Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-16020 State: PUBLISHED Published: 2020-01-26T04:30:57.751382Z Last Updated: 2024-11-15T17:46:32.554Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Cisco Products: Cisco IOS XR Software Problem Types: CWE-399 Description: Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerabilities are due to incorrect processing of BGP update messages that contain crafted EVPN attributes. An attacker could exploit these vulnerabilities by sending BGP EVPN update message
CVE ID: CVE-2019-16021 State: PUBLISHED Published: 2020-09-23T00:26:27.077617Z Last Updated: 2024-11-13T18:04:37.933Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Cisco Products: Cisco IOS XR Software Problem Types: CWE-399 Description: Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerabilities are due to incorrect processing of BGP update messages that contain crafted EVPN attributes. An attacker could exploit these vulnerabilities by sending BGP EVPN update message
CVE ID: CVE-2019-16022 State: PUBLISHED Published: 2020-01-26T04:31:03.023685Z Last Updated: 2024-11-15T17:46:21.678Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Cisco Products: Cisco IOS XR Software Problem Types: CWE-399 Description: Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerabilities are due to incorrect processing of BGP update messages that contain crafted EVPN attributes. An attacker could exploit these vulnerabilities by sending BGP EVPN update message
CVE ID: CVE-2019-16023 State: PUBLISHED Published: 2020-09-23T00:26:22.854791Z Last Updated: 2024-11-13T18:04:48.535Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Cisco Products: Cisco IOS XR Software Problem Types: CWE-399 Description: Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerabilities are due to incorrect processing of BGP update messages that contain crafted EVPN attributes. An attacker could exploit these vulnerabilities by sending BGP EVPN update message
CVE ID: CVE-2019-16024 State: PUBLISHED Published: 2020-01-26T04:45:25.580312Z Last Updated: 2024-11-15T17:44:27.489Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Cisco Products: Cisco Crosswork Network Change Automation Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Cisco Crosswork Change Automation could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attack
to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200108-cnca-xss
CVE ID: CVE-2019-16025 State: PUBLISHED Published: 2020-09-23T00:26:18.453982Z Last Updated: 2024-11-13T18:04:58.202Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: Cisco Products: Cisco Emergency Responder Problem Types: CWE-79 Description: A vulnerability in the web framework of Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of some parameters that are passed to the web server of the affected software. An attacker could exploit this vulnerability by persuading a user to access a m
the web server of the affected software. An attacker could exploit this vulnerability by persuading a user to access a malicious link or by intercepting a user request for the affected web interface and injecting malicious code into that request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web-based management interface or access sensitive, browser-based information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200108-er-xss
CVE ID: CVE-2019-16026 State: PUBLISHED Published: 2020-01-26T04:45:20.821598Z Last Updated: 2024-11-15T17:44:37.291Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Cisco Products: Cisco ASR 5000 Series Software Problem Types: CWE-20 Description: A vulnerability in the implementation of the Stream Control Transmission Protocol (SCTP) on Cisco Mobility Management Entity (MME) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an eNodeB that is connected to an affected device. The vulnerability is due to insufficient input validation of SCTP traffic. An attacker could exploit this vulnerability by leveraging a man-
due to insufficient input validation of SCTP traffic. An attacker could exploit this vulnerability by leveraging a man-in-the-middle position between the eNodeB and the MME and then sending a crafted SCTP message to the MME. A successful exploit would cause the MME to stop sending SCTP messages to the eNodeB, triggering a DoS condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200108-mme-dos
CVE ID: CVE-2019-16027 State: PUBLISHED Published: 2020-01-26T04:31:08.495973Z Last Updated: 2024-11-15T17:46:10.927Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: Cisco Products: Cisco IOS XR Software Problem Types: CWE-20 Description: A vulnerability in the implementation of the Intermediate System&ndash;to&ndash;Intermediate System (IS&ndash;IS) routing protocol functionality in Cisco IOS XR Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition in the IS&ndash;IS process. The vulnerability is due to improper handling of a Simple Network Management Protocol (SNMP) request for specific Object Identifiers (OIDs)
due to improper handling of a Simple Network Management Protocol (SNMP) request for specific Object Identifiers (OIDs) by the IS&ndash;IS process. An attacker could exploit this vulnerability by sending a crafted SNMP request to the affected device. A successful exploit could allow the attacker to cause a DoS condition in the IS&ndash;IS process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200122-ios-xr-dos
CVE ID: CVE-2019-16028 State: PUBLISHED Published: 2020-09-23T00:26:14.168709Z Last Updated: 2024-11-13T18:05:07.592Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco Products: Cisco Firepower Management Center Problem Types: CWE-287 Description: A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability is due to improper handling of Lightweight Directory Access Protocol (LDAP) authentication responses from an external authentication server.
andling of Lightweight Directory Access Protocol (LDAP) authentication responses from an external authentication server. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to gain administrative access to the web-based management interface of the affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200122-fmc-auth
CVE ID: CVE-2019-16029 State: PUBLISHED Published: 2020-01-26T04:31:13.662428Z Last Updated: 2024-11-15T17:46:00.608Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: Cisco Products: Cisco Smart Software Manager On-Prem Problem Types: CWE-20 Description: A vulnerability in the application programming interface (API) of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from logging in, resulting in a denial of service (DoS) condition of the web interface. The vulnerability is due to the lack of input validation in the API. An attacker could exploit this vulnerability by
ce. The vulnerability is due to the lack of input validation in the API. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. An exploit could allow the attacker to change or corrupt user account information which could grant the attacker administrator access or prevent legitimate user access to the web interface, resulting in a denial of service (DoS) condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200122-on-prem-dos
CVE ID: CVE-2019-16056 State: PUBLISHED Published: 2019-09-06T17:24:35 Last Updated: 2024-08-05T01:03:32.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally. Additional Analyst Notes: - CVE Program Contain
s in CVE-2019-11340; however, this CVE applies to Python more generally. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4KZEFP6E4YPYB52AF4WXCUDSGQOTF37/ - https://lists.debian.org/debian-lts-announce/2019/09/msg00019.html - https://lists.debian.org/debian-lts-announce/2019/09/msg00018.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NF3DRDGMVIRYNZMSLJIHNW47HOUQYXVG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER6LONC2B2WYIO56GBQUDU6QTWZDPUNQ/ - https://lists.fedoraproje
es/list/package-announce%40lists.fedoraproject.org/message/ER6LONC2B2WYIO56GBQUDU6QTWZDPUNQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2HP37NUVLQSBW3J735A2DQDOZ4ZGBLY/ - https://usn.ubuntu.com/4151-1/ - https://usn.ubuntu.com/4151-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QP46PQSUKYPGWTADQ67NOV3BUN6JM34Z/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QASRD4E2G65GGEHYKVHYCX
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QASRD4E2G65GGEHYKVHYCXB2XWAGTNL4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SDQQ56P7ZZR64XV5DUVWNSNXKKEXUG2J/ - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00012.html - https://access.redhat.com/errata/RHSA-2019:3725 - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00021.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K7HNVIFMETMFWWWUNTB72KYJYXCZOS5V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message
WWWUNTB72KYJYXCZOS5V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBTGPBUABGXZ7WH7677OEM3NSP6ZEA76/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/COATURTCY7G67AYI6UDV5B2JZTBCKIDX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/ - https://acc
ect.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/ - https://access.redhat.com/errata/RHSA-2019:3948 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEARDOTXCYPYELKBD2KWZ27GSPXDI3GQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OYGESQSGIHDCIGOBVF7VXCMIE6YDWRYB/ - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://bugs.python.org/issue34155 - https://github.com/python/cpython/commit/8cb65d
m/security-alerts/cpujul2020.html - https://bugs.python.org/issue34155 - https://github.com/python/cpython/commit/8cb65d1381b027f0b09ee36bfed7f35bb4dec9a9 - https://security.netapp.com/advisory/ntap-20190926-0005/ - https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html - https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E - https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html
CVE ID: CVE-2019-16057 State: PUBLISHED Published: 2019-09-16T11:58:14.000Z Last Updated: 2025-10-21T23:45:30.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf - https://blog.cystack.net/d-link-dns-320-rce/
CVE ID: CVE-2019-16058 State: PUBLISHED Published: 2019-09-06T17:51:04 Last Updated: 2024-08-05T01:03:32.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card creates a signature with a length longer than 256 bytes, this triggers a buffer overflow. This may be the case for RSA keys with 4096 bits depending on the signature scheme. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenSC/pam_p11/commit/d150b60e1e14c261b113f55681419ad1dfa8a76c - http://www.openwall.com/lists/oss-security/2019/09/12/1
CVE ID: CVE-2019-16059 State: PUBLISHED Published: 2019-09-06T18:02:36 Last Updated: 2024-08-05T01:03:32.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://www.sevenlayers.com/index.php/246-sentrifugo-3-2-csrf
CVE ID: CVE-2019-16060 State: PUBLISHED Published: 2019-09-06T18:15:15 Last Updated: 2024-08-05T01:03:32.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Airbrake Ruby notifier 4.2.3 for Airbrake mishandles the blacklist_keys configuration option and consequently may disclose passwords to unauthorized actors. This is fixed in 4.2.4 (also, 4.2.2 and earlier are unaffected). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/airbrake/airbrake-ruby/issues/468
CVE ID: CVE-2019-16061 State: PUBLISHED Published: 2020-03-19T17:52:11 Last Updated: 2024-08-05T01:03:32.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: A number of files on the NETSAS Enigma NMS server 65.0.0 and prior are granted weak world-readable and world-writable permissions, allowing any low privileged user with access to the system to read sensitive data (e.g., .htpasswd) and create/modify/delete content (e.g., under /var/www/html/docs) within the operating system. Additional Analyst Notes: - CVE Program Container: References: - https://www.mogozobo.com/?p=3647
CVE ID: CVE-2019-16062 State: PUBLISHED Published: 2020-03-19T17:52:53 Last Updated: 2024-08-05T01:03:32.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data stored within the SQL database. It is possible for an attacker to expose unencrypted sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://www.mogozobo.com/?p=3647
CVE ID: CVE-2019-16063 State: PUBLISHED Published: 2020-03-19T22:21:50 Last Updated: 2024-08-05T01:03:32.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data rendered within web pages. It is possible for an attacker to expose unencrypted sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://www.mogozobo.com/?p=3647
CVE ID: CVE-2019-16064 State: PUBLISHED Published: 2020-03-19T17:54:35 Last Updated: 2024-08-05T01:03:32.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETSAS Enigma NMS 65.0.0 and prior suffers from a directory traversal vulnerability that can allow an authenticated user to access files and directories stored outside of the web root folder. By exploiting this vulnerability, it is possible for an attacker to list operating-system directory contents on the server, create directories and upload files in permissible locations, and modify filenames and delete files that are accessible by the user running the web server instance. Additional Analyst Notes: - CVE Program Container:
iles that are accessible by the user running the web server instance. Additional Analyst Notes: - CVE Program Container: References: - https://www.mogozobo.com/?p=3647
CVE ID: CVE-2019-16065 State: PUBLISHED Published: 2020-03-19T17:55:19 Last Updated: 2024-08-05T01:03:32.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote SQL injection web vulnerability was discovered in the Enigma NMS 65.0.0 and prior web application that allows an attacker to execute SQL commands to expose and compromise the web server, expose database tables and values, and potentially execute system-based commands as the mysql user. This affects the search_pattern value of the manage_hosts_short.cgi script. Additional Analyst Notes: - CVE Program Container: References: - https://www.mogozobo.com/?p=3647
CVE ID: CVE-2019-16066 State: PUBLISHED Published: 2020-03-19T17:56:01 Last Updated: 2024-08-05T01:03:32.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unrestricted file upload vulnerability exists in user and system file upload functions in NETSAS Enigma NMS 65.0.0 and prior. This allows an attacker to upload malicious files and perform arbitrary code execution on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.mogozobo.com/?p=3647
CVE ID: CVE-2019-16067 State: PUBLISHED Published: 2020-03-19T17:56:42 Last Updated: 2024-08-05T01:03:32.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the web application. The use of weak authentication transmitted over cleartext protocols can allow an attacker to steal username and password combinations by intercepting authentication traffic in transit. Additional Analyst Notes: - CVE Program Container: References: - https://www.mogozobo.com/?p=3647
CVE ID: CVE-2019-16068 State: PUBLISHED Published: 2020-03-19T22:56:37 Last Updated: 2024-08-05T01:03:32.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be able to trick a victim into submitting a malicious manage_files.cgi request. This can be triggered via XSS or an IFRAME tag included within the site. Additional Analyst Notes: - CVE Program Container: References: - https://www.mogozobo.com/?p=3647
CVE ID: CVE-2019-16069 State: PUBLISHED Published: 2020-03-19T22:58:13 Last Updated: 2024-08-05T01:03:32.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: A number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject malicious code directly into the application through the SNMP protocol. Additional Analyst Notes: - CVE Program Container: References: - https://www.mogozobo.com/?p=3647
CVE ID: CVE-2019-16070 State: PUBLISHED Published: 2020-03-19T17:58:11 Last Updated: 2024-08-05T01:03:32.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: A number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject malicious code directly into the application through web application form inputs. Additional Analyst Notes: - CVE Program Container: References: - https://www.mogozobo.com/?p=3647
CVE ID: CVE-2019-16071 State: PUBLISHED Published: 2020-03-19T23:09:48 Last Updated: 2024-08-05T01:03:32.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Enigma NMS 65.0.0 and prior allows administrative users to create low-privileged accounts that do not have the ability to modify any settings in the system, only view the components. However, it is possible for a low-privileged user to perform all actions as an administrator by bypassing authorization controls and sending requests to the server in the context of an administrator. Additional Analyst Notes: - CVE Program Container: References: - https://www.mogozobo.com/?p=3647
CVE ID: CVE-2019-16072 State: PUBLISHED Published: 2020-03-19T23:06:42 Last Updated: 2024-08-05T01:03:32.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ip_address variable within an snmp_browser action. Additional Analyst Notes: - CVE Program Container: References: - https://www.mogozobo.com/?p=3647
CVE ID: CVE-2019-16088 State: PUBLISHED Published: 2019-09-06T21:25:04 Last Updated: 2024-08-05T01:03:32.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/RootUp/3d9e90ea5ae0799305b4c7ec66e19387