Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-19875 State: PUBLISHED Published: 2020-11-27T16:21:13 Last Updated: 2024-08-05T02:32:09.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Arbitrary commands could be injected (using Python scripts) via the AprolCluster script that is invoked via sudo and thus executes with root privileges, a different vulnerability than CVE-2019-16364. Additional Analyst Notes: - CVE Program Container: References: - https://www.br-automation.com/downloads_br_productcatalogue/BRP44400000000000000585952/APROL_R42_A1_ReleaseNotes_001.pdf
CVE ID: CVE-2019-19876 State: PUBLISHED Published: 2020-11-27T16:22:13 Last Updated: 2024-08-05T02:32:09.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An EnMon PHP script was vulnerable to SQL injection, a different vulnerability than CVE-2019-10006. Additional Analyst Notes: - CVE Program Container: References: - https://www.br-automation.com/downloads_br_productcatalogue/BRP44400000000000000585952/APROL_R42_A1_ReleaseNotes_001.pdf
CVE ID: CVE-2019-19877 State: PUBLISHED Published: 2020-11-27T16:23:21 Last Updated: 2024-08-05T02:32:09.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to sensitive information outside the working directory via Directory Traversal attacks against AprolSqlServer, a different vulnerability than CVE-2019-16357. Additional Analyst Notes: - CVE Program Container: References: - https://www.br-automation.com/downloads_br_productcatalogue/BRP44400000000000000585952/APROL_R42_A1_ReleaseNotes_001.pdf
CVE ID: CVE-2019-19878 State: PUBLISHED Published: 2020-11-27T16:24:00 Last Updated: 2024-08-05T02:32:09.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to historical data from AprolSqlServer by bypassing authentication, a different vulnerability than CVE-2019-16358. Additional Analyst Notes: - CVE Program Container: References: - https://www.br-automation.com/downloads_br_productcatalogue/BRP44400000000000000585952/APROL_R42_A1_ReleaseNotes_001.pdf
CVE ID: CVE-2019-19879 State: PUBLISHED Published: 2020-02-14T16:29:17 Last Updated: 2024-08-05T02:32:09.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: HashiCorp Sentinel up to 0.10.1 incorrectly parsed negation in certain policy expressions. Fixed in 0.10.2. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.hashicorp.com/t/security-bulletin-sentinel-incorrectly-parses-negation-in-certain-policy-expressions/5955
CVE ID: CVE-2019-19880 State: PUBLISHED Published: 2019-12-18T05:07:13 Last Updated: 2024-08-05T02:32:09.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sqlite/sqlite/commit/75e95e1fcd52d3ec8282edb75ac8cd0814095d54 - https://security.netapp.com/advisory/ntap-20200114-0001/ - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html - http://lists.opensuse.org/opensuse-security-announ
lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html - https://access.redhat.com/errata/RHSA-2020:0514 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html - https://www.debian.org/security/2020/dsa-4638 - https://usn.ubuntu.com/4298-1/ - https://www.oracle.com/security-alerts/cpuapr2020.html - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
CVE ID: CVE-2019-19882 State: PUBLISHED Published: 2019-12-18T15:07:59 Last Updated: 2024-08-05T02:32:09.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux, allows local users to obtain root access because setuid programs are misconfigured. Specifically, this affects shadow 4.8 when compiled using --with-libpam but without explicitly passing --disable-account-tools-setuid, and without a PAM configuration suitable for use with setuid account management tools. This combination leads to account management tools (groupadd, groupdel, groupmod, useradd, userdel, usermod) that can easily be used
ion leads to account management tools (groupadd, groupdel, groupmod, useradd, userdel, usermod) that can easily be used by unprivileged local users to escalate privileges to root in multiple ways. This issue became much more relevant in approximately December 2019 when an unrelated bug was fixed (i.e., the chmod calls to suidusbins were fixed in the upstream Makefile which is now included in the release version 4.8). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shadow-maint/shadow/commit/edf7547ad5aa650be868cf2dac58944773c12d75 - https://github.com/shadow-maint/shadow/pull/199 - https://bugs.archlinux.org/task/64836 - https://bugs.gentoo.org/702252 - ht
://github.com/shadow-maint/shadow/pull/199 - https://bugs.archlinux.org/task/64836 - https://bugs.gentoo.org/702252 - https://github.com/void-linux/void-packages/pull/17580 - https://security.gentoo.org/glsa/202008-09
CVE ID: CVE-2019-19885 State: PUBLISHED Published: 2020-10-16T12:55:30 Last Updated: 2024-08-05T02:32:09.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system. A user with knowledge about the routes can read and write configuration data without prior authorization. This affects COM465IP, COM465DP, COM465ID, CP700, CP907, and CP915 devices before 4.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2020-043
CVE ID: CVE-2019-19886 State: PUBLISHED Published: 2020-01-21T21:59:09 Last Updated: 2024-08-05T02:32:09.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to send crafted requests that may, when sent quickly in large volumes, lead to the server becoming slow or unresponsive (Denial of Service) because of a flaw in Transaction::addRequestHeader in transaction.cc. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/modsecurity-denial-of-service-details-cve-2019-19886/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedo
-denial-of-service-details-cve-2019-19886/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7IIUNYIEZOWHRWWRVT3FR45MLE6HGDY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GWVUC54OPU7ICFYIXXVGQ5DOTMR4Z6ZY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JI3MNFRNUZD6RAJ5CPQZSUXQXDZ2K7IL/
CVE ID: CVE-2019-19887 State: PUBLISHED Published: 2019-12-18T18:40:43 Last Updated: 2024-08-05T02:32:09.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: bitstr_tell at bitstr.c in ffjpeg through 2019-08-21 has a NULL pointer dereference related to jfif_encode. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rockcarry/ffjpeg/issues/14
CVE ID: CVE-2019-19888 State: PUBLISHED Published: 2019-12-18T18:40:33 Last Updated: 2024-08-05T02:32:09.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: jfif_decode in jfif.c in ffjpeg through 2019-08-21 has a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rockcarry/ffjpeg/issues/13
CVE ID: CVE-2019-19889 State: PUBLISHED Published: 2019-12-18T18:52:52 Last Updated: 2024-08-05T02:32:09.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817_1855 devices. The attacker can discover admin credentials in the backup file, aka backupsettings.conf. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/V1n1v131r4/HGB10R-2
CVE ID: CVE-2019-19890 State: PUBLISHED Published: 2019-12-18T18:53:05 Last Updated: 2024-08-05T02:32:09.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817_1855 devices. Admin credentials are sent over cleartext HTTP. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/V1n1v131r4/HGB10R-2
CVE ID: CVE-2019-19891 State: PUBLISHED Published: 2020-01-13T17:39:53 Last Updated: 2024-08-05T02:32:10.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: An encryption key vulnerability on Mitel SIP-DECT wireless devices 8.0 and 8.1 could allow an attacker to launch a man-in-the-middle attack. A successful exploit may allow the attacker to intercept sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0009
CVE ID: CVE-2019-19893 State: PUBLISHED Published: 2020-01-23T20:55:25 Last Updated: 2024-08-05T02:32:10.419Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticated attacker, who can access the server's filesystem with the access rights of NT AUTHORITY\SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software
CVE ID: CVE-2019-19894 State: PUBLISHED Published: 2020-01-23T20:55:15 Last Updated: 2024-08-05T02:32:09.327Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AC:L/AV:L/A:N/C:N/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent Service on a client system. An authenticated attacker (non-admin) can disable UAC for other users by renaming and replacing %SYSTEMDRIVE%\IXP\DATA\IXPAS.IXP. Additional Analyst Notes: - CVE Program Container: References: - https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software
CVE ID: CVE-2019-19895 State: PUBLISHED Published: 2020-01-23T20:55:06 Last Updated: 2024-08-05T02:32:09.315Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a client system. An authenticated attacker can, by modifying %SYSTEMDRIVE%\IXP\SW\[PACKAGE_CODE]\EveryLogon.bat, achieve this movement and execute code in the context of other users. Additional Analyst Notes: - CVE Program Container: References: - https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software
CVE ID: CVE-2019-19896 State: PUBLISHED Published: 2020-01-23T20:54:56 Last Updated: 2024-08-05T02:32:09.387Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share. The default file permissions of the IXP$ share on the server allows modification of directories and files (e.g., bat-scripts), which allows execution of code in the context of NT AUTHORITY\SYSTEM on the target server and clients. Additional Analyst Notes: - CVE Program Container: References: - https://improsec.com/tech-blog/multiple-vulnerabil
nts. Additional Analyst Notes: - CVE Program Container: References: - https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software
CVE ID: CVE-2019-19897 State: PUBLISHED Published: 2020-01-23T20:54:44 Last Updated: 2024-08-05T02:32:09.354Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In IXP EasyInstall 6.2.13723, there is Remote Code Execution via the Agent Service. An unauthenticated attacker can communicate with the Agent Service over TCP port 20051, and execute code in the NT AUTHORITY\SYSTEM context of the target system by using the Execute Command Line function. Additional Analyst Notes: - CVE Program Container: References: - https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software
CVE ID: CVE-2019-19898 State: PUBLISHED Published: 2020-01-23T20:54:30 Last Updated: 2024-08-05T02:32:09.853Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In IXP EasyInstall 6.2.13723, there are cleartext credentials in network communication on TCP port 20050 when using the Administrator console remotely. Additional Analyst Notes: - CVE Program Container: References: - https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software
CVE ID: CVE-2019-19899 State: PUBLISHED Published: 2019-12-18T23:24:01 Last Updated: 2024-08-05T02:32:09.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pebble Templates 3.1.2 allows attackers to bypass a protection mechanism (intended to block access to instances of java.lang.Class) because getClass is accessible via the public static java.lang.Class java.lang.Class.forName(java.lang.Module,java.lang.String) signature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PebbleTemplates/pebble/issues/493
CVE ID: CVE-2019-19900 State: PUBLISHED Published: 2019-12-19T05:03:39 Last Updated: 2024-08-05T02:32:10.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It doesn't sufficiently filter output when displaying content type names in the content creation interface. An attacker could potentially craft a specialized content type name, then have an editor execute scripting when creating content, aka XSS. This vulnerability is mitigated by the fact that an attacker must have a role with the "Administer content types" permission. Additional Analyst Notes: - CVE Program Container: References: - https:
with the "Administer content types" permission. Additional Analyst Notes: - CVE Program Container: References: - https://backdropcms.org/security/backdrop-sa-core-2019-014
CVE ID: CVE-2019-19901 State: PUBLISHED Published: 2019-12-19T05:02:57 Last Updated: 2024-08-05T02:32:09.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It doesn't sufficiently filter output when displaying certain block descriptions created by administrators. An attacker could potentially craft a specialized description, then have an administrator execute scripting when configuring a layout, aka XSS. This issue is mitigated by the fact that the attacker would be required to have the permission to create custom blocks, which is typically an administrative task. Additional Analyst Notes: - C
to have the permission to create custom blocks, which is typically an administrative task. Additional Analyst Notes: - CVE Program Container: References: - https://backdropcms.org/security/backdrop-sa-core-2019-013
CVE ID: CVE-2019-19902 State: PUBLISHED Published: 2019-12-19T05:03:27 Last Updated: 2024-08-05T02:32:09.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It allows the upload of entire-site configuration archives through the user interface or command line. It does not sufficiently check uploaded archives for invalid data, allowing non-configuration scripts to potentially be uploaded to the server. This issue is mitigated by the fact that the attacker would be required to have the "Synchronize, import, and export configuration" permission, a permission that only trusted administrators should
ve the "Synchronize, import, and export configuration" permission, a permission that only trusted administrators should be given. Other measures in the product prevent the execution of PHP scripts, so another server-side scripting language must be accessible on the server to execute code. Additional Analyst Notes: - CVE Program Container: References: - https://backdropcms.org/security/backdrop-sa-core-2019-016
CVE ID: CVE-2019-19903 State: PUBLISHED Published: 2019-12-19T05:03:11 Last Updated: 2024-08-05T02:32:09.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Backdrop CMS 1.14.x before 1.14.2. It doesn't sufficiently filter output when displaying file type descriptions created by administrators. An attacker could potentially craft a specialized description, then have an administrator execute scripting when viewing the list of file types, aka XSS. This vulnerability is mitigated by the fact that an attacker must have a role with the "Administer file types" permission. Additional Analyst Notes: - CVE Program Container: References: - https://backdropcms.org
inister file types" permission. Additional Analyst Notes: - CVE Program Container: References: - https://backdropcms.org/security/backdrop-sa-core-2019-015
CVE ID: CVE-2019-19905 State: PUBLISHED Published: 2019-12-19T17:39:24 Last Updated: 2024-08-05T02:32:08.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetHack 3.6.x before 3.6.4 is prone to a buffer overflow vulnerability when reading very long lines from configuration files. This affects systems that have NetHack installed suid/sgid, and shared systems that allow users to upload their own configuration files. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/947005 - https://github.com/NetHack/NetHack/commit/f4a840a48f4bcf11757b3d859e9d53cc9d5ef226 - https://github.com/NetHack/NetHack/commit/f001de79542b8c38b1f8e6d7eaefbbd28ab94b47 -
8f4bcf11757b3d859e9d53cc9d5ef226 - https://github.com/NetHack/NetHack/commit/f001de79542b8c38b1f8e6d7eaefbbd28ab94b47 - https://github.com/NetHack/NetHack/security/advisories/GHSA-3cm7-rgh5-9pq5 - https://nethack.org/security/
CVE ID: CVE-2019-19906 State: PUBLISHED Published: 2019-12-19T17:39:13 Last Updated: 2024-08-05T02:32:09.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cyrusimap/cyrus-sasl/issues/587 - https://www.openldap.org/its/index.cgi/Incoming?id=9123 - https://lists.debian.org/debian-lts-announce/2019/12/msg00027.html - https://www.debian.or
/index.cgi/Incoming?id=9123 - https://lists.debian.org/debian-lts-announce/2019/12/msg00027.html - https://www.debian.org/security/2019/dsa-4591 - https://seclists.org/bugtraq/2019/Dec/42 - https://usn.ubuntu.com/4256-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MW6GZCLECGL2PBNHVNPJIX4RPVRVFR7R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OB4GSVOJ6ESHQNT5GSV63OX5D4KPSTGT/ - https://support.apple.com/kb/HT211288 - https://support.apple.com/kb/HT211289 - http://seclists.org/fulldisclosure/2020/Jul/24 - http://seclists.org/fulldisclosure/2020/Jul/23 - https://lists.apache.org/thread.h
ists.org/fulldisclosure/2020/Jul/24 - http://seclists.org/fulldisclosure/2020/Jul/23 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E - http://www.openwall.com/lists/oss-security/2022/02/23/4
CVE ID: CVE-2019-19907 State: PUBLISHED Published: 2019-12-19T00:00:00 Last Updated: 2024-08-05T02:32:09.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: HrAddFBBlock in libfreebusy/freebusyutil.cpp in Kopano Groupware Core before 8.7.7 allows out-of-bounds access, as demonstrated by mishandling of an array copy during parsing of ICal data. Additional Analyst Notes: - CVE Program Container: References: - https://stash.kopano.io/projects/KC/repos/kopanocore/commits/4e02b420fff - https://stash.kopano.io/projects/KC/repos/kopanocore/browse/RELNOTES.txt - https://lists.debian.org/debian-lts-announce/2023/03/msg00006.html
CVE ID: CVE-2019-19908 State: PUBLISHED Published: 2019-12-20T12:47:14 Last Updated: 2024-08-05T02:32:09.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyChat-Plus 1.98 is vulnerable to reflected XSS via JavaScript injection into the password reset URL. In the URL, the pmc_username parameter to pass_reset.php is vulnerable. Additional Analyst Notes: - CVE Program Container: References: - http://ciprianmp.com/ - https://sourceforge.net/projects/phpmychat/ - https://cinzinga.github.io/CVE-2019-19908/
CVE ID: CVE-2019-19909 State: PUBLISHED Published: 2019-12-19T18:07:29 Last Updated: 2024-08-05T02:32:09.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Public Knowledge Project (PKP) pkp-lib before 3.1.2-2, as used in Open Journal Systems (OJS) before 3.1.2-2. Code injection can occur in the OJS report generator if an authenticated Journal Manager user visits a crafted URL, because unserialize is used. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pkp/pkp-lib/issues/5302 - https://pkp.sfu.ca/ojs/ojs_download/ - https://github.com/pkp/pkp-lib/compare/3_1_2-1...3_1_2-2
CVE ID: CVE-2019-19910 State: PUBLISHED Published: 2019-12-19T18:41:25 Last Updated: 2024-08-05T02:32:09.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MinervaNeue Skin in MediaWiki from 2019-11-05 to 2019-12-13 (1.35 and/or 1.34) mishandles certain HTML attributes, as demonstrated by IMG onmouseover= (impact is XSS) and IMG src=http (impact is disclosing the client's IP address). This can occur within a talk page topical header that is viewed within a mobile (MobileFrontend) context. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T240487 - https://gerrit.wikimedia.org/r/q/Ida471291f1698387a26736931ab17e6899e05b51
CVE ID: CVE-2019-19911 State: PUBLISHED Published: 2020-01-05T21:57:24 Last Updated: 2024-08-05T02:32:10.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due to the 2 GB limit. However, on Linux running 64-bit Python this results in the process being terminated by the OOM killer. Additional Analyst Notes: - CVE Program Container: References: - https://pillow.readthedocs.io/en/stable/releasenotes/6.2.2.html - https://usn.ubuntu
VE Program Container: References: - https://pillow.readthedocs.io/en/stable/releasenotes/6.2.2.html - https://usn.ubuntu.com/4272-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3DUMIBUYGJRAVJCTFUWBRLVQKOUTVX5P/ - https://www.debian.org/security/2020/dsa-4631