Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-19162 State: PUBLISHED Published: 2020-05-11T17:40:53.156643Z Last Updated: 2024-09-17T02:37:36.552Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: TOBESOFT Products: XPLATFORM Problem Types: CWE-416 Description: A use-after-free vulnerability in the TOBESOFT XPLATFORM versions 9.1 to 9.2.2 may lead to code execution on a system running it. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35387
CVE ID: CVE-2019-19163 State: PUBLISHED Published: 2020-06-30T13:31:01 Last Updated: 2024-08-05T02:09:39.359Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: COMMAX Products: Wallpad Problem Types: CWE-20 Description: A Vulnerability in the firmware of COMMAX WallPad(CDP-1020MB) allow an unauthenticated adjacent attacker to execute arbitrary code, because of a using the old version of MySQL. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35477 - https://www.commax.com/index.php?cate1=10&cate2=21&cate3=23&nnum=2016
CVE ID: CVE-2019-19164 State: PUBLISHED Published: 2020-05-07T18:00:57 Last Updated: 2024-08-05T02:09:39.379Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: RAONWiz Products: dext.ocx ActiveX Control in Dext5 Upload Problem Types: CWE-20 Description: dext5.ocx ActiveX Control in Dext5 Upload 5.0.0.112 and earlier versions contains a vulnerability that could allow remote files to be executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView
infection. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35344 - http://www.dext5.com/page/support/notice_view.aspx?pSeq=23
CVE ID: CVE-2019-19165 State: PUBLISHED Published: 2020-04-29T15:02:36.447265Z Last Updated: 2024-09-16T22:50:24.517Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Inogard Co,,LTD Products: Ebiz4u ActiveX of Inogard Co,,LTD(AxECM.cab) on Windows 7/8/10 Problem Types: CWE-494 Description: AxECM.cab(ActiveX Control) in Inogard Ebiz4u contains a vulnerability that could allow remote files to be downloaded and executed by setting arguments to the activeX method. Download of Code Without Integrity Check vulnerability in ActiveX control of Inogard Co,,LTD Ebiz4u ActiveX of Inogard Co,,LTD(AxECM.cab) allows ATTACKER to cause a file download to Windows user's folder
d Co,,LTD Ebiz4u ActiveX of Inogard Co,,LTD(AxECM.cab) allows ATTACKER to cause a file download to Windows user's folder and execute. This issue affects: Inogard Co,,LTD Ebiz4u ActiveX of Inogard Co,,LTD(AxECM.cab) version 1.0.5.0 and later versions on windows 7/8/10. Additional Analyst Notes: - CVE Program Container: References: - http://www.ebiz4u.co.kr/home.do - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35348
CVE ID: CVE-2019-19166 State: PUBLISHED Published: 2020-05-06T12:44:27 Last Updated: 2024-08-05T02:09:39.370Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Tobesoft Products: XPlatform Problem Types: CWE-494 Description: Tobesoft XPlatform v9.1, 9.2.0, 9.2.1 and 9.2.2 have a vulnerability that can load unauthorized DLL files. It allows attacker to cause remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://support.tobesoft.co.kr/Support/index.html - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35357
CVE ID: CVE-2019-19167 State: PUBLISHED Published: 2020-05-06T12:47:56 Last Updated: 2024-08-05T02:09:39.368Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Tobesoft Products: Nexacro14 Problem Types: CWE-494 Description: Tobesoft Nexacro v2019.9.25.1 and earlier version have an arbitrary code execution vulnerability by using method supported by Nexacro14 ActiveX Control. It allows attacker to cause remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://support.tobesoft.co.kr/Support/index.html - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35358
CVE ID: CVE-2019-19168 State: PUBLISHED Published: 2020-05-06T12:54:11 Last Updated: 2024-08-05T02:09:39.363Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: RAONwiz Products: Dext.ocx ActiveX Control in Dext5 Upload Problem Types: File download & execution Description: Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.dext5.com/page/support/notice_view.aspx?pSeq=26 - https://www.krcert.or.kr/kr
rogram Container: References: - http://www.dext5.com/page/support/notice_view.aspx?pSeq=26 - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35352
CVE ID: CVE-2019-19169 State: PUBLISHED Published: 2020-05-06T12:54:08 Last Updated: 2024-08-05T02:09:39.405Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: RAONwiz Products: Dext.ocx ActiveX Control in Dext5 Upload Problem Types: File download Description: Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.dext5.com/page/support/notice_view.aspx?pSeq=26 - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_
http://www.dext5.com/page/support/notice_view.aspx?pSeq=26 - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35353
CVE ID: CVE-2019-19173 State: REJECTED Published: 2020-08-21T16:34:58 Last Updated: 2020-08-21T16:34:58 Description: No description available.
CVE ID: CVE-2019-19178 State: REJECTED Published: 2020-08-21T16:37:13 Last Updated: 2020-08-21T16:37:13 Description: No description available.
CVE ID: CVE-2019-19179 State: REJECTED Published: 2020-08-21T16:38:01 Last Updated: 2020-08-21T16:38:01 Description: No description available.
CVE ID: CVE-2019-19181 State: REJECTED Published: 2020-08-21T16:38:37 Last Updated: 2020-08-21T16:38:37 Description: No description available.
CVE ID: CVE-2019-19183 State: REJECTED Published: 2020-08-21T16:43:34 Last Updated: 2020-08-21T16:43:34 Description: No description available.
CVE ID: CVE-2019-19184 State: REJECTED Published: 2020-08-21T16:44:12 Last Updated: 2020-08-21T16:44:12 Description: No description available.
CVE ID: CVE-2019-19191 State: PUBLISHED Published: 2019-11-21T17:06:45 Last Updated: 2024-08-05T02:09:39.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user (the shibd account) after installation. This allows the user to escalate to root by pointing symlinks to files such as /etc/shadow. Additional Analyst Notes: - CVE Program Container: References: - https://issues.shibboleth.net/jira/browse/SSPCPP-874 - https://bugzilla.suse.com/show_bug.cgi?id=1157471 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00017.html
CVE ID: CVE-2019-19192 State: PUBLISHED Published: 2020-02-12T18:08:14 Last Updated: 2024-08-05T02:09:39.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Low Energy implementation on STMicroelectronics BLE Stack through 1.3.1 for STM32WB5x devices does not properly handle consecutive Attribute Protocol (ATT) requests on reception, allowing attackers in radio range to cause an event deadlock or crash via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://asset-group.github.io/disclosures/sweyntooth/
CVE ID: CVE-2019-19193 State: PUBLISHED Published: 2020-02-10T20:33:05 Last Updated: 2024-08-05T02:09:39.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Low Energy peripheral implementation on Texas Instruments SIMPLELINK-CC2640R2-SDK through 3.30.00.20 and BLE-STACK through 1.5.0 before Q4 2019 for CC2640R2 and CC2540/1 devices does not properly restrict the advertisement connection request packet on reception, allowing attackers in radio range to cause a denial of service (crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.ti.com/tool/BLE-STACK - https://asset-group.github.io/disclosures/sweyntooth/
CVE ID: CVE-2019-19194 State: PUBLISHED Published: 2020-02-12T14:25:08 Last Updated: 2024-08-05T02:09:39.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices installs a zero long term key (LTK) if an out-of-order link-layer encryption request is received during Secure Connections pairing. An attacker in radio range can have arbitrary read/write access to protected GATT service data, cause a device crash, or possibly control a device's function by establishing an encry
s to protected GATT service data, cause a device crash, or possibly control a device's function by establishing an encrypted session with the zero LTK. Additional Analyst Notes: - CVE Program Container: References: - http://www.telink-semi.com/ble - https://asset-group.github.io/disclosures/sweyntooth/
CVE ID: CVE-2019-19195 State: PUBLISHED Published: 2020-02-10T20:35:42 Last Updated: 2024-08-05T02:09:39.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Low Energy implementation on Microchip Technology BluSDK Smart through 6.2 for ATSAMB11 devices does not properly restrict link-layer data length on reception, allowing attackers in radio range to cause a denial of service (crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.microchip.com/wwwproducts/en/ATSAMB11 - https://asset-group.github.io/disclosures/sweyntooth/
CVE ID: CVE-2019-19196 State: PUBLISHED Published: 2020-02-12T14:23:54 Last Updated: 2024-08-05T02:09:39.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices accepts a pairing request with a key size greater than 16 bytes, allowing an attacker in radio range to cause a buffer overflow and denial of service (crash) via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.telink-semi.com/ble - https://asset-group.github.io/disclos
yst Notes: - CVE Program Container: References: - http://www.telink-semi.com/ble - https://asset-group.github.io/disclosures/sweyntooth/
CVE ID: CVE-2019-19197 State: PUBLISHED Published: 2019-11-21T19:01:28 Last Updated: 2024-08-05T02:09:39.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows an attacker to achieve privilege escalation, denial-of-service, and code execution via usermode because 0x9C402401 using METHOD_NEITHER results in a read primitive. Additional Analyst Notes: - CVE Program Container: References: - https://nafiez.github.io/security/vulnerability/2019/11/16/kyrol-internet-security-driver-issue.html - https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2019-11-16-kyrol-internet-security-driver-issue.md
CVE ID: CVE-2019-19198 State: PUBLISHED Published: 2019-12-12T13:55:34 Last Updated: 2024-08-05T02:09:39.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Scoutnet Kalender plugin 1.1.0 for WordPress allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/scoutnet-kalender/#developers - http://packetstormsecurity.com/files/155615/WordPress-Scoutnet-Kalender-1.1.0-Cross-Site-Scripting.html - https://wpvulndb.com/vulnerabilities/9969 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-045.txt
CVE ID: CVE-2019-19199 State: PUBLISHED Published: 2020-10-02T08:09:35 Last Updated: 2024-08-05T02:09:39.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout. Additional Analyst Notes: - CVE Program Container: References: - https://www.reddoxx.com/en/products/archiving/ - https://www.syss.de/pentest-blog/ - http://seclists.org/fulldisclosure/2020/Sep/49 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-049.txt
CVE ID: CVE-2019-19200 State: PUBLISHED Published: 2020-10-06T14:25:16 Last Updated: 2024-08-05T02:09:39.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users. Additional Analyst Notes: - CVE Program Container: References: - https://www.reddoxx.com/en/products/archiving/ - https://www.syss.de/pentest-blog/ - http://packetstormsecurity.com/files/159455/MailDepot-2032-SP2-2.2.1242-Authorization-Bypass.html
CVE ID: CVE-2019-19202 State: PUBLISHED Published: 2019-11-21T19:54:18 Last Updated: 2024-08-05T02:09:39.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Vtiger 7.x before 7.2.0, the My Preferences saving functionality allows a user without administrative privileges to change his own role by adding roleid=H2 to a POST request. Additional Analyst Notes: - CVE Program Container: References: - https://code.vtiger.com/vtiger/vtigercrm/issues/1126 - http://lists.vtigercrm.com/pipermail/vtigercrm-developers/2019-April/037964.html
CVE ID: CVE-2019-19203 State: PUBLISHED Published: 2019-11-21T20:06:59 Last Updated: 2024-08-05T02:09:39.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kkos/oniguruma/releases/tag/v6.9.4_rc2 - https://github.com/kkos/oniguruma/issues/163 - https://github.com/ManhNDd/CVE-2019-19203 - https://lists.fedoraproject.org/archives/list/package-announce%
issues/163 - https://github.com/ManhNDd/CVE-2019-19203 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NO267PLHGYZSWX3XTRPKYBKD4J3YOU5V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3MBNW6Z4DOXSCNWGBLQ7OA3OGUJ44WL/ - https://github.com/tarantula-team/CVE-2019-19203
CVE ID: CVE-2019-19204 State: PUBLISHED Published: 2019-11-21T20:06:47 Last Updated: 2024-08-05T02:09:39.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kkos/oniguruma/releases/tag/v6.9.4_rc2 - https://github.com/kkos/oniguruma/issues/162 - https://github.com/ManhNDd/CVE-2019-19204 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.
62 - https://github.com/ManhNDd/CVE-2019-19204 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NO267PLHGYZSWX3XTRPKYBKD4J3YOU5V/ - https://lists.debian.org/debian-lts-announce/2019/12/msg00002.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3MBNW6Z4DOXSCNWGBLQ7OA3OGUJ44WL/ - https://github.com/tarantula-team/CVE-2019-19204 - https://usn.ubuntu.com/4460-1/
CVE ID: CVE-2019-19206 State: PUBLISHED Published: 2019-11-26T14:18:39 Last Updated: 2024-08-05T02:09:39.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr CRM/ERP 10.0.3 allows viewimage.php?file= Stored XSS due to JavaScript execution in an SVG image for a profile picture. Additional Analyst Notes: - CVE Program Container: References: - https://www.dolibarr.org/forum/dolibarr-changelogs - https://medium.com/%40k43p/cve-2019-19206-stored-xss-due-to-javascript-execution-in-an-svg-file-ee1d038fba76
CVE ID: CVE-2019-19207 State: PUBLISHED Published: 2019-11-21T21:06:57 Last Updated: 2024-08-05T02:09:39.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: rConfig 3.9.2 allows devices.php?searchColumn= SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/sky_xiaoxuan/status/1189420530396303360
CVE ID: CVE-2019-19208 State: PUBLISHED Published: 2020-03-16T14:45:49 Last Updated: 2024-08-05T02:09:39.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Codiad Web IDE through 2.8.4 allows PHP Code injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Codiad/Codiad/commits/master - https://herolab.usd.de/en/security-advisories/ - https://herolab.usd.de/security-advisories/usd-2019-0049/ - http://packetstormsecurity.com/files/162753/Codiad-2.8.4-Remote-Code-Execution.html - https://www.exploit-db.com/exploits/49902 - https://github.com/Hacker5preme/Exploits/tree/main/CVE-2019-19208-Exploit
CVE ID: CVE-2019-19209 State: PUBLISHED Published: 2020-03-16T14:47:12 Last Updated: 2024-08-05T02:09:39.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr ERP/CRM before 10.0.3 allows SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.dolibarr.org/forum/dolibarr-changelogs - https://herolab.usd.de/en/security-advisories/ - https://herolab.usd.de/security-advisories/usd-2019-0051/
CVE ID: CVE-2019-19210 State: PUBLISHED Published: 2020-03-16T14:54:33 Last Updated: 2024-08-05T02:09:39.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files. Additional Analyst Notes: - CVE Program Container: References: - https://www.dolibarr.org/forum/dolibarr-changelogs - https://herolab.usd.de/en/security-advisories/ - https://herolab.usd.de/security-advisories/usd-2019-0052/
CVE ID: CVE-2019-19211 State: PUBLISHED Published: 2020-03-16T14:57:26 Last Updated: 2024-08-05T02:09:39.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.dolibarr.org/forum/dolibarr-changelogs - https://herolab.usd.de/en/security-advisories/ - https://herolab.usd.de/en/security-advisories/usd-2019-0053/
CVE ID: CVE-2019-19212 State: PUBLISHED Published: 2020-03-16T19:48:25 Last Updated: 2024-08-05T02:09:39.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php (product price screen). Additional Analyst Notes: - CVE Program Container: References: - https://www.dolibarr.org/forum/dolibarr-changelogs - https://herolab.usd.de/en/security-advisories/ - https://herolab.usd.de/security-advisories/usd-2019-0054/
CVE ID: CVE-2019-19213 State: REJECTED Published: 2020-06-03T16:41:34 Last Updated: 2020-06-03T16:41:34 Description: No description available.
CVE ID: CVE-2019-19214 State: REJECTED Published: 2020-06-03T16:48:15 Last Updated: 2020-06-03T16:48:15 Description: No description available.
CVE ID: CVE-2019-19215 State: PUBLISHED Published: 2020-04-30T13:33:08 Last Updated: 2024-08-05T02:09:39.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via vectors related to the configured IP address or SMTP server. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/en/security-advisories/ - https://www.bmc.com/it-solutions/control-m.html
CVE ID: CVE-2019-19216 State: PUBLISHED Published: 2020-04-30T13:33:05 Last Updated: 2024-08-05T02:09:39.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/security-advisories/usd-2019-0060/
CVE ID: CVE-2019-19217 State: PUBLISHED Published: 2020-04-30T13:33:02 Last Updated: 2024-08-05T02:09:39.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: BMC Control-M/Agent 7.0.00.000 allows OS Command Injection. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/security-advisories/usd-2019-0059/
CVE ID: CVE-2019-19218 State: PUBLISHED Published: 2020-04-30T13:32:59 Last Updated: 2024-08-05T02:09:39.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/security-advisories/usd-2019-0066/
CVE ID: CVE-2019-19219 State: PUBLISHED Published: 2020-04-30T13:32:56 Last Updated: 2024-08-05T02:09:39.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/security-advisories/usd-2019-0065/
CVE ID: CVE-2019-19220 State: PUBLISHED Published: 2020-04-30T13:32:53 Last Updated: 2024-08-05T02:09:39.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: BMC Control-M/Agent 7.0.00.000 allows OS Command Injection (issue 2 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/security-advisories/usd-2019-0064/
CVE ID: CVE-2019-19221 State: PUBLISHED Published: 2019-11-21T00:00:00 Last Updated: 2024-08-05T02:09:39.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libarchive/libarchive/issues/1276 - https://github.com/libarchive/libarchive/commit/22b1db9d46654afc6f0c28f90af8cdc84a199f41 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RHFV25AVTASTWZRF3KTSL357A
tps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RHFV25AVTASTWZRF3KTSL357AQ6TYHM4/ - https://usn.ubuntu.com/4293-1/ - https://lists.debian.org/debian-lts-announce/2022/04/msg00020.html - https://lists.debian.org/debian-lts-announce/2022/11/msg00030.html