Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html
CVE ID: CVE-2019-19448 State: PUBLISHED Published: 2019-12-08T01:01:04 Last Updated: 2024-08-05T02:16:47.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19448 - https://security.netapp.com/advisory/ntap-20200103-0001/ - https://lis
ub.com/bobfuzzer/CVE/tree/master/CVE-2019-19448 - https://security.netapp.com/advisory/ntap-20200103-0001/ - https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html - https://usn.ubuntu.com/4578-1/ - https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html
CVE ID: CVE-2019-19449 State: PUBLISHED Published: 2019-12-08T01:14:50 Last Updated: 2024-08-05T02:16:47.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19449 - https://security.netapp.com/advisory/ntap-20200103-0001/
CVE ID: CVE-2019-19450 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-08-05T02:16:47.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: paraparser in ReportLab before 3.5.31 allows remote code execution because start_unichar in paraparser.py evaluates untrusted user input in a unichar element in a crafted XML document with '<unichar code="' followed by arbitrary Python code, a similar issue to CVE-2019-17626. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MrBitBucket/reportlab-mirror/blob/master/CHANGES.md - https://pastebin.com/5MicRrr4 - https://lists.debian.org/debian-lts-announce/2023/09/msg00037.html - https://lists.f
d - https://pastebin.com/5MicRrr4 - https://lists.debian.org/debian-lts-announce/2023/09/msg00037.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHMCB2GJQKFMGVO5RWHN222NQL5XYPHZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HADPTB3SBU7IVRMDK7OL6WSQRU5AFWDZ/
CVE ID: CVE-2019-19451 State: PUBLISHED Published: 2019-11-29T22:54:03 Last Updated: 2024-08-05T02:16:47.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout. If this launch is from a thumbnailer service, this output will usually be written to disk via the system's logging facility (potentially with elevated privileges), thus filling up the disk and eventually rendering the system unusable. (The filename can be for a nonexistent file.) NOTE: this does not affect an upstream release, but affects
stem unusable. (The filename can be for a nonexistent file.) NOTE: this does not affect an upstream release, but affects certain Linux distribution packages with version numbers such as 0.97.3. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/dia/issues/428 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00019.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PKLQU2XBM4BGRKOF3L4C5QCPBUNTKEUN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KTGLGWHINMTDRFL7RZAJZJM5YSVXUXWW/
CVE ID: CVE-2019-19452 State: PUBLISHED Published: 2020-02-21T14:34:23 Last Updated: 2024-08-05T02:16:47.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow was found in Patriot Viper RGB through 1.1 when processing IoControlCode 0x80102040. Local attackers (including low integrity processes) can exploit this to gain NT AUTHORITY\SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.viper.patriotmemory.com - https://www.coresecurity.com/advisories/viper-rgb-driver-multiple-vulnerabilities
CVE ID: CVE-2019-19453 State: PUBLISHED Published: 2020-08-03T13:24:23 Last Updated: 2024-08-05T02:16:47.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wowza Streaming Engine before 4.8.5 allows XSS (issue 1 of 2). An authenticated user, with access to the proxy license editing is able to insert a malicious payload that will be triggered in the main page of server settings. This issue was resolved in Wowza Streaming Engine 4.8.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.gruppotim.it/redteam - https://www.wowza.com/docs/wowza-streaming-engine-4-8-5-release-notes - https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-str
wza-streaming-engine-4-8-5-release-notes - https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2019-19453.txt
CVE ID: CVE-2019-19454 State: PUBLISHED Published: 2020-05-18T16:40:21 Last Updated: 2024-08-05T02:16:47.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming Engine <= 4.x.x. This issue was resolved in Wowza Streaming Engine 4.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.wowza.com/docs/wowza-streaming-engine-4-8-0-release-notes - https://www.gruppotim.it/redteam - https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2019-19454.txt
CVE ID: CVE-2019-19455 State: PUBLISHED Published: 2020-08-03T13:25:19 Last Updated: 2024-08-05T02:16:47.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wowza Streaming Engine before 4.8.5 has Insecure Permissions which may allow a local attacker to escalate privileges in / usr / local / WowzaStreamingEngine / manager / bin / in the Linux version of the server by writing arbitrary commands in any file and execute them as root. This issue was resolved in Wowza Streaming Engine 4.8.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.gruppotim.it/redteam - https://www.wowza.com/docs/wowza-streaming-engine-4-8-5-release-notes - https://raw.githubuserco
.gruppotim.it/redteam - https://www.wowza.com/docs/wowza-streaming-engine-4-8-5-release-notes - https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2019-19455.txt
CVE ID: CVE-2019-19456 State: PUBLISHED Published: 2020-05-18T16:43:33 Last Updated: 2024-08-05T02:16:47.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected XSS was found in the server selection box inside the login page at: enginemanager/loginfailed.html in Wowza Streaming Engine <= 4.x.x. This issue was resolved in Wowza Streaming Engine 4.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.wowza.com/docs/wowza-streaming-engine-4-8-0-release-notes - https://www.gruppotim.it/redteam - https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2019-19456.txt
CVE ID: CVE-2019-19457 State: PUBLISHED Published: 2019-12-03T19:04:15 Last Updated: 2024-08-05T02:16:47.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: SALTO ProAccess SPACE 5.4.3.0 allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/en/vulnerability-lab/advisories/index.html - https://packetstormsecurity.com/files/155525/SALTO-ProAccess-SPACE-5.5-Traversal-File-Write-XSS-Bypass.html
CVE ID: CVE-2019-19458 State: PUBLISHED Published: 2019-12-03T19:03:24 Last Updated: 2024-08-05T02:16:47.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: SALTO ProAccess SPACE 5.4.3.0 allows Directory Traversal in the Data Export feature. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/155525/SALTO-ProAccess-SPACE-5.5-Traversal-File-Write-XSS-Bypass.html - https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-salto-proaccess-space/
CVE ID: CVE-2019-19459 State: PUBLISHED Published: 2019-12-03T19:02:20 Last Updated: 2024-08-05T02:16:47.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. An attacker can write arbitrary content to arbitrary files, as demonstrated by CVE-2019-19458 files under the web root, or .bat files that will be used with auto start. This allows an attacker to execute arbitrary commands on the server. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/155525/SALTO-ProAccess-SPACE-5.5-Traversal-File-Write-XSS-Bypass.html - https://sec-consult.com/en/blog/advisories/multiple-critical
-ProAccess-SPACE-5.5-Traversal-File-Write-XSS-Bypass.html - https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-salto-proaccess-space/
CVE ID: CVE-2019-19460 State: PUBLISHED Published: 2019-12-03T19:00:38 Last Updated: 2024-08-05T02:16:47.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. The product's webserver runs as a Windows service with local SYSTEM permissions by default. This is against the principle of least privilege. An attacker who is able to exploit CVE-2019-19458 or CVE-2019-19459 is basically able to write to every single path on the file system, because the webserver is running with the highest privileges available. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/155525/SALTO-ProAcce
itional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/155525/SALTO-ProAccess-SPACE-5.5-Traversal-File-Write-XSS-Bypass.html - https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-salto-proaccess-space/
CVE ID: CVE-2019-19461 State: PUBLISHED Published: 2020-03-16T19:56:03 Last Updated: 2024-08-05T02:16:47.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Post-authentication Stored XSS in Team Password Manager through 7.93.204 allows attackers to steal other users' credentials by creating a shared password with HTML code as the title. Additional Analyst Notes: - CVE Program Container: References: - https://www.pentagrid.ch/de/blog/security_issues_in_teampasswordmanager_and_combodo_itop/ - https://teampasswordmanager.com/docs/changelog/
CVE ID: CVE-2019-19462 State: PUBLISHED Published: 2019-11-30T00:57:13 Last Updated: 2024-08-05T02:16:47.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result. Additional Analyst Notes: - CVE Program Container: References: - https://syzkaller-ppc64.appspot.com/bug?id=1c09906c83a8ea811a9e318c2a4f8e243becc6f8 - https://syzkaller-ppc64.appspot.com/bug?id=b05b4d005191cc375cdf848c3d4d980308d50531 - https://syzkaller.appspot.com/bug?id=e4265490d26d6c01cd9bc79dc915ef0a1bf15046 - https://syzkaller.appspot.com/bug?id
1 - https://syzkaller.appspot.com/bug?id=e4265490d26d6c01cd9bc79dc915ef0a1bf15046 - https://syzkaller.appspot.com/bug?id=f4d1cb4330bd3ddf4a628332b4285407b2eedd7b - https://lore.kernel.org/lkml/20191129013745.7168-1-dja%40axtens.net/ - https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html - https://www.debian.org/security/2020/dsa-4698 - https://www.debian.org/security/2020/dsa-4699 - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html - https://usn.ubuntu.com/4414-1/ - https://usn.ubuntu.com/4425-1/ - https://usn.ubuntu.com/4439-1/ - https://usn.ubuntu.com/4440-1/ - https://securi
4-1/ - https://usn.ubuntu.com/4425-1/ - https://usn.ubuntu.com/4439-1/ - https://usn.ubuntu.com/4440-1/ - https://security.netapp.com/advisory/ntap-20210129-0004/
CVE ID: CVE-2019-19463 State: PUBLISHED Published: 2019-11-30T01:17:58 Last Updated: 2024-08-05T02:16:47.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check. Additional Analyst Notes: - CVE Program Container: References: - https://www.info-sec.ca/advisories/Huami-Mi-Fit.html
CVE ID: CVE-2019-19464 State: PUBLISHED Published: 2019-11-30T01:17:39 Last Updated: 2024-08-05T02:16:47.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics. Additional Analyst Notes: - CVE Program Container: References: - https://www.info-sec.ca/advisories/CBC-Gem.html
CVE ID: CVE-2019-19466 State: PUBLISHED Published: 2019-12-05T16:13:38 Last Updated: 2024-08-05T02:16:47.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: SCEditor 2.1.3 allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.sceditor.com/tags/releases/ - https://edricteo.com/sceditor-xss-vulnerability-in-version-2.1.3/
CVE ID: CVE-2019-19468 State: PUBLISHED Published: 2019-11-30T18:45:52 Last Updated: 2024-08-05T02:16:47.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Free Photo Viewer 1.3 allows remote attackers to execute arbitrary code via a crafted BMP and/or TIFF file that triggers a malformed SEH, as demonstrated by a 0012ECB4 FreePhot.00425642 42200008 corrupt entry. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/11/from-0-to-0day-quick-fuzzing-lesson.html
CVE ID: CVE-2019-19469 State: PUBLISHED Published: 2019-12-01T13:21:17 Last Updated: 2024-08-05T02:16:47.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/robertchrk/zmanda_exploit
CVE ID: CVE-2019-19470 State: PUBLISHED Published: 2019-12-30T17:39:59 Last Updated: 2024-08-05T02:16:47.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unsafe usage of .NET deserialization in Named Pipe message processing allows privilege escalation to NT AUTHORITY\SYSTEM for a local attacker. Affected product is TinyWall, all versions up to and including 2.1.12. Fixed in version 2.1.13. Additional Analyst Notes: - CVE Program Container: References: - https://www.wilderssecurity.com/threads/beta-testing-tinywall.309739/page-62#post-2882843 - https://gist.github.com/pylorak/7df52c9325614676e07782dbe4e81582
CVE ID: CVE-2019-19475 State: PUBLISHED Published: 2020-01-10T21:18:00 Last Updated: 2024-08-05T02:16:47.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ManageEngine Applications Manager 14 with Build 14360. Integrated PostgreSQL which is built-in in Applications Manager is prone to attack due to lack of file permission security. The malicious users who are in “Authenticated Users” group can exploit privilege escalation and modify PostgreSQL configuration to execute arbitrary command to escalate and gain full system privilege user access and rights over the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageen
access and rights over the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2019-19475.html
CVE ID: CVE-2019-19479 State: PUBLISHED Published: 2019-12-01T22:37:39 Last Updated: 2024-08-05T02:16:47.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c has an incorrect read operation during parsing of a SETCOS file attribute. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenSC/OpenSC/commit/c3f23b836e5a1766c36617fe1da30d22f7b63de2 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18693 - https://lists.debian.org/debian-lts-announce/2019/12/msg00031.html - http://www.openwall.com/lists/oss-security/2019/12/29/1 - https://lists.f
rg/debian-lts-announce/2019/12/msg00031.html - http://www.openwall.com/lists/oss-security/2019/12/29/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDSQLMZZYBHO5X3BK7D6E7E6NZIMZDI5/ - https://lists.debian.org/debian-lts-announce/2021/11/msg00027.html
CVE ID: CVE-2019-19480 State: PUBLISHED Published: 2019-12-01T22:37:18 Last Updated: 2024-08-05T02:16:47.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in sc_pkcs15_decode_prkdf_entry. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenSC/OpenSC/commit/6ce6152284c47ba9b1d4fe8ff9d2e6a3f5ee02c7 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18478 - http://www.openwall.com/lists/oss-security/2019/12/29/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/mess
ss-security/2019/12/29/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDSQLMZZYBHO5X3BK7D6E7E6NZIMZDI5/
CVE ID: CVE-2019-19481 State: PUBLISHED Published: 2019-12-01T22:37:30 Last Updated: 2024-08-05T02:16:47.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenSC/OpenSC/commit/b75c002cfb1fd61cd20ec938ff4937d7b1a94278 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18618 - http://www.openwall.com/lists/oss-security/2019/12/29/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDSQLMZZYBHO5X3BK
9/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDSQLMZZYBHO5X3BK7D6E7E6NZIMZDI5/
CVE ID: CVE-2019-19484 State: PUBLISHED Published: 2020-03-20T02:37:18 Last Updated: 2024-08-05T02:16:47.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect via parameter ‘p’ in login.php in Centreon (19.04.4 and below) allows an attacker to craft a payload and execute unintended behavior. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40mucomplex/undisclosed-cve-2019-19484-cve-2019-19486-cve-2019-19487-b46b97c930cd
CVE ID: CVE-2019-19486 State: PUBLISHED Published: 2020-03-20T02:36:55 Last Updated: 2024-08-05T02:16:47.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Local File Inclusion in minPlayCommand.php in Centreon (19.04.4 and below) allows an attacker to traverse paths via a plugin test. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40mucomplex/undisclosed-cve-2019-19484-cve-2019-19486-cve-2019-19487-b46b97c930cd
CVE ID: CVE-2019-19487 State: PUBLISHED Published: 2020-03-20T02:36:41 Last Updated: 2024-08-05T02:16:47.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command Injection in minPlayCommand.php in Centreon (19.04.4 and below) allows an attacker to achieve command injection via a plugin test. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40mucomplex/undisclosed-cve-2019-19484-cve-2019-19486-cve-2019-19487-b46b97c930cd
CVE ID: CVE-2019-19489 State: PUBLISHED Published: 2019-12-02T01:14:15 Last Updated: 2024-08-05T02:16:47.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: SMPlayer 19.5.0 has a buffer overflow via a long .m3u file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47709
CVE ID: CVE-2019-19490 State: PUBLISHED Published: 2019-12-02T01:14:00 Last Updated: 2024-08-05T02:16:47.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: LiteManager 4.5.0 has weak permissions (Everyone: Full Control) in the "LiteManagerFree - Server" folder, as demonstrated by ROMFUSClient.exe. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47706
CVE ID: CVE-2019-19491 State: PUBLISHED Published: 2019-12-02T01:13:42 Last Updated: 2024-08-05T02:16:47.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: TestLink 1.9.19 has XSS via the lib/testcases/archiveData.php edit parameter, the index.php reqURI parameter, or the URI in a lib/testcases/tcEdit.php?doAction=doDeleteStep request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47702
CVE ID: CVE-2019-19492 State: PUBLISHED Published: 2019-12-02T01:13:31 Last Updated: 2024-08-05T02:16:47.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeSWITCH 1.6.10 through 1.10.1 has a default password in event_socket.conf.xml. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47698
CVE ID: CVE-2019-19493 State: PUBLISHED Published: 2019-12-02T02:30:57 Last Updated: 2024-08-05T02:16:47.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kentico before 12.0.50 allows file uploads in which the Content-Type header is inconsistent with the file extension, leading to XSS. Additional Analyst Notes: - CVE Program Container: References: - https://devnet.kentico.com/download/hotfixes - http://packetstormsecurity.com/files/159525/Kentico-CMS-9.0-12.0.49-Cross-Site-Scripting.html
CVE ID: CVE-2019-19494 State: PUBLISHED Published: 2020-01-09T12:11:13 Last Updated: 2024-08-05T02:16:47.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel level via JavaScript run in a victim's browser. Examples of affected products include Sagemcom F@st 3890 prior to 50.10.21_T4, Sagemcom F@st 3890 prior to 05.76.6.3f, Sagemcom F@st 3686 3.428.0, Sagemcom F@st 3686 4.83.0, NETGEAR CG3700EMR 2.01.05, NETGEAR CG3700EMR 2.01.03, NETGEAR C6250EMR 2.01.05, NETGEAR C6250EMR 2.01.03, Technicolor TC7230 STEB 01.25, COMPAL 7284E
TGEAR CG3700EMR 2.01.03, NETGEAR C6250EMR 2.01.05, NETGEAR C6250EMR 2.01.03, Technicolor TC7230 STEB 01.25, COMPAL 7284E 5.510.5.11, and COMPAL 7486E 5.510.5.11. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com - https://cablehaunt.com - https://github.com/Lyrebirds/Fast8690-exploit - https://github.com/Lyrebirds/Cable-Haunt-Report/releases/download/2.4/report.pdf