Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-11204 State: PUBLISHED Published: 2019-05-14T19:57:29.767743Z Last Updated: 2024-09-16T17:53:03.664Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Spotfire Statistics Services Problem Types: The impact of this vulnerability includes the theoretical possibility that credentials to both the Spotfire Statistics Services server, and to other systems could be exposed. Description: The web interface component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that might theoretically allow an authenticated user to access sensitive information needed by the Spotfire Statistic
ty that might theoretically allow an authenticated user to access sensitive information needed by the Spotfire Statistics Services server. The sensitive information that might be affected includes database, JMX, LDAP, Windows service account, and user credentials. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Statistics Services: versions up to and including 7.11.1; 10.0.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/05/tibco-security-advisory-may-14-2019-tibco-spotfire-statistics-services-2019-11204 - http://www.securityfocus.com/bid/108347
CVE ID: CVE-2019-11205 State: PUBLISHED Published: 2019-05-14T19:57:29.812575Z Last Updated: 2024-09-17T00:05:43.567Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server Problem Types: The impact of this vulnerability includes the theoretical possibility that an unauthenticated attacker could gain administrative access to the web interface of the affected component. Description: The web server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow re
e Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow reflected cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: 7.14.0; 7.14.1; 10.0.0; 10.0.1; 10.1.0; 10.2.0, and TIBCO Spotfire Server: 7.14.0; 10.0.0; 10.0.1; 10.1.0; 10.2.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/05/tibco-security-advisory-may-14-2019-tibco-spotfire-server-2019-11205 - http://www.securityfocus.com/bid/108384
CVE ID: CVE-2019-11206 State: PUBLISHED Published: 2019-05-14T19:57:29.852145Z Last Updated: 2024-09-16T18:13:40.717Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: TIBCO Software Inc. Products: TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server Problem Types: The impact of this vulnerability includes the theoretical possibility that an unauthenticated attacker could remove comments from the system, rename bookmarks, and trick other users about which user authored a comment. Description: The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains
nent of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow a malicious user to undermine the integrity of comments and bookmarks. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 10.2.0, and TIBCO Spotfire Server: versions up to and including 7.11.2; 7.12.0; 7.13.0; 7.14.0; 10.0.0; 10.0.1; 10.1.0; and 10.2.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/05/tibco-security-advisory-may-14-2019-tibco-s
rvices/support/advisories - https://www.tibco.com/support/advisories/2019/05/tibco-security-advisory-may-14-2019-tibco-spotfire-server-2019-11206 - http://www.securityfocus.com/bid/108405
CVE ID: CVE-2019-11207 State: PUBLISHED Published: 2019-08-13T20:55:34.525554Z Last Updated: 2024-09-17T02:00:41.276Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO LogLogic Enterprise Virtual Appliance, TIBCO LogLogic Log Management Intelligence Problem Types: The impact of this vulnerability includes the theoretical possibility that an unauthenticated attacker could perform administrative functions provided by the web interface of the affected component. Description: The web server component of TIBCO Software Inc.'s TIBCO LogLogic Enterprise Virtual Appliance, and TIBCO LogLogic Log Management Intelligence contains multip
tware Inc.'s TIBCO LogLogic Enterprise Virtual Appliance, and TIBCO LogLogic Log Management Intelligence contains multiple vulnerabilities that theoretically allow persistent and reflected cross-site scripting (XSS) attacks, as well as cross-site request forgery (CSRF) attacks. This issue affects: TIBCO Software Inc. TIBCO LogLogic Enterprise Virtual Appliance version 6.2.1 and prior versions. TIBCO Software Inc. TIBCO LogLogic Log Management Intelligence 6.2.1. TIBCO LogLogic LX825 Appliance 0.0.004, TIBCO LogLogic LX1025 Appliance 0.0.004, TIBCO LogLogic LX4025 Appliance 0.0.004, TIBCO LogLogic MX3025 Appliance 0.0.004, TIBCO LogLogic MX4025 Appliance 0.0.004, TIBCO LogLogic ST1025 Applian
0.0.004, TIBCO LogLogic MX3025 Appliance 0.0.004, TIBCO LogLogic MX4025 Appliance 0.0.004, TIBCO LogLogic ST1025 Appliance 0.0.004, TIBCO LogLogic ST2025-SAN Appliance 0.0.004, and TIBCO LogLogic ST4025 Appliance 0.0.004 using TIBCO LogLogic Log Management Intelligence versions 6.2.1 and below. TIBCO LogLogic LX1035 Appliance 0.0.005, TIBCO LogLogic LX1025R1 Appliance 0.0.004, TIBCO LogLogic LX1025R2 Appliance 0.0.004, TIBCO LogLogic LX4025R1 Appliance 0.0.004, TIBCO LogLogic LX4025R2 Appliance 0.0.004, TIBCO LogLogic LX4035 Appliance 0.0.005, TIBCO LogLogic ST2025-SANR1 Appliance 0.0.004, TIBCO LogLogic ST2025-SANR2 Appliance 0.0.004, TIBCO LogLogic ST2035-SAN Appliance 0.0.005, TIBCO LogLo
pliance 0.0.004, TIBCO LogLogic ST2025-SANR2 Appliance 0.0.004, TIBCO LogLogic ST2035-SAN Appliance 0.0.005, TIBCO LogLogic ST4025R1 Appliance 0.0.004, TIBCO LogLogic ST4025R2 Appliance 0.0.004, and TIBCO LogLogic ST4035 Appliance 0.0.005 using TIBCO LogLogic Log Management Intelligence versions 6.2.1 and below. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/08/tibco-security-advisory-august-13-2019-tibco-loglogic-log-management-intelligence
CVE ID: CVE-2019-11208 State: PUBLISHED Published: 2019-08-08T15:36:52.668654Z Last Updated: 2024-09-17T02:53:22.304Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: TIBCO Software Inc. Products: TIBCO API Exchange Gateway, TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric Problem Types: The impact of this vulnerability includes the theoretical possibility that an attacker could gain access to all scopes defined for a given customer endpoint. Description: The authorization component of TIBCO Software Inc.'s TIBCO API Exchange Gateway, and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically
Gateway, and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically processes OAuth authorization incorrectly, leading to potential escalation of privileges for the specific customer endpoint, when the implementation uses multiple scopes. This issue affects: TIBCO Software Inc.'s TIBCO API Exchange Gateway version 2.3.1 and prior versions, and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric version 2.3.1 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/08/tibco-security-advisory-august-7-2019-
om/services/support/advisories - https://www.tibco.com/support/advisories/2019/08/tibco-security-advisory-august-7-2019-tibco-api-exchange
CVE ID: CVE-2019-11209 State: PUBLISHED Published: 2019-08-20T17:23:50.577889Z Last Updated: 2024-09-16T22:50:25.564Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO FTL Community Edition, TIBCO FTL Developer Edition, TIBCO FTL Enterprise Edition Problem Types: The impact of this vulnerability includes the theoretical possibility that an attacker could gain access to the contents of all messages in the FTL realm, manipulate the contents of the messages, and deny access to sending messages. Description: The realm configuration component of TIBCO Software Inc.'s TIBCO FTL Community Edition, TIBCO FTL Developer Edition, TIBCO F
realm configuration component of TIBCO Software Inc.'s TIBCO FTL Community Edition, TIBCO FTL Developer Edition, TIBCO FTL Enterprise Edition contains a vulnerability that theoretically fails to properly enforce access controls. This issue affects TIBCO FTL Community Edition 6.0.0; 6.0.1; 6.1.0, TIBCO FTL Developer Edition 6.0.1; 6.1.0, and TIBCO FTL Enterprise Edition 6.0.0; 6.0.1; 6.1.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/08/tibco-security-advisory-august-20-2019-tibco-ftl
CVE ID: CVE-2019-11210 State: PUBLISHED Published: 2019-09-18T22:20:49.918344Z Last Updated: 2024-09-16T19:20:22.104Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace Problem Types: The impact of this vulnerability includes the theoretical possibility that an attacker could gain full control of the operating system account hosting the affected component. In addition to the information flowing through the system, the exposed information might include secrets necessary to issue trusted requests to other TIBCO Spotfire servers. De
m, the exposed information might include secrets necessary to issue trusted requests to other TIBCO Spotfire servers. Description: The server component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, and TIBCO Spotfire Analytics Platform for AWS Marketplace contains a vulnerability that theoretically allows an unauthenticated user to bypass access controls and remotely execute code using the operating system account hosting the affected component. This issue affects: TIBCO Enterprise Runtime for R - Server Edition versions 1.2.0 and below, and TIBCO Spotfire Analytics Platform for AWS Marketplace versions 10.4.0 and 10.5.0. Additional Analyst Notes: - CVE Program Co
O Spotfire Analytics Platform for AWS Marketplace versions 10.4.0 and 10.5.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/09/tibco-security-advisory-september-17-2019-tibco-enterprise-runtime-for-r-server-2019-11210
CVE ID: CVE-2019-11211 State: PUBLISHED Published: 2019-09-18T22:21:04.828450Z Last Updated: 2024-09-17T03:34:08.098Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace Problem Types: The impact of this vulnerability includes the theoretical possibility that an attacker could gain full control of the operating system account hosting the affected component. In addition to the information flowing through the system, the exposed information might include secrets necessary to issue trusted requests to other TIBCO Spotfire servers. D
em, the exposed information might include secrets necessary to issue trusted requests to other TIBCO Spotfire servers. Description: The server component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, and TIBCO Spotfire Analytics Platform for AWS Marketplace contains a vulnerability that theoretically allows an authenticated user to trigger remote code execution in certain circumstances. When the affected component runs with the containerized TERR service on Linux the host can theoretically be tricked into running malicious code. This issue affects: TIBCO Enterprise Runtime for R - Server Edition version 1.2.0 and below, and TIBCO Spotfire Analytics Platform for AWS
: TIBCO Enterprise Runtime for R - Server Edition version 1.2.0 and below, and TIBCO Spotfire Analytics Platform for AWS Marketplace 10.4.0; 10.5.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/09/tibco-security-advisory-september-17-2019-tibco-enterprise-runtime-for-r-server-2019-11211
CVE ID: CVE-2019-11212 State: PUBLISHED Published: 2019-10-09T14:15:45.490540Z Last Updated: 2024-09-16T19:41:44.955Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N) Vendors: TIBCO Software Inc. Products: TIBCO MDM Problem Types: The impact of these vulnerabilities includes the theoretical possibility that a non-administrative user could gain full administrative access to the web interface of the affected component. Description: The MDM server component of TIBCO Software Inc's TIBCO MDM contains multiple vulnerabilities that theoretically allow an authenticated user with specific roles to perform cross-site scripting (XSS) attacks. This issue affects TIBCO Software I
uthenticated user with specific roles to perform cross-site scripting (XSS) attacks. This issue affects TIBCO Software Inc.'s TIBCO MDM version 9.0.1 and prior versions; version 9.1.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/10/tibco-security-advisory-october-8-2019-tibco-mdm
CVE ID: CVE-2019-11213 State: PUBLISHED Published: 2019-04-12T14:27:31 Last Updated: 2024-08-04T22:48:09.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Pulse Secure Pulse Desktop Client and Network Connect, an attacker could access session tokens to replay and spoof sessions, and as a result, gain unauthorized access as an end user, a related issue to CVE-2019-1573. (The endpoint would need to be already compromised for exploitation to succeed.) This affects Pulse Desktop Client 5.x before Secure Desktop 5.3R7 and Pulse Desktop Client 9.x before Secure Desktop 9.0R3. It also affects (for Network Connect customers) Pulse Connect Secure 8.1 before 8.1R14, 8.3 before 8.3R7,
esktop 9.0R3. It also affects (for Network Connect customers) Pulse Connect Secure 8.1 before 8.1R14, 8.3 before 8.3R7, and 9.0 before 9.0R3. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/192371 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44114 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44114/
CVE ID: CVE-2019-11215 State: PUBLISHED Published: 2020-02-14T17:31:29 Last Updated: 2024-08-04T22:48:08.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Combodo iTop 2.2.0 through 2.6.0, if the configuration file is writable, then execution of arbitrary code can be accomplished by calling ajax.dataloader with a maliciously crafted payload. Many conditions can place the configuration file into a writable state: during installation; during upgrade; in certain cases, an error during modification of the file from the web interface leaves the file writable (can be triggered with XSS); a race condition can be triggered by the hub-connector module (community version only from 2.4
n be triggered with XSS); a race condition can be triggered by the hub-connector module (community version only from 2.4.1 to 2.6.0); or editing the file in a CLI. Additional Analyst Notes: - CVE Program Container: References: - https://www.itophub.io/wiki/page?id=2_6_0:release:change_log - https://0day.love/itop_vulnerabilities_disclosure.pdf
CVE ID: CVE-2019-11216 State: PUBLISHED Published: 2019-12-04T19:31:55 Last Updated: 2024-08-04T22:48:09.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: BMC Smart Reporting 7.3 20180418 allows authenticated XXE within the import functionality. One can import a malicious XML file and perform XXE attacks to download local files from the server, or do DoS attacks with XML expansion attacks. XXE with direct response and XXE OOB are allowed. Additional Analyst Notes: - CVE Program Container: References: - https://docs.bmc.com/docs/itsm90/export-and-import-repository-509983929.html - http://seclists.org/fulldisclosure/2019/Dec/7 - http://packetstormsecurity.com/files/155552/BMC-Sma
ory-509983929.html - http://seclists.org/fulldisclosure/2019/Dec/7 - http://packetstormsecurity.com/files/155552/BMC-Smart-Reporting-7.3-20180418-XML-Injection.html
CVE ID: CVE-2019-11217 State: PUBLISHED Published: 2019-04-24T19:13:39 Last Updated: 2024-08-04T22:48:08.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GitController in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows execution of arbitrary commands in the context of the web server via a crafted http request. Additional Analyst Notes: - CVE Program Container: References: - https://bonobogitserver.com/changelog/#version-650 - https://flab.cesnet.cz/advisories/cve-2019-11217
CVE ID: CVE-2019-11218 State: PUBLISHED Published: 2019-04-24T19:21:27 Last Updated: 2024-08-04T22:48:09.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper handling of extra parameters in the AccountController (User Profile edit) in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows authenticated users to gain application administrator privileges via additional form parameter submissions. Additional Analyst Notes: - CVE Program Container: References: - https://bonobogitserver.com/changelog/#version-650 - https://flab.cesnet.cz/advisories/cve-2019-11218
CVE ID: CVE-2019-11219 State: PUBLISHED Published: 2019-04-26T18:47:24 Last Updated: 2024-08-04T22:48:09.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: The algorithm used to generate device IDs (UIDs) for devices that utilize Shenzhen Yunni Technology iLnkP2P suffers from a predictability flaw that allows remote attackers to establish direct connections to arbitrary devices. Additional Analyst Notes: - CVE Program Container: References: - https://hacked.camera/
CVE ID: CVE-2019-11220 State: PUBLISHED Published: 2019-04-26T18:51:29 Last Updated: 2024-08-04T22:48:08.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication flaw in Shenzhen Yunni Technology iLnkP2P allows remote attackers to actively intercept user-to-device traffic in cleartext, including video streams and device credentials. Additional Analyst Notes: - CVE Program Container: References: - https://hacked.camera/
CVE ID: CVE-2019-11221 State: PUBLISHED Published: 2019-04-12T19:04:42 Last Updated: 2024-08-04T22:48:09.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC 0.7.1 has a buffer overflow issue in gf_import_message() in media_import.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1203 - https://lists.debian.org/debian-lts-announce/2019/04/msg00025.html
CVE ID: CVE-2019-11222 State: PUBLISHED Published: 2019-04-12T19:05:05 Last Updated: 2024-08-04T22:48:09.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: gf_bin128_parse in utils/os_divers.c in GPAC 0.7.1 has a buffer overflow issue for the crypt feature when encountering a crafted_drm_file.xml file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1205 - https://github.com/gpac/gpac/issues/1204 - https://lists.debian.org/debian-lts-announce/2019/04/msg00025.html - https://github.com/gpac/gpac/commit/f3698bb1bce62402805c3fda96551a23101a32f9
CVE ID: CVE-2019-11223 State: PUBLISHED Published: 2019-04-18T17:08:18 Last Updated: 2024-08-04T22:48:09.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/supportcandy/#developers - https://www.pluginvulnerabilities.com/2019/04/05/arbitrary-file-upload-vulnerability-in-supportcandy/ - https://cert.kalasag.com.ph/news/research/vulnerable-wordpress-plugin-lets-you-take-over-websites/ - https:/
ortcandy/ - https://cert.kalasag.com.ph/news/research/vulnerable-wordpress-plugin-lets-you-take-over-websites/ - https://wpvulndb.com/vulnerabilities/9488
CVE ID: CVE-2019-11224 State: PUBLISHED Published: 2019-05-15T17:04:54 Last Updated: 2024-08-04T22:48:08.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: HARMAN AMX MVP5150 v2.87.13 devices allow remote OS Command Injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.amx.com/en/softwares/modero-mvp-5150-mvp-5200i-touch-panel-firmware-v2-87-13 - https://blog.hivint.com/advisory-injection-dangerous-command-into-harman-amx-mvp5150-cve-2019-11224-55bea4a03f3e
CVE ID: CVE-2019-11226 State: PUBLISHED Published: 2019-06-05T17:56:04 Last Updated: 2024-08-04T22:48:08.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple 2.2.10 has XSS via the m1_name parameter in "Add Article" under Content -> Content Manager -> News. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/May/36 - http://packetstormsecurity.com/files/153071/CMS-Made-Simple-2.2.10-Cross-Site-Scripting.html - https://vulmon.com/vulnerabilitydetails?qid=CVE-2019-11226
CVE ID: CVE-2019-11228 State: PUBLISHED Published: 2019-04-13T15:07:34 Last Updated: 2024-08-04T22:48:09.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: repo/setting.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 does not validate the form.MirrorAddress before calling SaveAddress. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/go-gitea/gitea/releases/tag/v1.8.0-rc3 - https://github.com/go-gitea/gitea/releases/tag/v1.7.6
CVE ID: CVE-2019-11229 State: PUBLISHED Published: 2019-04-13T15:07:50 Last Updated: 2024-08-04T22:48:09.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: models/repo_mirror.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 mishandles mirror repo URL settings, leading to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/go-gitea/gitea/releases/tag/v1.8.0-rc3 - https://github.com/go-gitea/gitea/releases/tag/v1.7.6 - http://packetstormsecurity.com/files/160833/Gitea-1.7.5-Remote-Code-Execution.html
CVE ID: CVE-2019-11230 State: PUBLISHED Published: 2019-07-18T16:50:43 Last Updated: 2024-08-04T22:48:08.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Avast Antivirus before 19.4, a local administrator can trick the product into renaming arbitrary files by replacing the Logs\Update.log file with a symlink. The next time the product attempts to write to the log file, the target of the symlink is renamed. This defect can be exploited to rename a critical product file (e.g., AvastSvc.exe), causing the product to fail to start on the next system restart. Additional Analyst Notes: - CVE Program Container: References: - http://www.mcerlane.co.uk/CVE-2019-11230/ - http://www.se
ditional Analyst Notes: - CVE Program Container: References: - http://www.mcerlane.co.uk/CVE-2019-11230/ - http://www.securityfocus.com/bid/109344