Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-11598 State: PUBLISHED Published: 2019-04-29T15:06:08 Last Updated: 2024-08-04T22:55:41.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file. This is related to SetGrayscaleImage in MagickCore/quantize.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1540 - http://www.securityfocus.com/bid/108102 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - http:
0 - http://www.securityfocus.com/bid/108102 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00057.html - https://usn.ubuntu.com/4034-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html - https://www.debian.org/security/2020/dsa-4712 - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2019-11599 State: PUBLISHED Published: 2019-04-29T17:07:18 Last Updated: 2024-08-04T22:55:41.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c. Additional Analyst Notes: - CVE Program Container: Referenc
/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/04/29/2 - http://www.openwall.com/lists/oss-security/2019/04/29/1 - http://www.openwall.com/lists/oss-security/2019/04/30/1 - https://www.exploit-db.com/exploits/46781/ - http://www.securityfocus.com/bid/108113 - https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html - https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html - https://www.debian.org/security/2019/dsa-4465 - https://lists.debian.org/debian-lts-announce/2019/06/msg00011.html - https://seclists.org/bugtraq/2019/Jun/26 - http://lists.op
/lists.debian.org/debian-lts-announce/2019/06/msg00011.html - https://seclists.org/bugtraq/2019/Jun/26 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html - https://seclists.org/bugtraq/2019/Jul/33 - https://usn.ubuntu.com/4069-1/ - https://usn.ubuntu.com/4069-2/ - https://access.redhat.com/errata/RHSA-2019:2043 - https://access.redhat.com/errata/RHSA-2019:2029 - https://usn.ubuntu.com/4095-1/ - https://usn.ubuntu.com/4115-1/ - https://usn.ubuntu.com/4118-1/ - https://access.redhat.com/errata/RHSA-2019:3309 - https://access.redhat.com/errata/RHSA-2019:3517 - https://access.redhat.com/errata/
s.redhat.com/errata/RHSA-2019:3309 - https://access.redhat.com/errata/RHSA-2019:3517 - https://access.redhat.com/errata/RHSA-2020:0100 - https://access.redhat.com/errata/RHSA-2020:0103 - https://access.redhat.com/errata/RHSA-2020:0179 - https://access.redhat.com/errata/RHSA-2020:0543 - https://www.oracle.com/security-alerts/cpuApr2021.html - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.114 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.37 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1790 - https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a - https://git.
issues/detail?id=1790 - https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=04f5866e41fb70690e28397487d8bd8eea7d712a - http://packetstormsecurity.com/files/152663/Linux-Missing-Lockdown.html - https://security.netapp.com/advisory/ntap-20190517-0002/ - https://support.f5.com/csp/article/K51674118 - http://packetstormsecurity.com/files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://support.f5.com/csp/article/K51674118?utm_source=f5support&amp%3Butm_medium=RSS - https://security.netapp.com/advisory/ntap-20200608-0001/
CVE ID: CVE-2019-11600 State: PUBLISHED Published: 2019-05-13T19:57:47 Last Updated: 2024-08-04T22:55:41.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in the activities API in OpenProject before 8.3.2 allows a remote attacker to execute arbitrary SQL commands via the id parameter. The attack can be performed unauthenticated if OpenProject is configured not to require authentication for API access. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/May/7 - https://seclists.org/bugtraq/2019/May/22 - http://packetstormsecurity.com/files/152806/OpenProject-8.3.1-SQL-Injection.html - https://www.
rg/bugtraq/2019/May/22 - http://packetstormsecurity.com/files/152806/OpenProject-8.3.1-SQL-Injection.html - https://www.openproject.org/release-notes/openproject-8-3-2/ - https://groups.google.com/forum/#%21msg/openproject-security/XlucAJMxmzM/hESpOaFVAwAJ
CVE ID: CVE-2019-11601 State: PUBLISHED Published: 2019-08-21T19:09:01.029744Z Last Updated: 2024-09-16T17:59:22.845Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: A directory traversal vulnerability in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to write or delete files at any location. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/Advisory/BOSCH-SA-562575.html
CVE ID: CVE-2019-11602 State: PUBLISHED Published: 2019-08-21T19:21:38.452272Z Last Updated: 2024-09-17T00:56:40.970Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Leakage of stack traces in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to gather information about the file system structure. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/Advisory/BOSCH-SA-562575.html
CVE ID: CVE-2019-11603 State: PUBLISHED Published: 2019-08-21T19:29:23.032959Z Last Updated: 2024-09-16T23:46:18.811Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A HTTP Traversal Attack in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.0.2 allows remote attackers to read files outside the http root. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/Advisory/BOSCH-SA-562575.html
CVE ID: CVE-2019-11604 State: PUBLISHED Published: 2019-05-24T16:04:52 Last Updated: 2024-08-04T22:55:41.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Quest KACE Systems Management Appliance before 9.1. The script at /service/kbot_service_notsoap.php is vulnerable to unauthenticated reflected XSS when user-supplied input to the METHOD GET parameter is processed by the web application. Since the application does not properly validate and sanitize this parameter, it is possible to place arbitrary script code into the context of the same page. Additional Analyst Notes: - CVE Program Container: References: - https://www.rcesecurity.com/ - http://packe
same page. Additional Analyst Notes: - CVE Program Container: References: - https://www.rcesecurity.com/ - http://packetstormsecurity.com/files/153053/Quest-KACE-Systems-Management-Appliance-9.0-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2019/May/40
CVE ID: CVE-2019-11605 State: PUBLISHED Published: 2019-09-09T18:22:03 Last Updated: 2024-08-04T22:55:41.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition 11.8.x before 11.8.10, 11.9.x before 11.9.11, and 11.10.x before 11.10.3. It allows Information Disclosure. A small number of GitLab API endpoints would disclose project information when using a read_user scoped token. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/04/30/security-release-gitlab-11-dot-10-dot-3-released/
CVE ID: CVE-2019-11606 State: PUBLISHED Published: 2019-04-30T19:38:13 Last Updated: 2024-08-04T22:55:40.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copyfile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11607 State: PUBLISHED Published: 2019-04-30T19:38:25 Last Updated: 2024-08-04T22:55:41.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copydir.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11608 State: PUBLISHED Published: 2019-04-30T19:38:46 Last Updated: 2024-08-04T22:55:41.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/renamefile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information or make the server unserviceable. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11609 State: PUBLISHED Published: 2019-04-30T19:38:57 Last Updated: 2024-08-04T22:55:41.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/movefile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information or make the server unserviceable. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11610 State: PUBLISHED Published: 2019-04-30T19:39:17 Last Updated: 2024-08-04T22:55:41.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/downloaddir.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11611 State: PUBLISHED Published: 2019-04-30T19:39:26 Last Updated: 2024-08-04T22:55:40.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/download.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11612 State: PUBLISHED Published: 2019-04-30T19:39:39 Last Updated: 2024-08-04T22:55:41.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: doorGets 7.0 has an arbitrary file deletion vulnerability in /fileman/php/deletefile.php. A remote unauthenticated attacker can exploit this vulnerability to delete arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11613 State: PUBLISHED Published: 2019-04-30T19:39:49 Last Updated: 2024-08-04T22:55:41.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/contactView.php. A remote normal registered user could exploit the vulnerability to obtain database sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11614 State: PUBLISHED Published: 2019-04-30T19:40:01 Last Updated: 2024-08-04T22:55:40.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/commentView.php. A remote unauthorized attacker could exploit the vulnerability to obtain database sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11615 State: PUBLISHED Published: 2019-04-30T19:40:14 Last Updated: 2024-08-04T22:55:41.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: /fileman/php/upload.php in doorGets 7.0 has an arbitrary file upload vulnerability. A remote normal registered user can use this vulnerability to upload backdoor files to control the server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11616 State: PUBLISHED Published: 2019-04-30T19:40:23 Last Updated: 2024-08-04T22:55:41.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: doorGets 7.0 has a sensitive information disclosure vulnerability in /setup/temp/admin.php and /setup/temp/database.php. A remote unauthenticated attacker could exploit this vulnerability to obtain the administrator password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11617 State: PUBLISHED Published: 2019-04-30T19:40:35 Last Updated: 2024-08-04T22:55:41.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: doorGets 7.0 has a CSRF vulnerability in /doorgets/app/requests/user/configurationRequest.php. A remote attacker can exploit this vulnerability for "Google Analytics code" modification. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11618 State: PUBLISHED Published: 2019-04-30T19:40:45 Last Updated: 2024-08-04T22:55:41.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: doorGets 7.0 has a default administrator credential vulnerability. A remote attacker can use this vulnerability to gain administrator privileges for the creation and modification of articles via an H0XZlT44FcN1j9LTdFc5XRXhlF30UaGe1g3cZY6i1K9 access_token in a uri=blog&action=index&controller=blog action to /api/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11619 State: PUBLISHED Published: 2019-04-30T19:40:54 Last Updated: 2024-08-04T22:55:41.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=analytics. A remote background administrator privilege user (or a user with permission to manage configuration analytics) could exploit the vulnerability to obtain database sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11620 State: PUBLISHED Published: 2019-04-30T19:41:04 Last Updated: 2024-08-04T22:55:41.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php. A remote background administrator privilege user (or a user with permission to manage modulecategory) could exploit the vulnerability to obtain database sensitive information via modulecategory_add_titre. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11621 State: PUBLISHED Published: 2019-04-30T19:41:15 Last Updated: 2024-08-04T22:55:41.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=network. A remote background administrator privilege user (or a user with permission to manage network configuration) could exploit the vulnerability to obtain database sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11622 State: PUBLISHED Published: 2019-04-30T19:41:23 Last Updated: 2024-08-04T22:55:41.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php. A remote background administrator privilege user (or a user with permission to manage modulecategory) could exploit the vulnerability to obtain database sensitive information via modulecategory_edit_titre. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11623 State: PUBLISHED Published: 2019-04-30T19:41:31 Last Updated: 2024-08-04T22:55:41.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=siteweb. A remote background administrator privilege user (or a user with permission to manage configuration siteweb) could exploit the vulnerability to obtain database sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11624 State: PUBLISHED Published: 2019-04-30T19:41:40 Last Updated: 2024-08-04T22:55:41.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: doorGets 7.0 has an arbitrary file deletion vulnerability in /doorgets/app/requests/user/configurationRequest.php. A remote background administrator privilege user can exploit this vulnerability to delete arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11625 State: PUBLISHED Published: 2019-04-30T19:41:49 Last Updated: 2024-08-04T22:55:41.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/emailingRequest.php. A remote background administrator privilege user (or a user with permission to manage emailing) could exploit the vulnerability to obtain database sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11626 State: PUBLISHED Published: 2019-04-30T19:42:20 Last Updated: 2024-08-04T22:55:41.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: routers/ajaxRouter.php in doorGets 7.0 has a web site physical path leakage vulnerability, as demonstrated by an ajax/index.php?uri=1234%5c request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/doorGets_cve
CVE ID: CVE-2019-11627 State: PUBLISHED Published: 2019-04-30T22:49:10 Last Updated: 2024-08-04T22:55:41.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: gpg-key2ps in signing-party 1.1.x and 2.x before 2.10-1 contains an unsafe shell call enabling shell injection via a User ID. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/928256 - https://lists.debian.org/debian-lts-announce/2019/05/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00029.html
CVE ID: CVE-2019-11628 State: PUBLISHED Published: 2019-05-01T02:07:47 Last Updated: 2024-08-04T22:55:41.045Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AC:H/AV:N/A:N/C:H/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in QlikView Server before 11.20 SR19, 12.00 and 12.10 before 12.10 SR11, 12.20 before SR9, and 12.30 before SR2; and Qlik Sense Enterprise and Qlik Analytics Platform installations that lack these patch levels: February 2018 Patch 4, April 2018 Patch 3, June 2018 Patch 3, September 2018 Patch 4, November 2018 Patch 4, or February 2019 Patch 2. An authenticated user may be able to bypass intended file-read restrictions via crafted Br
4, or February 2019 Patch 2. An authenticated user may be able to bypass intended file-read restrictions via crafted Browser requests. Additional Analyst Notes: - CVE Program Container: References: - https://qliksupport.force.com/articles/000069985
CVE ID: CVE-2019-11629 State: PUBLISHED Published: 2019-05-07T17:23:56 Last Updated: 2024-08-04T22:55:41.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sonatype Nexus Repository Manager 2.x before 2.14.13 allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://support.sonatype.com/hc/en-us/articles/360022528733-CVE-2019-11629-Nexus-Repository-Manager-2-Cross-Site-Scripting-XSS-2019-05-02
CVE ID: CVE-2019-11631 State: REJECTED Published: 2019-05-01T02:52:10 Last Updated: 2019-05-07T20:05:08 Description: No description available.
CVE ID: CVE-2019-11632 State: PUBLISHED Published: 2019-05-01T13:07:14 Last Updated: 2024-08-04T22:55:41.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Octopus Deploy 2019.1.0 through 2019.3.1 and 2019.4.0 through 2019.4.5, an authenticated user with the VariableViewUnscoped or VariableEditUnscoped permission scoped to a specific project could view or edit unscoped variables from a different project. (These permissions are only used in custom User Roles and do not affect built in User Roles.) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/5528 - https://github.com/OctopusDeploy/Issues/issues/5529
CVE ID: CVE-2019-11633 State: PUBLISHED Published: 2019-05-01T13:33:42 Last Updated: 2024-08-04T22:55:41.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: HoneyPress through 2016-09-27 can be fingerprinted by attackers because of the ingrained unique www.atxsec.com and ayylmao.wpengine.com hostnames within the fake WordPress templates. This allows attackers to discover and avoid this honeypot system. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dustyfresh/HoneyPress/issues/1
CVE ID: CVE-2019-11634 State: PUBLISHED Published: 2019-05-22T16:46:42.000Z Last Updated: 2025-10-21T23:45:36.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix Workspace App before 1904 for Windows has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin - https://support.citrix.com/article/CTX251986
CVE ID: CVE-2019-11636 State: PUBLISHED Published: 2019-05-01T16:21:33 Last Updated: 2024-08-04T22:55:41.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zcash 2.x allows an inexpensive approach to "fill all transactions of all blocks" and "prevent any real transaction from occurring" via a "Sapling Wood-Chipper" attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zcash/zcash/issues/3955 - https://twitter.com/dukeleto/status/1120467430118232066 - https://saplingwoodchipper.github.io
CVE ID: CVE-2019-11637 State: PUBLISHED Published: 2019-05-01T17:03:45 Last Updated: 2024-08-04T22:55:41.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function rec_rset_get_props at rec-rset.c in librec.a, leading to a crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/recutils/bug-report-recutils/rec2csv - https://github.com/TeamSeri0us/pocs/blob/master/recutils/bug-report-recutils