Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-19372 State: PUBLISHED Published: 2019-11-28T14:57:58 Last Updated: 2024-11-15T14:50:48.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: A downloadFile.php download_file path traversal vulnerability in rConfig through 3.9.3 allows attackers to list files in arbitrary folders and potentially download files. NOTE: the discoverer later reported that there was not a "fully working exploit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/danielelkabes/Vulnerability-Reports/blob/master/rConfig%203.9.3%20-%20Path%20Traversal%20vulnerability.pdf
CVE ID: CVE-2019-19373 State: PUBLISHED Published: 2019-12-11T19:04:12 Last Updated: 2024-08-05T02:16:47.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5.5.2 prior to 5.5.2.4, and 5.5.3 prior to 5.5.3.3 where a user can trigger arbitrary unserialization of a PHP object from a packages/cms/page_templates/page_remote_content/page_remote_content.inc POST parameter during processing of a Remote Content page type. This unserialization can be used to trigger the inclusion of arbitrary files on the filesystem (local file inclusion), and results in remote code execution. Additional Analyst No
of arbitrary files on the filesystem (local file inclusion), and results in remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://matrix.squiz.net/releases/5.5/5.5.3.3 - https://zxsecurity.co.nz/wp-content/uploads/2019/12/ZX%20Security%20Advisory%20-%20Squiz%20Matrix%20CMS%20-%20Multiple%20Vulnerabilities.pdf - http://seclists.org/fulldisclosure/2019/Dec/34 - http://packetstormsecurity.com/files/155671/Squiz-Matrix-CMS-5.5.x.x-Code-Execution-Information-Disclosure.html
CVE ID: CVE-2019-19374 State: PUBLISHED Published: 2019-12-11T19:10:15 Last Updated: 2024-08-05T02:16:47.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in core/assets/form/form_question_types/form_question_type_file_upload/form_question_type_file_upload.inc in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5.5.2 prior to 5.5.2.4, and 5.5.3 prior to 5.5.3.3 where a user can delete arbitrary files from the server during interaction with the File Upload field type, when a custom form exists. (This is related to an information disclosure issue within the File Upload field type that allows users to view the full path to uploaded files, in
rmation disclosure issue within the File Upload field type that allows users to view the full path to uploaded files, including the product's web root directory.) Additional Analyst Notes: - CVE Program Container: References: - https://matrix.squiz.net/releases/5.5/5.5.3.3 - https://zxsecurity.co.nz/wp-content/uploads/2019/12/ZX%20Security%20Advisory%20-%20Squiz%20Matrix%20CMS%20-%20Multiple%20Vulnerabilities.pdf - http://seclists.org/fulldisclosure/2019/Dec/34 - http://packetstormsecurity.com/files/155671/Squiz-Matrix-CMS-5.5.x.x-Code-Execution-Information-Disclosure.html
CVE ID: CVE-2019-19375 State: PUBLISHED Published: 2019-11-28T16:16:36 Last Updated: 2024-08-05T02:16:47.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Octopus Deploy before 2019.10.7, in a configuration where SSL offloading is enabled, the CSRF cookie was sometimes sent without the secure attribute. (The fix for this was backported to LTS versions 2019.6.14 and 2019.9.8.) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/5998
CVE ID: CVE-2019-19376 State: PUBLISHED Published: 2019-11-28T16:16:46 Last Updated: 2024-08-05T02:16:47.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Octopus Deploy before 2019.10.6, an authenticated user with TeamEdit permission could send a malformed Team API request that bypasses input validation and causes an application level denial of service condition. (The fix for this was also backported to LTS 2019.9.8 and LTS 2019.6.14.) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/6005
CVE ID: CVE-2019-19377 State: PUBLISHED Published: 2019-11-29T15:55:05 Last Updated: 2024-08-05T02:16:47.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19377 - https://security.netapp.com/advisory/ntap-20200103-0001/ - https://usn.ubuntu.com/4367-1/ - https://usn.ubuntu.com/4369-1/ - https://usn.ubuntu.com/4414-1/ - https://lists.debian.org/debian-lts-announce/2020/12/ms
ttps://usn.ubuntu.com/4369-1/ - https://usn.ubuntu.com/4414-1/ - https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html
CVE ID: CVE-2019-19378 State: PUBLISHED Published: 2019-11-29T16:03:14 Last Updated: 2024-08-05T02:16:47.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19378 - https://security.netapp.com/advisory/ntap-20200103-0001/
CVE ID: CVE-2019-19379 State: PUBLISHED Published: 2019-11-28T16:47:08 Last Updated: 2024-08-05T02:16:47.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/e05dc512a437284f14624da23cca4a829a76aebf
CVE ID: CVE-2019-19381 State: PUBLISHED Published: 2020-03-11T13:02:38 Last Updated: 2024-08-05T02:16:47.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: oauth/oauth2/v1/saml/ in Abacus OAuth Login 2019_01_r4_20191021_0000 before prior to R4 (20.11.2019 Hotfix) allows Reflected Cross Site Scripting (XSS) via an error message. Additional Analyst Notes: - CVE Program Container: References: - https://www.compass-security.com/en/research/advisories/ - https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2019-024_Abacus_Cross-Site_Scripting_XSS.txt
CVE ID: CVE-2019-19382 State: PUBLISHED Published: 2019-12-03T19:22:04 Last Updated: 2024-08-05T02:16:47.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Max Secure Anti Virus Plus 19.0.4.020 has Insecure Permissions on the installation directory. Local attackers can replace a .exe or .dll file to achieve privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - http://hyp3rlinx.altervista.org - http://packetstormsecurity.com/files/155506/Max-Secure-Anti-Virus-Plus-19.0.4.020-Insecure-Permissions.html
CVE ID: CVE-2019-19383 State: PUBLISHED Published: 2019-12-03T19:06:07 Last Updated: 2024-08-05T02:16:47.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: freeFTPd 1.0.8 has a Post-Authentication Buffer Overflow via a crafted SIZE command (this is exploitable even if logging is disabled). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/m0rph-1/CVE-2019-19383
CVE ID: CVE-2019-19384 State: PUBLISHED Published: 2019-11-28T23:56:17 Last Updated: 2024-08-05T02:16:47.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in app/fax/fax_log_view.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the fax_uuid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/xax007/28e7326acfae677be0b351216888e522 - https://github.com/fusionpbx/fusionpbx/commit/aea1abaeb12f69dc22967395c528fb2434e316c1
CVE ID: CVE-2019-19385 State: PUBLISHED Published: 2019-11-28T23:56:08 Last Updated: 2024-08-05T02:16:47.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in app/dialplans/dialplans.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the app_uuid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/xax007/28e7326acfae677be0b351216888e522 - https://github.com/fusionpbx/fusionpbx/commit/fe504b83db80ebae30c982770f0f0b200b88cbe9
CVE ID: CVE-2019-19386 State: PUBLISHED Published: 2019-11-28T23:56:00 Last Updated: 2024-08-05T02:16:47.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in app/voicemail_greetings/voicemail_greeting_edit.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the id and/or voicemail_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/xax007/28e7326acfae677be0b351216888e522 - https://github.com/fusionpbx/fusionpbx/commit/9e837fadecdd5199819a949b5b1bd84b19f716f2
CVE ID: CVE-2019-19387 State: PUBLISHED Published: 2019-11-28T23:55:51 Last Updated: 2024-08-05T02:16:47.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in app/fifo_list/fifo_interactive.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the c parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/xax007/28e7326acfae677be0b351216888e522 - https://github.com/fusionpbx/fusionpbx/commit/44edbfe7a7e256d1b80448026617365a40c92c61
CVE ID: CVE-2019-19388 State: PUBLISHED Published: 2019-11-28T23:55:43 Last Updated: 2024-08-05T02:16:47.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in app/dialplans/dialplan_detail_edit.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the dialplan_uuid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/xax007/28e7326acfae677be0b351216888e522 - https://github.com/fusionpbx/fusionpbx/commit/b584973e73a4d25be623c9748dd9817f69422ecc
CVE ID: CVE-2019-19389 State: PUBLISHED Published: 2019-12-26T20:15:55 Last Updated: 2024-08-05T02:16:47.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ktorio/ktor/pull/1408 - https://gist.github.com/JLLeitschuh/6792947ed57d589b08c1cc8b666c7737 - https://twitter.com/JLLeitschuh/status/1210256191110230017?s=20
CVE ID: CVE-2019-19390 State: PUBLISHED Published: 2020-04-15T16:27:20 Last Updated: 2024-08-05T02:16:47.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Search parameter of the Software Catalogue section of Matrix42 Workspace Management 9.1.2.2765 and below accepts unfiltered parameters that lead to multiple reflected XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2020/Apr/10
CVE ID: CVE-2019-19391 State: PUBLISHED Published: 2019-11-29T15:18:49.000Z Last Updated: 2025-11-03T18:07:53.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations, because certain cases involving valid stack levels and > options are mishandled. NOTE: The LuaJIT project owner states that the debug libary is unsafe by definition and that this is not a vulnerability. When LuaJIT was originally developed, the expectation was that the entire debug library had no security guarantees and thus it made no sense to assi
eveloped, the expectation was that the entire debug library had no security guarantees and thus it made no sense to assign CVEs. However, not all users of later LuaJIT derivatives share this perspective Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/LuaJIT/LuaJIT/pull/526
CVE ID: CVE-2019-19392 State: PUBLISHED Published: 2020-01-21T16:34:07 Last Updated: 2024-08-05T02:16:47.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (create) new users with Administrator privileges, as demonstrated by Roles="Administrators" in XML or CSV data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fordnn/usersexportimport/commits/master - https://blog.joaoorvalho.com/description-cve-2019-19392/
CVE ID: CVE-2019-19393 State: PUBLISHED Published: 2020-10-01T16:55:05 Last Updated: 2024-08-05T02:16:47.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web application on Rittal CMC PU III 7030.000 V3.00 V3.11.00_2 to V3.15.70_4 devices fails to sanitize user input on the system configurations page. This allows an attacker to backdoor the device with HTML and browser-interpreted content (such as JavaScript or other client-side scripts) as the content is always displayed after and before login. Persistent XSS allows an attacker to modify displayed content or to change the victim's information. Successful exploitation requires access to the web management interface, either
t or to change the victim's information. Successful exploitation requires access to the web management interface, either with valid credentials or a hijacked session. Additional Analyst Notes: - CVE Program Container: References: - https://www.rittal.us/monitoring-security/cmc-iii.html - https://github.com/miguelhamal/CVE-2019-19393
CVE ID: CVE-2019-19394 State: PUBLISHED Published: 2020-04-16T17:48:23 Last Updated: 2024-08-05T02:16:47.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS. This is fixed in 3.10.7, 3.12.3, and 3.15.0. Additional Analyst Notes: - CVE Program Container: References: - https://cfengine.com/company/blog-detail/cve-2019-19394-mission-portal-javascript-injection-vulnerability/
CVE ID: CVE-2019-19396 State: PUBLISHED Published: 2019-11-29T21:02:36 Last Updated: 2024-08-05T02:16:47.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: illumos, as used in OmniOS Community Edition before r151030y, allows a kernel crash via an application with multiple threads calling sendmsg concurrently over a single socket, because uts/common/inet/ip/ip_attr.c mishandles conn_ixa dereferences. Additional Analyst Notes: - CVE Program Container: References: - https://omniosce.org/article/030y-028ay-022dw.html - https://www.illumos.org/issues/11556
CVE ID: CVE-2019-19397 State: PUBLISHED Published: 2019-12-13T14:19:12 Last Updated: 2024-08-05T02:16:47.108Z Vendors: n/a Products: S12700;S1700;S2700;S5700;S6700;S7700;S9700 Problem Types: Weak Algorithm Description: There is a weak algorithm vulnerability in some Huawei products. The affected products use weak algorithms by default. Attackers may exploit the vulnerability to cause information leaks. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-vrp-en
CVE ID: CVE-2019-19398 State: PUBLISHED Published: 2019-12-26T18:24:04 Last Updated: 2024-08-05T02:16:47.211Z Vendors: Huawei Products: M5 lite 10 Problem Types: Insufficient Input Description: M5 lite 10 with versions of 8.0.0.182(C00) have an insufficient input validation vulnerability. Due to the input validation logic is incorrect, an attacker can exploit this vulnerability to modify the memory of the device by doing a series of operations. Successful exploit may lead to malicious code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-validation-en
CVE ID: CVE-2019-19411 State: PUBLISHED Published: 2020-01-21T18:09:27 Last Updated: 2024-08-05T02:16:47.114Z Vendors: n/a Products: USG9500 Problem Types: Information Leakage Description: USG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 have an information leakage vulnerability. Due to improper processing of the initialization vector used in a specific encryption algorithm, an attacker who gains access to this cryptographic primitive may exploit this vulnerability to cause the value of the confidentiality associated with its use to be diminished. Additional Analyst Notes: - CVE Program Container: Refere
the confidentiality associated with its use to be diminished. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-firewall-en
CVE ID: CVE-2019-19412 State: PUBLISHED Published: 2020-06-08T18:21:28 Last Updated: 2024-08-05T02:16:47.114Z Vendors: Huawei Products: ALP-AL00B, ALP-L09, ALP-L29, Anne-AL00, BLA-AL00B, BLA-L09C, BLA-L29C, Berkeley-AL20, Berkeley-L09, Emily-L29C, Figo-L03, Figo-L21, Figo-L23, Figo-L31, Florida-L03, Florida-L21, Florida-L22, Florida-L23, HUAWEI P smart, HUAWEI P smart,HUAWEI Y7s, HUAWEI P20 lite, HUAWEI nova 3e,HUAWEI P20 lite, Honor View 10, Leland-AL00A, Leland-L21A, Leland-L22A, Leland-L22C, Leland-L31A Problem Types: FRP Bypass Description: Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset
ctory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the Talkback mode and can perform some operations to install a third-Party application. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en
CVE ID: CVE-2019-19413 State: PUBLISHED Published: 2020-01-21T22:54:22 Last Updated: 2024-08-05T02:16:47.085Z Vendors: n/a Products: CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800;DBS3900 TDD LTE;DP300;RP200;TE30;TE40;TE50;TE60 Problem Types: Two Integer Overflow Description: There is an integer overflow vulnerability in LDAP client of some Huawei products. Due to insufficient input validation, a remote attacker could exploit this vulnerability by sending malformed packets to the target devices. Successful exploit could cause the affected system crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/hu
Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-ldap-en
CVE ID: CVE-2019-19414 State: PUBLISHED Published: 2020-01-21T22:54:32 Last Updated: 2024-08-05T02:16:47.054Z Vendors: n/a Products: CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800;DBS3900 TDD LTE;DP300;RP200;TE30;TE40;TE50;TE60 Problem Types: Two Integer Overflow Description: There is an integer overflow vulnerability in LDAP server of some Huawei products. Due to insufficient input validation, a remote attacker could exploit this vulnerability by sending malformed packets to the target devices. Successful exploit could cause the affected system crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/hu
CVE ID: CVE-2019-19415 State: PUBLISHED Published: 2020-07-08T16:58:31 Last Updated: 2024-08-05T02:16:47.092Z Vendors: Huawei Products: AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR3600, AR510, DP300, IPS Module, NGFW Module, NIP6300, NIP6600, NIP6800, NetEngine16EX, RSE6500, SMC2.0, SRG1300, SRG2300, SRG3300, SVN5600, SVN5800, SVN5800-C, SeMG9811, Secospace USG6300, Secospace USG6500, Secospace USG6600, SoftCo, TE30, TE40, TE50, TE60, TP3206, USG9500, USG9520, USG9560, VP9660, ViewPoint 8660, ViewPoint 9030, eSpace U1910, eSpace U1911, eSpace U1930, eSpace U1960, eSpace U1980, eSpace U1981 Problem Types: DoS Description: The SIP module of som
pace U1911, eSpace U1930, eSpace U1960, eSpace U1980, eSpace U1981 Problem Types: DoS Description: The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advis
-sip-en. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en
CVE ID: CVE-2019-19416 State: PUBLISHED Published: 2020-07-08T16:55:48 Last Updated: 2024-08-05T02:16:47.115Z Vendors: Huawei Products: AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR3600, AR510, DP300, IPS Module, NGFW Module, NIP6300, NIP6600, NIP6800, NetEngine16EX, RSE6500, SMC2.0, SRG1300, SRG2300, SRG3300, SVN5600, SVN5800, SVN5800-C, SeMG9811, Secospace USG6300, Secospace USG6500, Secospace USG6600, SoftCo, TE30, TE40, TE50, TE60, TP3206, USG9500, USG9520, USG9560, VP9660, ViewPoint 8660, ViewPoint 9030, eSpace U1910, eSpace U1911, eSpace U1930, eSpace U1960, eSpace U1980, eSpace U1981 Problem Types: DoS Description: The SIP module of som
CVE ID: CVE-2019-19417 State: PUBLISHED Published: 2020-07-08T16:53:05 Last Updated: 2024-08-05T02:16:47.230Z Vendors: Huawei Products: AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR3600, AR510, DP300, IPS Module, NGFW Module, NIP6300, NIP6600, NIP6800, NetEngine16EX, RSE6500, SMC2.0, SRG1300, SRG2300, SRG3300, SVN5600, SVN5800, SVN5800-C, SeMG9811, Secospace USG6300, Secospace USG6500, Secospace USG6600, SoftCo, TE30, TE40, TE50, TE60, TP3206, USG9500, USG9520, USG9560, VP9660, ViewPoint 8660, ViewPoint 9030, eSpace U1910, eSpace U1911, eSpace U1930, eSpace U1960, eSpace U1980, eSpace U1981 Problem Types: DoS Description: The SIP module of som
CVE ID: CVE-2019-19441 State: PUBLISHED Published: 2020-01-03T14:03:15 Last Updated: 2024-08-05T02:16:47.023Z Vendors: n/a Products: HUAWEI P30 Problem Types: Information Leak Description: HUAWEI P30 smart phones with versions earlier than 10.0.0.166(C00E66R1P11) have an information leak vulnerability. An attacker could send specific command in the local area network (LAN) to exploit this vulnerability. Successful exploitation may cause information leak. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200102-02-smartphone-en
CVE ID: CVE-2019-19447 State: PUBLISHED Published: 2019-12-08T00:48:36 Last Updated: 2024-08-05T02:16:47.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19447 - https://security.netapp.com/advisory/ntap-20200103-0001/ - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - http://lists.opensuse.org/opensuse-security-anno