Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-11516 State: PUBLISHED Published: 2020-02-05T16:01:49 Last Updated: 2024-08-04T22:55:40.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Bluetooth component of the Cypress (formerly owned by Broadcom) Wireless IoT codebase. Extended Inquiry Responses (EIRs) are improperly handled, which causes a heap-based buffer overflow during device inquiry. This overflow can be used to overwrite existing functions with arbitrary code. The Reserved for Future Use (RFU) bits are not discarded by eir_handleRx(), and are included in an EIR's length. Therefore, one can exceed the expected 240 bytes, which leads to a heap-based buffer overflow in e
d in an EIR's length. Therefore, one can exceed the expected 240 bytes, which leads to a heap-based buffer overflow in eir_getReceivedEIR() called by bthci_event_SendInquiryResultEvent(). In order to exploit this bug, an attacker must repeatedly connect to the victim's device in a short amount of time from different source addresses. This will cause the victim's Bluetooth stack to resolve the device names and therefore allocate buffers with attacker-controlled data. Due to the heap corruption, the name will be eventually written to an attacker-controlled location, leading to a write-what-where condition. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.
o a write-what-where condition. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2019-08-01 - https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-google-android-os-could-allow-for-arbitrary-code-execution_2019-078/ - https://www.techrepublic.com/article/android-security-bulletin-august-2019-what-you-need-to-know/ - https://community.cypress.com/thread/53681
CVE ID: CVE-2019-11517 State: PUBLISHED Published: 2019-06-10T17:47:49 Last Updated: 2024-08-04T22:55:40.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: WampServer before 3.1.9 has CSRF in add_vhost.php because the synchronizer pattern implemented as remediation of CVE-2018-8817 was incomplete. An attacker could add/delete any vhosts without the consent of the owner. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Jun/10
CVE ID: CVE-2019-11518 State: PUBLISHED Published: 2019-04-25T12:12:36 Last Updated: 2024-08-04T22:55:40.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SEMCMS 3.8. SEMCMS_Inquiry.php allows AID[] SQL Injection because the class.phpmailer.php inject_check_sql protection mechanism is incomplete. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kikulo/DebugOpen/blob/master/SEMCMS3.8/main.md
CVE ID: CVE-2019-11519 State: PUBLISHED Published: 2019-04-25T12:44:48 Last Updated: 2024-08-04T22:55:40.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libraries/Nop.Services/Localization/LocalizationService.cs in nopCommerce through 4.10 allows XXE via the "Configurations -> Languages -> Edit Language -> Import Resources -> Upload XML file" screen. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nopSolutions/nopCommerce/issues/3713 - https://www.nopcommerce.com/boards/t/62390/xxe-version-390.aspx
CVE ID: CVE-2019-11521 State: PUBLISHED Published: 2019-08-20T12:26:10 Last Updated: 2024-08-04T22:55:40.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite 7.10.1 allows Content Spoofing. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/154128/Open-Xchange-OX-App-Suite-Content-Spoofing-Cross-Site-Scripting.html
CVE ID: CVE-2019-11522 State: PUBLISHED Published: 2019-08-20T12:31:28 Last Updated: 2024-08-04T22:55:40.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite 7.10.0 to 7.10.2 allows XSS. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/154128/Open-Xchange-OX-App-Suite-Content-Spoofing-Cross-Site-Scripting.html
CVE ID: CVE-2019-11523 State: PUBLISHED Published: 2019-06-06T19:39:05 Last Updated: 2024-08-04T22:55:40.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Anviz Global M3 Outdoor RFID Access Control executes any command received from any source. No authentication/encryption is done. Attackers can fully interact with the device: for example, send the "open door" command, download the users list (which includes RFID codes and passcodes in cleartext), or update/create users. The same attack can be executed on a local network and over the internet (if the device is exposed on a public IP address). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/w
s exposed on a public IP address). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wizlab-it/anviz-m3-rfid-cve-2019-11523-poc
CVE ID: CVE-2019-11526 State: PUBLISHED Published: 2019-10-10T18:48:21 Last Updated: 2024-08-04T22:55:40.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Softing uaGate SI 1.60.01. A maintenance script, that is executable via sudo, is vulnerable to file path injection. This enables the Attacker to write files with superuser privileges in specific locations. Additional Analyst Notes: - CVE Program Container: References: - https://security.mioso.com/CVE-2019-11526-en.html
CVE ID: CVE-2019-11527 State: PUBLISHED Published: 2019-10-10T19:37:44 Last Updated: 2024-08-04T22:55:40.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Softing uaGate SI 1.60.01. A CGI script is vulnerable to command injection with a maliciously crafted url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://security.mioso.com/CVE-2019-11527-en.html
CVE ID: CVE-2019-11528 State: PUBLISHED Published: 2019-10-10T19:30:51 Last Updated: 2024-08-04T22:55:40.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Softing uaGate SI 1.60.01. A system default path for executables is user writable. Additional Analyst Notes: - CVE Program Container: References: - https://security.mioso.com/CVE-2019-11528-en.html
CVE ID: CVE-2019-11533 State: PUBLISHED Published: 2019-04-26T20:06:49 Last Updated: 2024-08-04T22:55:40.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ProjectSend before r1070 allows remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://www.projectsend.org/change-log/ - http://www.securityfocus.com/bid/108088
CVE ID: CVE-2019-11535 State: PUBLISHED Published: 2019-07-17T19:35:09 Last Updated: 2024-08-04T22:55:40.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unsanitized user input in the web interface for Linksys WiFi extender products (RE6400 and RE6300 through 1.2.04.022) allows for remote command execution. An attacker can access system OS configurations and commands that are not intended for use beyond the web UI. Additional Analyst Notes: - CVE Program Container: References: - http://s3.amazonaws.com/downloads.linksys.com/support/assets/releasenotes/Linksys%20RE6300%20RE6400%20Firmware%20Release%20Notes_v1.2.05.001.txt
CVE ID: CVE-2019-11536 State: PUBLISHED Published: 2019-05-22T17:46:57 Last Updated: 2024-08-04T22:55:40.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kalki Kalkitech SYNC3000 Substation DCU GPC v2.22.6, 2.23.0, 2.24.0, 3.0.0, 3.1.0, 3.1.16, 3.2.3, 3.2.6, 3.5.0, 3.6.0, and 3.6.1, when WebHMI is not installed, allows an attacker to inject client-side commands or scripts to be executed on the device with privileged access, aka CYB/2019/19561. The attack requires network connectivity to the device and exploits the webserver interface, typically through a browser. Additional Analyst Notes: - CVE Program Container: References: - https://www.kalkitech.com/cybersecurity/ - https:/
ser. Additional Analyst Notes: - CVE Program Container: References: - https://www.kalkitech.com/cybersecurity/ - https://www.kalkitech.com/wp-content/uploads/CYB_19561_Advisory.pdf
CVE ID: CVE-2019-11537 State: PUBLISHED Published: 2019-04-25T18:26:59 Last Updated: 2024-08-04T22:55:40.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: In osTicket before 1.12, XSS exists via /upload/file.php, /upload/scp/users.php?do=import-users, and /upload/scp/ajax.php/users/import if an agent manager user uploads a crafted .csv file to the User Importer, because file contents can appear in an error message. The XSS can lead to local file inclusion. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46753/ - https://github.com/osTicket/osTicket/pull/4869 - https://pentest.com.tr/exploits/osTicket-v1-11-XSS-to-LFI.html - h
3/ - https://github.com/osTicket/osTicket/pull/4869 - https://pentest.com.tr/exploits/osTicket-v1-11-XSS-to-LFI.html - https://www.exploit-db.com/exploits/46753 - https://github.com/osTicket/osTicket/releases/tag/v1.12
CVE ID: CVE-2019-11538 State: PUBLISHED Published: 2019-04-26T01:39:22 Last Updated: 2024-11-15T15:26:56.601Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1, an NFS problem could allow an authenticated attacker to access the contents of arbitrary files on the affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 - http://www.securityfocus.com/bid/108073
nces: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 - http://www.securityfocus.com/bid/108073 - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010 - https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf - https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/ - https://www.kb.cert.org/vuls/id/927237
CVE ID: CVE-2019-11539 State: PUBLISHED Published: 2019-04-26T01:39:36.000Z Last Updated: 2025-10-21T23:45:38.985Z Severity: HIGH (CVSS 8 CVSS:3.0/AC:H/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, the admin web interface allows an authenticated attacker to inject and execute commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
tacker to inject and execute commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 - http://www.securityfocus.com/bid/108073 - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010 - https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf - http://packetstormsecurity.com/files/154376/Pulse-Secure-8.1R15.1-8.2-8.3-9.0-SSL-VPN-Remote-Code-Execution.html - https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/ - https://www.kb.cert.org/vuls/id/927237 - http://
the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/ - https://www.kb.cert.org/vuls/id/927237 - http://packetstormsecurity.com/files/155277/Pulse-Secure-VPN-Arbitrary-Command-Execution.html - http://packetstormsecurity.com/files/162092/Pulse-Secure-VPN-Arbitrary-Command-Execution.html
CVE ID: CVE-2019-11540 State: PUBLISHED Published: 2019-04-26T01:39:49 Last Updated: 2024-08-04T22:55:40.780Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4 and 8.3RX before 8.3R7.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2 and 5.4RX before 5.4R7.1, an unauthenticated, remote attacker can conduct a session hijacking attack. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 - http://www.securityfocus.com/bid/108073 - https://psirt.global.sonicwall.com/
ticles/Pulse_Security_Advisories/SA44101 - http://www.securityfocus.com/bid/108073 - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010 - https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf - https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/ - https://www.kb.cert.org/vuls/id/927237
CVE ID: CVE-2019-11541 State: PUBLISHED Published: 2019-04-26T01:40:18 Last Updated: 2024-08-04T22:55:40.935Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AC:L/AV:N/A:L/C:L/I:L/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.2RX before 8.2R12.1, users using SAML authentication with the Reuse Existing NC (Pulse) Session option may see authentication leaks. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101/ - http://www.securityfoc
ity_Advisories/SA44101 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101/ - http://www.securityfocus.com/bid/108073 - https://www.kb.cert.org/vuls/id/927237
CVE ID: CVE-2019-11542 State: PUBLISHED Published: 2019-04-26T01:40:33 Last Updated: 2024-08-04T22:55:40.973Z Severity: HIGH (CVSS 8 CVSS:3.0/AC:H/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1, and 5.1RX before 5.1R15.1, an authenticated attacker (via the admin web interface) can send a specially crafted message resulting in a stack buffer overflow. Additional Analyst Notes: - CVE Program Cont
can send a specially crafted message resulting in a stack buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 - http://www.securityfocus.com/bid/108073 - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010 - https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf - https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/ - https://www.kb.cert.org/vuls/id/927237
CVE ID: CVE-2019-11543 State: PUBLISHED Published: 2019-04-26T01:40:43 Last Updated: 2024-11-15T15:26:20.782Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in the admin web console in Pulse Secure Pulse Connect Secure (PCS) 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, and 5.2RX before 5.2R12.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 - https://kb.pulsesecure.net/articles/Pulse_Security_Adv
//kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101/ - http://www.securityfocus.com/bid/108073 - https://www.kb.cert.org/vuls/id/927237
CVE ID: CVE-2019-11544 State: PUBLISHED Published: 2019-09-09T18:28:54 Last Updated: 2024-08-04T22:55:41.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It allows Information Disclosure. Non-member users who subscribe to notifications of an internal project with issue and repository restrictions will receive emails about restricted events. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/04/29/security-release-gitlab-11-dot-10-dot-2-released/ - https://gitlab.com/gitlab-org/g
https://about.gitlab.com/2019/04/29/security-release-gitlab-11-dot-10-dot-2-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/58372
CVE ID: CVE-2019-11545 State: PUBLISHED Published: 2019-09-09T18:32:02 Last Updated: 2024-08-04T22:55:40.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community Edition 11.9.x before 11.9.10 and 11.10.x before 11.10.2. It allows Information Disclosure. When an issue is moved to a private project, the private project namespace is leaked to unauthorized users with access to the original issue. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/04/29/security-release-gitlab-11-dot-10-dot-2-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/58939
CVE ID: CVE-2019-11546 State: PUBLISHED Published: 2019-09-09T18:34:19 Last Updated: 2024-08-04T22:55:41.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It has a Race Condition which could allow users to approve a merge request multiple times and potentially reach the approval count required to merge. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/04/29/security-release-gitlab-11-dot-10-dot-2-released/ - https://gitlab.com/gitlab-org/gitlab-ee/issues/10357
CVE ID: CVE-2019-11547 State: PUBLISHED Published: 2019-09-09T18:49:01 Last Updated: 2024-08-04T22:55:40.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It has Improper Encoding or Escaping of Output. The branch name on new merge request notification emails isn't escaped, which could potentially lead to XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-ee/issues/11515 - https://about.gitlab.com/2019/04/29/security-release-gitlab-11-dot-10-dot-2-released/
CVE ID: CVE-2019-11548 State: PUBLISHED Published: 2019-09-09T18:52:14 Last Updated: 2024-08-04T22:55:40.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project are able to post comments on confidential issues through an authorization issue in the note endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/04/29/security-release-gitlab-11-dot-10-dot-2-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/58505
CVE ID: CVE-2019-11549 State: PUBLISHED Published: 2019-09-09T18:54:19 Last Updated: 2024-08-04T22:55:40.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. Gitaly has allows an information disclosure issue where HTTP/GIT credentials are included in logs on connection errors. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/04/29/security-release-gitlab-11-dot-10-dot-2-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/57779
CVE ID: CVE-2019-11550 State: PUBLISHED Published: 2019-05-08T16:09:32 Last Updated: 2024-08-04T22:55:40.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper Certificate Validation. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin - https://support.citrix.com/article/CTX247735
CVE ID: CVE-2019-11551 State: PUBLISHED Published: 2019-08-21T17:47:22 Last Updated: 2024-08-04T22:55:40.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Code42 Enterprise and Crashplan for Small Business through Client version 6.9.1, an attacker can craft a restore request to restore a file through the Code42 app to a location they do not have privileges to write. Additional Analyst Notes: - CVE Program Container: References: - https://code42.com/r/support/CVE-2019-11551
CVE ID: CVE-2019-11552 State: PUBLISHED Published: 2019-07-19T13:51:23 Last Updated: 2024-08-04T22:55:40.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code42 Enterprise and Crashplan for Small Business Client version 6.7 before 6.7.5, 6.8 before 6.8.8, and 6.9 before 6.9.4 allows eval injection. A proxy auto-configuration file, crafted by a lesser privileged user, may be used to execute arbitrary code at a higher privilege as the service user. Additional Analyst Notes: - CVE Program Container: References: - https://bordplate.no/blog/en/post/crashplan-privilege-escalation/ - https://code42.com/r/support/CVE-2019-11552
CVE ID: CVE-2019-11553 State: PUBLISHED Published: 2019-07-19T16:44:41 Last Updated: 2024-08-04T22:55:40.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Code42 for Enterprise through 6.8.4, an administrator without web restore permission but with the ability to manage users in an organization can impersonate a user with web restore permission. When requesting the token to do a web restore, an administrator with permission to manage a user could request the token of that user. If the administrator was not authorized to perform web restores but the user was authorized to perform web restores, this would allow the administrator to impersonate the user with greater permissions
authorized to perform web restores, this would allow the administrator to impersonate the user with greater permissions. In order to exploit this vulnerability, the user would have to be an administrator with access to manage an organization with a user with greater permissions than themselves. Additional Analyst Notes: - CVE Program Container: References: - https://code42.com/r/support/CVE-2019-11553
CVE ID: CVE-2019-11554 State: PUBLISHED Published: 2019-12-06T15:07:02 Last Updated: 2024-08-04T22:55:40.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Audible application through 2.34.0 for Android has Missing SSL Certificate Validation for Adobe SDKs, allowing MITM attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://pankajupadhyay.in/2019/12/06/audible-and-a-curious-case-of-insecure-by-default-in-adobe-sdks/
CVE ID: CVE-2019-11555 State: PUBLISHED Published: 2019-04-26T21:16:24 Last Updated: 2024-08-04T22:55:41.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment could be received. This could result in process termination due to a NULL pointer dereference (denial of service). This affects eap_server/eap_server_pwd.c and eap_peer/eap_pwd.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2019/04/18/6 - https://w1.fi/security/201