Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s a stream of requests for a large response object. Depending on how the servers queue the responses, this can consume excess memory, CPU, or both. Additional Analyst Notes: - CVE Program Container: References: - https://kb.cert.org/vuls/id/605641/ - https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md - https://lists.apache.org/thread.html/4610762456644181b267c846423b3a990bd4aaea1886ecc7d51febdb%40%3Cannounce.httpd.apache.org%3E - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - http://www.openwall.com/lists/oss-security/2019/08/15/7 - https://lists.apache.org/thread.html/ec97
ttpd.apache.org%3E - http://www.openwall.com/lists/oss-security/2019/08/15/7 - https://lists.apache.org/thread.html/ec97fdfc1a859266e56fef084353a34e0a0b08901b3c1aa317a43c8c%40%3Cdev.httpd.apache.org%3E - https://lists.apache.org/thread.html/d89f999e26dfb1d50f247ead1fe8538014eb412b2dbe5be4b1a9ef50%40%3Cdev.httpd.apache.org%3E - https://www.synology.com/security/advisory/Synology_SA_19_33 - https://support.f5.com/csp/article/K02591030 - https://security.netapp.com/advisory/ntap-20190823-0005/ - https://security.netapp.com/advisory/ntap-20190823-0003/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP/ - https://li
ject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC/ - https://www.debian.org/security/2019/dsa-4509 - https://seclists.org/bugtraq/2019/Aug/47 - https://usn.ubuntu.com/4113-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BP556LEG3WENHZI5TAQ6ZEBFTJB4E2IS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XHTKU7YQ5EEP2XNSAV4M4VJ7QCBOJMOD/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg000
ject.org/message/XHTKU7YQ5EEP2XNSAV4M4VJ7QCBOJMOD/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00004.html - https://security.netapp.com/advisory/ntap-20190905-0003/ - https://security.gentoo.org/glsa/201909-04 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10296 - https://access.redhat.com/errata/RHSA-2019:2893 - https://access.redhat.com/errata/RHSA-2019:2925 - https://access.redhat.com/errata/RHSA-2019:2939 - https://access.redhat.com/errata/RHSA-2019:2946 - https://access.redhat.com/errata/RHSA-2019:2950
rata/RHSA-2019:2939 - https://access.redhat.com/errata/RHSA-2019:2946 - https://access.redhat.com/errata/RHSA-2019:2950 - https://access.redhat.com/errata/RHSA-2019:2949 - https://access.redhat.com/errata/RHSA-2019:2955 - https://support.f5.com/csp/article/K02591030?utm_source=f5support&amp%3Butm_medium=RSS - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://access.redhat.com/errata/RHSA-2019:3933 - https://access.redhat.com/errata/RHSA-2019:3935 - https://access.redhat.com/errata/RHSA-2019:3932 - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.ht
8c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r03ee478b3dda3e3
071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2019-9518 State: PUBLISHED Published: 2019-08-13T20:50:59 Last Updated: 2024-08-04T21:54:44.510Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-400 Description: Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service. The attacker sends a stream of frames with an empty payload and without the end-of-stream flag. These frames can be DATA, HEADERS, CONTINUATION and/or PUSH_PROMISE. The peer spends time processing each frame disproportionate to attack bandwidth. This can consume excess CPU. Additional Analyst Notes: - CVE Program Container: References: - ht
te to attack bandwidth. This can consume excess CPU. Additional Analyst Notes: - CVE Program Container: References: - https://kb.cert.org/vuls/id/605641/ - https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md - https://seclists.org/bugtraq/2019/Aug/24 - http://seclists.org/fulldisclosure/2019/Aug/16 - https://www.synology.com/security/advisory/Synology_SA_19_33 - https://support.f5.com/csp/article/K46011592 - https://lists.apache.org/thread.html/2653c56545573b528f3f6352a29eccaf498bd6fb2a6a59568d81a61d%40%3Cannounce.trafficserver.apache.org%3E - https://lists.apache.org/thread.html/091b518265bce56a16af87b77c8cfacda902a02079e866f9fdf13b61%40%3Cusers.traf
e.org%3E - https://lists.apache.org/thread.html/091b518265bce56a16af87b77c8cfacda902a02079e866f9fdf13b61%40%3Cusers.trafficserver.apache.org%3E - https://lists.apache.org/thread.html/ff5b0821a6985159a832ff6d1a4bd311ac07ecc7db1e2d8bab619107%40%3Cdev.trafficserver.apache.org%3E - https://security.netapp.com/advisory/ntap-20190823-0005/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC/ - https://www.debian.org/security/2019/dsa-4520 - https://seclists.org/bugtraq/2019/Sep/18 - http:
AYJEIDJVF2FIGQTAYPMC/ - https://www.debian.org/security/2019/dsa-4520 - https://seclists.org/bugtraq/2019/Sep/18 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10296 - https://access.redhat.com/errata/RHSA-2019:2925 - https://access.redhat.com/errata/RHSA-2019:2939 - https://access.redhat.com/errata/RHSA-2019:2955 - https://support.f5.com/csp/article/K46011592?utm_source=f5support&amp%3Butm_medium=RSS - https://access.redhat.com/errata/RHSA-2019:3892 - https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6
access.redhat.com/errata/RHSA-2019:3892 - https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:4352 - https://access.redhat.com/errata/RHSA-2020:0727 - https://lists.apache.org/thread.html/r99a625fb17032646d96cd23dec49603ff630e9318e44a686d63046bc%40%3Ccommits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/rd31230d01fa6aad18bdadc0720acd1747e53690bd35f73a48e7a9b75%40%3Ccommits.cassandra.apache.org%3E
CVE ID: CVE-2019-9529 State: PUBLISHED Published: 2019-10-10T20:09:47.632608Z Last Updated: 2024-09-16T20:07:10.559Z Vendors: Cobham plc Products: Explorer 710 Problem Types: CWE-284 Description: The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default. This could allow an unauthenticated, local attacker connected to the device to access the portal and to make any change to the device. Additional Analyst Notes: - CVE Program Container: References: - https://kb.cert.org/vuls/id/719689/
CVE ID: CVE-2019-9530 State: PUBLISHED Published: 2019-10-10T20:09:47.669417Z Last Updated: 2024-09-16T17:14:11.909Z Vendors: Cobham plc Products: Explorer 710 Problem Types: CWE-284 Description: The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files. This could allow an unauthenticated, local attacker connected to the device to access and download any file found in the web root directory. Additional Analyst Notes: - CVE Program Container: References: - https://kb.cert.org/vuls/id/719689/
CVE ID: CVE-2019-9531 State: PUBLISHED Published: 2019-10-10T20:09:47.705125Z Last Updated: 2024-09-16T20:02:16.560Z Vendors: Cobham plc Products: Explorer 710 Problem Types: CWE-284 Description: The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454. This could allow an unauthenticated, remote attacker to connect to this port via Telnet and execute 86 Attention (AT) commands, including some that provide unauthenticated, shell-like access to the device. Additional Analyst Notes: - CVE Program Container: References: - https://kb.cert.org/vuls/id/719689/
CVE ID: CVE-2019-9532 State: PUBLISHED Published: 2019-10-10T20:09:47.739617Z Last Updated: 2024-09-16T19:30:16.862Z Vendors: Cobham plc Products: Explorer 710 Problem Types: CWE-319 Description: The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext. This could allow an unauthenticated, local attacker to intercept the password and gain access to the portal. Additional Analyst Notes: - CVE Program Container: References: - https://kb.cert.org/vuls/id/719689/
CVE ID: CVE-2019-9533 State: PUBLISHED Published: 2019-10-10T20:09:47.781734Z Last Updated: 2024-09-16T16:28:25.213Z Vendors: Cobham plc Products: Explorer 710 Problem Types: CWE-522 Description: The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08. This could allow an attacker to reverse-engineer the password from available versions to gain authenticated access to the device. Additional Analyst Notes: - CVE Program Container: References: - https://kb.cert.org/vuls/id/719689/
CVE ID: CVE-2019-9534 State: PUBLISHED Published: 2019-10-10T20:09:47.814464Z Last Updated: 2024-09-17T00:15:54.409Z Vendors: Cobham plc Products: Explorer 710 Problem Types: CWE-494 Description: The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image. Development scripts left in the firmware can be used to upload a custom firmware image that the device runs. This could allow an unauthenticated, local attacker to upload their own firmware that could be used to intercept or modify traffic, spoof or intercept GPS traffic, exfiltrate private data, hide a backdoor, or cause a denial-of-service. Additional Analyst Notes: - CVE Program Container: References: - https://
hide a backdoor, or cause a denial-of-service. Additional Analyst Notes: - CVE Program Container: References: - https://kb.cert.org/vuls/id/719689/
CVE ID: CVE-2019-9535 State: PUBLISHED Published: 2019-10-09T19:15:44.101481Z Last Updated: 2024-09-17T02:11:00.076Z Vendors: iTerm2 Products: iTerm2 Problem Types: CWE-349 Description: A vulnerability exists in the way that iTerm2 integrates with tmux's control mode, which may allow an attacker to execute arbitrary commands by providing malicious output to the terminal. This affects versions of iTerm2 up to and including 3.3.5. This vulnerability may allow an attacker to execute arbitrary commands on their victim's computer by providing malicious output to the terminal. It could be exploited using command-line utilities that print attacker-controlled content. Additional Analyst Notes: - CVE
could be exploited using command-line utilities that print attacker-controlled content. Additional Analyst Notes: - CVE Program Container: References: - https://kb.cert.org/vuls/id/763073/ - https://blog.mozilla.org/security/2019/10/09/iterm2-critical-issue-moss-audit/ - https://groups.google.com/forum/#%21topic/iterm2-discuss/57k_AuLdQa4
CVE ID: CVE-2019-9536 State: PUBLISHED Published: 2019-11-22T17:41:08 Last Updated: 2024-08-04T21:54:44.397Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Apple Products: iPhone Problem Types: insecure malloc implementation Description: Apple iPhone 3GS bootrom malloc implementation returns a non-NULL pointer when unable to allocate memory, aka 'alloc8'. An attacker with physical access to the device can install arbitrary firmware. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axi0mX/ipwndfu/blob/master/alloc8.py - https://github.com/axi0mX/alloc8
CVE ID: CVE-2019-9537 State: PUBLISHED Published: 2020-01-03T21:55:16 Last Updated: 2024-08-04T21:54:44.704Z Vendors: Telos Products: Automated Message Handling System Problem Types: CWE-79 Description: : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uploaditem.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/873161/
CVE ID: CVE-2019-9538 State: PUBLISHED Published: 2020-01-03T21:55:16 Last Updated: 2024-08-04T21:54:44.456Z Vendors: Telos Products: Automated Message Handling System Problem Types: CWE-79 Description: : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the LDAP cbURL parameter of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/873161/
CVE ID: CVE-2019-9539 State: PUBLISHED Published: 2020-01-03T21:55:17 Last Updated: 2024-08-04T21:54:44.695Z Vendors: Telos Products: Automated Message Handling System Problem Types: CWE-79 Description: : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ModalWindowPopup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/873161/
CVE ID: CVE-2019-9540 State: PUBLISHED Published: 2020-01-03T21:55:17 Last Updated: 2024-08-04T21:54:44.492Z Vendors: Telos Products: Automated Message Handling System Problem Types: CWE-79 Description: : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prefs.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/873161/
CVE ID: CVE-2019-9541 State: PUBLISHED Published: 2020-01-03T21:55:18 Last Updated: 2024-08-04T21:54:44.457Z Vendors: Telos Products: Automated Message Handling System Problem Types: CWE-200 Description: : Information Exposure vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/873161/
CVE ID: CVE-2019-9542 State: PUBLISHED Published: 2020-01-03T21:55:18 Last Updated: 2024-08-04T21:54:44.494Z Vendors: Telos Products: Automated Message Handling System Problem Types: CWE-79 Description: : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/873161/
CVE ID: CVE-2019-9543 State: PUBLISHED Published: 2019-03-01T19:00:00 Last Updated: 2024-08-04T21:54:44.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfseparate binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JArithmeticDecoder::decodeBit. Additional Analyst Notes: - CVE Program Container: References: - https://research.loginsoft.com/bugs/recursive-function-call-in-function-jbig2stream
CVE Program Container: References: - https://research.loginsoft.com/bugs/recursive-function-call-in-function-jbig2streamreadgenericbitmap-poppler-0-74-0/ - http://www.securityfocus.com/bid/107238 - https://gitlab.freedesktop.org/poppler/poppler/issues/730
CVE ID: CVE-2019-9544 State: PUBLISHED Published: 2019-03-01T19:00:00 Last Updated: 2024-08-04T21:54:44.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 1.5.1-628. An out of bounds write occurs in AP4_CttsTableEntry::AP4_CttsTableEntry() located in Core/Ap4Array.h. It can be triggered by sending a crafted file to (for example) the mp42hls binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://research.loginsoft.com/bugs/out-of-bounds-write-in-function-ap4_cttstableentryap4_cttstableentry-bento4-1-5-1-0/ - h
s://research.loginsoft.com/bugs/out-of-bounds-write-in-function-ap4_cttstableentryap4_cttstableentry-bento4-1-5-1-0/ - https://github.com/axiomatic-systems/Bento4/issues/374
CVE ID: CVE-2019-9545 State: PUBLISHED Published: 2019-03-01T19:00:00 Last Updated: 2024-08-04T21:54:44.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JBIG2Bitmap::clearToZero. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/poppler/poppler/issues/731 - https://research.loginsoft.com/bu
m Container: References: - https://gitlab.freedesktop.org/poppler/poppler/issues/731 - https://research.loginsoft.com/bugs/recursive-function-call-in-function-jbig2streamreadtextregion-poppler-0-74-0/
CVE ID: CVE-2019-9546 State: PUBLISHED Published: 2019-03-01T22:00:00 Last Updated: 2024-08-04T21:54:44.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ service. Additional Analyst Notes: - CVE Program Container: References: - https://support.solarwinds.com/Success_Center/Orion_Platform/Orion_Documentation/Additional_Resources/Orion_Platform_2018-4_Hotfix_2 - https://support.solarwinds.com/SuccessCenter/s/article/CVE-2019-9546-Orion-Platform-Vulnerability - https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-005.md
CVE ID: CVE-2019-9547 State: PUBLISHED Published: 2019-03-01T22:00:00Z Last Updated: 2024-09-16T18:33:40.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Storage Performance Development Kit (SPDK) before 19.01, a malicious vhost client (i.e., virtual machine) could carefully construct a circular descriptor chain that would result in a partial denial of service in the SPDK vhost target, because the vhost target did not properly detect such chains. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/spdk/spdk/releases/tag/v19.01 - https://github.com/spdk/spdk/commit/eca42c66092b9031711afe215fbc1891ee55f143
CVE ID: CVE-2019-9548 State: PUBLISHED Published: 2019-06-05T16:20:43 Last Updated: 2024-08-04T21:54:44.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin - https://support.citrix.com/article/CTX247738
CVE ID: CVE-2019-9549 State: PUBLISHED Published: 2019-03-03T19:00:00 Last Updated: 2024-08-04T21:54:45.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=user&act=addnew URI, as demonstrated by adding a level=1 account, a similar issue to CVE-2018-18935. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PopojiCMS/PopojiCMS/issues/17
CVE ID: CVE-2019-9550 State: PUBLISHED Published: 2019-03-03T19:00:00Z Last Updated: 2024-09-16T18:03:28.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: DhCms through 2017-09-18 has admin.php?r=admin/Index/index XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ShaoGongBra/dhcms/issues/1
CVE ID: CVE-2019-9551 State: PUBLISHED Published: 2019-03-04T04:00:00Z Last Updated: 2024-09-16T17:04:01.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DOYO (aka doyocms) 2.3 through 2015-05-06. It has admin.php XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/millken/doyocms/issues/2
CVE ID: CVE-2019-9552 State: PUBLISHED Published: 2019-03-04T04:00:00Z Last Updated: 2024-09-17T00:31:48.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eloan V3.0 through 2018-09-20 allows remote attackers to list files via a direct request to the p2p/api/ or p2p/lib/ or p2p/images/ URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lmy1342554547/p2pProject/issues/1
CVE ID: CVE-2019-9553 State: PUBLISHED Published: 2019-12-31T16:18:51 Last Updated: 2024-08-04T21:54:44.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46495 - https://packetstormsecurity.com/files/151943/Bold-CMS-3.6.4-Cross-Site-Scripting.html