Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
B5/zsh-privileged-upgrade - https://www.zsh.org/mla/zsh-announce/141 - https://lists.debian.org/debian-lts-announce/2020/03/msg00004.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FP64FFIZI2CKQOEAOI5A72PVQULE7ZZC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PN5V7MPHRRP7QNHOEK56S7QGRU53WUN6/ - https://security.gentoo.org/glsa/202003-55 - https://support.apple.com/kb/HT211170 - https://support.apple.com/kb/HT211175 - https://support.apple.com/kb/HT211171 - https://support.apple.com/kb/HT211168 - http://seclists.org/fulldisclosure/2020/May/49 - http://seclists.org/fulldisclosure/2020/
upport.apple.com/kb/HT211168 - http://seclists.org/fulldisclosure/2020/May/49 - http://seclists.org/fulldisclosure/2020/May/55 - http://seclists.org/fulldisclosure/2020/May/53 - http://seclists.org/fulldisclosure/2020/May/59 - https://support.apple.com/HT211168 - https://support.apple.com/HT211170 - https://support.apple.com/HT211171 - https://support.apple.com/HT211175 - https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html
CVE ID: CVE-2019-20045 State: PUBLISHED Published: 2020-02-14T16:18:38 Last Updated: 2024-08-05T02:32:10.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and prior. Specially crafted malicious packets could cause disconnection of active authentic connections or reboot of device. This is a different issue than CVE-2019-16879 and CVE-2019-20046. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-042-01
CVE ID: CVE-2019-20046 State: PUBLISHED Published: 2020-02-14T16:18:35 Last Updated: 2024-08-05T02:32:10.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and prior. The affected product does not require adequate authentication, which may allow an attacker to read sensitive information or execute arbitrary code. This is a different issue than CVE-2019-16879 and CVE-2019-20045. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-042-01
CVE ID: CVE-2019-20047 State: PUBLISHED Published: 2019-12-27T18:19:20 Last Updated: 2024-08-05T02:32:10.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Alcatel-Lucent OmniVista 4760 devices, and 8770 devices before 4.1.2. An incorrect web server configuration allows a remote unauthenticated attacker to retrieve the content of its own session files. Every session file contains the administrative LDAP credentials encoded in a reversible format. Sessions are stored in /sessions/sess_<sessionid>. Additional Analyst Notes: - CVE Program Container: References: - https://git.lsd.cat/g/omnivista-rce - https://www.exploit-db.com/exploits/47761 - https://pac
m Container: References: - https://git.lsd.cat/g/omnivista-rce - https://www.exploit-db.com/exploits/47761 - https://packetstormsecurity.com/files/155595/Alcatel-Lucent-Omnivista-8770-Remote-Code-Execution.html - https://www.al-enterprise.com/en/-/media/assets/internet/documents/sa-c0065-ov8770-rce-vulnerability-en.pdf
CVE ID: CVE-2019-20048 State: PUBLISHED Published: 2019-12-27T18:19:04 Last Updated: 2024-08-05T02:32:10.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Alcatel-Lucent OmniVista 8770 devices before 4.1.2. An authenticated remote attacker, with elevated privileges in the Web Directory component on port 389, may upload a PHP file to achieve Remote Code Execution as SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - https://git.lsd.cat/g/omnivista-rce - https://www.exploit-db.com/exploits/47761 - https://packetstormsecurity.com/files/155595/Alcatel-Lucent-Omnivista-8770-Remote-Code-Execution.html - https://www.al-enterprise.com/en
ormsecurity.com/files/155595/Alcatel-Lucent-Omnivista-8770-Remote-Code-Execution.html - https://www.al-enterprise.com/en/-/media/assets/internet/documents/sa-c0065-ov8770-rce-vulnerability-en.pdf
CVE ID: CVE-2019-20049 State: PUBLISHED Published: 2019-12-27T18:18:22 Last Updated: 2024-08-05T02:32:10.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Alcatel-Lucent OmniVista 4760 devices. A remote unauthenticated attacker can chain a directory traversal (which helps to bypass authentication) with an insecure file upload to achieve Remote Code Execution as SYSTEM. The directory traversal is in the __construct() whereas the insecure file upload is in SetSkinImages(). Additional Analyst Notes: - CVE Program Container: References: - https://git.lsd.cat/g/omnivista-rce - https://www.exploit-db.com/exploits/47761 - https://packetstormsecurity.com/file
- https://git.lsd.cat/g/omnivista-rce - https://www.exploit-db.com/exploits/47761 - https://packetstormsecurity.com/files/155595/Alcatel-Lucent-Omnivista-8770-Remote-Code-Execution.html - https://www.al-enterprise.com/en/-/media/assets/internet/documents/sa-c0065-ov8770-rce-vulnerability-en.pdf
CVE ID: CVE-2019-20050 State: PUBLISHED Published: 2020-01-30T15:47:32 Last Updated: 2024-08-05T02:32:10.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pandora FMS ≤ 7.42 suffers from a remote code execution vulnerability. To exploit the vulnerability, an authenticated user should create a new folder with a "tricky" name in the filemanager. The exploit works when the php-fileinfo extension is disabled on the host system. The attacker must include shell metacharacters in the content type. Additional Analyst Notes: - CVE Program Container: References: - https://k4m1ll0.com/cve-2019-20050.html
CVE ID: CVE-2019-20051 State: PUBLISHED Published: 2019-12-27T21:59:01 Last Updated: 2024-08-05T02:32:10.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: A floating-point exception was discovered in PackLinuxElf::elf_hash in p_lx_elf.cpp in UPX 3.95. The vulnerability causes an application crash, which leads to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/upx/upx/issues/313 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D7XU42G6MUQQXHWRP7DCF2JSIBOJ5GOO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EUTVSTXAFTD552NO2K
O/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EUTVSTXAFTD552NO2K2RIF6MDQEHP3BE/
CVE ID: CVE-2019-20052 State: PUBLISHED Published: 2019-12-27T21:59:20 Last Updated: 2024-08-05T02:32:10.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak was discovered in Mat_VarCalloc in mat.c in matio 1.5.17 because SafeMulDims does not consider the rank==0 case. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tbeu/matio/issues/131
CVE ID: CVE-2019-20053 State: PUBLISHED Published: 2019-12-27T21:59:11 Last Updated: 2024-08-05T02:32:10.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid memory address dereference was discovered in the canUnpack function in p_mach.cpp in UPX 3.95 via a crafted Mach-O file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/upx/upx/issues/314 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00007.html
CVE ID: CVE-2019-20054 State: PUBLISHED Published: 2019-12-28T04:07:15 Last Updated: 2024-08-05T02:32:10.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.6 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=23da9588037ecdd4901db76a5b79a42b529c4ec3 - https://git.kernel.org/pub/scm/linux/kernel/git/torvald
/linux.git/commit/?id=23da9588037ecdd4901db76a5b79a42b529c4ec3 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=89189557b47b35683a27c80ee78aef18248eefb4 - https://security.netapp.com/advisory/ntap-20200204-0002/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
CVE ID: CVE-2019-20055 State: PUBLISHED Published: 2019-12-29T04:48:08 Last Updated: 2024-08-05T02:32:10.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: LuquidPixels LiquiFire OS 4.8.0 allows SSRF via the call%3Durl substring followed by a URL in square brackets. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/12/testing-ssrf-in-liquifireos.html
CVE ID: CVE-2019-20056 State: PUBLISHED Published: 2019-12-29T18:10:44 Last Updated: 2024-08-05T02:32:10.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__shiftsigned. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/126
CVE ID: CVE-2019-20057 State: PUBLISHED Published: 2019-12-29T18:28:26 Last Updated: 2024-08-05T02:32:10.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: com.proxyman.NSProxy.HelperTool in Privileged Helper Tool in Proxyman for macOS 1.11.0 and earlier allows an attacker to change the System Proxy and redirect all traffic to an attacker-controlled computer, enabling MITM attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ProxymanApp/Proxyman/issues/364
CVE ID: CVE-2019-20058 State: PUBLISHED Published: 2019-12-29T18:50:50 Last Updated: 2024-08-05T02:32:10.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS because unsanitized search?search= input is shown on the _profiler page. NOTE: this is disputed because profiling was never intended for use in production. This is related to CVE-2018-12040 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bolt/bolt/issues/7830
CVE ID: CVE-2019-20059 State: PUBLISHED Published: 2020-02-10T12:13:57 Last Updated: 2024-08-05T02:32:10.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: payment_manage.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.4 directly insert values from the sSortDir_0 parameter into a SQL string. This allows an attacker to inject their own SQL and manipulate the query, typically extracting data from the database, aka SQL Injection. NOTE: this issue exists because of an incomplete fix for CVE-2019-19732. Additional Analyst Notes: - CVE Program Container: References: - https://yetishare.com/ - https://mfscripts.com/ - https://medium.com/%40jra8908/yetish
Program Container: References: - https://yetishare.com/ - https://mfscripts.com/ - https://medium.com/%40jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad - https://github.com/jra89/CVE-2019-20059
CVE ID: CVE-2019-20060 State: PUBLISHED Published: 2020-02-10T12:20:50 Last Updated: 2024-08-05T02:32:10.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: MFScripts YetiShare v3.5.2 through v4.5.4 places sensitive information in the Referer header. If this leaks, then third parties may discover password-reset hashes, file-delete links, or other sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://yetishare.com/ - https://mfscripts.com/ - https://medium.com/%40jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad
CVE ID: CVE-2019-20061 State: PUBLISHED Published: 2020-02-10T12:19:34 Last Updated: 2024-08-05T02:32:10.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user-introduction email in MFScripts YetiShare v3.5.2 through v4.5.4 may leak the (system-picked) password if this email is sent in cleartext. In other words, the user is not allowed to choose their own initial password. Additional Analyst Notes: - CVE Program Container: References: - https://yetishare.com/ - https://mfscripts.com/ - https://medium.com/%40jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad
CVE ID: CVE-2019-20062 State: PUBLISHED Published: 2020-02-10T12:17:55 Last Updated: 2024-08-05T02:32:10.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: MFScripts YetiShare v3.5.2 through v4.5.4 might allow an attacker to reset a password by using a leaked hash (the hash never expires until used). Additional Analyst Notes: - CVE Program Container: References: - https://yetishare.com/ - https://mfscripts.com/ - https://medium.com/%40jra8908/yetishare-3-5-2-4-5-4-multiple-vulnerabilities-927d17b71ad
CVE ID: CVE-2019-20063 State: PUBLISHED Published: 2019-12-29T19:59:59 Last Updated: 2024-08-05T02:32:10.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hoene/libmysofa/issues/67 - https://github.com/hoene/libmysofa/compare/v0.7...v0.8
CVE ID: CVE-2019-20070 State: PUBLISHED Published: 2019-12-29T23:30:04 Last Updated: 2024-08-05T02:32:10.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi (aka the Keyword field of the URL Blocking Configuration). Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1vIHv-UY0QLdnxDi-RW1hQHrdcuho0HRf - https://drive.google.com/open?id=1EtpCu6eZ0Hf2J70zg59wIlhUE8_bx1HE - https://fatihhcelik.blogspot.com/2019/12/xss-vulnerability-on-netis-dl4323.html
CVE ID: CVE-2019-20071 State: PUBLISHED Published: 2019-12-29T23:29:53 Last Updated: 2024-08-05T02:32:10.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Netis DL4323 devices, CSRF exists via form2logaction.cgi to delete all logs. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1XtSsH-1ApxRS7VExubz8zBEyENVQGhUc - https://drive.google.com/open?id=1p4HJ5C20TqY0rVNffdD5Zd7S_bGvDhnk - https://fatihhcelik.blogspot.com/2019/12/csrf-vulnerability-on-clean-log-netis.html
CVE ID: CVE-2019-20072 State: PUBLISHED Published: 2019-12-29T23:29:43 Last Updated: 2024-08-05T02:32:10.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter (Dynamic DNS Configuration). Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1VPEX136-JaVDeY0JgQTqRNdMTPOhfEN7 - https://drive.google.com/open?id=1IGRYVci8fxic0jJJb-pAfAK1kJ4V2yGM - https://fatihhcelik.blogspot.com/2019/12/xss-vulnerability-on-hostname-input.html
CVE ID: CVE-2019-20073 State: PUBLISHED Published: 2019-12-29T23:29:24 Last Updated: 2024-08-05T02:32:10.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter (User Account Configuration). Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1puObYuPWktesaVW1SO8uvSr1g4SnAtAw - https://drive.google.com/open?id=1CxLrSKAczEZpm_7FERIrCGGJAs2mp6Go - https://fatihhcelik.blogspot.com/2019/12/stored-xss-on-username-input-netisdl4323.html
CVE ID: CVE-2019-20074 State: PUBLISHED Published: 2019-12-29T23:29:12 Last Updated: 2024-08-05T02:32:10.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via the form2saveConf.cgi page. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1MH6DMhP1JsV_RptGXDze0Vo9MDuCH9se - https://fatihhcelik.blogspot.com/2019/12/clear-text-password-netis-dl4323.html
CVE ID: CVE-2019-20075 State: PUBLISHED Published: 2019-12-29T23:29:02 Last Updated: 2024-08-05T02:32:10.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Netis DL4323 devices, pingrtt_v6.html has XSS (Ping6 Diagnostic). Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1SqUHaTn_dVsGv-YtvAqPOXG1Z9APk0eI - https://drive.google.com/open?id=1795_joGaL3QXMFeJoJPiNgB_d913XePx - https://fatihhcelik.blogspot.com/2019/12/xss-vulnerability-on-ping6.html
CVE ID: CVE-2019-20076 State: PUBLISHED Published: 2019-12-29T23:28:52 Last Updated: 2024-08-05T02:32:10.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter (DynDns settings of the Dynamic DNS Configuration). Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1i5gIrJRy5L7lTIsYZp9GsvR8ZGCWtnMj - https://drive.google.com/open?id=1HrYqVKlSxhQqB5tNhhLIgpyfi0Y2ZL80 - https://fatihhcelik.blogspot.com/2019/12/stored-xss-on-username-input-2-netis.html
CVE ID: CVE-2019-20077 State: PUBLISHED Published: 2020-01-05T22:05:17 Last Updated: 2024-08-05T02:32:10.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Typesetter CMS 5.1 logout functionality is affected by a CSRF vulnerability. The logout function of the admin panel is not protected by any CSRF tokens. An attacker can logout the user using this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://fatihhcelik.blogspot.com/2019/12/typesetter-cms-51-logout-csrf_30.html
CVE ID: CVE-2019-20079 State: PUBLISHED Published: 2019-12-30T00:04:13 Last Updated: 2024-08-05T02:32:10.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vim/vim/commit/ec66c41d84e574baf8009dbc0bd088d2bc5b2421 - https://packetstormsecurity.com/files/154898 - https://github.com/vim/vim/compare/v8.1.2135...v8.1.2136 - https://usn.ubuntu.com/4309-1/
CVE ID: CVE-2019-20082 State: PUBLISHED Published: 2021-12-28T12:50:05 Last Updated: 2024-08-05T02:32:10.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASUS RT-N53 3.0.0.4.376.3754 devices have a buffer overflow via a long lan_dns1_x or lan_dns2_x parameter to Advanced_LAN_Content.asp. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com - https://github.com/pr0v3rbs/CVE/tree/master/CVE-2019-20082
CVE ID: CVE-2019-20085 State: PUBLISHED Published: 2019-12-30T02:28:29.000Z Last Updated: 2025-10-21T23:35:54.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: TVT NVMS-1000 devices allow GET /.. Directory Traversal Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/47774 - http://packetstormsecurity.com/files/157196/TVT-NVMS-1000-Directory-Traversal.html
CVE ID: CVE-2019-20086 State: PUBLISHED Published: 2019-12-30T03:49:20 Last Updated: 2024-08-05T02:32:10.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_Next in GPMF_parser.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gopro/gpmf-parser/issues/74
CVE ID: CVE-2019-20087 State: PUBLISHED Published: 2019-12-30T03:49:09 Last Updated: 2024-08-05T02:32:10.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_seekToSamples in GPMF-parse.c for the "matching tags" feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gopro/gpmf-parser/issues/76
CVE ID: CVE-2019-20088 State: PUBLISHED Published: 2019-12-30T03:49:00 Last Updated: 2024-08-05T02:32:10.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GetPayload in GPMF_mp4reader.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gopro/gpmf-parser/issues/77
CVE ID: CVE-2019-20089 State: PUBLISHED Published: 2019-12-30T03:48:51 Last Updated: 2024-08-05T02:32:10.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: GoPro GPMF-parser 1.2.3 has an heap-based buffer over-read in GPMF_SeekToSamples in GPMF_parse.c for the size calculation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gopro/gpmf-parser/issues/75
CVE ID: CVE-2019-20090 State: PUBLISHED Published: 2019-12-30T03:48:23 Last Updated: 2024-08-05T02:32:10.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 1.5.1.0. There is a use-after-free in AP4_Sample::GetOffset in Core/Ap4Sample.h when called from Ap4LinearReader.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/461
CVE ID: CVE-2019-20091 State: PUBLISHED Published: 2019-12-30T03:48:14 Last Updated: 2024-08-05T02:32:10.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4_Descriptor::GetTag in mp42ts when called from AP4_DecoderConfigDescriptor::GetDecoderSpecificInfoDescriptor in Ap4DecoderConfigDescriptor.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/462
CVE ID: CVE-2019-20092 State: PUBLISHED Published: 2019-12-30T03:48:06 Last Updated: 2024-08-05T02:32:10.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4_Descriptor::GetTag in mp42ts when called from AP4_EsDescriptor::GetDecoderConfigDescriptor in Ap4EsDescriptor.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/462
CVE ID: CVE-2019-20093 State: PUBLISHED Published: 2019-12-30T03:47:57 Last Updated: 2024-08-05T02:32:10.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file, because of ImageExtractor.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/podofo/tickets/75/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XHFOCBZCF3GX7A6FWE3JM7P37TQWGINJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap
ssage/XHFOCBZCF3GX7A6FWE3JM7P37TQWGINJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CTB2J5XWOEGAJYR2N66GAECUIKDG6O2S/
CVE ID: CVE-2019-20094 State: PUBLISHED Published: 2019-12-30T03:47:49 Last Updated: 2024-08-05T02:32:10.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libsixel 1.8.4. There is a heap-based buffer overflow in the function gif_init_frame at fromgif.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/125
CVE ID: CVE-2019-20095 State: PUBLISHED Published: 2019-12-30T04:39:55 Last Updated: 2024-08-05T02:32:10.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases that did not free allocated hostcmd memory, aka CID-003b686ace82. This will cause a memory leak and denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.6 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=003b686ace820ce2d635a83f10f2d7f9c147dabc - https://security.netapp.com/adviso