Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-19747 State: PUBLISHED Published: 2019-12-20T16:41:24 Last Updated: 2024-08-05T02:25:12.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: NeuVector 3.1 when configured to allow authentication via Active Directory, does not enforce non-empty passwords which allows an attacker with access to the Neuvector portal to authenticate as any valid LDAP user by providing a valid username and an empty password (provided that the active directory server has not been configured to reject empty passwords). Additional Analyst Notes: - CVE Program Container: References: - https://neuvector.com/container-security/blog/ - https://paulrobertson.co.za/cve-2019-19747/
CVE ID: CVE-2019-19748 State: PUBLISHED Published: 2019-12-12T02:36:13 Last Updated: 2024-08-05T02:25:12.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Work Time Calendar app before 4.7.1 for Jira allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://marketplace.atlassian.com/apps/1213545/work-time-calendar-for-jira/version-history
CVE ID: CVE-2019-19750 State: PUBLISHED Published: 2019-12-12T00:00:00 Last Updated: 2024-08-05T02:25:12.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: minerstat msOS before 2019-10-23 does not have a unique SSH key for each instance of the product. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/minerstat/minerstat-os/commit/487ebd652dc9dc81120809effb2ddb3f66fc5f14 - https://rsaxvc.net/blog/2020/4/10/Widespread_re-use_of_SSH_Host_Keys_in_Ethereum_Mining_Rig_Operating_Systems.html
CVE ID: CVE-2019-19751 State: PUBLISHED Published: 2024-04-30T00:00:00.000Z Last Updated: 2025-03-28T15:49:13.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: easyMINE before 2019-12-05 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://blog.easymine.io - https://rsaxvc.net/blog/2020/4/10/Widespread_re-use_of_SSH_Host_Keys_in_Ethereum_Mining_Rig_Operating_Systems.html
CVE ID: CVE-2019-19752 State: PUBLISHED Published: 2024-04-30T00:00:00.000Z Last Updated: 2025-03-25T18:11:43.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: nvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-12-01, the vendor indicated plans to fix this in the next image build. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/papampi/nvOC_by_fullzero_Community_Release/commits/release - https://rsaxvc.net/blog/2020/4/10/Widespread_re-use_of_SSH_Host_Keys_in_Ethere
lzero_Community_Release/commits/release - https://rsaxvc.net/blog/2020/4/10/Widespread_re-use_of_SSH_Host_Keys_in_Ethereum_Mining_Rig_Operating_Systems.html
CVE ID: CVE-2019-19753 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-05T02:25:12.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: SimpleMiningOS through v1259 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: the vendor indicated that they have no plans to fix this, and discourage deployment using public IPv4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://simplemining.net/page/changelog - https://rsaxvc.net/blog/2020/4/10/Widespread_re-use_of_SSH_Host_Keys_in_Ethereum_Mining_
mplemining.net/page/changelog - https://rsaxvc.net/blog/2020/4/10/Widespread_re-use_of_SSH_Host_Keys_in_Ethereum_Mining_Rig_Operating_Systems.html
CVE ID: CVE-2019-19754 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-11-06T23:08:08.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: HiveOS through 0.6-102@191212 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-09-26, the vendor indicated that they would consider fixing this. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://hiveos.farm/changelog/ - https://rsaxvc.net/blog/2020/4/10/Widespread_re-use_of_SSH_Host_Keys_in_Ethereum_Mining_Rig_Operating_Systems.html
CVE ID: CVE-2019-19755 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-10-25T19:28:52.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: ethOS through 1.3.3 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-12-01, the vendor indicated that they plan to fix this. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ethosdistro.com/changelog/ - https://rsaxvc.net/blog/2020/4/10/Widespread_re-use_of_SSH_Host_Keys_in_Ethereum_Mining_Rig_Operating_Systems.html
CVE ID: CVE-2019-19756 State: PUBLISHED Published: 2020-03-13T15:40:14.275635Z Last Updated: 2024-09-16T16:32:57.281Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: Lenovo Products: XClarity Administrator (LXCA) Problem Types: CWE-532 Description: An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered Windows OS credentials, used to perform driver updates of managed systems, being written to a log file in clear text. This only affects LXCA version 2.6.0 when performing a Windows driver update. Affected logs are only accessible to authorized users in the First Failure Data Capture (FFDC) service log and log files on LXCA. Additio
only accessible to authorized users in the First Failure Data Capture (FFDC) service log and log files on LXCA. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-29942
CVE ID: CVE-2019-19757 State: PUBLISHED Published: 2020-02-14T17:10:23.967484Z Last Updated: 2024-09-16T19:40:04.719Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Lenovo Products: XClarity Administrator (LXCA) Problem Types: CWE-79 Description: An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered a Document Object Model (DOM) based cross-site scripting vulnerability in versions prior to 2.6.6 that could allow JavaScript code to be executed in the user's web browser if a specially crafted link is visited. The JavaScript code is executed on the user's system, not executed on LXCA itself. Additional Analyst Notes: - CVE Progr
The JavaScript code is executed on the user's system, not executed on LXCA itself. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-29477
CVE ID: CVE-2019-19758 State: PUBLISHED Published: 2020-02-14T17:10:24.379147Z Last Updated: 2024-09-16T16:23:29.531Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Lenovo Products: EZ Media & Backup Center ix2, EZ Media & Backup Center ix2-dl Problem Types: CWE-601 Description: A vulnerability in the web interface of Lenovo EZ Media & Backup Center, ix2 & ix2-dl version 4.1.406.34763 and prior could allow an unauthenticated, remote attacker to redirect a user to an untrusted web page. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-30242
CVE ID: CVE-2019-19759 State: REJECTED Published: N/A Last Updated: 2024-07-29T20:13:09.844Z Description: No description available.
CVE ID: CVE-2019-19760 State: REJECTED Published: N/A Last Updated: 2024-07-29T20:13:33.659Z Description: No description available.
CVE ID: CVE-2019-19761 State: REJECTED Published: N/A Last Updated: 2024-07-29T20:14:04.563Z Description: No description available.
CVE ID: CVE-2019-19762 State: REJECTED Published: 2020-02-14T17:10:24 Last Updated: 2020-02-14T17:10:24 Description: No description available.
CVE ID: CVE-2019-19763 State: REJECTED Published: 2020-02-14T17:10:25 Last Updated: 2020-02-14T17:10:25 Description: No description available.
CVE ID: CVE-2019-19764 State: REJECTED Published: 2020-02-14T17:10:25 Last Updated: 2020-02-14T17:10:25 Description: No description available.
CVE ID: CVE-2019-19765 State: REJECTED Published: 2020-02-14T17:10:25 Last Updated: 2020-02-14T17:10:25 Description: No description available.
CVE ID: CVE-2019-19766 State: PUBLISHED Published: 2019-12-12T18:07:17 Last Updated: 2024-08-05T02:25:12.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bitwarden server through 1.32.0 has a potentially unwanted KDF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitwarden/server/issues/589 - https://github.com/bitwarden/jslib/issues/52
CVE ID: CVE-2019-19767 State: PUBLISHED Published: 2019-12-12T19:39:40 Last Updated: 2024-08-05T02:25:12.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.2 - https://bugzilla.kernel.org/show_bug.cgi?id=205707 - https://bugzilla.kernel.org/show_bug.cgi?id=205609 - https://github.com/torvalds/linux/commit/4ea99936a1630f51fc3a2d61
- https://bugzilla.kernel.org/show_bug.cgi?id=205609 - https://github.com/torvalds/linux/commit/4ea99936a1630f51fc3a2d61a58ec4a1c4b7d55a - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4ea99936a1630f51fc3a2d61a58ec4a1c4b7d55a - https://security.netapp.com/advisory/ntap-20200103-0001/ - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://usn.ubuntu.com/4258-1/ - https://usn.ubuntu.com/4287-1/ - https://usn.ubuntu.com/4287-2/ - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - https://usn.ubuntu.com/4284-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
CVE ID: CVE-2019-19768 State: PUBLISHED Published: 2019-12-12T19:38:59 Last Updated: 2024-08-05T02:25:12.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.kernel.org/show_bug.cgi?id=205711 - https://security.netapp.com/advisory/ntap-20200103-0001/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00039.html - https://usn.ubuntu.com/4344-1/ - https://usn.ubuntu.com/4345-1/
e.org/opensuse-security-announce/2020-03/msg00039.html - https://usn.ubuntu.com/4344-1/ - https://usn.ubuntu.com/4345-1/ - https://usn.ubuntu.com/4342-1/ - https://usn.ubuntu.com/4346-1/ - https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html - https://www.debian.org/security/2020/dsa-4698
CVE ID: CVE-2019-19769 State: PUBLISHED Published: 2019-12-12T19:39:20 Last Updated: 2024-08-05T02:25:12.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel 5.3.10, there is a use-after-free (read) in the perf_trace_lock_acquire function (related to include/trace/events/lock.h). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.kernel.org/show_bug.cgi?id=205705 - https://security.netapp.com/advisory/ntap-20200103-0001/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VJSIZWKW7RDHKU3CHC5BFAQI43NVHLUQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap
ssage/VJSIZWKW7RDHKU3CHC5BFAQI43NVHLUQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TF4PQZBEPNXDSK5DOBMW54OCLP25FTCD/ - https://usn.ubuntu.com/4368-1/ - https://usn.ubuntu.com/4369-1/
CVE ID: CVE-2019-19770 State: PUBLISHED Published: 2019-12-12T19:39:10 Last Updated: 2024-08-05T02:25:12.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux kernel developers dispute this issue as not being an issue with debugfs, instead this is an issue with misuse of debugfs within blktrace Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.kernel.org/show_bug.cgi?id=2057
ktrace Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.kernel.org/show_bug.cgi?id=205713 - https://security.netapp.com/advisory/ntap-20200103-0001/ - https://lore.kernel.org/linux-block/20200402000002.7442-1-mcgrof%40kernel.org/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00035.html - https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html
CVE ID: CVE-2019-19771 State: PUBLISHED Published: 2019-12-12T19:49:40 Last Updated: 2024-08-05T02:25:12.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lodahs package 0.0.1 for Node.js is a Trojan horse, and may have been installed by persons who mistyped the lodash package name. In particular, the Trojan horse finds and exfiltrates cryptocurrency wallets. Additional Analyst Notes: - CVE Program Container: References: - https://www.npmjs.com/package/lodahs - https://www.npmjs.com/advisories/1417
CVE ID: CVE-2019-19772 State: PUBLISHED Published: 2020-03-06T21:01:54 Last Updated: 2024-08-05T02:25:12.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US. Additional Analyst Notes: - CVE Program Container: References: - http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US
CVE ID: CVE-2019-19773 State: PUBLISHED Published: 2020-03-06T21:01:24 Last Updated: 2024-08-05T02:25:12.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US. Additional Analyst Notes: - CVE Program Container: References: - http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US
CVE ID: CVE-2019-19774 State: PUBLISHED Published: 2019-12-13T18:00:22 Last Updated: 2024-08-05T02:25:12.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zoho ManageEngine EventLog Analyzer 10.0 SP1 before Build 12110. By running "select hostdetails from hostdetails" at the /event/runquery.do endpoint, it is possible to bypass the security restrictions that prevent even administrative users from viewing credential data stored in the database, and recover the MD5 hashes of the accounts used to authenticate the ManageEngine platform to the managed machines on the network (most often administrative accounts). Specifically, this bypasses these restrictio
o the managed machines on the network (most often administrative accounts). Specifically, this bypasses these restrictions: a query cannot mention password, and a query result cannot have a password column. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/eventlog/features-new.html#release - https://gist.github.com/scottgoodwin90/19ccecdc9f5733c0a9381765cfc7fe39 - http://packetstormsecurity.com/files/156485/ManageEngine-EventLog-Analyzer-10.0-Information-Disclosure.html
CVE ID: CVE-2019-19775 State: PUBLISHED Published: 2019-12-18T03:27:06 Last Updated: 2024-08-05T02:25:12.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: The image thumbnailing handler in Zulip Server versions 1.9.0 to before 2.0.8 allowed an open redirect that was visible to logged-in users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zulip/zulip/commit/b7c87a4d82397a5e6ac169b6098bed0b1ae7a583 - https://blog.zulip.org/2019/12/13/zulip-server-2-0-8-security-release/
CVE ID: CVE-2019-19777 State: PUBLISHED Published: 2019-12-13T01:05:52 Last Updated: 2024-08-05T02:25:12.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/109
CVE ID: CVE-2019-19778 State: PUBLISHED Published: 2019-12-13T01:06:17 Last Updated: 2024-08-05T02:25:12.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libsixel 1.8.2. There is a heap-based buffer over-read in the function load_sixel at loader.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/110
CVE ID: CVE-2019-19781 State: PUBLISHED Published: 2019-12-27T13:06:46.000Z Last Updated: 2025-10-21T23:35:54.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX267027 - https://www.kb.cert.org/vuls/id/619785 - https://twitter.com/bad_packets/status/1215431625766424576 - https://badpackets.net/over-25000-citrix-netscaler-endpoints-vulnerable-to-cve-2019-19781/ - https://forms.gle/eDf3DXZAv96oosfj6 - http:/
s.net/over-25000-citrix-netscaler-endpoints-vulnerable-to-cve-2019-19781/ - https://forms.gle/eDf3DXZAv96oosfj6 - http://packetstormsecurity.com/files/155904/Citrix-Application-Delivery-Controller-Gateway-Remote-Code-Execution.html - http://packetstormsecurity.com/files/155930/Citrix-Application-Delivery-Controller-Gateway-10.5-Remote-Code-Execution.html - http://packetstormsecurity.com/files/155905/Citrix-Application-Delivery-Controller-Gateway-Remote-Code-Execution-Traversal.html - http://packetstormsecurity.com/files/155947/Citrix-ADC-NetScaler-Directory-Traversal-Remote-Code-Execution.html - http://packetstormsecurity.com/files/155972/Citrix-ADC-Gateway-Path-Traversal.html
CVE ID: CVE-2019-19782 State: PUBLISHED Published: 2019-12-13T05:05:15 Last Updated: 2024-08-05T02:25:12.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP client in AceaXe Plus 1.0 allows a buffer overflow via a long EHLO response from an FTP server. Additional Analyst Notes: - CVE Program Container: References: - https://sketler.github.io/cve_research/AceaXeftp-RCE-Via-Buffer-Overflow/ - https://github.com/sketler/sketler.github.io/blob/master/_posts/2019-11-11-AceaXeftp-RCE-Via-Buffer-Overflow.markdown
CVE ID: CVE-2019-19783 State: PUBLISHED Published: 2019-12-16T13:06:54 Last Updated: 2024-08-05T02:25:12.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Cyrus IMAP before 2.5.15, 3.0.x before 3.0.13, and 3.1.x through 3.1.8. If sieve script uploading is allowed (3.x) or certain non-default sieve options are enabled (2.x), a user with a mail account on the service can use a sieve script containing a fileinto directive to create any mailbox with administrator privileges, because of folder mishandling in autosieve_createfolder() in imap/lmtp_sieve.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.cyrusimap.org/imap/downloa
ap/lmtp_sieve.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.cyrusimap.org/imap/download/release-notes/2.5/x/2.5.15.html - https://www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.13.html - https://seclists.org/bugtraq/2019/Dec/38 - https://www.debian.org/security/2019/dsa-4590 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DIV4HQ6LG5GPRO4B5Z2NHCZUPBUVVVF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IGOO5UGEBBDPN7B2YXLK7I7L3Y35EBA/ - https://security.gentoo.org/glsa/202006-23 - https://usn.ubuntu.com/4566-1/
CVE ID: CVE-2019-19785 State: PUBLISHED Published: 2019-12-13T15:04:23 Last Updated: 2024-08-05T02:25:12.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: ATasm 1.06 has a stack-based buffer overflow in the to_comma() function in asm.c via a crafted .m65 file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/atasm/bugs/8/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZJYUV3PKSIGBZGJ6PXAGTT2LW6HLPMS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O6XQMOLMWHUDBN3PQJYGVULLNUBMGGJH/ - https://lists.fedoraproject.org/archives/list/packag
lists.fedoraproject.org/message/O6XQMOLMWHUDBN3PQJYGVULLNUBMGGJH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KUABDG4CEAY2FVPM3CFFCZMOKSTEKGXX/
CVE ID: CVE-2019-19786 State: PUBLISHED Published: 2019-12-13T15:03:41 Last Updated: 2024-08-05T02:25:12.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: ATasm 1.06 has a stack-based buffer overflow in the parse_expr() function in setparse.c via a crafted .m65 file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/atasm/bugs/9/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZJYUV3PKSIGBZGJ6PXAGTT2LW6HLPMS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O6XQMOLMWHUDBN3PQJYGVULLNUBMGGJH/ - https://lists.fedoraproject.org/archives/list
unce%40lists.fedoraproject.org/message/O6XQMOLMWHUDBN3PQJYGVULLNUBMGGJH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KUABDG4CEAY2FVPM3CFFCZMOKSTEKGXX/
CVE ID: CVE-2019-19787 State: PUBLISHED Published: 2019-12-13T15:03:14 Last Updated: 2024-08-05T02:25:12.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: ATasm 1.06 has a stack-based buffer overflow in the get_signed_expression() function in setparse.c via a crafted .m65 file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/atasm/bugs/10/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZJYUV3PKSIGBZGJ6PXAGTT2LW6HLPMS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O6XQMOLMWHUDBN3PQJYGVULLNUBMGGJH/ - https://lists.fedoraproject.org/a
package-announce%40lists.fedoraproject.org/message/O6XQMOLMWHUDBN3PQJYGVULLNUBMGGJH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KUABDG4CEAY2FVPM3CFFCZMOKSTEKGXX/