Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-19912 State: PUBLISHED Published: 2020-03-30T21:28:00 Last Updated: 2024-08-05T02:32:10.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting (XSS) vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/156951/codeBeamer-9.5-Cross-Site-Scripting.html
CVE ID: CVE-2019-19913 State: PUBLISHED Published: 2020-03-30T21:26:28 Last Updated: 2024-08-05T02:32:09.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/156951/codeBeamer-9.5-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2020/Apr/9
CVE ID: CVE-2019-19914 State: REJECTED Published: 2020-04-03T00:33:06 Last Updated: 2020-04-03T00:33:06 Description: No description available.
CVE ID: CVE-2019-19915 State: PUBLISHED Published: 2019-12-19T21:07:25 Last Updated: 2024-08-05T02:32:09.598Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: The "301 Redirects - Easy Redirect Manager" plugin before 2.45 for WordPress allows users (with subscriber or greater access) to modify, delete, or inject redirect rules, and exploit XSS, with the /admin-ajax.php?action=eps_redirect_save and /admin-ajax.php?action=eps_redirect_delete actions. This could result in a loss of site availability, malicious redirects, and user infections. This could also be exploited via CSRF. Additional Analyst Notes: - CVE P
lity, malicious redirects, and user infections. This could also be exploited via CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9979 - https://www.wordfence.com/blog/2019/12/critical-vulnerability-patched-in-301-redirects-easy-redirect-manager/
CVE ID: CVE-2019-19916 State: PUBLISHED Published: 2019-12-20T15:07:12 Last Updated: 2024-08-05T02:32:10.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Midori Browser 0.5.11 (on Windows 10), Content Security Policy (CSP) is not applied correctly to all parts of multipart content sent with the multipart/x-mixed-replace MIME type. This could result in script running where CSP should have blocked it, allowing for cross-site scripting (XSS) and other attacks when the product renders the content as HTML. Remediating this would also need to consider the polyglot case, e.g., a file that is a valid GIF image and also valid JavaScript. Additional Analyst Notes: - CVE Program Conta
ot case, e.g., a file that is a valid GIF image and also valid JavaScript. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/V1n1v131r4/MIME-Confusion-Attack-on-Midori-Browser/blob/master/README.md - https://blog.mozilla.org/security/2016/08/26/mitigating-mime-confusion-attacks-in-firefox/ - https://portswigger.net/research/bypassing-csp-using-polyglot-jpegs
CVE ID: CVE-2019-19917 State: PUBLISHED Published: 2019-12-20T19:52:43 Last Updated: 2024-08-05T02:32:09.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lout 3.40 has a buffer overflow in the StringQuotedWord() function in z39.c. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/lout-users/2019-12/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00069.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00068.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5OXECUBSXEO7S3TCLSBCITLQIMOCL6MV/ - https://lists.fedoraproject.org/
/package-announce%40lists.fedoraproject.org/message/5OXECUBSXEO7S3TCLSBCITLQIMOCL6MV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEJVEIQMRXJ26ZT6657W5RYH7YECVGNB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGZKTKGRJTQE43SFU77X5QJHKXTTOJYB/ - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00011.html
CVE ID: CVE-2019-19918 State: PUBLISHED Published: 2019-12-20T19:52:34 Last Updated: 2024-08-05T02:32:09.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lout 3.40 has a heap-based buffer overflow in the srcnext() function in z02.c. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/lout-users/2019-12/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00069.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00068.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5OXECUBSXEO7S3TCLSBCITLQIMOCL6MV/ - https://lists.fedoraproject.or
st/package-announce%40lists.fedoraproject.org/message/5OXECUBSXEO7S3TCLSBCITLQIMOCL6MV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEJVEIQMRXJ26ZT6657W5RYH7YECVGNB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGZKTKGRJTQE43SFU77X5QJHKXTTOJYB/ - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00011.html
CVE ID: CVE-2019-19919 State: PUBLISHED Published: 2019-12-20T22:50:39 Last Updated: 2024-08-05T02:32:09.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's __proto__ and __defineGetter__ properties, which may allow an attacker to execute arbitrary code through crafted payloads. Additional Analyst Notes: - CVE Program Container: References: - https://www.npmjs.com/advisories/1164 - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2019-19920 State: PUBLISHED Published: 2019-12-22T17:07:31 Last Updated: 2024-08-05T02:32:10.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: sa-exim 4.2.1 allows attackers to execute arbitrary code if they can write a .cf file or a rule. This occurs because Greylisting.pm relies on eval (rather than direct parsing and/or use of the taint feature). This issue is similar to CVE-2018-11805. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/946829#24 - https://marc.info/?l=spamassassin-users&m=157668107325768&w=2 - https://marc.info/?l=spamassassin-users&m=157668305026635&w=2 - https://lists.debian.org/debian-lts-announce/2020/01
2 - https://marc.info/?l=spamassassin-users&m=157668305026635&w=2 - https://lists.debian.org/debian-lts-announce/2020/01/msg00006.html - https://usn.ubuntu.com/4520-1/
CVE ID: CVE-2019-19921 State: PUBLISHED Published: 2020-02-12T00:00:00 Last Updated: 2024-08-05T02:32:09.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. (This vulnerability does not affect Docker due to an implementation detail that happens to block the attack.) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/opencontainers/runc/releases - https://security-tracker.debian.org
E Program Container: References: - https://github.com/opencontainers/runc/releases - https://security-tracker.debian.org/tracker/CVE-2019-19921 - https://github.com/opencontainers/runc/issues/2197 - https://github.com/opencontainers/runc/pull/2190 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00018.html - https://access.redhat.com/errata/RHSA-2020:0688 - https://access.redhat.com/errata/RHSA-2020:0695 - https://security.gentoo.org/glsa/202003-21 - https://usn.ubuntu.com/4297-1/ - https://lists.debian.org/debian-lts-announce/2023/03/msg00023.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DHGVGGMKGZSJ7YO67TGGPFEHBYMS6
//lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DHGVGGMKGZSJ7YO67TGGPFEHBYMS63VF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FYVE3GB4OG3BNT5DLQHYO4M5SXX33AQ5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I6BF24VCZRFTYBTT3T7HDZUOTKOTNPLZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ANUGDBJ7NBUMSUFZUSKU3ZMQYZ2Z3STN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNB2UEDIIJCRQW4WJLZOPQJZXCVSXMLD/
CVE ID: CVE-2019-19922 State: PUBLISHED Published: 2019-12-22T19:07:16 Last Updated: 2024-08-05T02:32:10.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of service against non-cpu-bound applications by generating a workload that triggers unwanted slice expiration, aka CID-de53fd7aedb1. (In other words, although this slice expiration would typically be seen with benign workloads, it is possible that an attacker could calculate how many stray requests are required to force an entire Kubernetes cluster into a low-performance state caused
calculate how many stray requests are required to force an entire Kubernetes cluster into a low-performance state caused by slice expiration, and ensure that a DDoS attack sent that number of stray requests. An attack does not affect the stability of the kernel; it only causes mismanagement of application execution.) Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/4226-1/ - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://www.oracle.com/security-alerts/cpuApr2021.html - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9 - https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425 - https://gi
el/v5.x/ChangeLog-5.3.9 - https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=de53fd7aedb100f03e5d2231cfce0e4993282425 - https://relistan.com/the-kernel-may-be-slowing-down-your-app - https://github.com/kubernetes/kubernetes/issues/67577 - https://security.netapp.com/advisory/ntap-20200204-0002/
CVE ID: CVE-2019-19923 State: PUBLISHED Published: 2019-12-24T15:43:33 Last Updated: 2024-08-05T02:32:09.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sqlite/sqlite/commit/396afe6f6aa90a31303c183e11b2b2d4b7956b35 - https://security.netapp.com/advisory/ntap-20200114-0003/ - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html - http://lists.opensuse.org/opens
114-0003/ - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html - https://access.redhat.com/errata/RHSA-2020:0514 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html - https://www.debian.org/security/2020/dsa-4638 - https://usn.ubuntu.com/4298-1/ - https://www.oracle.com/security-alerts/cpuapr2020.html - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
CVE ID: CVE-2019-19924 State: PUBLISHED Published: 2019-12-24T15:53:59 Last Updated: 2024-08-05T02:32:10.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sqlite/sqlite/commit/8654186b0236d556aa85528c2573ee0b6ab71be3 - https://security.netapp.com/advisory/ntap-20200114-0003/ - https://usn.ubuntu.com/4298-1/ - https://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c
s://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
CVE ID: CVE-2019-19925 State: PUBLISHED Published: 2019-12-24T16:03:07 Last Updated: 2024-08-05T02:32:09.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sqlite/sqlite/commit/54d501092d88c0cf89bec4279951f548fb0b8618 - https://security.netapp.com/advisory/ntap-20200114-0003/ - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html - https://access.redhat.com/errata/RHSA-2020:0514 - http:
.opensuse.org/opensuse-security-announce/2020-02/msg00015.html - https://access.redhat.com/errata/RHSA-2020:0514 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html - https://www.debian.org/security/2020/dsa-4638 - https://usn.ubuntu.com/4298-1/ - https://www.oracle.com/security-alerts/cpuapr2020.html - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
CVE ID: CVE-2019-19926 State: PUBLISHED Published: 2019-12-23T00:53:23 Last Updated: 2024-08-05T02:32:09.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sqlite/sqlite/commit/8428b3b437569338a9d1e10c4cd8154acbe33089 - https://security.netapp.com/advisory/ntap-20200114-0003/ - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html - http://lists.opensuse.
tap-20200114-0003/ - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html - https://access.redhat.com/errata/RHSA-2020:0514 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html - https://www.debian.org/security/2020/dsa-4638 - https://usn.ubuntu.com/4298-1/ - https://www.oracle.com/security-alerts/cpuapr2020.html - https://usn.ubuntu.com/4298-2/ - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
CVE ID: CVE-2019-19927 State: PUBLISHED Published: 2019-12-31T02:00:12 Last Updated: 2024-08-05T02:32:09.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel 5.0.0-rc7 (as distributed in ubuntu/linux.git on kernel.ubuntu.com), mounting a crafted f2fs filesystem image and performing some operations can lead to slab-out-of-bounds read access in ttm_put_pages in drivers/gpu/drm/ttm/ttm_page_alloc.c. This is related to the vmwgfx or ttm module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/a66477b0efe511d98dde3e4aaeb189790e6f0a39 - https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19927 - https://githu
t/a66477b0efe511d98dde3e4aaeb189790e6f0a39 - https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19927 - https://github.com/torvalds/linux/commit/ac1e516d5a4c56bf0cb4a3dfc0672f689131cfd4 - https://github.com/torvalds/linux/commit/453393369dc9806d2455151e329c599684762428 - https://security.netapp.com/advisory/ntap-20200204-0002/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
CVE ID: CVE-2019-19929 State: PUBLISHED Published: 2019-12-23T01:40:00 Last Updated: 2024-08-05T02:32:10.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner before 8.0.1 could cause arbitrary code execution with SYSTEM privileges when a malicious DLL library is loaded by the product. Additional Analyst Notes: - CVE Program Container: References: - https://forums.malwarebytes.com/topic/254898-release-adwcleaner-801/ - https://www.bleepingcomputer.com/news/software/adwcleaner-801-fixes-dll-hijacking-vulnerability/ - https://borncity.com/win/2019/12/19/adwcleaner-8-0-1-closes-a-dll-hijacking-vulnerability/
CVE ID: CVE-2019-19930 State: PUBLISHED Published: 2019-12-23T02:02:30 Last Updated: 2024-08-05T02:32:10.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libIEC61850 1.4.0, MmsValue_newOctetString in mms/iso_mms/common/mms_value.c has an integer signedness error that can lead to an attempted excessive memory allocation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mz-automation/libiec61850/issues/193
CVE ID: CVE-2019-19931 State: PUBLISHED Published: 2019-12-23T02:02:13 Last Updated: 2024-08-05T02:32:09.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libIEC61850 1.4.0, MmsValue_decodeMmsData in mms/iso_mms/server/mms_access_result.c has a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mz-automation/libiec61850/issues/194
CVE ID: CVE-2019-19935 State: PUBLISHED Published: 2020-07-07T15:40:15 Last Updated: 2024-08-05T02:32:10.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Froala Editor before 3.2.3 allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/froala/wysiwyg-editor/compare/v3.0.5...v3.0.6 - http://packetstormsecurity.com/files/158300/Froala-WYSIWYG-HTML-Editor-3.1.1-Cross-Site-Scripting.html - https://snyk.io/vuln/npm:froala-editor - https://blog.compass-security.com/2020/07/yet-another-froala-0-day-xss/ - https://compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2020-004_DOM_XSS_in_Froala_WYSIWYG_HTML_Editor.txt
CVE ID: CVE-2019-19937 State: PUBLISHED Published: 2020-03-16T19:45:36 Last Updated: 2024-08-05T02:32:10.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JFrog Artifactory before 6.18, it is not possible to restrict either system or repository imports by any admin user in the enterprise, which can lead to "undesirable results." Additional Analyst Notes: - CVE Program Container: References: - https://www.secureworks.com/research/subject/advisories - https://www.jfrog.com/confluence/display/RTF6X/Release+Notes#ReleaseNotes-Artifactory6.18 - https://www.jfrog.com/confluence/display/RTF6X/Importing+and+Exporting
CVE ID: CVE-2019-19940 State: PUBLISHED Published: 2020-03-16T15:10:31 Last Updated: 2024-08-05T02:32:10.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect input sanitation in text-oriented user interfaces (telnet, ssh) in Swisscom Centro Grande before 6.16.12 allows remote authenticated users to execute arbitrary commands via command injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisscom.ch/content/dam/swisscom/de/about/nachhaltigkeit/digitale-schweiz/sicherheit/bug-bounty/files/cve-2019-19940ff.txt - https://www.swisscom.ch/en/residential/help/device/internet-router.html
CVE ID: CVE-2019-19941 State: PUBLISHED Published: 2020-03-16T15:19:52 Last Updated: 2024-08-05T02:32:10.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing hostname validation in Swisscom Centro Grande before 6.16.12 allows a remote attacker to inject its local IP address as a domain entry in the DNS service of the router via crafted hostnames in DHCP requests, causing XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisscom.ch/content/dam/swisscom/de/about/nachhaltigkeit/digitale-schweiz/sicherheit/bug-bounty/files/cve-2019-19940ff.txt - https://www.swisscom.ch/en/residential/help/device/internet-router.html
CVE ID: CVE-2019-19942 State: PUBLISHED Published: 2020-03-16T15:24:46 Last Updated: 2024-08-05T02:32:10.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing output sanitation in Swisscom Centro Grande Centro Grande before 6.16.12, Centro Business 1.0 (ADB) before 7.10.18, and Centro Business 2.0 before 8.02.04 allows a remote attacker to perform DNS spoofing against the web interface via crafted hostnames in DHCP requests. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisscom.ch/content/dam/swisscom/de/about/nachhaltigkeit/digitale-schweiz/sicherheit/bug-bounty/files/cve-2019-19940ff.txt - https://www.swisscom.ch/en/residential/help/device/
/digitale-schweiz/sicherheit/bug-bounty/files/cve-2019-19940ff.txt - https://www.swisscom.ch/en/residential/help/device/internet-router.html
CVE ID: CVE-2019-19943 State: PUBLISHED Published: 2020-02-28T19:40:14 Last Updated: 2024-08-05T02:32:10.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corruption via a large host or domain parameter. It may be possible to achieve remote code execution because of a double free. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/48111
CVE ID: CVE-2019-19944 State: PUBLISHED Published: 2019-12-23T18:39:50 Last Updated: 2024-08-05T02:32:09.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libIEC61850 1.4.0, BerDecoder_decodeUint32 in mms/asn1/ber_decode.c has an out-of-bounds read, related to intLen and bufPos. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mz-automation/libiec61850/issues/196
CVE ID: CVE-2019-19945 State: PUBLISHED Published: 2020-03-16T17:17:19 Last Updated: 2024-08-05T02:32:09.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error. This leads to out-of-bounds access to a heap buffer and a subsequent crash. It can be triggered with an HTTP POST request to a CGI script, specifying both "Transfer-Encoding: chunked" and a large negative Content-Length value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openwrt/openwrt/commits/master - https://openwrt.org/advisory/2020-01-13-1
CVE ID: CVE-2019-19946 State: PUBLISHED Published: 2020-03-16T17:31:05 Last Updated: 2024-08-05T02:32:10.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: The API in Dradis Pro 3.4.1 allows any user to extract the content of a project, even if this user is not part of the project team. Additional Analyst Notes: - CVE Program Container: References: - https://know.bishopfox.com/advisories - https://know.bishopfox.com/advisories/dradis-pro-3-4-1