/dsa-4677
CVE ID: CVE-2019-20043 State: PUBLISHED Published: 2019-12-27T07:14:16 Last Updated: 2024-08-05T02:32:10.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: In in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in WordPress 3.7 to 5.3.0, authenticated users who do not have the rights to publish a post are able to mark posts as sticky or unsticky via the REST API. For example, the contributor role does not have such rights, but this allowed them to bypass that. This has been patched in WordPress 5.3.1, along with all the previous WordPress versions from 3.7 to 5.3 via a minor release. Additional Analyst Notes: - CVE Program Container: References: - https://wpvuln
ons from 3.7 to 5.3 via a minor release. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9973 - https://wordpress.org/news/2019/12/wordpress-5-3-1-security-and-maintenance-release/ - https://core.trac.wordpress.org/changeset/46893/trunk - https://github.com/WordPress/wordpress-develop/commit/1d1d5be7aa94608c04516cac4238e8c22b93c1d9 - https://seclists.org/bugtraq/2020/Jan/8 - https://www.debian.org/security/2020/dsa-4599 - https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-g7rg-hchx-c2gw - https://www.debian.org/security/2020/dsa-4677
CVE ID: CVE-2019-20044 State: PUBLISHED Published: 2020-02-24T13:09:43 Last Updated: 2024-08-05T02:32:10.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid(). Additional Analyst Notes: - CVE Program Container: References: - http://zsh.sourceforge.net/releases.html - https://github.com/XMB5/zsh-privileged-upgrade - https://www.zsh.org/mla/zsh-announce/141 - https://lists.debian.org/debian-lts-announce/2020