Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-19495 State: PUBLISHED Published: 2020-01-08T17:05:54 Last Updated: 2024-08-05T02:16:47.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScript in a victim's browser. The attacker can then configure the cable modem to port forward the modem's internal TELNET server, allowing external access to a root shell. Additional Analyst Notes: - CVE Program Container: References: - https://cablehaunt.com - https://github.com/Lyrebirds/Fast8690-exploit - https://github.com/Lyrebirds/Cable-Haunt-Report/releases/download/
com - https://github.com/Lyrebirds/Fast8690-exploit - https://github.com/Lyrebirds/Cable-Haunt-Report/releases/download/2.4/report.pdf
CVE ID: CVE-2019-19496 State: PUBLISHED Published: 2019-12-02T03:01:53 Last Updated: 2024-08-05T02:16:48.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alfresco Enterprise before 5.2.5 allows stored XSS via an uploaded HTML document. Additional Analyst Notes: - CVE Program Container: References: - https://vipinxsec.blogspot.com/2019/11/alfresco-stored-xss-vulnerability-blind.html - https://github.com/vipinxsec/Alfresco_XSS/blob/master/README.md
CVE ID: CVE-2019-19497 State: PUBLISHED Published: 2019-12-17T18:40:09 Last Updated: 2024-08-05T02:16:47.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: MDaemon Email Server 17.5.1 allows XSS via the filename of an attachment to an email message. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/Dmitriy_Area51 - https://github.com/Dmitriy-area51/Exploit/blob/master/CVE-2019-19497/README.md
CVE ID: CVE-2019-19499 State: PUBLISHED Published: 2020-08-28T14:49:46 Last Updated: 2024-08-05T02:16:47.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grafana <= 6.4.3 has an Arbitrary File Read vulnerability, which could be exploited by an authenticated attacker that has privileges to modify the data source configurations. Additional Analyst Notes: - CVE Program Container: References: - https://swarm.ptsecurity.com/grafana-6-4-3-arbitrary-file-read/ - https://security.netapp.com/advisory/ntap-20200918-0003/
CVE ID: CVE-2019-19500 State: PUBLISHED Published: 2020-04-15T13:13:22 Last Updated: 2024-08-05T02:16:47.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Matrix42 Workspace Management 9.1.2.2765 and below allows stored XSS via unfiltered description parameters, as demonstrated by the comment field of a special order for individual software. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2020/Apr/8 - http://packetstormsecurity.com/files/157232/Matrix42-Workspace-Management-9.1.2.2765-Cross-Site-Scripting.html
CVE ID: CVE-2019-19501 State: PUBLISHED Published: 2019-12-13T12:27:37 Last Updated: 2024-08-05T02:16:48.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: VeraCrypt 1.24 allows Local Privilege Escalation during execution of VeraCryptExpander.exe. Additional Analyst Notes: - CVE Program Container: References: - https://www.veracrypt.fr/en/Release%20Notes.html - https://www.veracrypt.fr/code/VeraCrypt/commit/?id=07bb27e3b94ee26128d5c7f800cdcf3232ff281a
CVE ID: CVE-2019-19502 State: PUBLISHED Published: 2019-12-02T15:14:20 Last Updated: 2024-08-05T02:16:47.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code injection in pluginconfig.php in Image Uploader and Browser for CKEditor before 4.1.9 allows remote authenticated users to execute arbitrary PHP code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xsmo/Image-Uploader-and-Browser-for-CKEditor/pull/11 - https://github.com/xsmo/Image-Uploader-and-Browser-for-CKEditor/compare/4.1.8...v4.1.9 - https://github.com/xsmo/Image-Uploader-and-Browser-for-CKEditor/pull/11/commits/5c7a6b0e10504f08e2f50655541b767e276ce749 - https://github.com/xsmo/
ge-Uploader-and-Browser-for-CKEditor/pull/11/commits/5c7a6b0e10504f08e2f50655541b767e276ce749 - https://github.com/xsmo/Image-Uploader-and-Browser-for-CKEditor/commit/c293d38c8b99444e775d94c1af50c9676c6544d2 - https://visat.me/security/cve-2019-19502/
CVE ID: CVE-2019-19505 State: PUBLISHED Published: 2020-06-25T19:22:21 Last Updated: 2024-08-05T02:16:48.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the "Wireless" section in the web-UI. By sending a specially crafted hostname, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. Additional Analyst Notes: - CVE Program Container: References: - https://securityintelligence.com/posts/vulnerable-powerline-extenders-underline-lax-iot-security/
CVE ID: CVE-2019-19506 State: PUBLISHED Published: 2020-06-25T19:22:18 Last Updated: 2024-08-05T02:16:48.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a denial of service, caused by an error in the "homeplugd" process. By sending a specially crafted UDP packet, an attacker could exploit this vulnerability to cause the device to reboot. Additional Analyst Notes: - CVE Program Container: References: - https://securityintelligence.com/posts/vulnerable-powerline-extenders-underline-lax-iot-security/
CVE ID: CVE-2019-19507 State: PUBLISHED Published: 2019-12-02T16:17:45 Last Updated: 2024-08-05T02:16:48.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: In jpv (aka Json Pattern Validator) before 2.1.1, compareCommon() can be bypassed because certain internal attributes can be overwritten via a conflicting name, as demonstrated by 'constructor': {'name':'Array'}. This affects validate(). Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/manvel-khnkoyan/jpv/issues/6 - https://www.npmjs.com/package/jpv
CVE ID: CVE-2019-19509 State: PUBLISHED Published: 2020-01-06T19:27:27 Last Updated: 2024-08-05T02:16:48.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a GET request to ajaxArchiveFiles.php because the path parameter is passed to the exec function without filtering, which can lead to command execution. Additional Analyst Notes: - CVE Program Container: References: - https://raw.githubusercontent.com/v1k1ngfr/exploits/master/rconfig_exploit.py?token= - https://github.com/v1k1ngfr - https://github.com/v1k1ngfr/exploits-rconfig/blob/master/rconfig_CVE-2019-19509
y?token= - https://github.com/v1k1ngfr - https://github.com/v1k1ngfr/exploits-rconfig/blob/master/rconfig_CVE-2019-19509.py - http://packetstormsecurity.com/files/156146/rConfig-3.9.3-Remote-Code-Execution.html - http://packetstormsecurity.com/files/156766/Rconfig-3.x-Chained-Remote-Code-Execution.html - http://packetstormsecurity.com/files/156950/rConfig-3.9.4-searchField-Remote-Code-Execution.html
CVE ID: CVE-2019-19513 State: PUBLISHED Published: 2020-10-16T12:52:35 Last Updated: 2024-08-05T02:16:47.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BASSMIDI plugin 2.4.12.1 for Un4seen BASS Audio Library on Windows is prone to an out of bounds write vulnerability. An attacker may exploit this to execute code on the target machine. A failure in exploitation leads to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.un4seen.com/ - https://github.com/staufnic/CVE/tree/master/CVE-2019-19513
CVE ID: CVE-2019-19514 State: PUBLISHED Published: 2020-05-05T16:59:52 Last Updated: 2024-08-05T02:16:48.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in basic repeater settings via an SSID. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4
CVE ID: CVE-2019-19515 State: PUBLISHED Published: 2020-05-05T17:01:28 Last Updated: 2024-08-05T02:16:48.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in wireless settings. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4
CVE ID: CVE-2019-19516 State: PUBLISHED Published: 2019-12-02T22:10:35 Last Updated: 2024-08-05T02:16:48.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intelbras WRN 150 1.0.18 devices allow CSRF via GO=system_password.asp to the goform/SysToolChangePwd URI to change a password. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47545 - http://packetstormsecurity.com/files/155557/Intelbras-Router-RF1200-1.1.3-Cross-Site-Request-Forgery.html
CVE ID: CVE-2019-19517 State: PUBLISHED Published: 2020-05-05T17:03:53 Last Updated: 2024-08-05T02:16:48.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4
CVE ID: CVE-2019-19518 State: PUBLISHED Published: 2020-01-08T15:57:21 Last Updated: 2024-08-05T02:16:48.596Z Vendors: n/a Products: CA Automic Sysload Problem Types: Authentication Flaw leading to Remote Command Execution Description: CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server port, that potentially allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/ca20191210-01-security-notice-for-ca-automic-sysload.html
CVE ID: CVE-2019-19519 State: PUBLISHED Published: 2019-12-04T23:34:48 Last Updated: 2024-08-05T02:16:47.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenBSD 6.6, local users can use the su -L option to achieve any login class (often excluding root) because there is a logic error in the main function in su/su.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2019/12/04/5 - https://www.openbsd.org/errata66.html - https://github.com/openbsd/src/blob/2dfc98f42e117c7605b52b5020b630d98601dc22/usr.bin/su/su.c#L210-L211 - http://www.openwall.com/lists/oss-security/2019/12/04/5 - https://seclists.org/bugtraq/2019/Dec
.bin/su/su.c#L210-L211 - http://www.openwall.com/lists/oss-security/2019/12/04/5 - https://seclists.org/bugtraq/2019/Dec/8 - http://packetstormsecurity.com/files/155572/Qualys-Security-Advisory-OpenBSD-Authentication-Bypass-Privilege-Escalation.html - http://seclists.org/fulldisclosure/2019/Dec/14
CVE ID: CVE-2019-19520 State: PUBLISHED Published: 2019-12-04T23:34:21 Last Updated: 2024-08-05T02:16:48.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: xlock in OpenBSD 6.6 allows local users to gain the privileges of the auth group by providing a LIBGL_DRIVERS_PATH environment variable, because xenocara/lib/mesa/src/loader/loader.c mishandles dlopen. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2019/12/04/5 - https://www.openbsd.org/errata66.html - http://www.openwall.com/lists/oss-security/2019/12/04/6 - http://www.openwall.com/lists/oss-security/2019/12/04/5 - https://seclists.org/bugtraq/2019/Dec/8 - http://
19/12/04/6 - http://www.openwall.com/lists/oss-security/2019/12/04/5 - https://seclists.org/bugtraq/2019/Dec/8 - http://packetstormsecurity.com/files/155572/Qualys-Security-Advisory-OpenBSD-Authentication-Bypass-Privilege-Escalation.html - http://seclists.org/fulldisclosure/2019/Dec/14
CVE ID: CVE-2019-19521 State: PUBLISHED Published: 2019-12-04T23:33:35 Last Updated: 2024-08-05T02:16:47.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: libc in OpenBSD 6.6 allows authentication bypass via the -schallenge username, as demonstrated by smtpd, ldapd, or radiusd. This is related to gen/auth_subr.c and gen/authenticate.c in libc (and login/login.c and xenocara/app/xenodm/greeter/verify.c). Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2019/12/04/5 - https://www.openbsd.org/errata66.html - http://www.openwall.com/lists/oss-security/2019/12/04/6 - http://www.openwall.com/lists/oss-security/2019/12/04/5 -
ml - http://www.openwall.com/lists/oss-security/2019/12/04/6 - http://www.openwall.com/lists/oss-security/2019/12/04/5 - https://seclists.org/bugtraq/2019/Dec/8 - http://packetstormsecurity.com/files/155572/Qualys-Security-Advisory-OpenBSD-Authentication-Bypass-Privilege-Escalation.html - http://seclists.org/fulldisclosure/2019/Dec/14
CVE ID: CVE-2019-19522 State: PUBLISHED Published: 2019-12-04T23:33:05 Last Updated: 2024-08-05T02:16:48.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the auth group. This occurs because root's file can be written to /etc/skey or /var/db/yubikey, and need not be owned by root. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2019/12/04/5 - https://www.openbsd.org/errata66.html - http://www.openwall.com/lists/oss-security/2019/12/04/5 - https://seclists.org/bugtr
s://www.openbsd.org/errata66.html - http://www.openwall.com/lists/oss-security/2019/12/04/5 - https://seclists.org/bugtraq/2019/Dec/8 - http://packetstormsecurity.com/files/155572/Qualys-Security-Advisory-OpenBSD-Authentication-Bypass-Privilege-Escalation.html - http://seclists.org/fulldisclosure/2019/Dec/14
CVE ID: CVE-2019-19523 State: PUBLISHED Published: 2019-12-03T15:42:29 Last Updated: 2024-08-05T02:16:47.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.7 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=44efc269db7929f6275a1fa927ef082e533ecde0 - http://www.openwall.com/lists/oss-security/2019/12/03/4 - https://lists.debian.org/debian-lts-announce/2020/01
33ecde0 - http://www.openwall.com/lists/oss-security/2019/12/03/4 - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
CVE ID: CVE-2019-19524 State: PUBLISHED Published: 2019-12-03T15:42:13 Last Updated: 2024-08-05T02:16:48.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver, aka CID-fa3a5a1880c9. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.12 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fa3a5a1880c91bb92594ad42dfe9eedad7996b86 - http://www.openwall.com/lists/oss-security/2019/12/03/4 - http://lists.opensuse.org/opensuse-security-annou
dad7996b86 - http://www.openwall.com/lists/oss-security/2019/12/03/4 - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html - https://usn.ubuntu.com/4228-1/ - https://usn.ubuntu.com/4227-1/ - https://usn.ubuntu.com/4226-1/ - https://usn.ubuntu.com/4225-1/ - https://usn.ubuntu.com/4228-2/ - https://usn.ubuntu.com/4227-2/ - https://seclists.org/bugtraq/2020/Jan/10 - http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://usn.ubuntu.com/4225-2/ - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE ID: CVE-2019-19525 State: PUBLISHED Published: 2019-12-03T15:41:58 Last Updated: 2024-08-05T02:16:48.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.3.6, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver, aka CID-7fd25e6fc035. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.6 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7fd25e6fc035f4b04b75bca6d7e8daa069603a76 - http://www.openwall.com/lists/oss-security/2019/12/03/4 - http://lists.opensuse.org/opensuse-security-ann
daa069603a76 - http://www.openwall.com/lists/oss-security/2019/12/03/4 - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE ID: CVE-2019-19526 State: PUBLISHED Published: 2019-12-03T15:41:43 Last Updated: 2024-08-05T02:16:48.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.3.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver, aka CID-6af3aa57a098. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6af3aa57a0984e061f61308fe181a9a12359fecc - http://www.openwall.com/lists/oss-security/2019/12/03/4 - https://usn.ubuntu.com/4226-1/ - http://lists.opensuse
9fecc - http://www.openwall.com/lists/oss-security/2019/12/03/4 - https://usn.ubuntu.com/4226-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
CVE ID: CVE-2019-19527 State: PUBLISHED Published: 2019-12-03T15:41:27 Last Updated: 2024-08-05T02:16:48.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.10 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9c09b214f30e3c11f9b0b03f89442df03643794d - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6d4472d7bec39917b54e4e802457
df03643794d - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6d4472d7bec39917b54e4e80245784ea5d60ce49 - http://www.openwall.com/lists/oss-security/2019/12/03/4 - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
CVE ID: CVE-2019-19528 State: PUBLISHED Published: 2019-12-03T15:41:11 Last Updated: 2024-08-05T02:16:48.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver, aka CID-edc4746f253d. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.7 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=edc4746f253d907d048de680a621e121517f484b - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c468a8aa790e0dfe0a7f8a39db282
21517f484b - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c468a8aa790e0dfe0a7f8a39db282d39c2c00b46 - http://www.openwall.com/lists/oss-security/2019/12/03/4 - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html
CVE ID: CVE-2019-19529 State: PUBLISHED Published: 2019-12-03T15:40:58 Last Updated: 2024-08-05T02:16:48.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.3.11, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver, aka CID-4d6636498c41. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4d6636498c41891d0482a914dd570343a838ad79 - http://www.openwall.com/lists/oss-security/2019/12/03/4 - http://lists.opensuse.org/opensuse-security-a
570343a838ad79 - http://www.openwall.com/lists/oss-security/2019/12/03/4 - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html - https://usn.ubuntu.com/4227-1/ - https://usn.ubuntu.com/4226-1/ - https://usn.ubuntu.com/4225-1/ - https://usn.ubuntu.com/4227-2/ - https://usn.ubuntu.com/4225-2/
CVE ID: CVE-2019-19530 State: PUBLISHED Published: 2019-12-03T15:40:38 Last Updated: 2024-08-05T02:16:48.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.10 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c52873e5a1ef72f845526d9f6a50704433f9c625 - http://www.openwall.com/lists/oss-security/2019/12/03/4 - http://lists.opensuse.org/opensuse-security-anno
04433f9c625 - http://www.openwall.com/lists/oss-security/2019/12/03/4 - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE ID: CVE-2019-19531 State: PUBLISHED Published: 2019-12-03T15:39:51 Last Updated: 2024-08-05T02:16:47.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.2.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver, aka CID-fc05481b2fca. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.9 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fc05481b2fcabaaeccf63e32ac1baab54e5b6963 - http://www.openwall.com/lists/oss-security/2019/12/03/4 - http://lists.opensuse.org/opensuse-security-announce/
5b6963 - http://www.openwall.com/lists/oss-security/2019/12/03/4 - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE ID: CVE-2019-19532 State: PUBLISHED Published: 2019-12-03T15:39:36 Last Updated: 2024-08-05T02:16:48.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka CID-d9d4b1e46d95. This affects drivers/hid/hid-axff.c, drivers/hid/hid-dr.c, drivers/hid/hid-emsff.c, drivers/hid/hid-gaff.c, drivers/hid/hid-holtekff.c, drivers/hid/hid-lg2ff.c, drivers/hid/hid-lg3ff.c, drivers/hid/hid-lg4ff.c, drivers/hid/hid-lgff.c, drivers/hid/hid-logitech-hidpp.c, drivers/hid/hid-microsoft.c, drivers/hid/hid-sony.c, drivers/hid/hid-tmff.c, and dri