Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-12868 State: PUBLISHED Published: 2019-06-17T00:00:00 Last Updated: 2024-08-04T23:32:55.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP file_exists function is used with user-controlled entries, and phar:// URLs trigger deserialization. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/c42c5fe92783dd306b7600db1f6a25324445b40c - https://zigrin.com/advisories/misp-command-injection-via-phar-deserialization/
CVE ID: CVE-2019-12869 State: PUBLISHED Published: 2019-06-24T15:25:07 Last Updated: 2024-08-04T23:32:55.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Out-Of-Bounds Read, Information Disclosure, and remote code execution. The attacker needs to get access to an original PC Worx or Config+ project file to be able to manipulate it. After manipulation, the attacker needs to exchange the original file with the manipulated one on the application programming workstation. Additional Analyst Notes: - C
nge the original file with the manipulated one on the application programming workstation. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-19-579/ - https://cert.vde.com/en-us/advisories/vde-2019-014
CVE ID: CVE-2019-12870 State: PUBLISHED Published: 2019-06-24T15:20:09 Last Updated: 2024-08-04T23:32:55.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Uninitialized Pointer and remote code execution. The attacker needs to get access to an original PC Worx or Config+ project file to be able to manipulate it. After manipulation, the attacker needs to exchange the original file with the manipulated one on the application programming workstation. Additional Analyst Notes: - CVE Program Container:
with the manipulated one on the application programming workstation. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-19-575/ - https://cert.vde.com/en-us/advisories/vde-2019-014
CVE ID: CVE-2019-12871 State: PUBLISHED Published: 2019-06-24T14:57:47 Last Updated: 2024-08-04T23:32:55.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to a Use-After-Free and remote code execution. The attacker needs to get access to an original PC Worx or Config+ project file to be able to manipulate it. After manipulation, the attacker needs to exchange the original file with the manipulated one on the application programming workstation. Additional Analyst Notes: - CVE Program Container: Referenc
manipulated one on the application programming workstation. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-19-578/ - https://cert.vde.com/en-us/advisories/vde-2019-014
CVE ID: CVE-2019-12872 State: PUBLISHED Published: 2019-06-18T13:20:44 Last Updated: 2024-08-04T23:32:55.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: dotCMS before 5.1.6 is vulnerable to a SQL injection that can be exploited by an attacker of the role Publisher via view_unpushed_bundles.jsp. Additional Analyst Notes: - CVE Program Container: References: - https://dotcms.com/security/SI-53 - https://github.com/dotCMS/core/issues/16624
CVE ID: CVE-2019-12874 State: PUBLISHED Published: 2019-06-18T17:53:09 Last Updated: 2024-08-04T23:32:55.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=81023659c7de5ac2637b4a879195efef50846102 - http://www.securityfocus.com/bid/108882 - https://usn.ubuntu.com/4074-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html - http://lists
tps://usn.ubuntu.com/4074-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html - https://security.gentoo.org/glsa/201908-23 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html
CVE ID: CVE-2019-12875 State: PUBLISHED Published: 2019-06-18T18:09:20 Last Updated: 2024-08-04T23:32:55.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance of an untrusted signing key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sroracle/abuild/commit/4f90ce92778d0ee302e288def75591b96a397c8b - https://code.foxkit.us/adelie/packages/commit/15b160780c6eeff7048063c099a7f8757e1d8391 - https://security.netapp.com/advisory/ntap-20190625-0005/
CVE ID: CVE-2019-12876 State: PUBLISHED Published: 2019-07-17T19:46:17 Last Updated: 2024-08-04T23:32:55.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have Insecure Permissions, leading to Privilege Escalation from low level privileges to System. Additional Analyst Notes: - CVE Program Container: References: - https://www.criticalstart.com/2019/07/manageengine-privilege-escalation/ - http://www.securityfocus.com/bid/109298
CVE ID: CVE-2019-12880 State: PUBLISHED Published: 2019-06-24T18:39:30 Last Updated: 2024-08-04T23:32:55.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: BCN Quark Quarking Password Manager 3.1.84 suffers from a clickjacking vulnerability caused by allowing * within web_accessible_resources. An attacker can take advantage of this vulnerability and cause significant harm. Additional Analyst Notes: - CVE Program Container: References: - https://chrome.google.com/webstore/detail/quarking-password-manager/gfkmpfajamepgekgohcdnjogmeamcdmm?hl=en - http://seclists.org/fulldisclosure/2019/Jun/31 - http://packetstormsecurity.com/files/153405/Quarking-Password-Manager-3.1.84-Clickjackin
rg/fulldisclosure/2019/Jun/31 - http://packetstormsecurity.com/files/153405/Quarking-Password-Manager-3.1.84-Clickjacking.html
CVE ID: CVE-2019-12881 State: PUBLISHED Published: 2019-06-18T22:07:15 Last Updated: 2024-08-04T23:32:55.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/oxagast/472866fb2c3d439e10499d7141d0a520 - http://www.securityfocus.com/bid/108873 - https://security.netapp.com/advisory/ntap-20190710-0002/
CVE ID: CVE-2019-12882 State: REJECTED Published: 2020-02-27T04:41:04 Last Updated: 2020-02-27T04:41:04 Description: No description available.
CVE ID: CVE-2019-12887 State: PUBLISHED Published: 2019-06-27T13:10:43 Last Updated: 2024-08-04T23:32:55.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control (issue 1 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://www.linotp.org/CVE-2019-12887.txt
CVE ID: CVE-2019-12888 State: REJECTED Published: 2019-06-26T10:01:13 Last Updated: 2019-06-26T10:01:13 Description: No description available.
CVE ID: CVE-2019-12889 State: PUBLISHED Published: 2019-08-20T12:00:13 Last Updated: 2024-08-04T23:32:55.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unauthenticated privilege escalation exists in SailPoint Desktop Password Reset 7.2. A user with local access to only the Windows logon screen can escalate their privileges to NT AUTHORITY\System. An attacker would need local access to the machine for a successful exploit. The attacker must disconnect the computer from the local network / WAN and connect it to an internet facing access point / network. At that point, the attacker can execute the password-reset functionality, which will expose a web browser. Browsing to a s
that point, the attacker can execute the password-reset functionality, which will expose a web browser. Browsing to a site that calls local Windows system functions (e.g., file upload) will expose the local file system. From there an attacker can launch a privileged command shell. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nulsect0r/CVE-2019-12889
CVE ID: CVE-2019-12890 State: PUBLISHED Published: 2019-06-19T18:00:52 Last Updated: 2024-08-04T23:32:55.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: RedwoodHQ 2.5.5 does not require any authentication for database operations, which allows remote attackers to create admin users via a con.automationframework users insert_one call. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46992 - https://www.youtube.com/watch?v=MK9AvoJDtxY
CVE ID: CVE-2019-12893 State: PUBLISHED Published: 2019-06-19T21:36:36 Last Updated: 2024-08-04T23:32:55.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alternate Pic View 2.600 has a User Mode Write AV starting at PicViewer!PerfgrapFinalize+0x00000000000a8868. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/05/crashing-alternate-pic-view.html
CVE ID: CVE-2019-12894 State: PUBLISHED Published: 2019-06-19T21:36:47 Last Updated: 2024-08-04T23:32:55.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alternate Pic View 2.600 has a Read Access Violation at the Instruction Pointer after a call from PicViewer!PerfgrapFinalize+0x00000000000a9a1b. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/05/crashing-alternate-pic-view.html
CVE ID: CVE-2019-12895 State: PUBLISHED Published: 2019-06-19T21:36:56 Last Updated: 2024-08-04T23:32:55.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Alternate Pic View 2.600, the Exception Handler Chain is Corrupted starting at PicViewer!PerfgrapFinalize+0x00000000000b916d. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/05/crashing-alternate-pic-view.html
CVE ID: CVE-2019-12896 State: PUBLISHED Published: 2019-06-19T21:37:08 Last Updated: 2024-08-04T23:32:55.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Edraw Max 7.9.3 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/05/crashing-edraw-max.html
CVE ID: CVE-2019-12897 State: PUBLISHED Published: 2019-06-19T21:37:20 Last Updated: 2024-08-04T23:32:55.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Edraw Max 7.9.3 has a Read Access Violation at the Instruction Pointer after a call from ObjectModule!Paint::Clear+0x0000000000000074. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/05/crashing-edraw-max.html
CVE ID: CVE-2019-12898 State: PUBLISHED Published: 2019-06-19T21:37:30 Last Updated: 2024-08-04T23:32:55.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at image00400000+0x000000000017a45e. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/05/crashing-devicenet-builder.html
CVE ID: CVE-2019-12899 State: PUBLISHED Published: 2019-06-19T21:37:39 Last Updated: 2024-08-04T23:32:55.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at ntdll!RtlQueueWorkItem+0x00000000000005e3. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/05/crashing-devicenet-builder.html
CVE ID: CVE-2019-12900 State: PUBLISHED Published: 2019-06-19T22:07:57.000Z Last Updated: 2025-06-09T15:57:25.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.debian.org/debian-lts-announce/2019/06/msg00021.html - https://usn.ubuntu.com/4038-2/ - https://usn.ubuntu.com/4038-1/ - https://seclists.org/bugtraq/2019/Jul/22 - https://lists.debian.org/debian-lts-announce/2019/07/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00040.html -
ebian-lts-announce/2019/07/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00040.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:18.bzip2.asc - https://seclists.org/bugtraq/2019/Aug/4 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00050.html - https://usn.ubuntu.com/4146-1/ - https://usn.ubuntu.com/4146-2/ - https://lists.debian.org/debian-lts-announce/2019/10/msg00012.html - https://lists.debian.org/debian-lts-announce/2019/10/msg00018.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00078.html - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00000.html - https://lists.apache.org/thread.ht
8.html - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00000.html - https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b%40%3Cusers.kafka.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2020.html - http://packetstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.html - http://packetstormsecurity.com/files/153957/FreeBSD-Security-Advisory-FreeBSD-SA-19-18.bzip2.html - https://gitlab.com/federicomenaquintero/bzip2/commit/74de1e2e6ffc9d51ef9824db71a8ffee5962cdbc - https://support.f5.com/csp/article/K68713584?utm_source=f5support&amp%3Butm_medium=RSS - https://lists.apache.org/thread.html/rda98305669476
om/csp/article/K68713584?utm_source=f5support&amp%3Butm_medium=RSS - https://lists.apache.org/thread.html/rda98305669476c4d90cc8527c4deda7e449019dd1fe9936b56671dd4%40%3Cuser.flink.apache.org%3E - https://lists.apache.org/thread.html/rce8cd8c30f60604b580ea01bebda8a671a25c9a1629f409fc24e7774%40%3Cuser.flink.apache.org%3E
CVE ID: CVE-2019-12901 State: PUBLISHED Published: 2019-06-19T23:05:47 Last Updated: 2024-08-04T23:32:55.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pydio Cells before 1.5.0 fails to neutralize '../' elements, allowing an attacker with minimum privilege to Upload files to, and Delete files/folders from, an unprivileged directory, leading to Privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://research.loginsoft.com/vulnerability/multiple-vulnerabilities-in-pydio-cells-1-4-1/ - https://pydio.com/en/community/releases/pydio-cells/pydio-cells-150-performances-features-security
CVE ID: CVE-2019-12902 State: PUBLISHED Published: 2019-06-19T23:05:59 Last Updated: 2024-08-04T23:32:55.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pydio Cells before 1.5.0 does incomplete cleanup of a user's data upon deletion. This allows a new user, holding the same User ID as a deleted user, to restore the deleted user's data. Additional Analyst Notes: - CVE Program Container: References: - https://research.loginsoft.com/vulnerability/multiple-vulnerabilities-in-pydio-cells-1-4-1/ - https://pydio.com/en/community/releases/pydio-cells/pydio-cells-150-performances-features-security
CVE ID: CVE-2019-12903 State: PUBLISHED Published: 2019-06-19T23:06:11 Last Updated: 2024-08-04T23:32:55.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pydio Cells before 1.5.0, when supplied with a Name field in an unexpected Unicode format, fails to handle this and includes the database column/table name as pert of the error message, exposing sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://research.loginsoft.com/vulnerability/multiple-vulnerabilities-in-pydio-cells-1-4-1/ - https://pydio.com/en/community/releases/pydio-cells/pydio-cells-150-performances-features-security
CVE ID: CVE-2019-12904 State: PUBLISHED Published: 2019-06-19T23:34:13 Last Updated: 2024-08-04T23:32:55.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) NOTE: the vendor's position is that the issue report cannot be validated because there is no description of an attack Additional Analyst Notes: - CVE Program Container: References: - https://dev.gnupg.org/T4541 - https://github.com/gpg/libgcrypt/commit/daedbbb5541
- CVE Program Container: References: - https://dev.gnupg.org/T4541 - https://github.com/gpg/libgcrypt/commit/daedbbb5541cd8ecda1459d3b843ea4d92788762 - https://github.com/gpg/libgcrypt/commit/a4c561aab1014c3630bc88faf6f5246fee16b020 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00049.html - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE ID: CVE-2019-12905 State: PUBLISHED Published: 2019-06-20T15:24:58 Last Updated: 2024-08-04T23:32:55.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: FileRun 2019.05.21 allows XSS via the filename to the ?module=fileman&section=do&page=up URI. This issue has been fixed in FileRun 2019.06.01. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EmreOvunc/FileRun-Vulnerabilities/ - https://github.com/EmreOvunc/FileRun-Vulnerabilities/issues/3 - http://packetstormsecurity.com/files/158173/FileRun-2019.05.21-Cross-Site-Scripting.html
CVE ID: CVE-2019-12911 State: PUBLISHED Published: 2019-07-17T20:06:15 Last Updated: 2024-08-04T23:32:55.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, etc.) used in the application. Additional Analyst Notes: - CVE Program Container: References: - https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/
CVE ID: CVE-2019-12912 State: PUBLISHED Published: 2019-07-17T20:16:32 Last Updated: 2024-08-04T23:32:55.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) used in the application. Additional Analyst Notes: - CVE Program Container: References: - https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/
CVE ID: CVE-2019-12913 State: PUBLISHED Published: 2019-07-17T20:19:10 Last Updated: 2024-08-04T23:32:55.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) used in the application. Additional Analyst Notes: - CVE Program Container: References: - https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/
CVE ID: CVE-2019-12914 State: PUBLISHED Published: 2019-07-17T20:09:03 Last Updated: 2024-08-04T23:32:55.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, etc.) used in the application. Additional Analyst Notes: - CVE Program Container: References: - https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/
CVE ID: CVE-2019-12915 State: REJECTED Published: 2020-03-03T14:08:51 Last Updated: 2020-03-03T14:08:51 Description: No description available.
CVE ID: CVE-2019-12916 State: REJECTED Published: 2020-03-03T14:14:36 Last Updated: 2020-03-03T14:14:36 Description: No description available.
CVE ID: CVE-2019-12917 State: PUBLISHED Published: 2019-11-06T14:44:02 Last Updated: 2024-08-04T23:32:55.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected XSS vulnerability exists in Quest KACE Systems Management Appliance Server Center 9.1.317 affecting the userui/software_library.php component via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - https://www.quest.com/products/kace-systems-management-appliance/ - https://support.quest.com/kb/311388/quest-response-to-certezza-vulnerability-report
CVE ID: CVE-2019-12918 State: PUBLISHED Published: 2019-11-06T14:45:20 Last Updated: 2024-08-04T23:32:55.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest KACE Systems Management Appliance Server Center version 9.1.317 is vulnerable to SQL injection. The affected file is software_library.php and affected parameters are order[0][column] and order[0][dir]. Additional Analyst Notes: - CVE Program Container: References: - https://www.quest.com/products/kace-systems-management-appliance/ - https://support.quest.com/kb/311388/quest-response-to-certezza-vulnerability-report
CVE ID: CVE-2019-12919 State: PUBLISHED Published: 2019-06-20T18:57:13 Last Updated: 2024-08-04T23:32:55.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the local network has unauthenticated access to the internal SD card via the HTTP service on port 8000. The HTTP web server on the camera allows anyone to view or download the video archive recorded and saved on the external memory card attached to the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46993
CVE ID: CVE-2019-12920 State: PUBLISHED Published: 2019-06-20T18:57:32 Last Updated: 2024-08-04T23:32:55.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the network can login remotely to the camera and gain root access. The device ships with a hardcoded 12345678 password for the root account, accessible from a TELNET login prompt. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46993
CVE ID: CVE-2019-12921 State: PUBLISHED Published: 2020-03-18T17:39:30 Last Updated: 2024-08-04T23:32:55.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for SVG. Additional Analyst Notes: - CVE Program Container: References: - http://www.graphicsmagick.org/ - https://github.com/d0ge/data-processing/blob/master/CVE-2019-12921.md - https://lists.debian.org/debian-lts-announce/2020/03/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00049.html - http://lists.opensuse.org/opensuse-security-announ
lists.opensuse.org/opensuse-security-announce/2020-03/msg00049.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00051.html - https://www.debian.org/security/2020/dsa-4675