Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
nnounce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/ - https://www.debian.org/security/2020/dsa-4633 - https://seclists.org/bugtraq/2020/Feb/36 - https://security.gentoo.org/glsa/202003-29 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://curl.haxx.se/docs/CVE-2019-5481.html - https://security.netapp.com/advisory/ntap-20191004-0003/
CVE ID: CVE-2019-5482 State: PUBLISHED Published: 2019-09-16T18:06:35 Last Updated: 2024-08-04T19:54:53.563Z Vendors: n/a Products: curl Problem Types: CWE-122 Description: Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/ - http://lists.opensuse.org/opensuse-security
nounce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/ - https://www.debian.org/security/2020/dsa-4633 - https://seclists.org/bugtraq/2020/Feb/36 - https://security.gentoo.org/glsa/202003-29 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://security.netapp.com/advisory/ntap-20200416-0003/ - https://www.oracle.com/security-alerts/cpuoct2020.html - https://security.netapp.com/advisory/ntap-20191
0200416-0003/ - https://www.oracle.com/security-alerts/cpuoct2020.html - https://security.netapp.com/advisory/ntap-20191004-0003/ - https://curl.haxx.se/docs/CVE-2019-5482.html
CVE ID: CVE-2019-5483 State: PUBLISHED Published: 2019-09-09T16:53:58 Last Updated: 2024-08-04T19:54:53.580Z Vendors: n/a Products: seneca Problem Types: CWE-209 Description: Seneca < 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/526258
CVE ID: CVE-2019-5484 State: PUBLISHED Published: 2019-09-13T17:30:23 Last Updated: 2024-08-04T19:54:53.576Z Vendors: n/a Products: bower Problem Types: CWE-22 Description: Bower before 1.8.8 has a path traversal vulnerability permitting file write in arbitrary locations via install command, which allows attackers to write arbitrary files when a malicious package is extracted. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/473811 - https://snyk.io/blog/severe-security-vulnerability-in-bowers-zip-archive-extraction - https://github.com/bower/bower/commit/45c6bfa86f6e57731b153baca9e0b41a1cc699e3 - https://lists.apache.org/thread.html/r8ba4c628fba
thub.com/bower/bower/commit/45c6bfa86f6e57731b153baca9e0b41a1cc699e3 - https://lists.apache.org/thread.html/r8ba4c628fba7181af58817d452119481adce4ba92e889c643e4c7dd3%40%3Ccommits.netbeans.apache.org%3E - https://lists.apache.org/thread.html/rb5ac16fad337d1f3bb7079549f97d8166d0ef3082629417c39f12d63%40%3Cnotifications.netbeans.apache.org%3E
CVE ID: CVE-2019-5485 State: PUBLISHED Published: 2019-09-13T17:30:53 Last Updated: 2024-08-04T19:54:53.557Z Vendors: n/a Products: gitlabhook Problem Types: CWE-78 Description: NPM package gitlabhook version 0.0.17 is vulnerable to a Command Injection vulnerability. Arbitrary commands can be injected through the repository name. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/685447 - http://packetstormsecurity.com/files/154598/NPMJS-gitlabhook-0.0.17-Remote-Command-Execution.html
CVE ID: CVE-2019-5486 State: PUBLISHED Published: 2019-12-18T20:58:42 Last Updated: 2024-08-04T19:54:53.485Z Vendors: n/a Products: GitLab CE/EE Problem Types: CWE-288 Description: A authentication bypass vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.10 in the Salesforce login integration that could be used by an attacker to create an account that bypassed domain restrictions and email verification requirements. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/617896
CVE ID: CVE-2019-5487 State: PUBLISHED Published: 2019-12-18T21:00:29 Last Updated: 2024-08-04T19:54:53.564Z Vendors: n/a Products: GitLab EE Problem Types: CWE-284 Description: An improper access control vulnerability exists in Gitlab EE <v12.3.3, <v12.2.7, & <v12.1.13 that allowed the group search feature with Elasticsearch to return private code, merge requests and commits. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/692252
CVE ID: CVE-2019-5488 State: PUBLISHED Published: 2019-01-07T18:00:00Z Last Updated: 2024-09-16T23:06:26.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: EARCLINK ESPCMS-P8 has SQL injection in the install_pack/index.php?ac=Member&at=verifyAccount verify_key parameter. install_pack/espcms_public/espcms_db.php may allow retrieving sensitive information from the ESPCMS database. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/108/
CVE ID: CVE-2019-5489 State: PUBLISHED Published: 2019-01-07T18:00:00 Last Updated: 2024-08-04T19:54:53.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincore program.) Limited remote exploitation may be possible, as demonstrated by latency differences in accessing public files from an Apache HTTP Server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1064
ache HTTP Server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106478 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html - https://www.debian.org/security/2019/dsa-4465 - https://lists.debian.org/debian-lts-announce/2019/06/msg00010.html - https://lists.debian.org/debian-lts-announce/2019/06/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html - https://seclists.org/bugtraq/2019/Jun/26 - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html - https://access.redhat.com/errata/RHSA-2019:2043 - https://access.redhat.com/errata/RHSA-2019:2029 - https://access.
ml - https://access.redhat.com/errata/RHSA-2019:2043 - https://access.redhat.com/errata/RHSA-2019:2029 - https://access.redhat.com/errata/RHSA-2019:2473 - https://access.redhat.com/errata/RHSA-2019:2808 - https://access.redhat.com/errata/RHSA-2019:2837 - https://access.redhat.com/errata/RHSA-2019:2809 - https://access.redhat.com/errata/RHSA-2019:3309 - https://access.redhat.com/errata/RHSA-2019:3517 - https://access.redhat.com/errata/RHSA-2019:3967 - https://access.redhat.com/errata/RHSA-2019:4058 - https://access.redhat.com/errata/RHSA-2019:4057 - https://access.redhat.com/errata/RHSA-2019:4056 - https://access.redhat.com/errata/RHSA-2019:4159 - https://access.redhat.com/errata/RHSA-2019:41
/errata/RHSA-2019:4056 - https://access.redhat.com/errata/RHSA-2019:4159 - https://access.redhat.com/errata/RHSA-2019:4164 - https://access.redhat.com/errata/RHSA-2019:4255 - https://access.redhat.com/errata/RHSA-2020:0204 - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.theregister.co.uk/2019/01/05/boffins_beat_page_cache/ - https://bugzilla.suse.com/show_bug.cgi?id=1120843 - https://github.com/torvalds/linux/commit/574823bfab82d9d8fa47f422778043fbb4b4f50e - https://arxiv.org/abs/1901.01161 - https://security.netapp.com/advisory/ntap-20190307-0001/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=574823bfab82d9d8fa47f422778043fbb4b4f50e - htt
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=574823bfab82d9d8fa47f422778043fbb4b4f50e - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-pagecache-en
CVE ID: CVE-2019-5490 State: PUBLISHED Published: 2019-03-21T18:25:53 Last Updated: 2024-08-04T19:54:53.575Z Vendors: NetApp, Inc. Products: NetApp Service Processor Problem Types: Default Configureation Description: Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrary command execution. Any platform listed in the advisory Impact section may be affected and should be upgraded to a fixed version of Service Processor firmware IMMEDIATELY. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190305-0001/ - http://
Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190305-0001/ - http://support.lenovo.com/us/en/solutions/LEN-26771
CVE ID: CVE-2019-5491 State: PUBLISHED Published: 2019-02-27T17:00:00Z Last Updated: 2024-09-16T17:08:32.691Z Vendors: NetApp Products: Clustered Data ONTAP Problem Types: Information Disclosure Description: Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses sensitive information to an unauthenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190227-0001/ - http://www.securityfocus.com/bid/107183
CVE ID: CVE-2019-5492 State: PUBLISHED Published: 2019-04-29T13:49:33 Last Updated: 2024-08-04T19:54:53.568Z Vendors: NetApp, Inc. Products: Element Plug-in for vCenter Server Problem Types: Sensitive Information Disclosure Description: Element Plug-in for vCenter Server versions prior to 4.2.3 may disclose sensitive account information to an unauthenticated attacker. NetApp HCI Compute Node versions prior to 1.4P2 bundle affected versions of Element Plug-in for vCenter Server. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190426-0001/ - http://www.securityfocus.com/bid/108105
CVE ID: CVE-2019-5493 State: PUBLISHED Published: 2019-08-02T14:37:02 Last Updated: 2024-08-04T19:54:53.494Z Vendors: Netapp Products: Data ONTAP operating in 7-Mode Problem Types: Information Disclosure Description: Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 are susceptible to a vulnerability which discloses information to an unauthenticated attacker. A successful attack requires that multiple non-default options be enabled. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190801-0002/
CVE ID: CVE-2019-5494 State: PUBLISHED Published: 2019-05-10T18:55:44 Last Updated: 2024-08-04T19:54:53.577Z Vendors: NetApp Products: OnCommand Unified Manager 7-Mode Problem Types: Information Disclosure Description: OnCommand Unified Manager 7-Mode prior to version 5.2.4 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190509-0006/
CVE ID: CVE-2019-5495 State: PUBLISHED Published: 2019-05-10T19:12:23 Last Updated: 2024-08-04T19:54:53.487Z Vendors: NetApp Products: OnCommand Unified Manager for VMware vSphere,Linux and Windows 7.2 and above Problem Types: Information Disclosure Description: OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190509-0007/
CVE ID: CVE-2019-5496 State: PUBLISHED Published: 2019-05-10T19:24:21 Last Updated: 2024-08-04T20:01:50.651Z Vendors: NetApp Products: OnCommand Insight Problem Types: Information Disclosure Description: Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190509-0005/
CVE ID: CVE-2019-5497 State: PUBLISHED Published: 2019-07-01T20:12:24 Last Updated: 2024-08-04T20:01:50.681Z Vendors: NetApp Products: AFF A700s Baseboard Management Controller Problem Types: Default Privileged Account Description: NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher were shipped with a default account enabled that could allow unauthorized arbitrary command execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190627-0001/
CVE ID: CVE-2019-5498 State: PUBLISHED Published: 2019-08-09T17:58:42 Last Updated: 2024-08-04T20:01:50.860Z Vendors: NetApp Inc. Products: OnCommand Insight Problem Types: Sensitive Information Disclosure Description: OnCommand Insight versions through 7.3.6 may disclose sensitive account information to an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190809-0001/
CVE ID: CVE-2019-5499 State: REJECTED Published: 2020-05-08T14:39:42 Last Updated: 2020-05-08T14:39:42 Description: No description available.
CVE ID: CVE-2019-5500 State: PUBLISHED Published: 2020-05-11T17:46:34 Last Updated: 2024-08-04T20:01:50.772Z Vendors: n/a Products: NetApp Service Processor and Baseboard Management Controller Problem Types: Denial of Service (DoS) Description: Certain versions of the NetApp Service Processor and Baseboard Management Controller firmware allow a remote unauthenticated attacker to cause a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190802-0003/
CVE ID: CVE-2019-5501 State: PUBLISHED Published: 2019-08-02T14:55:38 Last Updated: 2024-08-04T20:01:51.442Z Vendors: NetApp Products: Data ONTAP operating in 7-Mode Problem Types: Sensitive Information Disclosure Description: Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 may disclose sensitive LDAP account information to unauthenticated remote attackers. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190801-0001/
CVE ID: CVE-2019-5502 State: PUBLISHED Published: 2019-08-05T18:48:40 Last Updated: 2024-08-04T20:01:50.795Z Vendors: n/a Products: Data ONTAP operating in 7-Mode Problem Types: Insecure SMB Cryptography Description: SMB in Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 has weak cryptography which when exploited could lead to information disclosure or addition or modification of data. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190802-0002/
CVE ID: CVE-2019-5503 State: PUBLISHED Published: 2019-09-10T15:50:41 Last Updated: 2024-08-04T20:01:51.557Z Vendors: NetApp Products: OnCommand Workflow Automation Problem Types: Information Disclosure Description: OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190909-0001/
CVE ID: CVE-2019-5504 State: PUBLISHED Published: 2019-09-24T19:53:30 Last Updated: 2024-08-04T20:01:50.685Z Vendors: n/a Products: ONTAP Select Deploy administration utility Problem Types: Remote Command Execution Description: ONTAP Select Deploy administration utility versions 2.12 & 2.12.1 ship with an HTTP service bound to the network allowing unauthenticated remote attackers to perform administrative actions. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190923-0001/
CVE ID: CVE-2019-5505 State: PUBLISHED Published: 2019-09-24T19:56:11 Last Updated: 2024-08-04T20:01:50.649Z Vendors: n/a Products: ONTAP Select Deploy administration utility Problem Types: Information Disclosure Description: ONTAP Select Deploy administration utility versions 2.2 through 2.12.1 transmit credentials in plaintext. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190923-0002/
CVE ID: CVE-2019-5506 State: PUBLISHED Published: 2019-10-09T18:20:00 Last Updated: 2024-08-04T20:01:51.447Z Vendors: n/a Products: Clustered Data ONTAP Problem Types: Sensitive Information Disclosure Description: Clustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain circumstances making them susceptible to impersonation via man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20191009-0003/
CVE ID: CVE-2019-5507 State: PUBLISHED Published: 2019-10-09T18:26:25 Last Updated: 2024-08-04T20:01:50.698Z Vendors: n/a Products: SnapManager for Oracle Problem Types: Sensitive Information Disclosure Description: SnapManager for Oracle prior to version 3.4.2P1 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20191009-0004/
CVE ID: CVE-2019-5508 State: PUBLISHED Published: 2019-10-25T18:02:25 Last Updated: 2024-08-04T20:01:50.856Z Vendors: n/a Products: Clustered Data ONTAP Problem Types: Denial of Service (DoS) Description: Clustered Data ONTAP versions 9.2 through 9.4 are susceptible to a vulnerability which allows an attacker to use l2ping to cause a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20191024-0001/
CVE ID: CVE-2019-5509 State: PUBLISHED Published: 2019-11-21T15:33:19 Last Updated: 2024-08-04T20:01:50.830Z Vendors: NetApp Products: ONTAP Select Deploy administration utility Problem Types: Remote Code Injection Description: ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerability which when successfully exploited could allow an unauthenticated remote attacker to enable and use a privileged user account. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20191121-0001/
CVE ID: CVE-2019-5511 State: PUBLISHED Published: 2019-04-09T19:29:46 Last Updated: 2024-08-04T20:01:51.456Z Vendors: n/a Products: VMware Workstation Problem Types: Elevation of privilege vulnerability Description: VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle paths appropriately. Successful exploitation of this issue may allow the path to the VMX executable, on a Windows host, to be hijacked by a non-administrator leading to elevation of privilege. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0002.html
CVE ID: CVE-2019-5512 State: PUBLISHED Published: 2019-04-09T19:29:56 Last Updated: 2024-08-04T20:01:51.569Z Vendors: n/a Products: VMware Workstation Problem Types: Elevation of privilege vulnerability Description: VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle COM classes appropriately. Successful exploitation of this issue may allow hijacking of COM classes used by the VMX process, on a Windows host, leading to elevation of privilege. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0002.html
CVE ID: CVE-2019-5513 State: PUBLISHED Published: 2019-04-09T19:30:44 Last Updated: 2024-08-04T20:01:50.845Z Vendors: n/a Products: VMware Horizon Connection Server Problem Types: Information disclosure vulnerability Description: VMware Horizon Connection Server (7.x before 7.8, 7.5.x before 7.5.2, 6.x before 6.2.8) contains an information disclosure vulnerability. Successful exploitation of this issue may allow disclosure of internal domain names, the Connection Server’s internal name, or the gateway’s internal IP address. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0003.html
CVE ID: CVE-2019-5514 State: PUBLISHED Published: 2019-04-01T20:21:11 Last Updated: 2024-08-04T20:01:52.025Z Vendors: VMware Products: VMware Fusion Problem Types: Unauthenticated APIs Security vulnerability Description: VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web socket. An attacker may exploit this issue by tricking the host user to execute a JavaScript to perform unauthorized functions on the guest machine where VMware Tools is installed. This may further be exploited to execute commands on the guest machines. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecur
commands on the guest machines. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/152290/VMware-Security-Advisory-2019-0005.html - http://www.securityfocus.com/bid/107637 - https://www.vmware.com/security/advisories/VMSA-2019-0005.html
CVE ID: CVE-2019-5515 State: PUBLISHED Published: 2019-04-02T14:19:30 Last Updated: 2024-08-04T20:01:51.317Z Vendors: VMware Products: VMware Workstation and Fusion Problem Types: Out-of-bounds write vulnerability Description: VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) and Fusion (11.x before 11.0.3, 10.x before 10.1.6) updates address an out-of-bounds write vulnerability in the e1000 and e1000e virtual network adapters. Exploitation of this issue may lead to code execution on the host from the guest but it is more likely to result in a denial of service of the guest. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/
the guest. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0005.html - https://www.zerodayinitiative.com/advisories/ZDI-19-306/ - https://www.securityfocus.com/bid/107634 - https://packetstormsecurity.com/files/152290/VMware-Security-Advisory-2019-0005.html - https://www.zerodayinitiative.com/advisories/ZDI-19-516/
CVE ID: CVE-2019-5516 State: PUBLISHED Published: 2019-04-15T16:57:27 Last Updated: 2024-08-04T20:01:51.993Z Vendors: VMware Products: ESXi, Workstation, Fusion Problem Types: Vertex shader out-of-bounds read vulnerability Description: VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before 10.1.6) updates address an out-of-bounds vulnerability with the vertex shader functionality. Exploitation of this issue requires an attacker to have access to a virtual machine with 3D graphics enabled. Successful exploitation of this issue may lead to information disclosure or may a