Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-11892 State: PUBLISHED Published: 2019-05-29T19:55:13.289812Z Last Updated: 2024-09-16T17:42:58.052Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Bosch Products: Smart Home Controller Problem Types: CWE-284 Description: A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in reading or modification of the SHC's configuration or triggering and restoring backups. In order to exploit the vulnerability, the adversary needs to have successfully paired an app or service, which requires user interaction. Additional Analyst Notes: - CVE Program Con
have successfully paired an app or service, which requires user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html
CVE ID: CVE-2019-11893 State: PUBLISHED Published: 2019-05-29T19:58:04.150033Z Last Updated: 2024-09-16T22:46:47.017Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Bosch Products: Smart Home Controller Problem Types: CWE-266 Description: A potential incorrect privilege assignment vulnerability exists in the app permission update API of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in a restricted app obtaining default app permissions. In order to exploit the vulnerability, the adversary needs to have successfully paired an app with restricted permissions, which required user interaction. Additional Analyst Notes: - CVE Program Contai
ired an app with restricted permissions, which required user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html
CVE ID: CVE-2019-11894 State: PUBLISHED Published: 2019-05-29T20:03:48.103119Z Last Updated: 2024-09-17T00:46:00.989Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Bosch Products: Smart Home Controller Problem Types: CWE-284 Description: A potential improper access control vulnerability exists in the backup mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in unauthorized download of a backup. In order to exploit the vulnerability, the adversary needs to download the backup directly after a backup triggered by a legitimate user has been completed. Additional Analyst Notes: - CVE Program Container: References: - https://psirt
by a legitimate user has been completed. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html
CVE ID: CVE-2019-11895 State: PUBLISHED Published: 2019-05-29T20:07:39.228984Z Last Updated: 2024-09-16T18:03:37.169Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Bosch Products: Smart Home Controller Problem Types: CWE-284 Description: A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in a successful denial of service of the SHC and connected sensors and actuators. In order to exploit the vulnerability, the adversary needs to have successfully paired an app or service, which requires user interaction. Additional Analyst Notes: - CVE Program Container:
ccessfully paired an app or service, which requires user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html
CVE ID: CVE-2019-11896 State: PUBLISHED Published: 2019-05-29T20:11:00.829405Z Last Updated: 2024-09-16T19:24:49.342Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Bosch Products: Smart Home Controller Problem Types: CWE-284 Description: A potential incorrect privilege assignment vulnerability exists in the 3rd party pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.907 that may result in a restricted app obtaining default app permissions. In order to exploit the vulnerability, the adversary needs to have successfully paired an app, which requires user interaction. Additional Analyst Notes: - CVE Program Container: References: - https:/
paired an app, which requires user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html
CVE ID: CVE-2019-11897 State: PUBLISHED Published: 2019-08-21T17:09:52.545972Z Last Updated: 2024-09-17T03:55:02.429Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Bosch, ProSyst Products: IoT Gateway Software, mBS SDK Problem Types: CWE-918 Description: A Server-Side Request Forgery (SSRF) vulnerability in the backup & restore functionality in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.3.0 allows a remote attacker to forge GET requests to arbitrary URLs. In addition, this could potentially allow an attacker to read sensitive zip files from the local server. Additional Analyst Notes: - CVE Program Container: References: - ht
r to read sensitive zip files from the local server. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/Advisory/BOSCH-SA-562575.html
CVE ID: CVE-2019-11898 State: PUBLISHED Published: 2019-09-12T18:23:21.989608Z Last Updated: 2024-09-17T04:09:20.767Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Bosch Products: Access Professional Edition Problem Types: CWE-798 Description: Unauthorized APE administration privileges can be achieved by reverse engineering one of the APE service tools. The service tool is discontinued with Bosch Access Professional Edition (APE) 3.8. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/Advisory/BOSCH-SA-710832.html
CVE ID: CVE-2019-11899 State: PUBLISHED Published: 2019-09-12T18:30:58.728052Z Last Updated: 2024-09-17T02:17:02.364Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Bosch Products: Access Professional Edition Problem Types: CWE-284 Description: An unauthenticated attacker can achieve unauthorized access to sensitive data by exploiting Windows SMB protocol on a client installation. With Bosch Access Professional Edition (APE) 3.8, client installations need to be authorized by the APE administrator. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/Advisory/BOSCH-SA-844044.html
CVE ID: CVE-2019-11921 State: PUBLISHED Published: 2019-07-25T20:38:43 Last Updated: 2024-08-04T23:10:29.328Z Vendors: Facebook Products: Proxygen Problem Types: Out-of-bounds Write (CWE-ID 787) Description: An out of bounds write is possible via a specially crafted packet in certain configurations of Proxygen due to improper handling of Base64 when parsing malformed binary content in Structured HTTP Headers. This issue affects versions of proxygen prior to v2019.07.22.00. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebook/proxygen/commit/2f07985bef9fbae124cc63e5c0272e32da4fdaec - https://www.facebook.com/security/advisories/cve-2019-11921
CVE ID: CVE-2019-11922 State: PUBLISHED Published: 2019-07-25T20:32:44 Last Updated: 2024-08-04T23:10:29.677Z Vendors: Facebook Products: Zstandard Problem Types: Out-of-bounds Write (CWE-ID 787) Description: A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output buffer smaller than the recommended size was used. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00062.html - https://usn.ubuntu.com/4108-1/ - http://lists.opensuse.org/opens
.org/opensuse-security-announce/2019-08/msg00062.html - https://usn.ubuntu.com/4108-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00078.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://www.facebook.com/security/advisories/cve-2019-11922 - https://github.com/facebook/zstd/pull/1404/commits/3e5cdf1b6a85843e991d7d10f6a2567c15580da0
CVE ID: CVE-2019-11923 State: PUBLISHED Published: 2019-12-04T16:00:21 Last Updated: 2024-08-04T23:10:29.637Z Vendors: Facebook Products: Mcrouter Problem Types: Allocation of Resources Without Limits or Throttling (CWE-ID 770) Description: In Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specified length with no maximum length enforced, allowing for resource exhaustion or denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.facebook.com/security/advisories/cve-2019-11923 - https://github.com/facebook/mcrouter/releases/tag/v0.41.0-release - https://github.com/facebook/mcrouter/commit/98ce6624cd2563cfdb5da3b
com/facebook/mcrouter/releases/tag/v0.41.0-release - https://github.com/facebook/mcrouter/commit/98ce6624cd2563cfdb5da3b2949d5e1e03867034
CVE ID: CVE-2019-11924 State: PUBLISHED Published: 2019-08-20T19:32:10 Last Updated: 2024-08-04T23:10:29.521Z Vendors: Facebook Products: fizz Problem Types: Uncontrolled Resource Consumption (CWE-ID 400) Description: A peer could send empty handshake fragments containing only padding which would be kept in memory until a full handshake was received, resulting in memory exhaustion. This issue affects versions v2019.01.28.00 and above of fizz, until v2019.08.05.00. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebookincubator/fizz/commit/6bf67137ef1ee5cd70c842b014c322b7deaf994b - https://github.com/facebookincubator/fizz/commit/3eaddb33619eaaf74a7608728
it/6bf67137ef1ee5cd70c842b014c322b7deaf994b - https://github.com/facebookincubator/fizz/commit/3eaddb33619eaaf74a760872850c550ad8f5c52f - https://www.facebook.com/security/advisories/cve-2019-11924
CVE ID: CVE-2019-11925 State: PUBLISHED Published: 2019-09-06T18:46:54 Last Updated: 2024-08-04T23:10:29.481Z Vendors: Facebook Products: HHVM Problem Types: CWE-119 Description: Insufficient boundary checks when processing the JPEG APP12 block marker in the GD extension could allow access to out-of-bounds memory via a maliciously constructed invalid JPEG input. This issue affects HHVM versions prior to 3.30.9, all versions between 4.0.0 and 4.8.3, all versions between 4.9.0 and 4.15.2, and versions 4.16.0 to 4.16.3, 4.17.0 to 4.17.2, 4.18.0 to 4.18.1, 4.19.0, 4.20.0 to 4.20.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebook/hhvm/commit/f1cd34e63c
0.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebook/hhvm/commit/f1cd34e63c2a0d9702be3d41462db7bfd0ae7da3 - https://hhvm.com/blog/2019/09/03/security-update.html - https://www.facebook.com/security/advisories/cve-2019-11925
CVE ID: CVE-2019-11926 State: PUBLISHED Published: 2019-09-06T18:46:54 Last Updated: 2024-08-04T23:10:29.525Z Vendors: Facebook Products: HHVM Problem Types: CWE-119 Description: Insufficient boundary checks when processing M_SOFx markers from JPEG headers in the GD extension could allow access to out-of-bounds memory via a maliciously constructed invalid JPEG input. This issue affects HHVM versions prior to 3.30.9, all versions between 4.0.0 and 4.8.3, all versions between 4.9.0 and 4.15.2, and versions 4.16.0 to 4.16.3, 4.17.0 to 4.17.2, 4.18.0 to 4.18.1, 4.19.0, 4.20.0 to 4.20.1. Additional Analyst Notes: - CVE Program Container: References: - https://hhvm.com/blog/2019/09/03/security-upd
o 4.20.1. Additional Analyst Notes: - CVE Program Container: References: - https://hhvm.com/blog/2019/09/03/security-update.html - https://github.com/facebook/hhvm/commit/f9680d21beaa9eb39d166e8810e29fbafa51ad15 - https://www.facebook.com/security/advisories/cve-2019-11926
CVE ID: CVE-2019-11927 State: PUBLISHED Published: 2019-09-27T20:14:48 Last Updated: 2024-08-04T23:10:29.416Z Vendors: Facebook Products: WhatsApp for Android, WhatsApp for iOS Problem Types: CWE-190 Description: An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags in WEBP images. This issue affects WhatsApp for Android before version 2.19.143 and WhatsApp for iOS before version 2.19.100. Additional Analyst Notes: - CVE Program Container: References: - https://www.facebook.com/security/advisories/cve-2019-11927
CVE ID: CVE-2019-11928 State: PUBLISHED Published: 2020-09-03T21:10:17 Last Updated: 2024-08-04T23:10:29.535Z Vendors: Facebook Products: WhatsApp Desktop Problem Types: CWE-79 Description: An input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed cross-site scripting upon clicking on a link from a specially crafted live location message. Additional Analyst Notes: - CVE Program Container: References: - https://www.whatsapp.com/security/advisories/2020/
CVE ID: CVE-2019-11929 State: PUBLISHED Published: 2019-10-02T19:07:18 Last Updated: 2024-08-04T23:10:29.479Z Vendors: Facebook Products: HHVM Problem Types: CWE-119 Description: Insufficient boundary checks when formatting numbers in number_format allows read/write access to out-of-bounds memory, potentially leading to remote code execution. This issue affects HHVM versions prior to 3.30.10, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.18.2, and versions 4.19.0, 4.19.1, 4.20.0, 4.20.1, 4.20.2, 4.21.0, 4.22.0, 4.23.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebook/hhvm/commit/dbeb9a56a638e3fdcef8b691c2a2967132dae692 - ht
E Program Container: References: - https://github.com/facebook/hhvm/commit/dbeb9a56a638e3fdcef8b691c2a2967132dae692 - https://hhvm.com/blog/2019/09/25/security-update.html - https://www.facebook.com/security/advisories/cve-2019-11929
CVE ID: CVE-2019-11930 State: PUBLISHED Published: 2019-12-04T16:25:19 Last Updated: 2024-08-04T23:10:29.455Z Vendors: Facebook Products: HHVM Problem Types: CWE-763 Description: An invalid free in mb_detect_order can cause the application to crash or potentially result in remote code execution. This issue affects HHVM versions prior to 3.30.12, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.23.1, as well as 4.24.0, 4.25.0, 4.26.0, 4.27.0, 4.28.0, and 4.28.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebook/hhvm/commit/524d2e60cfe910406ec6109e4286d7edd545ab36 - https://hhvm.com/blog/2019/10/28/security-update.html - https://
/hhvm/commit/524d2e60cfe910406ec6109e4286d7edd545ab36 - https://hhvm.com/blog/2019/10/28/security-update.html - https://www.facebook.com/security/advisories/cve-2019-11930
CVE ID: CVE-2019-11931 State: PUBLISHED Published: 2019-11-14T22:55:52 Last Updated: 2024-08-04T23:10:29.691Z Vendors: Facebook Products: WhatsApp for Android, WhatsApp for iOS, WhatsApp for Windows Phone, WhatsApp Enterprise Client, WhatsApp Business for Android, WhatsApp Business for iOS Problem Types: CWE-121 Description: A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was present in parsing the elementary stream metadata of an MP4 file and could result in a DoS or RCE. This affects Android versions prior to 2.19.274, iOS versions prior to 2.19.100, Enterprise Client versions prior to 2.25.3, Business for A
d versions prior to 2.19.274, iOS versions prior to 2.19.100, Enterprise Client versions prior to 2.25.3, Business for Android versions prior to 2.19.104 and Business for iOS versions prior to 2.19.100. Additional Analyst Notes: - CVE Program Container: References: - https://www.facebook.com/security/advisories/cve-2019-11931
CVE ID: CVE-2019-11932 State: PUBLISHED Published: 2019-10-03T21:13:47 Last Updated: 2024-08-04T23:10:29.690Z Vendors: koral-- Products: android-gif-drawable Problem Types: CWE-415 Description: A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of service when the library is used to parse a specially crafted GIF image. Additional Analyst Notes: - CVE Program Container: References: - https://www.facebook.com/security/advisories/cve-2019-11932 - http://packets
tes: - CVE Program Container: References: - https://www.facebook.com/security/advisories/cve-2019-11932 - http://packetstormsecurity.com/files/154867/Whatsapp-2.19.216-Remote-Code-Execution.html - https://github.com/koral--/android-gif-drawable/pull/673/commits/4944c92761e0a14f04868cbcf4f4e86fd4b7a4a9 - https://github.com/koral--/android-gif-drawable/pull/673 - https://awakened1712.github.io/hacking/hacking-whatsapp-gif-rce/ - http://seclists.org/fulldisclosure/2019/Nov/27 - https://gist.github.com/wdormann/874198c1bd29c7dd2157d9fc1d858263 - http://packetstormsecurity.com/files/158306/WhatsApp-android-gif-drawable-Double-Free.html - https://github.com/koral--/android-gif-drawable/commit/cc5b
iles/158306/WhatsApp-android-gif-drawable-Double-Free.html - https://github.com/koral--/android-gif-drawable/commit/cc5b4f8e43463995a84efd594f89a21f906c2d20
CVE ID: CVE-2019-11933 State: PUBLISHED Published: 2019-10-23T15:40:10 Last Updated: 2024-08-04T23:10:29.463Z Vendors: Facebook Products: WhatsApp for Android Problem Types: CWE-119 Description: A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow remote attackers to execute arbitrary code or cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.facebook.com/security/advisories/cve-2019-11933
CVE ID: CVE-2019-11934 State: PUBLISHED Published: 2019-12-04T16:25:20 Last Updated: 2024-08-04T23:10:29.583Z Vendors: Facebook Products: folly Problem Types: Out-of-bounds Read (CWE-ID 125) Description: Improper handling of close_notify alerts can result in an out-of-bounds read in AsyncSSLSocket. This issue affects folly prior to v2019.11.04.00. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebook/folly/commit/c321eb588909646c15aefde035fd3133ba32cdee - https://www.facebook.com/security/advisories/cve-2019-11934
CVE ID: CVE-2019-11935 State: PUBLISHED Published: 2019-12-04T16:25:20 Last Updated: 2024-08-04T23:10:29.438Z Vendors: Facebook Products: HHVM Problem Types: CWE-125 Description: Insufficient boundary checks when processing a string in mb_ereg_replace allows access to out-of-bounds memory. This issue affects HHVM versions prior to 3.30.12, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.23.1, as well as 4.24.0, 4.25.0, 4.26.0, 4.27.0, 4.28.0, and 4.28.1. Additional Analyst Notes: - CVE Program Container: References: - https://hhvm.com/blog/2019/10/28/security-update.html - https://github.com/facebook/hhvm/commit/1c518555dba6ceb45d5ba61845b96e261219c3b7 - https://www.fa
security-update.html - https://github.com/facebook/hhvm/commit/1c518555dba6ceb45d5ba61845b96e261219c3b7 - https://www.facebook.com/security/advisories/cve-2019-11935
CVE ID: CVE-2019-11936 State: PUBLISHED Published: 2019-12-04T16:25:20 Last Updated: 2024-08-04T23:10:29.412Z Vendors: Facebook Products: HHVM Problem Types: CWE-626 Description: Various APC functions accept keys containing null bytes as input, leading to premature truncation of input. This issue affects HHVM versions prior to 3.30.12, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.23.1, as well as 4.24.0, 4.25.0, 4.26.0, 4.27.0, 4.28.0, and 4.28.1. Additional Analyst Notes: - CVE Program Container: References: - https://hhvm.com/blog/2019/10/28/security-update.html - https://github.com/facebook/hhvm/commit/f57df6d8cf33cb14c40f52287da29360e7003373 - https://www.facebo
rity-update.html - https://github.com/facebook/hhvm/commit/f57df6d8cf33cb14c40f52287da29360e7003373 - https://www.facebook.com/security/advisories/cve-2019-11936
CVE ID: CVE-2019-11937 State: PUBLISHED Published: 2019-12-04T16:00:22 Last Updated: 2024-08-04T23:10:29.638Z Vendors: Facebook Products: Mcrouter Problem Types: Uncontrolled Resource Consumption (CWE-ID 400) Description: In Mcrouter prior to v0.41.0, a large struct input provided to the Carbon protocol reader could result in stack exhaustion and denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebook/mcrouter/releases/tag/v0.41.0-release - https://www.facebook.com/security/advisories/cve-2019-11937 - https://github.com/facebook/mcrouter/commit/97e033b3bb0cb16b61bf49f0dc7f311a3e0edd1b
CVE ID: CVE-2019-11938 State: PUBLISHED Published: 2020-03-10T20:30:20 Last Updated: 2024-08-04T23:10:29.610Z Vendors: Facebook Products: Facebook Thrift Problem Types: CWE-770 Description: Java Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.12.09.00. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebook/fbthrift/commit/08c2d412adb214c40bb03be7587057b25d053030 - https://github.com/faceboo
ces: - https://github.com/facebook/fbthrift/commit/08c2d412adb214c40bb03be7587057b25d053030 - https://github.com/facebook/fbthrift/commit/71c97ffdcb61cccf1f8267774e873e21ebd3ebd3 - https://www.facebook.com/security/advisories/cve-2019-11938
CVE ID: CVE-2019-11939 State: PUBLISHED Published: 2020-03-18T00:40:12 Last Updated: 2024-08-04T23:10:29.633Z Vendors: Facebook Products: Facebook Thrift Problem Types: CWE-770 Description: Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2020.03.16.00. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebook/fbthrift/commit/483ed864d69f307e9e3b9dadec048216100c0757 - https://www.facebook.com
ences: - https://github.com/facebook/fbthrift/commit/483ed864d69f307e9e3b9dadec048216100c0757 - https://www.facebook.com/security/advisories/cve-2019-11939
CVE ID: CVE-2019-11940 State: PUBLISHED Published: 2019-12-04T16:30:17 Last Updated: 2024-08-04T23:10:29.529Z Vendors: Facebook Products: Proxygen Problem Types: CWE-416 Description: In the course of decompressing HPACK inside the HTTP2 protocol, an unexpected sequence of header table resize operations can place the header table into a corrupted state, leading to a use-after-free condition and undefined behavior. This issue affects Proxygen from v0.29.0 until v2017.04.03.00. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebook/proxygen/commit/f43b134cc5c19d8532e7fb670a1c02e85f7a8d4f - https://www.facebook.com/security/advisories/cve-2019-11940
CVE ID: CVE-2019-11941 State: PUBLISHED Published: 2019-06-05T14:56:42 Last Updated: 2024-08-04T23:10:29.482Z Vendors: n/a Products: HPE Intelligent Management Center (IMC) PLAT Problem Types: remote code execution Description: A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03930en_us