Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-20806 State: PUBLISHED Published: 2020-05-27T12:00:06 Last Updated: 2024-08-05T02:53:09.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.2. There is a NULL pointer dereference in tw5864_handle_frame() in drivers/media/pci/tw5864/tw5864-video.c, which may cause denial of service, aka CID-2e7682ebfc75. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2 - https://github.com/torvalds/linux/commit/2e7682ebfc750177a4944eeb56e97a3f05734528 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2e7682ebfc750177a4944eeb56e9
e97a3f05734528 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2e7682ebfc750177a4944eeb56e97a3f05734528 - https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html - https://www.debian.org/security/2020/dsa-4698 - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html - https://security.netapp.com/advisory/ntap-20200619-0001/
CVE ID: CVE-2019-20807 State: PUBLISHED Published: 2020-05-28T13:05:50 Last Updated: 2024-08-05T02:53:09.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vim/vim/releases/tag/v8.1.0881 - https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075 - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00018.html - https://support.apple.com/kb/HT211289 - http://seclists.org/fulldisclosure/2020/Jul/24 - https://usn.
06/msg00018.html - https://support.apple.com/kb/HT211289 - http://seclists.org/fulldisclosure/2020/Jul/24 - https://usn.ubuntu.com/4582-1/ - https://lists.debian.org/debian-lts-announce/2022/01/msg00003.html - https://www.starwindsoftware.com/security/sw-20220812-0003/
CVE ID: CVE-2019-20808 State: PUBLISHED Published: 2020-12-31T00:26:39 Last Updated: 2024-08-05T02:53:09.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: In QEMU 4.1.0, an out-of-bounds read flaw was found in the ATI VGA implementation. It occurs in the ati_cursor_define() routine while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could abuse this flaw to crash the QEMU process, resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=aab0e2a661b2b6bf7915c0aefe807fb60d6d9d13 - https://bugzilla.redhat.com/show_bug.cgi?id=1841136 - https://security.n
%3Bh=aab0e2a661b2b6bf7915c0aefe807fb60d6d9d13 - https://bugzilla.redhat.com/show_bug.cgi?id=1841136 - https://security.netapp.com/advisory/ntap-20210205-0003/
CVE ID: CVE-2019-20809 State: PUBLISHED Published: 2020-06-03T16:54:01 Last Updated: 2024-08-05T02:53:09.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to set an invalid asset price via the setPrice function, and consequently violate the intended limits on price swings. Additional Analyst Notes: - CVE Program Container: References: - https://privacylog.blogspot.com/2019/10/compound-finance-zero-day-prices-can.html
CVE ID: CVE-2019-20810 State: PUBLISHED Published: 2020-06-02T23:14:11 Last Updated: 2024-08-05T02:53:09.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call snd_card_free for a failure path, which causes a memory leak, aka CID-9453264ef586. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9453264ef58638ce8976121ac44c07a3ef375983 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html - https://usn.ubuntu.co
21ac44c07a3ef375983 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html - https://usn.ubuntu.com/4427-1/ - https://usn.ubuntu.com/4439-1/ - https://usn.ubuntu.com/4440-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00019.html - https://usn.ubuntu.com/4483-1/ - https://usn.ubuntu.com/4485-1/
CVE ID: CVE-2019-20811 State: PUBLISHED Published: 2020-06-03T02:44:12 Last Updated: 2024-08-05T02:53:09.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, a reference count is mishandled, aka CID-a3e23f719f5c. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.6 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a3e23f719f5c4a38ffb3d30c8d7632a4ed8ccd9e - https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html - https://www.debian
5c4a38ffb3d30c8d7632a4ed8ccd9e - https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html - https://www.debian.org/security/2020/dsa-4698 - https://usn.ubuntu.com/4527-1/
CVE ID: CVE-2019-20812 State: PUBLISHED Published: 2020-06-03T02:43:58 Last Updated: 2024-08-05T02:53:09.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.4.7. The prb_calc_retire_blk_tmo() function in net/packet/af_packet.c can result in a denial of service (CPU consumption and soft lockup) in a certain failure case involving TPACKET_V3, aka CID-b43d1f9f7067. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html - https://www.oracle.com/security-alerts/cpuApr2021.h
ists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html - https://www.oracle.com/security-alerts/cpuApr2021.html - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b43d1f9f7067c6759b1051e8ecb84e82cef569fe - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.7
CVE ID: CVE-2019-20813 State: PUBLISHED Published: 2020-06-04T15:37:42 Last Updated: 2024-08-05T02:53:09.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20814 State: PUBLISHED Published: 2020-06-04T15:38:05 Last Updated: 2024-08-05T02:53:09.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows memory consumption because data is created for each page of an application level. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20815 State: PUBLISHED Published: 2020-06-04T15:38:41 Last Updated: 2024-08-05T02:53:09.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows stack consumption via nested function calls for XML parsing. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20816 State: PUBLISHED Published: 2020-06-04T15:40:44 Last Updated: 2024-08-05T02:53:09.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference during the parsing of file data. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20817 State: PUBLISHED Published: 2020-06-04T15:44:43 Last Updated: 2024-08-05T02:53:09.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20818 State: PUBLISHED Published: 2020-06-04T15:47:25 Last Updated: 2024-08-05T02:53:09.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows memory consumption because data is created for each page of an application level. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20819 State: PUBLISHED Published: 2020-06-04T15:47:53 Last Updated: 2024-08-05T02:53:09.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption via nested function calls for XML parsing. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20820 State: PUBLISHED Published: 2020-06-04T15:48:15 Last Updated: 2024-08-05T02:53:09.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20821 State: PUBLISHED Published: 2020-06-04T15:48:35 Last Updated: 2024-08-05T02:53:09.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF Mac before 3.4. It has a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20822 State: PUBLISHED Published: 2020-06-04T15:49:19 Last Updated: 2024-08-05T02:53:09.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.7.0.29430. It has an out-of-bounds write via incorrect image data. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20823 State: PUBLISHED Published: 2020-06-04T17:00:09 Last Updated: 2024-08-05T02:53:09.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20824 State: PUBLISHED Published: 2020-06-04T16:59:35 Last Updated: 2024-08-05T02:53:09.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20825 State: PUBLISHED Published: 2020-06-04T16:58:37 Last Updated: 2024-08-05T02:53:09.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.11. It has an out-of-bounds write when Internet Explorer is used. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20826 State: PUBLISHED Published: 2020-06-04T16:58:01 Last Updated: 2024-08-05T02:53:09.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It has a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20827 State: PUBLISHED Published: 2020-06-04T16:55:27 Last Updated: 2024-08-05T02:53:09.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It allows stack consumption because of interaction between ICC-Based color space and Alternate color space. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20828 State: PUBLISHED Published: 2020-06-04T16:54:38 Last Updated: 2024-08-05T02:53:09.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20829 State: PUBLISHED Published: 2020-06-04T16:53:39 Last Updated: 2024-08-05T02:53:09.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20830 State: PUBLISHED Published: 2020-06-04T16:52:23 Last Updated: 2024-08-05T02:53:09.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20831 State: PUBLISHED Published: 2020-06-04T16:51:40 Last Updated: 2024-08-05T02:53:09.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.5.0.20733. It has void data mishandling, causing a crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20832 State: PUBLISHED Published: 2020-06-04T16:50:28 Last Updated: 2024-08-05T02:53:09.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.10. It has homograph mishandling. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20833 State: PUBLISHED Published: 2020-06-04T16:49:30 Last Updated: 2024-08-05T02:53:09.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.10. It has mishandling of cloud credentials, as demonstrated by Google Drive. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20834 State: PUBLISHED Published: 2020-06-04T16:47:07 Last Updated: 2024-08-05T02:53:09.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit PhantomPDF before 8.3.10. It allows signature validation bypass via a modified file or a file with non-standard signatures. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20835 State: PUBLISHED Published: 2020-06-04T16:44:26 Last Updated: 2024-08-05T02:53:09.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has homograph mishandling. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20836 State: PUBLISHED Published: 2020-06-04T16:43:42 Last Updated: 2024-08-05T02:53:09.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has mishandling of cloud credentials, as demonstrated by Google Drive. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20837 State: PUBLISHED Published: 2020-06-04T16:43:09 Last Updated: 2024-08-05T02:53:09.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It allows signature validation bypass via a modified file or a file with non-standard signatures. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php
CVE ID: CVE-2019-20838 State: PUBLISHED Published: 2020-06-15T16:50:48 Last Updated: 2024-08-05T02:53:09.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.gentoo.org/717920 - https://www.pcre.org/original/changelog.txt - https://support.apple.com/kb/HT211931 - http://seclists.org/fulldisclosure/2020/Dec/32 - https://support.apple.com/kb/HT212147 - http://seclists.org/fulldisclosure/2021/Feb/14 - https://lists.apache.org/thread.ht
ps://support.apple.com/kb/HT212147 - http://seclists.org/fulldisclosure/2021/Feb/14 - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE ID: CVE-2019-20839 State: PUBLISHED Published: 2020-06-17T15:11:26 Last Updated: 2024-08-05T02:53:09.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13 - https://github.com/LibVNC/libvncserver/commit/3fd03977c9b35800d73a865f167338cb4d05b0c1 - https://lists.debian.org/debian-lts-announce/2020/06/msg00035.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NVP7TJVYJDXDFRHVQ
tml - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NVP7TJVYJDXDFRHVQ3ENEN3H354QPXEZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F6FUH4EFK4NAP6GT4TQRTBKWIRCZLIY/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html - https://usn.ubuntu.com/4434-1/ - https://lists.debian.org/debian-lts-announce/2020/08/msg00045.html - https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
CVE ID: CVE-2019-20840 State: PUBLISHED Published: 2020-06-17T15:11:10 Last Updated: 2024-08-05T02:53:09.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibVNCServer before 0.9.13. libvncserver/ws_decode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13 - https://github.com/LibVNC/libvncserver/commit/0cf1400c61850065de590d403f6d49e32882fd76 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F6FUH4EFK4NAP6GT4TQRTBKWIRCZLIY/ - h
fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F6FUH4EFK4NAP6GT4TQRTBKWIRCZLIY/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html - https://usn.ubuntu.com/4434-1/ - https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
CVE ID: CVE-2019-20841 State: PUBLISHED Published: 2020-06-19T13:17:36 Last Updated: 2024-08-05T02:53:09.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. CSRF can sometimes occur via a crafted web site for account takeover attacks. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20842 State: PUBLISHED Published: 2020-06-19T13:18:27 Last Updated: 2024-08-05T02:53:09.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. There is SQL injection by admins via SearchAllChannels. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20843 State: PUBLISHED Published: 2020-06-19T13:25:29 Last Updated: 2024-08-05T02:53:09.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. There are weak permissions for configuration files. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20844 State: PUBLISHED Published: 2020-06-19T13:26:49 Last Updated: 2024-08-05T02:53:09.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. An attacker can spoof a direct-message channel by changing the type of a channel. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20845 State: PUBLISHED Published: 2020-06-19T13:27:42 Last Updated: 2024-08-05T02:53:09.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.18.0. It allows attackers to cause a denial of service (memory consumption) via a large Slack import. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20846 State: PUBLISHED Published: 2020-06-19T13:29:06 Last Updated: 2024-08-05T02:53:09.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.18.0. It has weak permissions for server-local file storage. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20847 State: PUBLISHED Published: 2020-06-19T13:31:36 Last Updated: 2024-08-05T02:53:09.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.18.0. An attacker can send a user_typing WebSocket event to any channel. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20848 State: PUBLISHED Published: 2020-06-19T13:32:41 Last Updated: 2024-08-05T02:53:09.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Mobile Apps before 1.26.0. The Quick Reply feature mishandles crafted replies. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2019-20849 State: PUBLISHED Published: 2020-06-19T13:33:56 Last Updated: 2024-08-05T02:53:09.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Mobile Apps before 1.26.0. Cookie data can persist on a device after a logout. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/