Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
t.com/errata/RHSA-2019:2998 - https://lists.apache.org/thread.html/859815b2e9f1575acbb2b260b73861c16ca49bca627fa0c46419051f%40%3Cissues.iceberg.apache.org%3E - https://lists.apache.org/thread.html/689c6bcc6c7612eee71e453a115a4c8581e7b718537025d4b265783d%40%3Cissues.iceberg.apache.org%3E - https://lists.apache.org/thread.html/2766188be238a446a250ef76801037d452979152d85bce5e46805815%40%3Cissues.iceberg.apache.org%3E - https://lists.apache.org/thread.html/75f482fdc84abe6d0c8f438a76437c335a7bbeb5cddd4d70b4bc0cbf%40%3Cissues.iceberg.apache.org%3E - https://lists.apache.org/thread.html/99944f86abefde389da9b4040ea2327c6aa0b53a2ff9352bd4cfec17%40%3Cissues.iceberg.apache.org%3E - https://lists.apache
d.html/99944f86abefde389da9b4040ea2327c6aa0b53a2ff9352bd4cfec17%40%3Cissues.iceberg.apache.org%3E - https://lists.apache.org/thread.html/8723b52c2544e6cb804bc8a36622c584acd1bd6c53f2b6034c9fea54%40%3Cissues.iceberg.apache.org%3E - https://lists.apache.org/thread.html/d161ff3d59c5a8213400dd6afb1cce1fac4f687c32d1e0c0bfbfaa2d%40%3Cissues.iceberg.apache.org%3E - https://access.redhat.com/errata/RHBA-2019:2824 - https://access.redhat.com/errata/RHSA-2019:3044 - https://access.redhat.com/errata/RHSA-2019:3045 - https://access.redhat.com/errata/RHSA-2019:3050 - https://access.redhat.com/errata/RHSA-2019:3046 - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1
t.com/errata/RHSA-2019:3046 - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3149 - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3200 - https://lists.apache.org/thread.html/6788e4c991f75b89d290ad06b463fcd30bcae99fee610345a35b7bc6%40%3Cissues.iceberg.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3292 - https://acce
ae99fee610345a35b7bc6%40%3Cissues.iceberg.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3292 - https://access.redhat.com/errata/RHSA-2019:3297 - https://access.redhat.com/errata/RHSA-2019:3901 - https://access.redhat.com/errata/RHSA-2020:0727 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://github.com/FasterXML/jackson-databind/issues/2387 - https://github.com/FasterXML/jackson-databind/compare/jackson-databind-2.9.9.1...jackson-databind-2.9.9.2 - https://security.netapp.
ub.com/FasterXML/jackson-databind/compare/jackson-databind-2.9.9.1...jackson-databind-2.9.9.2 - https://security.netapp.com/advisory/ntap-20190814-0001/ - https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2020.html - https://www.oracle.com/security-alerts/cpuApr2021.html - https://support.apple.com/kb/HT213189 - http://seclists.org/fulldisclosure/2022/Mar/23
CVE ID: CVE-2019-14380 State: PUBLISHED Published: 2019-07-30T18:35:28 Last Updated: 2024-08-05T00:19:39.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files. Additional Analyst Notes: - CVE Program Container: References: - https://lib.openmpt.org/libopenmpt/2019/05/27/security-update-0.4.5/ - https://www.debian.org/security/2020/dsa-4729
CVE ID: CVE-2019-14381 State: PUBLISHED Published: 2019-07-30T12:41:13 Last Updated: 2024-08-05T00:19:39.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: libopenmpt before 0.4.3 allows a crash due to a NULL pointer dereference when doing a portamento from an OPL instrument to an empty instrument note map slot. Additional Analyst Notes: - CVE Program Container: References: - https://lib.openmpt.org/libopenmpt/2019/02/11/security-update-0.4.3/
CVE ID: CVE-2019-14382 State: PUBLISHED Published: 2019-07-30T18:34:51 Last Updated: 2024-08-05T00:19:40.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs. Additional Analyst Notes: - CVE Program Container: References: - https://lib.openmpt.org/libopenmpt/2019/01/22/security-updates-0.4.2-0.3.15-0.2.11253-beta37-0.2.7561-beta20.5-p13-0.2.7386-beta20.3-p16/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00085.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00084.html
CVE ID: CVE-2019-14383 State: PUBLISHED Published: 2019-07-30T18:33:58 Last Updated: 2024-08-05T00:19:40.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs. Additional Analyst Notes: - CVE Program Container: References: - https://lib.openmpt.org/libopenmpt/2019/01/22/security-updates-0.4.2-0.3.15-0.2.11253-beta37-0.2.7561-beta20.5-p13-0.2.7386-beta20.3-p16/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00085.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00084.html
CVE ID: CVE-2019-14386 State: PUBLISHED Published: 2019-07-30T12:38:21 Last Updated: 2024-08-05T00:19:40.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface (SEC-504). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/82+Change+Log
CVE ID: CVE-2019-14387 State: PUBLISHED Published: 2019-07-30T12:43:16 Last Updated: 2024-08-05T00:19:39.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates (SEC-506). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/82+Change+Log
CVE ID: CVE-2019-14388 State: PUBLISHED Published: 2019-07-30T12:45:33 Last Updated: 2024-08-05T00:19:40.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled (SEC-507). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/82+Change+Log
CVE ID: CVE-2019-14389 State: PUBLISHED Published: 2019-07-30T12:46:37 Last Updated: 2024-08-05T00:19:41.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 82.0.2 allows local users to discover the MySQL root password (SEC-510). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/82+Change+Log
CVE ID: CVE-2019-14390 State: PUBLISHED Published: 2019-07-30T12:47:44 Last Updated: 2024-08-05T00:19:40.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface (SEC-512). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/82+Change+Log
CVE ID: CVE-2019-14391 State: PUBLISHED Published: 2019-07-30T12:48:47 Last Updated: 2024-08-05T00:19:40.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 82.0.2 does not properly enforce Reseller package creation ACLs (SEC-514). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/82+Change+Log
CVE ID: CVE-2019-14392 State: PUBLISHED Published: 2019-07-30T14:00:46 Last Updated: 2024-08-05T00:19:40.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 80.0.22 allows remote code execution by a demo account because of incorrect URI dispatching (SEC-501). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/80+Change+Log
CVE ID: CVE-2019-14393 State: PUBLISHED Published: 2019-07-30T14:02:23 Last Updated: 2024-08-05T00:19:40.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 80.0.5 allows local code execution in the context of a different cPanel account because of insecure cpphp execution (SEC-486). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/80+Change+Log
CVE ID: CVE-2019-14394 State: PUBLISHED Published: 2019-07-30T14:03:11 Last Updated: 2024-08-05T00:19:40.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 80.0.5 allows unsafe file operations in the context of the root account via the fetch_ssl_certificates_for_fqdns API (SEC-489). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/80+Change+Log
CVE ID: CVE-2019-14395 State: PUBLISHED Published: 2019-07-30T14:03:56 Last Updated: 2024-08-05T00:19:40.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 80.0.5 uses world-readable permissions for the Queueprocd log (SEC-494). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/80+Change+Log
CVE ID: CVE-2019-14396 State: PUBLISHED Published: 2019-07-30T14:04:49 Last Updated: 2024-08-05T00:19:40.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: API Analytics adminbin in cPanel before 80.0.5 allows spoofed insertions of log data (SEC-495). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/80+Change+Log
CVE ID: CVE-2019-14397 State: PUBLISHED Published: 2019-07-30T14:05:33 Last Updated: 2024-08-05T00:19:40.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 80.0.5 allows demo accounts to modify arbitrary files via the extractfile API1 call (SEC-496). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/80+Change+Log
CVE ID: CVE-2019-14398 State: PUBLISHED Published: 2019-07-30T14:06:14 Last Updated: 2024-08-05T00:19:40.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 80.0.5 allows demo accounts to execute arbitrary code via ajax_maketext_syntax_util.pl (SEC-498). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/80+Change+Log
CVE ID: CVE-2019-14399 State: PUBLISHED Published: 2019-07-30T14:07:06 Last Updated: 2024-08-05T00:19:40.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account (SEC-477). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/78+Change+Log
CVE ID: CVE-2019-14400 State: PUBLISHED Published: 2019-07-30T14:08:06 Last Updated: 2024-08-05T00:19:40.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 78.0.18 allows local users to escalate to root access because of userdata cache misparsing (SEC-479). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/78+Change+Log
CVE ID: CVE-2019-14401 State: PUBLISHED Published: 2019-07-30T14:08:50 Last Updated: 2024-08-05T00:19:40.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 78.0.18 allows code execution via an addforward API1 call (SEC-480). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/78+Change+Log
CVE ID: CVE-2019-14402 State: PUBLISHED Published: 2019-07-30T14:10:06 Last Updated: 2024-08-05T00:19:40.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 78.0.18 unsafely determines terminal capabilities by using infocmp (SEC-481). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/78+Change+Log
CVE ID: CVE-2019-14403 State: PUBLISHED Published: 2019-07-30T14:10:49 Last Updated: 2024-08-05T00:19:40.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 78.0.18 offers an open mail relay because of incorrect domain-redirect routing (SEC-483). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/78+Change+Log
CVE ID: CVE-2019-14404 State: PUBLISHED Published: 2019-07-30T14:12:04 Last Updated: 2024-08-05T00:19:40.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtual_user_spam router (SEC-484). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/78+Change+Log
CVE ID: CVE-2019-14405 State: PUBLISHED Published: 2019-07-30T14:12:53 Last Updated: 2024-08-05T00:19:40.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 78.0.18 allows demo accounts to execute code via securitypolicy.cg (SEC-487). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/78+Change+Log
CVE ID: CVE-2019-14406 State: PUBLISHED Published: 2019-07-30T14:13:45 Last Updated: 2024-08-05T00:19:41.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 78.0.18 has stored XSS in the BoxTrapper Queue Listing (SEC-493). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/78+Change+Log
CVE ID: CVE-2019-14407 State: PUBLISHED Published: 2019-07-30T14:14:33 Last Updated: 2024-08-05T00:19:40.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 78.0.2 reveals internal data to OpenID providers (SEC-415). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/78+Change+Log
CVE ID: CVE-2019-14408 State: PUBLISHED Published: 2019-07-30T14:15:13 Last Updated: 2024-08-05T00:19:40.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 78.0.2 allows a demo account to link with an OpenID provider (SEC-460). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/78+Change+Log
CVE ID: CVE-2019-14409 State: PUBLISHED Published: 2019-07-30T14:16:34 Last Updated: 2024-08-05T00:19:41.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin (SEC-466). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/78+Change+Log
CVE ID: CVE-2019-14410 State: PUBLISHED Published: 2019-07-30T14:17:18 Last Updated: 2024-08-05T00:19:40.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maketext in cPanel before 78.0.2 allows format-string injection in the Email store_filter UAPI (SEC-472). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/78+Change+Log
CVE ID: CVE-2019-14411 State: PUBLISHED Published: 2019-07-30T14:18:10 Last Updated: 2024-08-05T00:19:40.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 78.0.2 does not properly restrict demo accounts from writing to files via the DCV UAPI (SEC-473). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/78+Change+Log
CVE ID: CVE-2019-14412 State: PUBLISHED Published: 2019-07-30T14:18:55 Last Updated: 2024-08-05T00:19:41.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maketext in cPanel before 78.0.2 allows format-string injection in the DCV check_domains_via_dns UAPI (SEC-474). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/78+Change+Log
CVE ID: CVE-2019-14413 State: PUBLISHED Published: 2019-07-30T14:19:38 Last Updated: 2024-08-05T00:19:40.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 78.0.2 allows certain file-write operations as shared users during connection resets (SEC-476). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/78+Change+Log
CVE ID: CVE-2019-14414 State: PUBLISHED Published: 2019-07-30T14:20:15 Last Updated: 2024-08-05T00:19:40.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: In cPanel before 78.0.2, a Userdata cache temporary file can conflict with domains (SEC-478). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/78+Change+Log
CVE ID: CVE-2019-14415 State: PUBLISHED Published: 2019-07-29T19:04:45 Last Updated: 2024-08-05T00:19:40.869Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:L/AV:N/A:L/C:L/I:L/PR:H/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. A persistent cross-site scripting (XSS) vulnerability allows a malicious VRP user to inject malicious script into another user's browser, related to resiliency plans functionality. A victim must open a resiliency plan that an attacker has access to. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS19-002.h
Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS19-002.html#Issue4 - http://seclists.org/fulldisclosure/2019/Jul/39 - http://packetstormsecurity.com/files/153842/Veritas-Resiliency-Platform-VRP-Traversal-Command-Execution.html
CVE ID: CVE-2019-14416 State: PUBLISHED Published: 2019-07-29T19:05:26 Last Updated: 2024-08-05T00:19:41.371Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. An arbitrary command execution vulnerability allows a malicious VRP user to execute commands with root privilege within the VRP virtual machine, related to resiliency plans and custom script functionality. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS19-002.html#Issue3 - http://seclists.org/fulldisclosur
nces: - https://www.veritas.com/content/support/en_US/security/VTS19-002.html#Issue3 - http://seclists.org/fulldisclosure/2019/Jul/39 - http://packetstormsecurity.com/files/153842/Veritas-Resiliency-Platform-VRP-Traversal-Command-Execution.html
CVE ID: CVE-2019-14417 State: PUBLISHED Published: 2019-07-29T19:05:47 Last Updated: 2024-08-05T00:19:40.988Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. An arbitrary command execution vulnerability allows a malicious VRP user to execute commands with root privilege within the VRP virtual machine, related to DNS functionality. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS19-002.html#Issue2 - http://seclists.org/fulldisclosure/2019/Jul/39 - http://packetst
/content/support/en_US/security/VTS19-002.html#Issue2 - http://seclists.org/fulldisclosure/2019/Jul/39 - http://packetstormsecurity.com/files/153842/Veritas-Resiliency-Platform-VRP-Traversal-Command-Execution.html
CVE ID: CVE-2019-14418 State: PUBLISHED Published: 2019-07-29T19:06:17 Last Updated: 2024-08-05T00:19:40.501Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. When uploading an application bundle, a directory traversal vulnerability allows a VRP user with sufficient privileges to overwrite any file in the VRP virtual machine. A malicious VRP user could use this to replace existing files to take control of the VRP virtual machine. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support
irtual machine. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS19-002.html#Issue1 - http://seclists.org/fulldisclosure/2019/Jul/39 - http://packetstormsecurity.com/files/153842/Veritas-Resiliency-Platform-VRP-Traversal-Command-Execution.html
CVE ID: CVE-2019-14422 State: PUBLISHED Published: 2019-08-15T16:02:12 Last Updated: 2024-08-05T00:19:41.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in in TortoiseSVN 1.12.1. The Tsvncmd: URI handler allows a customised diff operation on Excel workbooks, which could be used to open remote workbooks without protection from macro security settings to execute arbitrary code. A tsvncmd:command:diff?path:[file1]?path2:[file2] URI will execute a customised diff on [file1] and [file2] based on the file extension. For xls files, it will execute the script diff-xls.js using wscript, which will open the two files for analysis without any macro security warni
xecute the script diff-xls.js using wscript, which will open the two files for analysis without any macro security warning. An attacker can exploit this by putting a macro virus in a network drive, and force the victim to open the workbooks and execute the macro inside. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2188 - http://seclists.org/fulldisclosure/2019/Aug/7
CVE ID: CVE-2019-14423 State: PUBLISHED Published: 2019-10-17T13:28:32 Last Updated: 2024-08-05T00:19:41.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Remote Code Execution (RCE) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to execute system commands as root remotely via a simple HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://www.eq-3.com/products/homematic.html - https://noskill1337.github.io/homematic-with-cux-daemon-remote-code-execution
CVE ID: CVE-2019-14424 State: PUBLISHED Published: 2019-10-17T13:21:44 Last Updated: 2024-08-05T00:19:41.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Local File Inclusion (LFI) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to read sensitive files via a simple HTTP Request. Additional Analyst Notes: - CVE Program Container: References: - https://www.eq-3.com/products/homematic.html - https://noskill1337.github.io/homematic-with-cux-daemon-local-file-inclusion
CVE ID: CVE-2019-14427 State: PUBLISHED Published: 2019-08-14T21:04:20 Last Updated: 2024-08-05T00:19:41.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in WEB STUDIO Ultimate Loan Manager 2.0 by adding a branch under the Branches button that sets the notes parameter with crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47198
CVE ID: CVE-2019-14430 State: PUBLISHED Published: 2019-08-20T13:27:19 Last Updated: 2024-08-05T00:19:41.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugin/Audit/Objects/AuditTable.php in YouPHPTube through 7.2 allows SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/YouPHPTube/YouPHPTube/commit/891843d547f7db5639925a67b7f2fd66721f703a - https://www.exploit-db.com/exploits/47294