Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ad.html/b264fa5801e87698e9f43f2b5585fbc5ebdc26c6f4aad861b258fb69@%3Cdev.olingo.apache.org%3E - https://lists.apache.org/thread.html/b3dda6399a0ea2b647624b899fd330fca81834e41b13e3e11e1002d8@%3Cdev.olingo.apache.org%3E - https://lists.apache.org/thread.html/ee6faea9e542c0b90afd70297a9daa203e20d41aa2ac7fca6703662f@%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/860acce024d79837e963a51a42bab2cef8e8d017aad2b455ecd1dcf0@%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/0acadfb96176768caac79b404110df62d14d30aa9d53b6dbdb1407ac@%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/51923a9ba513b2e816e02a9d1fd8aa6f12e3e4e99bbd9dc884bccbbe@%3Cissues
.apache.org%3E - https://lists.apache.org/thread.html/51923a9ba513b2e816e02a9d1fd8aa6f12e3e4e99bbd9dc884bccbbe@%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/681493a2f9b63f5b468f741d88d1aa51b2cfcf7a1c5b74ea8c4343fb@%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/799eb85d67cbddc1851a3e63a07b55e95b2f44f1685225d38570ce89@%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/64b10f49c68333aaecf00348c5670fe182e49fd60d45c4a3ab241f8b@%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/b3ddeebbfaf8a288d7de8ab2611cf2609ab76b9809f0633248546b7c@%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/35961d1ae0084997
b2611cf2609ab76b9809f0633248546b7c@%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/35961d1ae00849974353a932b4fef12ebce074541552eceefa04f1fd@%3Cdev.olingo.apache.org%3E - https://www.debian.org/security/2020/dsa-4597 - https://seclists.org/bugtraq/2020/Jan/6 - https://access.redhat.com/errata/RHSA-2020:0164 - https://access.redhat.com/errata/RHSA-2020:0159 - https://access.redhat.com/errata/RHSA-2020:0160 - https://access.redhat.com/errata/RHSA-2020:0161 - https://lists.apache.org/thread.html/re45ee9256d3233c31d78e59ee59c7dc841c7fbd83d0769285b41e948@%3Ccommits.druid.apache.org%3E - https://access.redhat.com/errata/RHSA-2020:0445 - https://lists.apache.org/thread.html/r959
ommits.druid.apache.org%3E - https://access.redhat.com/errata/RHSA-2020:0445 - https://lists.apache.org/thread.html/r959474dcf7f88565ed89f6252ca5a274419006cb71348f14764b183d@%3Ccommits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/rc7eb5634b71d284483e58665b22bf274a69bd184d9bd7ede52015d91@%3Ccommon-issues.hadoop.apache.org%3E - https://lists.apache.org/thread.html/r90030b0117490caed526e57271bf4d7f9b012091ac5083c895d16543@%3Ccommon-issues.hadoop.apache.org%3E - https://lists.apache.org/thread.html/re0b78a3d0a4ba2cf9f4e14e1d05040bde9051d5c78071177186336c9@%3Ccommon-issues.hadoop.apache.org%3E - https://lists.debian.org/debian-lts-announce/2020/02/msg00018.html - https://lists.a
ommon-issues.hadoop.apache.org%3E - https://lists.debian.org/debian-lts-announce/2020/02/msg00018.html - https://lists.apache.org/thread.html/re78eaef7d01ad65c370df30e45c686fffff00b37f7bfd78b26a08762@%3Ccommon-issues.hadoop.apache.org%3E - https://lists.apache.org/thread.html/r0c3d49bfdbc62fd3915676433cc5899c5506d06da1c552ef1b7923a5@%3Ccommon-issues.hadoop.apache.org%3E - https://lists.apache.org/thread.html/rf2bf8e2eb0a03227f5bc100b544113f8cafea01e887bb068e8d1fa41@%3Ccommon-issues.hadoop.apache.org%3E - https://lists.apache.org/thread.html/rb3361f6c6a5f834ad3db5e998c352760d393c0891b8d3bea90baa836@%3Ccommon-issues.hadoop.apache.org%3E - https://lists.apache.org/thread.html/r86befa74c5cd1482c
d393c0891b8d3bea90baa836@%3Ccommon-issues.hadoop.apache.org%3E - https://lists.apache.org/thread.html/r86befa74c5cd1482c711134104aec339bf7ae879f2c4437d7ec477d4@%3Ccommon-commits.hadoop.apache.org%3E - https://lists.apache.org/thread.html/rdd5d243a5f8ed8b83c0104e321aa420e5e98792a95749e3c9a54c0b9@%3Ccommon-commits.hadoop.apache.org%3E - https://lists.apache.org/thread.html/rcb2c59428f34d4757702f9ae739a8795bda7bea97b857e708a9c62c6@%3Ccommon-commits.hadoop.apache.org%3E - https://lists.apache.org/thread.html/r8402d67fdfe9cf169f859d52a7670b28a08eff31e54b522cc1432532@%3Ccommon-issues.hadoop.apache.org%3E - https://lists.apache.org/thread.html/r4d3f1d3e333d9c2b2f6e6ae8ed8750d4de03410ac294bcd12c7eef
sues.hadoop.apache.org%3E - https://lists.apache.org/thread.html/r4d3f1d3e333d9c2b2f6e6ae8ed8750d4de03410ac294bcd12c7eefa3@%3Ccommits.cassandra.apache.org%3E - https://lists.debian.org/debian-lts-announce/2020/09/msg00004.html - https://lists.apache.org/thread.html/raaac04b7567c554786132144bea3dcb72568edd410c1e6f0101742e7@%3Cissues.flink.apache.org%3E - https://lists.apache.org/thread.html/rf5b2dfb7401666a19915f8eaef3ba9f5c3386e2066fcd2ae66e16a2f@%3Cdev.flink.apache.org%3E - https://usn.ubuntu.com/4532-1/ - https://lists.apache.org/thread.html/r0aa8b28e76ec01c697b15e161e6797e88fc8d406ed762e253401106e@%3Ccommits.camel.apache.org%3E - https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d
7e88fc8d406ed762e253401106e@%3Ccommits.camel.apache.org%3E - https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r831e0548fad736a98140d0b3b7dc575af0c50faea0b266434ba813cc@%3Cdev.rocketmq.apache.org%3E - https://lists.apache.org/thread.html/rcddf723a4b4117f8ed6042e9ac25e8c5110a617bab77694b61b14833@%3Cdev.rocketmq.apache.org%3E - https://lists.apache.org/thread.html/rb25b42f666d2cac5e6e6b3f771faf60d1f1aa58073dcdd8db14edf8a@%3Cdev.rocketmq.apache.org%3E - https://lists.apache.org/thread.html/r832724df393a7ef25ca4c7c2eb83ad2d6c21c74569acda5233f9f1ec@%3Ccommits.pulsar.apache.org%3E -
ists.apache.org/thread.html/r832724df393a7ef25ca4c7c2eb83ad2d6c21c74569acda5233f9f1ec@%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r7790b9d99696d9eddce8a8c96f13bb68460984294ea6fea3800143e4@%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/rdb69125652311d0c41f6066ff44072a3642cf33a4b5e3c4f9c1ec9c2@%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/rc8d554aad889d12b140d9fd7d2d6fc2e8716e9792f6f4e4b2cdc2d05@%3Ccommits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/r131e572d003914843552fa45c4398b9903fb74144986e8b107c0a3a7@%3Ccommits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/r3225f7dfe6b8a37e800e
03fb74144986e8b107c0a3a7@%3Ccommits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/r3225f7dfe6b8a37e800ecb8e31abd7ac6c4312dbd3223dd8139c37bb@%3Ccommits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/r73c400ab66d79821dec9e3472f0e2c048d528672bdb0f8bf44d7cb1f@%3Ccommits.cassandra.apache.org%3E - https://github.com/poc-effectiveness/PoCAdaptation/tree/main/Adapted/CVE-2019-16869/5.0.0.Alpha1/exploit
CVE ID: CVE-2019-16871 State: PUBLISHED Published: 2019-12-19T20:42:28 Last Updated: 2024-08-05T01:24:47.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution (as SYSTEM) via the Beckhoff ADS protocol. Additional Analyst Notes: - CVE Program Container: References: - https://www.ic4.be/2019/12/18/beckhoff-cve-2019-16871/#more-648 - https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2017-001.pdf
CVE ID: CVE-2019-16872 State: PUBLISHED Published: 2019-11-07T15:04:51 Last Updated: 2024-08-05T01:24:48.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Portainer before 1.22.1 has Incorrect Access Control (issue 1 of 4). Additional Analyst Notes: - CVE Program Container: References: - https://fortiguard.com/zeroday/FG-VD-19-120
CVE ID: CVE-2019-16873 State: PUBLISHED Published: 2019-11-07T14:47:46 Last Updated: 2024-08-05T01:24:47.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Portainer before 1.22.1 has XSS (issue 1 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://fortiguard.com/zeroday/FG-VD-19-118
CVE ID: CVE-2019-16874 State: PUBLISHED Published: 2019-11-07T14:51:02 Last Updated: 2024-08-05T01:24:48.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Portainer before 1.22.1 has Incorrect Access Control (issue 2 of 4). Additional Analyst Notes: - CVE Program Container: References: - https://fortiguard.com/zeroday/FG-VD-19-121
CVE ID: CVE-2019-16876 State: PUBLISHED Published: 2019-11-07T15:09:05 Last Updated: 2024-08-05T01:24:48.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Portainer before 1.22.1 allows Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://fortiguard.com/zeroday/FG-VD-19-123
CVE ID: CVE-2019-16877 State: PUBLISHED Published: 2019-11-07T15:13:24 Last Updated: 2024-08-05T01:24:48.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Portainer before 1.22.1 has Incorrect Access Control (issue 4 of 4). Additional Analyst Notes: - CVE Program Container: References: - https://fortiguard.com/zeroday/FG-VD-19-124
CVE ID: CVE-2019-16878 State: PUBLISHED Published: 2019-11-07T15:11:29 Last Updated: 2024-08-05T01:24:48.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Portainer before 1.22.1 has XSS (issue 2 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://fortiguard.com/zeroday/FG-VD-19-119
CVE ID: CVE-2019-16879 State: PUBLISHED Published: 2020-04-14T16:39:53 Last Updated: 2024-08-05T01:24:48.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has a Missing Authentication for Critical Function (CWE-306) vulnerability. The affected product does not require authentication for TELNET access, which may allow an attacker to change configuration or perform other malicious activities. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-042-01
CVE ID: CVE-2019-16880 State: PUBLISHED Published: 2019-09-25T16:17:46 Last Updated: 2024-08-05T01:24:47.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the linea crate through 0.9.4 for Rust. There is double free in the Matrix::zip_elements method. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2019-0021.html
CVE ID: CVE-2019-16881 State: PUBLISHED Published: 2019-09-25T16:45:21 Last Updated: 2024-08-05T01:24:47.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the portaudio-rs crate through 0.3.1 for Rust. There is a use-after-free with resultant arbitrary code execution because of a lack of unwind safety in stream_callback and stream_finished_callback. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2019-0022.html
CVE ID: CVE-2019-16882 State: PUBLISHED Published: 2019-09-25T16:53:19 Last Updated: 2024-08-05T01:24:47.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the string-interner crate before 0.7.1 for Rust. It allows attackers to read from memory locations associated with dangling pointers, because of a cloning flaw. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2019-0023.html
CVE ID: CVE-2019-16884 State: PUBLISHED Published: 2019-09-25T00:00:00 Last Updated: 2024-08-05T01:24:48.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/opencontainers/runc/issues/2128 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGK6IV5JGVDXHOXEKJOJWKOVNZLT6MYR/ - https://lists.fedoraproje
es/list/package-announce%40lists.fedoraproject.org/message/DGK6IV5JGVDXHOXEKJOJWKOVNZLT6MYR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62OQ2P7K5YDZ5BRCH2Q6DHUJIHQD3QCD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPK4JWP32BUIVDJ3YODZSOEVEW6BHQCF/ - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00073.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00009.html - https://access.redhat.com/errata/RHSA-2019:3940 - https://access.redhat.com/errata/RHSA-2019:4074 - https://access.redhat.com/errata/RHSA-2019:4269 - http://lists.opensuse.org/opensuse-
redhat.com/errata/RHSA-2019:4074 - https://access.redhat.com/errata/RHSA-2019:4269 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00010.html - https://security.gentoo.org/glsa/202003-21 - https://usn.ubuntu.com/4297-1/ - https://security.netapp.com/advisory/ntap-20220221-0004/ - https://lists.debian.org/debian-lts-announce/2023/02/msg00016.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00023.html
CVE ID: CVE-2019-16885 State: PUBLISHED Published: 2019-12-03T19:50:21 Last Updated: 2024-08-05T01:24:48.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OkayCMS through 2.3.4, an unauthenticated attacker can achieve remote code execution by injecting a malicious PHP object via a crafted cookie. This could happen at two places: first in view/ProductsView.php using the cookie price_filter, and second in api/Comparison.php via the cookie comparison. Additional Analyst Notes: - CVE Program Container: References: - https://www.ait.ac.at/ait-sa-20191129-01-unauthenticated-remote-code-execution-okaycms - http://seclists.org/fulldisclosure/2019/Dec/15 - http://packetstormsecurity.
thenticated-remote-code-execution-okaycms - http://seclists.org/fulldisclosure/2019/Dec/15 - http://packetstormsecurity.com/files/155583/OkayCMS-2.3.4-Remote-Code-Execution.html
CVE ID: CVE-2019-16887 State: PUBLISHED Published: 2019-09-25T17:51:17 Last Updated: 2024-08-05T01:24:48.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IrfanView 4.53, Data from a Faulting Address controls a subsequent Write Address starting at image00400000+0x000000000001dcfc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cribdragg3r/offensive_research/blob/master/bugs/irfanview/0x000000000001dcfc.adoc
CVE ID: CVE-2019-16889 State: PUBLISHED Published: 2019-09-25T19:51:38 Last Updated: 2024-08-05T01:24:48.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/run/beaker/container_file/ are created when providing a valid length payload of 249 characters or fewer to the beaker.session.id cookie in a GET header. The attacker can use a long series of unique session IDs. Additional Analyst Notes: - CVE Program Container: References: - https://mjlanders.com/2019/07/28/resource-consumption-dos-on-edgemax-v1-10-6/ - https://hackerone.com/reports/406614
: - https://mjlanders.com/2019/07/28/resource-consumption-dos-on-edgemax-v1-10-6/ - https://hackerone.com/reports/406614 - https://community.ui.com/releases/New-EdgeRouter-firmware-2-0-3-has-been-released-2-0-3/e8badd28-a112-4269-9fb6-ffe3fc0e1643
CVE ID: CVE-2019-16890 State: PUBLISHED Published: 2019-09-25T20:17:43 Last Updated: 2024-08-05T01:24:48.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/halo-dev/halo/issues/311
CVE ID: CVE-2019-16891 State: PUBLISHED Published: 2019-10-04T00:00:00 Last Updated: 2024-08-05T01:24:48.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload. Additional Analyst Notes: - CVE Program Container: References: - https://www.liferay.com/downloads-community - https://www.youtube.com/watch?v=DjMEfQW3bf0 - https://sec.vnpt.vn/2019/09/liferay-deserialization-json-deserialization-part-4/ - https://dappsec.substack.com/p/an-advisory-for-cve-2019-16891-from
CVE ID: CVE-2019-16892 State: PUBLISHED Published: 2019-09-25T00:00:00 Last Updated: 2024-08-05T01:24:47.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed. This allows attackers to cause a denial of service (disk consumption). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rubyzip/rubyzip/pull/403 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MWWPORMSBHZTMP4PGF4DQD22TTKBQMMC/ - https://lists.fedoraproject.org/archives/list/package-announce%40l
oject.org/message/MWWPORMSBHZTMP4PGF4DQD22TTKBQMMC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J45KSFPP6DFVWLC7Z73L7SX735CKZYO6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X255K6ZBAQC462PQN2ND5HOTTQEJ2G2X/ - https://access.redhat.com/errata/RHBA-2019:4047 - https://access.redhat.com/errata/RHSA-2019:4201 - https://github.com/rubyzip/rubyzip/commit/d65fe7bd283ec94f9d6dc7605f61a6b0dd00f55e
CVE ID: CVE-2019-16893 State: PUBLISHED Published: 2020-02-03T16:20:46 Last Updated: 2024-08-05T01:24:48.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot the device via a reboot.cgi request. Additional Analyst Notes: - CVE Program Container: References: - https://exploit-db.com/exploits/47958
CVE ID: CVE-2019-16894 State: PUBLISHED Published: 2019-09-26T14:34:07 Last Updated: 2024-08-05T01:24:48.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: download.php in inoERP 4.15 allows SQL injection through insecure deserialization. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47426
CVE ID: CVE-2019-16895 State: REJECTED Published: 2019-09-26T14:44:23 Last Updated: 2019-09-26T14:44:23 Description: No description available.
CVE ID: CVE-2019-16896 State: PUBLISHED Published: 2019-12-27T15:27:13 Last Updated: 2024-08-05T01:24:47.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality. Additional Analyst Notes: - CVE Program Container: References: - https://support.k7computing.com/index.php?/selfhelp/categories/Vulnerability%20Report%20and%20Advisory/29 - https://github.com/NtRaiseHardError/Antimalware-Research/blob/master/K7%20Security/Local%20Privilege%20Escalation/
/29 - https://github.com/NtRaiseHardError/Antimalware-Research/blob/master/K7%20Security/Local%20Privilege%20Escalation/v16.0.0117/README.md
CVE ID: CVE-2019-16897 State: PUBLISHED Published: 2019-10-28T14:54:32 Last Updated: 2024-08-05T01:24:48.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: In K7 Antivirus Premium 16.0.xxx through 16.0.0120; K7 Total Security 16.0.xxx through 16.0.0120; and K7 Ultimate Security 16.0.xxx through 16.0.0120, the module K7TSHlpr.dll improperly validates the administrative privileges of the user, allowing arbitrary registry writes in the K7AVOptn.dll module to facilitate escalation of privileges via inter-process communication with a service process. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NtRaiseHardError/Antimalware-Research/blob/master/K
yst Notes: - CVE Program Container: References: - https://github.com/NtRaiseHardError/Antimalware-Research/blob/master/K7%20Security/Local%20Privilege%20Escalation/v16.0.0120/README.md
CVE ID: CVE-2019-16898 State: REJECTED Published: 2019-11-12T20:16:20 Last Updated: 2019-11-12T20:16:20 Description: No description available.
CVE ID: CVE-2019-16899 State: PUBLISHED Published: 2019-09-26T01:00:40 Last Updated: 2024-08-05T01:24:48.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Advantech WebAccess/HMI Designer 2.1.9.31, Data from a Faulting Address controls Code Flow starting at PM_V3!CTagInfoThreadBase::GetNICInfo+0x0000000000512918. Additional Analyst Notes: - CVE Program Container: References: - http://code610.blogspot.com/2019/09/crashing-webaccesshmi-designer-21931.html
CVE ID: CVE-2019-16900 State: PUBLISHED Published: 2019-09-26T01:00:27 Last Updated: 2024-08-05T01:24:48.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advantech WebAccess/HMI Designer 2.1.9.31 has a User Mode Write AV starting at MSVCR90!memcpy+0x000000000000015c. Additional Analyst Notes: - CVE Program Container: References: - http://code610.blogspot.com/2019/09/crashing-webaccesshmi-designer-21931.html
CVE ID: CVE-2019-16901 State: PUBLISHED Published: 2019-09-26T01:00:17 Last Updated: 2024-08-05T01:24:48.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting at Unknown Symbol @ 0x0000000000000000 called from ntdll!RtlRaiseStatus+0x00000000000000b4. Additional Analyst Notes: - CVE Program Container: References: - http://code610.blogspot.com/2019/09/crashing-webaccesshmi-designer-21931.html
CVE ID: CVE-2019-16902 State: PUBLISHED Published: 2019-09-27T10:56:35 Last Updated: 2024-08-05T01:24:48.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full pathname. Additional Analyst Notes: - CVE Program Container: References: - https://www.arformsplugin.com/documentation/changelog/ - http://almorabea.net/cve-2019-16902.txt
CVE ID: CVE-2019-16903 State: PUBLISHED Published: 2019-09-26T10:56:46 Last Updated: 2024-08-05T01:24:48.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Platinum UPnP SDK 1.2.0 allows Directory Traversal in Core/PltHttpServer.cpp because it checks for /.. where it should be checking for ../ instead. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/349/ - https://github.com/plutinosoft/Platinum/issues/22
CVE ID: CVE-2019-16904 State: PUBLISHED Published: 2019-09-26T11:06:33 Last Updated: 2024-08-05T01:24:48.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin. (The crafted password is exploitable when viewing the change history of the item or tapping on the item.) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nilsteampassnet/TeamPass/issues/2685
CVE ID: CVE-2019-16905 State: PUBLISHED Published: 2019-10-09T00:00:00.000Z Last Updated: 2025-04-23T15:45:01.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in all released OpenSSH versions, and there is no supported way to enable it when building portable OpenSSH. Additional Analyst Notes: - CVE Program Container: Ref