Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-9897 State: PUBLISHED Published: 2019-03-21T02:31:46 Last Updated: 2024-08-04T22:01:55.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71. Additional Analyst Notes: - CVE Program Container: References: - https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LDO3F267P347E6U2IILFCYW7JPTLCCES/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36LWQ3NPFIV7DC7TC4KFPRYRH2OR7SZ2/ - http://lists.o
CVE ID: CVE-2019-9898 State: PUBLISHED Published: 2019-03-21T02:31:58 Last Updated: 2024-08-04T22:01:55.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71. Additional Analyst Notes: - CVE Program Container: References: - https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html - http://www.securityfocus.com/bid/107523 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LDO3F267P347E6U2IILFCYW7JPTLCCES/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36LWQ3NPFIV7DC7TC4KFPRYRH2OR7SZ2/ - h
fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36LWQ3NPFIV7DC7TC4KFPRYRH2OR7SZ2/ - https://security.netapp.com/advisory/ntap-20190329-0002/ - https://security.netapp.com/advisory/ntap-20190401-0002/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html - https://seclists.org/bugtraq/2019/Apr/6 - https://www.debian.org/security/2019/dsa-4423 - https://lists.debian.org/debian-lts-announce/2019/04/msg00023.html
CVE ID: CVE-2019-9900 State: PUBLISHED Published: 2019-04-25T14:55:57 Last Updated: 2024-08-04T22:01:55.177Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AC:H/AV:N/A:L/C:L/I:L/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: When parsing HTTP/1.x header values, Envoy 1.9.0 and before does not reject embedded zero characters (NUL, ASCII 0x0). This allows remote attackers crafting header values containing embedded NUL characters to potentially bypass header matching rules, gaining access to unauthorized resources. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2019:0741 - https://www.envoyproxy.io/docs/envoy/v1.9.1/intro/v
ner: References: - https://access.redhat.com/errata/RHSA-2019:0741 - https://www.envoyproxy.io/docs/envoy/v1.9.1/intro/version_history - https://github.com/envoyproxy/envoy/issues/6434 - https://groups.google.com/forum/#%21topic/envoy-announce/VoHfnDqZiAM - https://github.com/envoyproxy/envoy/security/advisories/GHSA-x74r-f4mw-c32h
CVE ID: CVE-2019-9901 State: PUBLISHED Published: 2019-04-25T15:31:19 Last Updated: 2024-08-04T22:01:55.179Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AC:H/AV:N/A:L/C:L/I:L/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Envoy 1.9.0 and before does not normalize HTTP URL paths. A remote attacker may craft a relative path, e.g., something/../admin, to bypass access control, e.g., a block on /admin. A backend server could then interpret the non-normalized path and provide an attacker access beyond the scope provided for by the access control policy. Additional Analyst Notes: - CVE Program Container: References: - https://www.envoyproxy.io/docs/envoy/v1.9.1/intro/version_his
onal Analyst Notes: - CVE Program Container: References: - https://www.envoyproxy.io/docs/envoy/v1.9.1/intro/version_history - https://github.com/envoyproxy/envoy/issues/6435 - https://groups.google.com/forum/#%21topic/envoy-announce/VoHfnDqZiAM - https://github.com/envoyproxy/envoy/security/advisories/GHSA-xcx5-93pw-jw2w
CVE ID: CVE-2019-9903 State: PUBLISHED Published: 2019-03-21T17:42:50 Last Updated: 2024-08-04T22:01:54.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find() located at Dict.cc, which can (for example) be triggered by passing a crafted pdf file to the pdfunite binary. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/poppler/poppler/issues/741 - https://research.loginsoft.com/bugs/stack-based-buffer-overflows-in-dictfind-poppler-0-74-0/ - http://www.securityfocus.com/bid/107560 - https://lists.fedoraprojec
ased-buffer-overflows-in-dictfind-poppler-0-74-0/ - http://www.securityfocus.com/bid/107560 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JQ6RABASMSIMMWMDZTP6ZWUWZPTBSVB5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWWVIYFXM74KJFIDHP4W67HR4FRF2LDE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XGYLZZ4DZUDBQEGCNDWSZPSFNNZJF4S6/ - https://usn.ubuntu.com/4042-1/ - https://access.redhat.com/errata/RHSA-2019:2713 - https://lists.debian.org/debian-lts-announce/2022/09/msg00030.html
CVE ID: CVE-2019-9904 State: PUBLISHED Published: 2019-03-21T17:43:15 Last Updated: 2024-08-04T22:01:55.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lib\cgraph\graph.c in libcgraph.a, related to agfstsubg in lib\cgraph\subg.c. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/graphviz/graphviz/issues/1512 - https://research.loginsoft.com/bugs/stack-buffer-overflow-in-function-agclose-graphviz/ - https://security.gentoo.org/glsa/202107-04
CVE ID: CVE-2019-9908 State: PUBLISHED Published: 2019-03-21T23:01:00 Last Updated: 2024-08-04T22:01:55.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: The font-organizer plugin 2.1.1 for WordPress has wp-admin/options-general.php manage_font_id XSS. Additional Analyst Notes: - CVE Program Container: References: - https://lists.openwall.net/full-disclosure/2019/02/05/8 - https://security-consulting.icu/blog/2019/02/wordpress-font-organizer-xss/ - https://wpvulndb.com/vulnerabilities/9239 - http://seclists.org/fulldisclosure/2019/Mar/37
CVE ID: CVE-2019-9909 State: PUBLISHED Published: 2019-03-21T23:01:11 Last Updated: 2024-08-04T22:01:55.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Donation Plugin and Fundraising Platform" plugin before 2.3.1 for WordPress has wp-admin/edit.php csv XSS. Additional Analyst Notes: - CVE Program Container: References: - https://lists.openwall.net/full-disclosure/2019/02/05/9 - https://security-consulting.icu/blog/2019/02/wordpress-give-xss/ - https://wpvulndb.com/vulnerabilities/9240 - http://seclists.org/fulldisclosure/2019/Mar/38
CVE ID: CVE-2019-9910 State: PUBLISHED Published: 2019-03-21T23:01:22 Last Updated: 2024-08-04T22:01:55.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kingcomposer plugin 2.7.6 for WordPress has wp-admin/admin.php?page=kc-mapper id XSS. Additional Analyst Notes: - CVE Program Container: References: - https://lists.openwall.net/full-disclosure/2019/02/05/11 - https://security-consulting.icu/blog/2019/02/wordpress-kingcomposer-xss/ - http://seclists.org/fulldisclosure/2019/Mar/39
CVE ID: CVE-2019-9911 State: PUBLISHED Published: 2019-03-21T23:01:34 Last Updated: 2024-08-04T22:01:55.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: The social-networks-auto-poster-facebook-twitter-g plugin before 4.2.8 for WordPress has wp-admin/admin.php?page=nxssnap-reposter&action=edit item XSS. Additional Analyst Notes: - CVE Program Container: References: - https://lists.openwall.net/full-disclosure/2019/02/05/12 - https://security-consulting.icu/blog/2019/02/wordpress-social-networks-auto-poster-xss/ - http://seclists.org/fulldisclosure/2019/Mar/40
CVE ID: CVE-2019-9912 State: PUBLISHED Published: 2019-03-21T23:01:44 Last Updated: 2024-08-04T22:01:55.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/admin.php PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - https://lists.openwall.net/full-disclosure/2019/02/05/13 - https://security-consulting.icu/blog/2019/02/wordpress-wpgooglemaps-xss/ - http://seclists.org/fulldisclosure/2019/Mar/41
CVE ID: CVE-2019-9913 State: PUBLISHED Published: 2019-03-21T23:01:55 Last Updated: 2024-08-04T22:01:55.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-live-chat-support plugin before 8.0.18 for WordPress has wp-admin/admin.php?page=wplivechat-menu-gdpr-page term XSS. Additional Analyst Notes: - CVE Program Container: References: - https://lists.openwall.net/full-disclosure/2019/02/05/14 - https://security-consulting.icu/blog/2019/02/wordpress-wp-livechat-xss/ - http://seclists.org/fulldisclosure/2019/Mar/42
CVE ID: CVE-2019-9914 State: PUBLISHED Published: 2019-03-21T23:03:15 Last Updated: 2024-08-04T22:01:55.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: The yop-poll plugin before 6.0.3 for WordPress has wp-admin/admin.php?page=yop-polls&action=view-votes poll_id XSS. Additional Analyst Notes: - CVE Program Container: References: - https://lists.openwall.net/full-disclosure/2019/02/05/15 - https://security-consulting.icu/blog/2019/02/wordpress-yop-poll-xss/ - http://seclists.org/fulldisclosure/2019/Mar/43
CVE ID: CVE-2019-9915 State: PUBLISHED Published: 2019-03-21T23:03:25 Last Updated: 2024-08-04T22:01:55.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: GetSimpleCMS 3.3.13 has an Open Redirect via the admin/index.php redirect parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.netsparker.com/web-applications-advisories/ns-18-056-open-redirection-vulnerability-in-getsimplecms/ - https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1300
CVE ID: CVE-2019-9917 State: PUBLISHED Published: 2019-03-27T05:41:11 Last Updated: 2024-08-04T22:01:55.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service (crash) via invalid encoding. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/znc/znc/commit/64613bc8b6b4adf1e32231f9844d99cd512b8973 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTRBTPL7WWKQ7DZ2ALDTCGYUWSE6SL3/ - https://usn.ubuntu.com/3950-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WRHCMHI44AW5CJ22
0-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WRHCMHI44AW5CJ22WV676BKFUWWCLA7T/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZRVSINQHM623GJYYNDSBYSXT2MHKFCYQ/ - https://www.debian.org/security/2019/dsa-4463 - https://seclists.org/bugtraq/2019/Jun/23 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00037.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00018.html
CVE ID: CVE-2019-9918 State: PUBLISHED Published: 2019-03-29T14:05:45 Last Updated: 2024-08-04T22:01:55.186Z Severity: HIGH (CVSS 8.5 CVSS:3.0/AC:L/AV:N/A:N/C:H/I:L/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Input does not get validated and queries are not written in a way to prevent SQL injection. Therefore arbitrary SQL-Statements can be executed in the database. Additional Analyst Notes: - CVE Program Container: References: - https://extensions.joomla.org/extension/je-messenger/ - https://github.com/azd-cert/CVE/blob/master/CVEs/CVE-2019-9918.md
CVE ID: CVE-2019-9919 State: PUBLISHED Published: 2019-03-29T14:06:03 Last Updated: 2024-08-04T22:01:55.195Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to craft messages in a way that JavaScript gets executed on the side of the receiving user when the message is opened, aka XSS. Additional Analyst Notes: - CVE Program Container: References: - https://extensions.joomla.org/extension/je-messenger/ - https://github.com/azd-cert/CVE/blob/master/CVEs/CVE-2019-9919.md
CVE ID: CVE-2019-9920 State: PUBLISHED Published: 2019-03-29T14:06:20 Last Updated: 2024-08-04T22:01:55.178Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AC:L/AV:N/A:N/C:N/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to perform an action within the context of the account of another user. Additional Analyst Notes: - CVE Program Container: References: - https://extensions.joomla.org/extension/je-messenger/ - https://github.com/azd-cert/CVE/blob/master/CVEs/CVE-2019-9920.md
CVE ID: CVE-2019-9921 State: PUBLISHED Published: 2019-03-29T14:06:43 Last Updated: 2024-08-04T22:01:55.139Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to read information that should only be accessible by a different user. Additional Analyst Notes: - CVE Program Container: References: - https://extensions.joomla.org/extension/je-messenger/ - https://github.com/azd-cert/CVE/blob/master/CVEs/CVE-2019-9921.md
CVE ID: CVE-2019-9922 State: PUBLISHED Published: 2019-03-29T14:07:13 Last Updated: 2024-08-04T22:01:55.178Z Severity: MEDIUM (CVSS 5.8 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Directory Traversal allows read access to arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://extensions.joomla.org/extension/je-messenger/ - https://github.com/azd-cert/CVE/blob/master/CVEs/CVE-2019-9922.md
CVE ID: CVE-2019-9923 State: PUBLISHED Published: 2019-03-22T07:06:44.000Z Last Updated: 2025-08-06T21:12:33.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.launchpad.net/ubuntu/+source/tar/+bug/1810241 - http://git.savannah.gnu.org/cgit/tar.git/commit/?id=cb07844454d8cc9fb21f53ace75975f91185a120 - http://savannah.gnu.org/bugs/?55369 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00077.html - https://lists.
vannah.gnu.org/bugs/?55369 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00077.html - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2019-9924 State: PUBLISHED Published: 2019-03-22T07:05:28 Last Updated: 2024-08-04T22:01:55.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/bash/+bug/1803441 - http://git.savannah.gnu.org/cgit/bash.git/tree/CHANGES?h=bash-4.4-testing#n65 - https://lists.debian.org/debian-lts-announce/2019/03/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00049.html - https://se
announce/2019/03/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00049.html - https://security.netapp.com/advisory/ntap-20190411-0001/ - https://usn.ubuntu.com/4058-1/ - https://usn.ubuntu.com/4058-2/
CVE ID: CVE-2019-9925 State: PUBLISHED Published: 2019-03-22T07:05:58 Last Updated: 2024-08-04T22:01:55.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: S-CMS PHP v1.0 has XSS in 4.edu.php via the S_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/163/
CVE ID: CVE-2019-9926 State: PUBLISHED Published: 2019-10-29T16:46:31 Last Updated: 2024-08-04T22:01:55.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LabKey Server 19.1.0. It is possible to force a logged-in administrator to execute code through a /reports-viewScriptReport.view CSRF vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://rhinosecuritylabs.com/application-security/labkey-server-vulnerabilities-to-rce/ - https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2019-9926
CVE ID: CVE-2019-9927 State: PUBLISHED Published: 2019-03-22T07:06:20 Last Updated: 2024-08-04T22:01:55.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Caret before 2019-02-22 allows Remote Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/careteditor/issues/issues/862
CVE ID: CVE-2019-9928 State: PUBLISHED Published: 2019-04-24T14:48:24 Last Updated: 2024-08-04T22:01:55.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://gstreamer.freedesktop.org/security/ - https://gstreamer.freedesktop.org/security/sa-2019-0001.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00031.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00030.html - https://usn.ubuntu.com/3958-1/ - https://seclists.o
https://lists.debian.org/debian-lts-announce/2019/04/msg00030.html - https://usn.ubuntu.com/3958-1/ - https://seclists.org/bugtraq/2019/Apr/39 - https://www.debian.org/security/2019/dsa-4437 - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00082.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00078.html - https://security.gentoo.org/glsa/202003-33 - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00049.html
CVE ID: CVE-2019-9929 State: PUBLISHED Published: 2019-06-06T16:54:38 Last Updated: 2024-08-04T22:01:55.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions. Additional Analyst Notes: - CVE Program Container: References: - https://cfengine.com/product/latest-release/ - https://cfengine.com/company/blog-detail/cve-2019-9929-internal-authentication-secrets-leaked-in-logs/
CVE ID: CVE-2019-9930 State: PUBLISHED Published: 2019-08-28T21:35:20 Last Updated: 2024-08-04T22:01:55.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Various Lexmark products have an Integer Overflow. Additional Analyst Notes: - CVE Program Container: References: - http://support.lexmark.com/index?page=content&id=TE920&locale=EN&userlocale=EN_US
CVE ID: CVE-2019-9931 State: PUBLISHED Published: 2019-08-28T21:41:25 Last Updated: 2024-08-04T22:01:55.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device. Additional Analyst Notes: - CVE Program Container: References: - http://support.lexmark.com/index?page=content&id=TE919&locale=EN&userlocale=EN_US
CVE ID: CVE-2019-9932 State: PUBLISHED Published: 2019-08-28T21:36:25 Last Updated: 2024-08-04T22:01:55.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Various Lexmark products have a Buffer Overflow (issue 2 of 3). Additional Analyst Notes: - CVE Program Container: References: - http://support.lexmark.com/index?page=content&id=TE920&locale=EN&userlocale=EN_US
CVE ID: CVE-2019-9933 State: PUBLISHED Published: 2019-08-28T21:37:02 Last Updated: 2024-08-04T22:01:55.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Various Lexmark products have a Buffer Overflow (issue 3 of 3). Additional Analyst Notes: - CVE Program Container: References: - http://support.lexmark.com/index?page=content&id=TE920&locale=EN&userlocale=EN_US
CVE ID: CVE-2019-9934 State: PUBLISHED Published: 2019-08-28T15:52:10 Last Updated: 2024-08-04T22:01:55.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Various Lexmark products have Incorrect Access Control (issue 1 of 2). Additional Analyst Notes: - CVE Program Container: References: - http://support.lexmark.com/index?page=content&id=TE924&locale=en&userlocale=EN_US
CVE ID: CVE-2019-9935 State: PUBLISHED Published: 2019-08-28T15:53:19 Last Updated: 2024-08-04T22:01:55.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Various Lexmark products have Incorrect Access Control (issue 2 of 2). Additional Analyst Notes: - CVE Program Container: References: - http://support.lexmark.com/index?page=content&id=TE924&locale=EN&userlocale=EN_US
CVE ID: CVE-2019-9936 State: PUBLISHED Published: 2019-03-22T07:07:04 Last Updated: 2024-08-04T22:01:55.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an information leak. This is related to ext/fts5/fts5_hash.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg114382.html - https://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg114394.html - https://sqlite.org/src/info/b3fa58dd7403dbd4 - http://www.securityfocus
users%40mailinglists.sqlite.org/msg114394.html - https://sqlite.org/src/info/b3fa58dd7403dbd4 - http://www.securityfocus.com/bid/107562 - https://security.netapp.com/advisory/ntap-20190416-0005/ - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00026.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXD2GYJVTDGEQPUNMMMC5TB7MQXOBBMO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N66U5PY5UJU4XBFZJH7QNKIDNAVIB4OP/ - https://usn.ubuntu.com/4019-1/ - https://security.gentoo.org/glsa/201908-09 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - htt
/security.gentoo.org/glsa/201908-09 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html
CVE ID: CVE-2019-9937 State: PUBLISHED Published: 2019-03-22T07:07:21 Last Updated: 2024-08-04T22:10:08.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg114383.html - https://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg114393.html - https://sqlite.org/src/info/45c73deb440496e8 - http://www