Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-9217 State: PUBLISHED Published: 2019-04-17T16:46:24 Last Updated: 2024-08-04T21:38:46.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. Its User Interface has a Misrepresentation of Critical Information. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/
CVE ID: CVE-2019-9218 State: PUBLISHED Published: 2019-05-29T15:59:30 Last Updated: 2024-08-04T21:38:46.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control (issue 1 of 5). Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/
CVE ID: CVE-2019-9219 State: PUBLISHED Published: 2019-04-17T16:43:48 Last Updated: 2024-08-04T21:38:46.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control (issue 2 of 5). Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/54159
CVE ID: CVE-2019-9220 State: PUBLISHED Published: 2019-04-17T16:52:23 Last Updated: 2024-08-04T21:38:46.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Uncontrolled Resource Consumption. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/55653
CVE ID: CVE-2019-9221 State: PUBLISHED Published: 2019-05-29T16:06:53 Last Updated: 2024-08-04T21:38:46.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control (issue 3 of 5). Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/
CVE ID: CVE-2019-9222 State: PUBLISHED Published: 2019-04-17T16:48:38 Last Updated: 2024-08-04T21:38:46.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Permissions. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/56348
CVE ID: CVE-2019-9223 State: PUBLISHED Published: 2019-04-17T16:50:14 Last Updated: 2024-08-04T21:38:46.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/50334
CVE ID: CVE-2019-9224 State: PUBLISHED Published: 2019-04-17T16:39:21 Last Updated: 2024-08-04T21:38:46.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control (issue 4 of 5). Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/54789
CVE ID: CVE-2019-9225 State: PUBLISHED Published: 2019-04-17T16:41:57 Last Updated: 2024-08-04T21:38:46.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control (issue 5 of 5). Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/54680
CVE ID: CVE-2019-9226 State: PUBLISHED Published: 2019-02-28T14:00:00Z Last Updated: 2024-09-17T04:04:32.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in baigo CMS 2.1.1. There is a persistent XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the opt[base][BG_SITE_NAME] parameter to the bg_console/index.php?m=opt&c=request URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/baigoStudio/baigoCMS/issues/7
CVE ID: CVE-2019-9227 State: PUBLISHED Published: 2019-02-28T14:00:00Z Last Updated: 2024-09-16T16:27:27.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in baigo CMS 2.1.1. There is a vulnerability that allows remote attackers to execute arbitrary code. A BG_SITE_NAME parameter with malicious code can be written into the opt_base.inc.php file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/baigoStudio/baigoCMS/issues/8
CVE ID: CVE-2019-9228 State: PUBLISHED Published: 2019-07-19T22:45:35 Last Updated: 2024-08-04T21:38:46.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A at least to 7.20A.252.062. The (1) management SSH and (2) management TELNET features allow remote attackers to cause a denial of service (connection slot exhaustion) via 5 unauthenticated connection attempts, because the maximum number of unauthenticated clients that can be configured is 5. NOTE: the vendor's position is that this is a "design choice. Additional Analyst Notes: - CISA ADP Vulnrichmen
red is 5. NOTE: the vendor's position is that this is a "design choice. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cirosec.de/fileadmin/1._Unternehmen/1.4._Unsere_Kompetenzen/Security_Advisory_AudioCodes_Mediant_family.pdf
CVE ID: CVE-2019-9229 State: PUBLISHED Published: 2019-07-19T23:05:22 Last Updated: 2024-08-04T21:38:46.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.251. An internal interface exposed to the link-local address 169.254.254.253 allows attackers in the local network to access multiple quagga VTYs. Attackers can authenticate with the default 1234 password that cannot be changed, and can execute malicious and unauthorized actions. Additional Analyst Notes: - CVE Program Container: References: - https://www.cirosec.de/fileadmin/1._Unternehme
actions. Additional Analyst Notes: - CVE Program Container: References: - https://www.cirosec.de/fileadmin/1._Unternehmen/1.4._Unsere_Kompetenzen/Security_Advisory_AudioCodes_Mediant_family.pdf
CVE ID: CVE-2019-9230 State: PUBLISHED Published: 2019-07-18T14:44:41 Last Updated: 2024-08-04T21:38:46.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.253. A cross-site scripting (XSS) vulnerability in the search function of the management web interface allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.cirosec.de/fileadmin/1._Unternehmen/1.4._Unsere_Kompetenzen/Security_Advisory_AudioCodes_Mediant_family.pdf
CVE ID: CVE-2019-9231 State: PUBLISHED Published: 2019-07-18T15:22:11 Last Updated: 2024-08-04T21:38:46.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions before 7.20A.202.307. A Cross-Site Request Forgery (CSRF) vulnerability in the management web interface allows remote attackers to execute malicious and unauthorized actions, because CSRFProtection=1 is not a default and is not documented. Additional Analyst Notes: - CVE Program Container: References: - https://www.cirosec.de/fileadmin/1._Unternehmen/1.4._Unsere_Kompetenzen/Security_Advisory_AudioCodes_Med
: References: - https://www.cirosec.de/fileadmin/1._Unternehmen/1.4._Unsere_Kompetenzen/Security_Advisory_AudioCodes_Mediant_family.pdf
CVE ID: CVE-2019-9232 State: PUBLISHED Published: 2019-09-27T18:05:12 Last Updated: 2024-08-04T21:38:46.620Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10 - http://www.openwall.com/lists/oss-security/2019/10/25/17 - http://www.openwall.com/lists/oss-securi
ulletin/android-10 - http://www.openwall.com/lists/oss-security/2019/10/25/17 - http://www.openwall.com/lists/oss-security/2019/10/27/1 - http://www.openwall.com/lists/oss-security/2019/11/07/1 - https://usn.ubuntu.com/4199-1/ - https://lists.debian.org/debian-lts-announce/2019/11/msg00030.html - https://seclists.org/bugtraq/2019/Nov/43 - https://www.debian.org/security/2019/dsa-4578 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2IIA3RSYABBUCFIHXIRVUT5CTJVWWZ6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DQSTK442ATWJOR4TU3MR6C3N5A6NDFFN/ - http://lists.opensuse.org/opensuse-security-a
unce%40lists.fedoraproject.org/message/DQSTK442ATWJOR4TU3MR6C3N5A6NDFFN/ - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00049.html - https://security.gentoo.org/glsa/202003-59 - https://usn.ubuntu.com/4199-2/
CVE ID: CVE-2019-9233 State: PUBLISHED Published: 2019-09-27T18:05:12 Last Updated: 2024-08-04T21:38:46.657Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In wpa_supplicant_8, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122529021 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9234 State: PUBLISHED Published: 2019-09-27T18:05:12 Last Updated: 2024-08-04T21:38:46.692Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In wpa_supplicant_8, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122465453 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9235 State: PUBLISHED Published: 2019-09-27T18:05:12 Last Updated: 2024-08-04T21:38:46.599Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122323053 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9236 State: PUBLISHED Published: 2019-09-27T18:05:12 Last Updated: 2024-08-04T21:38:46.655Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122322613 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9237 State: PUBLISHED Published: 2019-09-27T18:05:13 Last Updated: 2024-08-04T21:38:46.656Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121325979 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9238 State: PUBLISHED Published: 2019-09-27T18:05:13 Last Updated: 2024-08-04T21:38:46.659Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In the NFC stack, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121267042 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9239 State: PUBLISHED Published: 2019-09-27T18:05:13 Last Updated: 2024-08-04T21:38:46.647Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121263487 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9240 State: PUBLISHED Published: 2019-09-27T18:05:13 Last Updated: 2024-08-04T21:38:46.682Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121150966 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9241 State: PUBLISHED Published: 2019-09-27T18:05:13 Last Updated: 2024-08-04T21:38:46.654Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121036603 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9242 State: PUBLISHED Published: 2019-09-27T18:05:13 Last Updated: 2024-08-04T21:38:46.694Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121035878 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9243 State: PUBLISHED Published: 2019-09-27T18:05:13 Last Updated: 2024-08-04T21:38:46.693Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In wpa_supplicant_8, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120905706 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9244 State: PUBLISHED Published: 2019-09-27T18:05:13 Last Updated: 2024-08-04T21:38:46.681Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120865977 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9245 State: PUBLISHED Published: 2019-09-06T21:49:54 Last Updated: 2024-08-04T21:38:46.662Z Vendors: n/a Products: Android Problem Types: information disclosure Description: In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2019-09-01
CVE ID: CVE-2019-9246 State: PUBLISHED Published: 2019-09-27T18:05:13 Last Updated: 2024-08-04T21:38:46.586Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120428637 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9247 State: PUBLISHED Published: 2019-09-27T18:05:13 Last Updated: 2024-08-04T21:38:46.585Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In AAC Codec, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120426166 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9248 State: PUBLISHED Published: 2019-09-06T21:43:22 Last Updated: 2024-08-04T21:38:46.584Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2019-09-01
CVE ID: CVE-2019-9249 State: PUBLISHED Published: 2019-09-27T18:05:13 Last Updated: 2024-08-04T21:38:46.593Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120255805 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9250 State: PUBLISHED Published: 2019-09-27T18:05:13 Last Updated: 2024-08-04T21:38:46.577Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120276962 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9251 State: PUBLISHED Published: 2019-09-27T18:05:13 Last Updated: 2024-08-04T21:38:46.623Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120274615 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9252 State: PUBLISHED Published: 2019-09-27T18:05:13 Last Updated: 2024-08-04T21:38:46.693Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In libavc there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-73339042 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9253 State: PUBLISHED Published: 2019-09-27T18:05:13 Last Updated: 2024-08-04T21:46:28.198Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In KeyStore, there is a possible storage of symmetric keys in the TEE instead of the strongbox due to a missing strongbox flag. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-109769728 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-10
CVE ID: CVE-2019-9254 State: PUBLISHED Published: 2019-09-05T21:42:03 Last Updated: 2024-08-04T21:46:28.185Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In readArgumentList of zygote.java in Android 10, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-09-01