Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-12205 State: PUBLISHED Published: 2019-09-25T18:51:31 Last Updated: 2024-08-04T23:17:38.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.silverstripe.org/download/security-releases/ - https://forum.silverstripe.org/c/releases - https://www.silverstripe.org/download/security-releases/CVE-2019-12205
CVE ID: CVE-2019-12206 State: PUBLISHED Published: 2019-05-20T13:28:45 Last Updated: 2024-08-04T23:17:38.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in nxt_utf8_encode in nxt_utf8.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/162
CVE ID: CVE-2019-12207 State: PUBLISHED Published: 2019-05-20T13:28:56 Last Updated: 2024-08-04T23:17:38.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: njs through 0.3.1, used in NGINX, has a heap-based buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/168
CVE ID: CVE-2019-12208 State: PUBLISHED Published: 2019-05-20T13:29:07 Last Updated: 2024-08-04T23:17:38.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in njs_function_native_call in njs/njs_function.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/163
CVE ID: CVE-2019-12209 State: PUBLISHED Published: 2019-06-04T20:26:55 Last Updated: 2024-08-04T23:17:38.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile (default $HOME/.config/Yubico/u2f_keys) as root (unless openasuser was enabled), and does not properly verify that the path lacks symlinks pointing to other files on the system owned by root. If the debug option is enabled in the PAM configuration, part of the file contents of a symlink target will be logged, possibly revealing sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Yubico/pam-u2f/commit/7db3386
ation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Yubico/pam-u2f/commit/7db3386fcdb454e33a3ea30dcfb8e8960d4c3aa3 - https://developers.yubico.com/pam-u2f/Release_Notes.html - http://www.openwall.com/lists/oss-security/2019/06/05/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FOR4ADC356JPCHAJI5UXZORLC3VNBPS/ - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00018.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZCGU6UQLI3ZTW3UYCTMQW7VDL5M4LCWR/
CVE ID: CVE-2019-12210 State: PUBLISHED Published: 2019-06-04T20:28:51 Last Updated: 2024-08-04T23:17:38.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set using debug_file, that file descriptor is not closed when a new process is spawned. This leads to the file descriptor being inherited into the child process; the child process can then read from and write to it. This can leak sensitive information and also, if written to, be used to fill the disk or plant misinformation. Additional Analyst Notes: - CVE Program Container: References: - https://developers.yubico.com/pam-u2f/Release_Notes.html
dditional Analyst Notes: - CVE Program Container: References: - https://developers.yubico.com/pam-u2f/Release_Notes.html - https://github.com/Yubico/pam-u2f/commit/18b1914e32b74ff52000f10e97067e841e5fff62 - http://www.openwall.com/lists/oss-security/2019/06/05/1 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00018.html
CVE ID: CVE-2019-12211 State: PUBLISHED Published: 2019-05-20T15:05:02 Last Updated: 2024-08-04T23:17:38.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/freeimage/discussion/36111/thread/e06734bed5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PUWVVP67FYM4GMWD7TPQ7C7JPPRUZHYE/ - https://lists.fe
rg/archives/list/package-announce%40lists.fedoraproject.org/message/PUWVVP67FYM4GMWD7TPQ7C7JPPRUZHYE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZ7KBYPPNRMX7RRWVJSX4T63E3TFB6TG/ - https://lists.debian.org/debian-lts-announce/2019/12/msg00012.html - https://www.debian.org/security/2019/dsa-4593 - https://seclists.org/bugtraq/2019/Dec/45 - https://usn.ubuntu.com/4529-1/ - https://security.gentoo.org/glsa/202107-02
CVE ID: CVE-2019-12212 State: PUBLISHED Published: 2019-05-20T15:05:15 Last Updated: 2024-08-04T23:17:39.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: When FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSize function of JXRMeta.c repeatedly calls itself due to improper processing of the file, eventually causing stack exhaustion. An attacker can achieve a remote denial of service attack by sending a specially constructed file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/freeimage/discussion/36111/thread/e06734bed5/
CVE ID: CVE-2019-12213 State: PUBLISHED Published: 2019-05-20T15:05:25 Last Updated: 2024-08-04T23:17:38.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/freeimage/discussion/36111/thread/e06734bed5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PUWVVP67FYM4GMWD7TPQ7C7JPPRUZHYE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZ7KBYPPNRMX7RRWV
YE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZ7KBYPPNRMX7RRWVJSX4T63E3TFB6TG/ - https://lists.debian.org/debian-lts-announce/2019/12/msg00012.html - https://www.debian.org/security/2019/dsa-4593 - https://seclists.org/bugtraq/2019/Dec/45 - https://usn.ubuntu.com/4529-1/ - https://security.gentoo.org/glsa/202107-02
CVE ID: CVE-2019-12214 State: PUBLISHED Published: 2019-05-20T15:05:34 Last Updated: 2024-08-04T23:17:38.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2k_read_ppm_v3 function in j2k.c. The value of l_N_ppm comes from the file read in, and the code does not consider that l_N_ppm may be greater than the size of p_header_data. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/freeimage/discussion/36111/thread/e06734bed5/
CVE ID: CVE-2019-12215 State: PUBLISHED Published: 2019-05-20T15:47:34 Last Updated: 2024-08-04T23:17:38.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: A full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user can trigger a particular error to discover the full path of Matomo on the disk, because lastError.file is used in plugins/CorePluginsAdmin/templates/safemode.twig. NOTE: the vendor disputes the significance of this issue, stating "avoid reporting path disclosures, as we don't consider them as security vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matomo-org/matomo/issues/14464
CVE ID: CVE-2019-12216 State: PUBLISHED Published: 2019-05-20T16:32:44 Last Updated: 2024-08-04T23:17:38.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a heap-based buffer overflow in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libsdl.org/show_bug.cgi?id=4619 - https://lists.debian.org/debian-lts-announce/2019/07/msg00021.html - https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html - https://lists.fedoraproject.org/archive
0021.html - https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ2VRD57UOBT72JUC2DIFHEFCH4N64SW/ - https://usn.ubuntu.com/4238-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6FDFPYUJ7YPY3XB5U75VJHBSVRVIKO/
CVE ID: CVE-2019-12217 State: PUBLISHED Published: 2019-05-20T16:32:59 Last Updated: 2024-08-04T23:17:38.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a NULL pointer dereference in the SDL stdio_read function in file/SDL_rwops.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libsdl.org/show_bug.cgi?id=4626 - https://lists.debian.org/debian-lts-announce/2019/07/msg00021.html - https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html - http://lists.opensuse.org/opensuse-security-a
tml - https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ2VRD57UOBT72JUC2DIFHEFCH4N64SW/ - https://usn.ubuntu.com/4238-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6FDFPYUJ7YPY3XB5U75VJHBSVRVIKO/
CVE ID: CVE-2019-12218 State: PUBLISHED Published: 2019-05-20T16:33:13 Last Updated: 2024-08-04T23:17:39.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a NULL pointer dereference in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libsdl.org/show_bug.cgi?id=4620 - https://lists.debian.org/debian-lts-announce/2019/07/msg00021.html - https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html - http://lists.opensuse.org/opensuse-securi
21.html - https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ2VRD57UOBT72JUC2DIFHEFCH4N64SW/ - https://usn.ubuntu.com/4238-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6FDFPYUJ7YPY3XB5U75VJHBSVRVIKO/
CVE ID: CVE-2019-12219 State: PUBLISHED Published: 2019-05-20T16:33:21 Last Updated: 2024-08-04T23:17:39.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an invalid free error in the SDL function SDL_SetError_REAL at SDL_error.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libsdl.org/show_bug.cgi?id=4625 - https://lists.debian.org/debian-lts-announce/2019/07/msg00021.html - https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html - https://lists.fedoraproject.org/archives/list/pa
- https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ2VRD57UOBT72JUC2DIFHEFCH4N64SW/ - https://usn.ubuntu.com/4238-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6FDFPYUJ7YPY3XB5U75VJHBSVRVIKO/
CVE ID: CVE-2019-12220 State: PUBLISHED Published: 2019-05-20T16:33:29 Last Updated: 2024-08-04T23:17:38.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an out-of-bounds read in the SDL function SDL_FreePalette_REAL at video/SDL_pixels.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libsdl.org/show_bug.cgi?id=4627 - https://lists.debian.org/debian-lts-announce/2019/07/msg00021.html - https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html - http://lists.opensuse.org/opensuse-sec
00021.html - https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ2VRD57UOBT72JUC2DIFHEFCH4N64SW/ - https://usn.ubuntu.com/4238-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6FDFPYUJ7YPY3XB5U75VJHBSVRVIKO/
CVE ID: CVE-2019-12221 State: PUBLISHED Published: 2019-05-20T16:33:37 Last Updated: 2024-08-04T23:17:38.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a SEGV in the SDL function SDL_free_REAL at stdlib/SDL_malloc.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libsdl.org/show_bug.cgi?id=4628 - https://lists.debian.org/debian-lts-announce/2019/07/msg00021.html - https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2019-0
lists.debian.org/debian-lts-announce/2019/07/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ2VRD57UOBT72JUC2DIFHEFCH4N64SW/ - https://usn.ubuntu.com/4238-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6FDFPYUJ7YPY3XB5U75VJHBSVRVIKO/
CVE ID: CVE-2019-12222 State: PUBLISHED Published: 2019-05-20T16:33:48 Last Updated: 2024-08-04T23:17:39.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9. There is an out-of-bounds read in the function SDL_InvalidateMap at video/SDL_pixels.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libsdl.org/show_bug.cgi?id=4621 - https://lists.debian.org/debian-lts-announce/2019/07/msg00021.html - https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html - http://lists.opensuse.org/opensuse
6.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ2VRD57UOBT72JUC2DIFHEFCH4N64SW/ - https://usn.ubuntu.com/4238-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6FDFPYUJ7YPY3XB5U75VJHBSVRVIKO/
CVE ID: CVE-2019-12223 State: PUBLISHED Published: 2019-09-05T14:55:03 Last Updated: 2024-08-04T23:17:38.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07_190502 devices, and other SRN-x devices before 2019-05-03. A system crash and reboot can be achieved by submitting a long username in excess of 117 characters. The username triggers a buffer overflow in the main process controlling operation of the DVR system, rendering services unavailable during the reboot operation. A repeated attack affects availability as long as the attacker has network access to the device. Additional Analyst Notes: - CVE Program
affects availability as long as the attacker has network access to the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.hanwha-security.com/en/products/video-recorder/nvr/ch4/SRN-472S/overview/ - https://medium.com/%40noe.dustin/samsung-webviewer-remote-dos-vulberability-cve-2019-12223-5f4afbc83fbd - https://gist.github.com/dustinnoe/66f91573a0080c9fb2c21819d8805a82
CVE ID: CVE-2019-12239 State: PUBLISHED Published: 2019-05-20T19:38:49 Last Updated: 2024-08-04T23:17:38.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WP Booking System plugin 1.5.1 for WordPress has no CSRF protection, which allows attackers to reach certain SQL injection issues that require administrative access. Additional Analyst Notes: - CVE Program Container: References: - http://dumpco.re/bugs/wp-plugin-wp-booking-system-sqli - https://wordpress.org/plugins/wp-booking-system/#developers - https://wpvulndb.com/vulnerabilities/9284
CVE ID: CVE-2019-12240 State: PUBLISHED Published: 2019-05-20T19:39:01 Last Updated: 2024-08-04T23:17:39.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Virim plugin 0.4 for WordPress allows Insecure Deserialization via s_values, t_values, or c_values in graph.php. Additional Analyst Notes: - CVE Program Container: References: - https://dumpco.re/bugs/wp-plugin-virim-id - https://wpvulndb.com/vulnerabilities/9291
CVE ID: CVE-2019-12241 State: PUBLISHED Published: 2019-05-20T19:39:11 Last Updated: 2024-08-04T23:17:38.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Carts Guru plugin 1.4.5 for WordPress allows Insecure Deserialization via a cartsguru-source cookie to classes/wc-cartsguru-event-handler.php. Additional Analyst Notes: - CVE Program Container: References: - http://dumpco.re/bugs/wp-plugin-carts-guru-id - https://wpvulndb.com/vulnerabilities/9292
CVE ID: CVE-2019-12243 State: PUBLISHED Published: 2019-06-05T14:41:06 Last Updated: 2024-08-04T23:17:38.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Istio 1.1.x through 1.1.6 has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://istio.io/about/notes/ - https://istio.io/blog/2019/cve-2019-12243/
CVE ID: CVE-2019-12245 State: PUBLISHED Published: 2019-09-25T18:41:07 Last Updated: 2024-08-04T23:17:38.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: SilverStripe through 4.3.3 has incorrect access control for protected files uploaded via Upload::loadIntoFile(). An attacker may be able to guess a filename in silverstripe/assets via the AssetControlExtension. Additional Analyst Notes: - CVE Program Container: References: - https://www.silverstripe.org/download/security-releases/ - https://forum.silverstripe.org/c/releases - https://www.silverstripe.org/download/security-releases/CVE-2019-12245
CVE ID: CVE-2019-12246 State: PUBLISHED Published: 2020-02-19T16:29:37 Last Updated: 2024-08-04T23:17:38.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: SilverStripe through 4.3.3 allows a Denial of Service on flush and development URL tools. Additional Analyst Notes: - CVE Program Container: References: - https://www.silverstripe.org/download/security-releases/ - https://www.silverstripe.org/blog/tag/release - https://forum.silverstripe.org/c/releases
CVE ID: CVE-2019-12247 State: PUBLISHED Published: 2019-05-22T14:22:54 Last Updated: 2024-08-04T23:17:39.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2019-05/msg04596.html - https://lists.gnu.org/archive/html/qemu-devel/2019-01/msg06360.html - http://www.securityfocus.com/bid/108434 - https://lists.gnu.org/archive/html/qemu-devel/2019-05/msg
9-01/msg06360.html - http://www.securityfocus.com/bid/108434 - https://lists.gnu.org/archive/html/qemu-devel/2019-05/msg05457.html
CVE ID: CVE-2019-12248 State: PUBLISHED Published: 2019-06-17T00:00:00 Last Updated: 2024-08-04T23:17:39.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.7, Community Edition 6.0.x through 6.0.19, and Community Edition 5.0.x through 5.0.36. An attacker could send a malicious email to an OTRS system. If a logged-in agent user quotes it, the email could cause the browser to load external image resources. Additional Analyst Notes: - CVE Program Container: References: - https://www.otrs.com/category/release-and-security-notes-en/ - https://lists.debian.org/debian-lts-announce/2019/06/msg00004.html - htt
s.com/category/release-and-security-notes-en/ - https://lists.debian.org/debian-lts-announce/2019/06/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html - https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
CVE ID: CVE-2019-12250 State: PUBLISHED Published: 2019-05-21T15:22:43 Last Updated: 2024-08-04T23:17:39.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: IdentityServer IdentityServer4 through 2.4 has stored XSS via the httpContext to the host/Extensions/RequestLoggerMiddleware.cs LogForErrorContext method, which can be triggered by viewing a log. NOTE: the software maintainer disputes that this is a vulnerability because the request logger is not part of IdentityServer but only our development test host Additional Analyst Notes: - CVE Program Container: References: - https://github.com/IdentityServer/IdentityServer4/issues/3279
CVE ID: CVE-2019-12251 State: PUBLISHED Published: 2019-05-21T15:39:59 Last Updated: 2024-08-04T23:17:39.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/f1tz/CVE_Request/tree/master/UCMS/SQLi
CVE ID: CVE-2019-12252 State: PUBLISHED Published: 2019-05-21T17:24:18 Last Updated: 2024-08-04T23:17:38.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post by appending its number to the SDNotify.do?notifyModule=Solution&mode=E-Mail&notifyTo=SOLFORWARD&id= substring. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/service-desk/readme.html - https://github.com/tuyenhva/CVE-2019-12252 - http://packetstormsecurity.com/files/153029/Zoho-ManageEngine-ServiceDesk-Plus-Privilege-Escalation.html - http://www.securi
://packetstormsecurity.com/files/153029/Zoho-ManageEngine-ServiceDesk-Plus-Privilege-Escalation.html - http://www.securityfocus.com/bid/108456