Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6329. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-769
CVE ID: CVE-2018-14310 State: PUBLISHED Published: 2018-07-31T20:00:00 Last Updated: 2024-08-05T09:21:41.592Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of events. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the cu
erforming operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6330. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-770 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-14311 State: PUBLISHED Published: 2018-07-31T20:00:00 Last Updated: 2024-08-05T09:21:41.557Z Vendors: Foxit Products: Foxit ActiveX Pro SDK Problem Types: CWE-843 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA events. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of
can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6331. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-771
CVE ID: CVE-2018-14312 State: PUBLISHED Published: 2018-07-31T20:00:00 Last Updated: 2024-08-05T09:21:41.607Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the exportAsFDF function. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the
object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6332. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-772
CVE ID: CVE-2018-14313 State: PUBLISHED Published: 2018-07-31T20:00:00 Last Updated: 2024-08-05T09:21:41.611Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-843 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context o
h can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6362. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-773 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-14314 State: PUBLISHED Published: 2018-07-31T20:00:00 Last Updated: 2024-08-05T09:21:41.587Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of annotations. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of t
to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6327. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-774
CVE ID: CVE-2018-14315 State: PUBLISHED Published: 2018-07-31T20:00:00 Last Updated: 2024-08-05T09:21:41.619Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of annotations. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of t
to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6328. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-775
CVE ID: CVE-2018-14316 State: PUBLISHED Published: 2018-07-31T20:00:00 Last Updated: 2024-08-05T09:21:41.545Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of PDF documents. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to
ied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6351. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-776 - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2018-14317 State: PUBLISHED Published: 2018-08-30T12:00:00 Last Updated: 2024-08-05T09:21:41.646Z Vendors: Foxit Products: Foxit Reader Problem Types: CWE-843 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context
ich can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6683. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://zerodayinitiative.com/advisories/ZDI-18-939
CVE ID: CVE-2018-14318 State: PUBLISHED Published: 2018-09-25T00:00:00 Last Updated: 2024-08-05T09:21:41.618Z Vendors: Samsung Products: Samsung Galaxy S8 Problem Types: CWE-121 Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S8 G950FXXU1AQL5. User interaction is required to exploit this vulnerability in that the target must have their cellular radios enabled. The specific flaw exists within the handling of IPCP headers. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to
supplied data prior to copying it to a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code under the context of the baseband processor. Was ZDI-CAN-5368. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-1077
CVE ID: CVE-2018-14320 State: PUBLISHED Published: 2018-09-17T18:00:00 Last Updated: 2024-08-05T09:21:41.646Z Vendors: PoDoFo Products: PoDoFo PoDoFo Problem Types: CWE-119 Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within PdfEncoding::ParseToUnicode. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this in conjunction with other vulnerabilities to exe
result in a memory corruption condition. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-5673. Additional Analyst Notes: - CVE Program Container: References: - https://zerodayinitiative.com/advisories/ZDI-18-1046
CVE ID: CVE-2018-14324 State: PUBLISHED Published: 2018-07-16T18:00:00 Last Updated: 2024-08-05T09:21:41.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: The demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 open by default with a password of admin for the admin account. This allows remote attackers to obtain potentially sensitive information, perform database operations, or manipulate the demo via a JMX RMI session, aka a "jmx_rmi remote monitoring and control problem." NOTE: this is not an Oracle supported product. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041292 - https://github.com/eclipse-e
t Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041292 - https://github.com/eclipse-ee4j/glassfish/issues/22500
CVE ID: CVE-2018-14325 State: PUBLISHED Published: 2018-07-16T00:00:00 Last Updated: 2024-08-05T09:21:41.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MP4v2 2.0.0, there is an integer underflow (with resultant memory corruption) when parsing MP4Atom in mp4atom.cpp. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2018/07/16/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6YCHVOYPIBGM5HYUMQ77KZH2IHSITKVE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRSO2IMK6P7MOIZWGWKONPIEHKBA7WL3/ - https://lists.fedoraproj
ves/list/package-announce%40lists.fedoraproject.org/message/FRSO2IMK6P7MOIZWGWKONPIEHKBA7WL3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GISUIWPKBWPXORUFNWBGFTKQS7UUVUC4/ - https://github.com/enzo1982/mp4v2/releases/tag/v2.1.0
CVE ID: CVE-2018-14326 State: PUBLISHED Published: 2018-07-16T00:00:00 Last Updated: 2024-08-05T09:21:41.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MP4v2 2.0.0, there is an integer overflow (with resultant memory corruption) when resizing MP4Array for the ftyp atom in mp4array.h. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2018/07/16/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6YCHVOYPIBGM5HYUMQ77KZH2IHSITKVE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRSO2IMK6P7MOIZWGWKONPIEHKBA7WL3/ - https:
aproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRSO2IMK6P7MOIZWGWKONPIEHKBA7WL3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GISUIWPKBWPXORUFNWBGFTKQS7UUVUC4/ - https://github.com/enzo1982/mp4v2/releases/tag/v2.1.0
CVE ID: CVE-2018-14327 State: PUBLISHED Published: 2018-09-26T22:00:00 Last Updated: 2024-08-05T09:21:41.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installer for the Alcatel OSPREY3_MINI Modem component on EE EE40VB 4G mobile broadband modems with firmware before EE40_00_02.00_45 sets weak permissions (Everyone:Full Control) for the "Web Connecton\EE40" and "Web Connecton\EE40\BackgroundService" directories, which allows local users to gain privileges, as demonstrated by inserting a Trojan horse ServiceManager.exe file into the "Web Connecton\EE40\BackgroundService" directory. Additional Analyst Notes: - CVE Program Container: References: - http://blog.zerodaylab.com
ackgroundService" directory. Additional Analyst Notes: - CVE Program Container: References: - http://blog.zerodaylab.com/2018/09/zerodaylab-discovers-ee-unquoted.html - https://osandamalith.com/2018/09/17/ee-4gee-mini-local-privilege-escalation-vulnerability-cve-2018-14327/ - https://www.exploit-db.com/exploits/45501/ - http://www.securityfocus.com/bid/105385 - http://packetstormsecurity.com/files/149492/EE-4GEE-Mini-Local-Privilege-Escalation.html
CVE ID: CVE-2018-14328 State: PUBLISHED Published: 2018-07-23T20:00:00 Last Updated: 2024-08-05T09:21:41.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a direct request for /dashboard/addplan, /dashboard/paywithcard/charge, /dashboard/withdrawal, or /privacy&terms, as demonstrated by reading database username, database password, database_name, and IP address fields, related to CVE-2018-12908. Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2018070175 - https://www.exploit-db.com/exploits/4
CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2018070175 - https://www.exploit-db.com/exploits/45094/
CVE ID: CVE-2018-14329 State: PUBLISHED Published: 2018-07-17T02:00:00 Last Updated: 2024-08-05T09:21:41.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: In HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/samtools/htslib/issues/736
CVE ID: CVE-2018-14331 State: PUBLISHED Published: 2018-07-17T02:00:00 Last Updated: 2024-08-05T09:21:41.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in XiaoCms X1 v20140305. There is a CSRF vulnerability to change the administrator account password via admin/index.php?c=index&a=my. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rebill/xiaocms-x1/issues/1
CVE ID: CVE-2018-14332 State: PUBLISHED Published: 2018-07-19T15:00:00 Last Updated: 2024-08-05T09:21:41.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Clementine Music Player 1.3.1. Clementine.exe is vulnerable to a user mode write access violation due to a NULL pointer dereference in the Init call in the MoodbarPipeline::NewPadCallback function in moodbar/moodbarpipeline.cpp. The vulnerability is triggered when the user opens a malformed mp3 file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/clementine-player/Clementine/issues/6078 - https://github.com/clementine-player/Clementine/blob/e5ab3e786f9adde12cec3c
m/clementine-player/Clementine/issues/6078 - https://github.com/clementine-player/Clementine/blob/e5ab3e786f9adde12cec3cc90cfe8c1cc6b06320/src/moodbar/moodbarpipeline.cpp#L155 - https://github.com/MostafaSoliman/Security-Advisories/blob/master/CVE-2018-14332 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00064.html
CVE ID: CVE-2018-14333 State: PUBLISHED Published: 2018-07-17T02:00:00 Last Updated: 2024-08-05T09:21:41.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: TeamViewer through 13.1.1548 stores a password in Unicode format within TeamViewer.exe process memory between "[00 88] and "[00 00 00]" delimiters, which might make it easier for attackers to obtain sensitive information by leveraging an unattended workstation on which TeamViewer has disconnected but remains running. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vah13/extractTVpasswords
CVE ID: CVE-2018-14334 State: PUBLISHED Published: 2018-07-17T02:00:00 Last Updated: 2024-08-05T09:21:41.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: manager/editor/upload.php in joyplus-cms 1.6.0 allows arbitrary file upload because detection of a prohibited file extension simply sets the $errm value, and does not otherwise alter the flow of control. Consequently, one can upload and execute a .php file, a similar issue to CVE-2018-8766. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/joyplus/joyplus-cms/issues/428
CVE ID: CVE-2018-14335 State: PUBLISHED Published: 2018-07-24T13:00:00 Last Updated: 2024-10-29T13:55:12.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45105/ - https://gist.github.com/owodelta/9714faf9a86435cef5a99d4930eaee20 - https://lists.apache.org/thread.html/582d4165de6507b0be82d5a6f9a1ce392ec43a00c9fed32bacf7fe1e%40%3Cuser.ignite.apache.org%
tps://lists.apache.org/thread.html/582d4165de6507b0be82d5a6f9a1ce392ec43a00c9fed32bacf7fe1e%40%3Cuser.ignite.apache.org%3E - https://access.redhat.com/errata/RHSA-2020:0727 - https://security.netapp.com/advisory/ntap-20240726-0003/
CVE ID: CVE-2018-14336 State: PUBLISHED Published: 2018-07-19T20:00:00 Last Updated: 2024-08-05T09:21:41.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WR840N devices allow remote attackers to cause a denial of service (connectivity loss) via a series of packets with random MAC addresses. Additional Analyst Notes: - CVE Program Container: References: - https://hackingvila.wordpress.com/2018/07/17/cve-2018-14336-tp-link-wireless-n-router-wr840n-vulnerability/ - https://www.exploit-db.com/exploits/45064/
CVE ID: CVE-2018-14337 State: PUBLISHED Published: 2018-07-17T03:00:00 Last Updated: 2024-08-05T09:21:41.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrb_str_resize function in string.c does not check for a negative length. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mruby/mruby/issues/4062 - https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html
CVE ID: CVE-2018-14338 State: PUBLISHED Published: 2018-07-17T12:00:00Z Last Updated: 2024-09-16T18:55:29.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where glibc is not used, possibly leading to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/382
CVE ID: CVE-2018-14339 State: PUBLISHED Published: 2018-07-19T02:00:00 Last Updated: 2024-08-05T09:21:41.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop. This was addressed in epan/proto.c by adding offset and length validation. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3b77c0a596a8071aebc1de71e3f79e5e15e919ca - http://www.securitytracker.com/id/1041608 - https://www.wireshark.org/security/wnpa-sec-2018-38.html - https://lists.debian.org/debian-lts-announce/2018/07/msg
08 - https://www.wireshark.org/security/wnpa-sec-2018-38.html - https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14738 - http://www.securityfocus.com/bid/104847 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
CVE ID: CVE-2018-14340 State: PUBLISHED Published: 2018-07-19T02:00:00 Last Updated: 2024-08-05T09:21:41.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/tvbuff_zlib.c by rejecting negative lengths to avoid a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14675 - https://www.wireshark.org/security/wnpa-sec-2018-36.html - http://www.securitytracker.com/id/1041608 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=672d882a5
//www.securitytracker.com/id/1041608 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=672d882a53f96730e4ef1e5b1639c585823b0df8 - https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html - http://www.securityfocus.com/bid/104847 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
CVE ID: CVE-2018-14341 State: PUBLISHED Published: 2018-07-19T02:00:00 Last Updated: 2024-08-05T09:21:41.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041608 - https://www.wireshark.org/security/wnpa-sec-2018-39.html - https://lists.debian.org/debian-lts-announce/2018/07/msg00045.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2e716c32be6
lts-announce/2018/07/msg00045.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=2e716c32be6aa20e1813b0002878853e71f8b2f4 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14742 - http://www.securityfocus.com/bid/104847 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html