Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-11356 State: PUBLISHED Published: 2019-06-03T19:44:30 Last Updated: 2024-08-04T22:48:09.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar property name. Additional Analyst Notes: - CVE Program Container: References: - https://www.cyrusimap.org/imap/download/release-notes/2.5/index.html - https://www.cyrusimap.org/imap/download/release-notes/3.0/index.html - https://www.cyrusimap.org/imap/download/release-notes/2.5/x/2.5.13.html - https://www.cyrusimap.org/imap
.0/index.html - https://www.cyrusimap.org/imap/download/release-notes/2.5/x/2.5.13.html - https://www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.10.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGO43JS7IFDNITHXOOHOP6JHRKRDIYY6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PICSZDC3UGEUZ27VXGGM6OFI67D3KKLZ/ - https://www.debian.org/security/2019/dsa-4458 - https://seclists.org/bugtraq/2019/Jun/9 - https://access.redhat.com/errata/RHSA-2019:1771 - https://usn.ubuntu.com/4566-1/
CVE ID: CVE-2019-11358 State: PUBLISHED Published: 2019-04-19T00:00:00 Last Updated: 2024-11-15T15:11:23.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-core-2019-006 - https://www.synology.com/security/advisory/Synology_SA_19_19 - https://www.debian.org/security/2019/dsa-4434 - https://seclis
://www.synology.com/security/advisory/Synology_SA_19_19 - https://www.debian.org/security/2019/dsa-4434 - https://seclists.org/bugtraq/2019/Apr/32 - http://www.securityfocus.com/bid/108023 - https://lists.apache.org/thread.html/08720ef215ee7ab3386c05a1a90a7d1c852bf0706f176a7816bf65fc%40%3Ccommits.airflow.apache.org%3E - https://lists.apache.org/thread.html/b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205%40%3Ccommits.airflow.apache.org%3E - https://lists.apache.org/thread.html/88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7%40%3Ccommits.airflow.apache.org%3E - https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844%40%3Ccommits.airflow.a
E - https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844%40%3Ccommits.airflow.apache.org%3E - https://lists.apache.org/thread.html/6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f%40%3Ccommits.airflow.apache.org%3E - https://lists.debian.org/debian-lts-announce/2019/05/msg00006.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KY
OR5IXX6NFAD3HV7FA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5/ - https://seclists.org/bugtraq/2019/May/18 - http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html - http://seclists.
q/2019/May/18 - http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html - http://seclists.org/fulldisclosure/2019/May/11 - http://seclists.org/fulldisclosure/2019/May/10 - http://seclists.org/fulldisclosure/2019/May/13 - https://lists.debian.org/debian-lts-announce/2019/05/msg00029.html - http://www.openwall.com/lists/oss-security/2019/06/03/2 - http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html - https://access.redhat.com/errata/RHSA-2019:1456 - https://www.debian.org/security/2019/dsa-4460 - https://seclists.org/bugtraq/2019/Jun/12 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html - https://access.r
.org/bugtraq/2019/Jun/12 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html - https://access.redhat.com/errata/RHBA-2019:1570 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html - https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:2587 - https://security.netapp.com/advisory/ntap-20190919-0001/ - https://access.redhat.com/errata/RHSA-2019:3023 - https://access.redhat.com/errata/RHSA-2019:3024 - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https
sts.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E - https://www.tenable.com/security/tns-2019-08 - https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E - https://lists.debian.org/deb
rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E - https://lists.debian.org/debian-lts-announce/2020/02/msg00024.html - http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html - https://www.tenable.com/security/tns-2020-02 - https://lists.apache.org/thread.html/r38f0d1aa3c923c22977fe7376508f030f22e22c1379fbb155bf29766%40%3Cdev.syncope.apache.org%3E - https://lists.apache.org/thread.html/r7aac081cbddb6baa24b75e74abf0929bf309b176755a53e3ed810355%40%3Cdev.flink.apache.org%3E - https://lists.apache.org/thread.html/rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d%40%3Cissues.flink.apache.org%3E - https://lists.apache.org/
ml/rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d%40%3Cissues.flink.apache.org%3E - https://lists.apache.org/thread.html/r2041a75d3fc09dec55adfd95d598b38d22715303f65c997c054844c9%40%3Cissues.flink.apache.org%3E - https://lists.apache.org/thread.html/r7e8ebccb7c022e41295f6fdb7b971209b83702339f872ddd8cf8bf73%40%3Cissues.flink.apache.org%3E - https://lists.apache.org/thread.html/r41b5bfe009c845f67d4f68948cc9419ac2d62e287804aafd72892b08%40%3Cissues.flink.apache.org%3E - https://lists.apache.org/thread.html/r2baacab6e0acb5a2092eb46ae04fd6c3e8277b4fd79b1ffb7f3254fa%40%3Cissues.flink.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.apache.org/thread.
3Cissues.flink.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.apache.org/thread.html/r7d64895cc4dff84d0becfc572b20c0e4bf9bfa7b10c6f5f73e783734%40%3Cdev.storm.apache.org%3E - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://backdropcms.org/security/backdrop-sa-core-2019-009 - https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/ - https://snyk.io/vuln/SNYK-JS-JQUERY-174006 - https://github.com/jquery/jquery/pull/4333 - htt
0/jquery-3-4-0-released/ - https://snyk.io/vuln/SNYK-JS-JQUERY-174006 - https://github.com/jquery/jquery/pull/4333 - https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b - https://www.privacy-wise.com/mitigating-cve-2019-11358-in-old-versions-of-jquery/ - https://www.oracle.com/security-alerts/cpuoct2020.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601 - https://www.oracle.com/security-alerts/cpujan2021.html - https://www.oracle.com/security-alerts/cpuApr2021.html - https://www.oracle.com//security-alerts/cpujul2021.html - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpujan2022.html - h
ml - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpujan2022.html - https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1 - https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
CVE ID: CVE-2019-11359 State: PUBLISHED Published: 2019-04-19T23:59:25 Last Updated: 2024-08-04T22:48:09.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrary web script or HTML via the project parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mkucej/i-librarian/issues/138
CVE ID: CVE-2019-11360 State: PUBLISHED Published: 2019-07-12T13:54:45 Last Updated: 2024-08-04T22:48:09.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to add_param_to_argv in xshared.c. Additional Analyst Notes: - CVE Program Container: References: - https://0day.work/cve-2019-11360-bufferoverflow-in-iptables-restore-v1-8-2/ - https://git.netfilter.org/iptables/commit/iptables/xshared.c?id=2ae1099a42e6a0f06de305ca13a842ac83d4683e
CVE ID: CVE-2019-11361 State: PUBLISHED Published: 2020-03-19T16:48:23 Last Updated: 2024-08-04T22:48:09.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Remote Access Plus 10.0.258 does not validate user permissions properly, allowing for privilege escalation and eventually a full application takeover. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/remote-desktop-management/knowledge-base/elevation-of-privilege.html
CVE ID: CVE-2019-11362 State: PUBLISHED Published: 2019-04-20T12:33:47 Last Updated: 2024-08-04T22:48:09.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, as demonstrated by the /do/reward/3 URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rocboss/ROCBOSS/issues/12
CVE ID: CVE-2019-11363 State: PUBLISHED Published: 2019-08-29T20:01:30 Last Updated: 2024-08-04T22:48:09.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to execute arbitrary SQL commands via the AgentConsole/UserGroupQuery.php ShowUser parameter. Additional Analyst Notes: - CVE Program Container: References: - https://prophecyinternational.atlassian.net/wiki/spaces/SC7/pages/158760961/Release+Notes+for+Snare+Central+v7.4.5
CVE ID: CVE-2019-11364 State: PUBLISHED Published: 2019-08-29T20:03:06 Last Updated: 2024-08-04T22:48:09.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the ServerConf/DataManagement/DiskManager.php FORMNAS_share parameter. Additional Analyst Notes: - CVE Program Container: References: - https://prophecyinternational.atlassian.net/wiki/spaces/SC7/pages/158760961/Release+Notes+for+Snare+Central+v7.4.5
CVE ID: CVE-2019-11365 State: PUBLISHED Published: 2019-04-20T12:57:45 Last Updated: 2024-08-04T22:48:09.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in atftpd in atftp 0.7.1. A remote attacker may send a crafted packet triggering a stack-based buffer overflow due to an insecurely implemented strncpy call. The vulnerability is triggered by sending an error packet of 3 bytes or fewer. There are multiple instances of this vulnerable strncpy pattern within the code base, specifically within tftpd_file.c, tftp_file.c, tftpd_mtftp.c, and tftp_mtftp.c. Additional Analyst Notes: - CVE Program Container: References: - https://pulsesecurity.co.nz/advisories/
d tftp_mtftp.c. Additional Analyst Notes: - CVE Program Container: References: - https://pulsesecurity.co.nz/advisories/atftpd-multiple-vulnerabilities - https://sourceforge.net/p/atftp/code/ci/abed7d245d8e8bdfeab24f9f7f55a52c3140f96b/ - https://www.debian.org/security/2019/dsa-4438 - https://seclists.org/bugtraq/2019/May/16 - https://lists.debian.org/debian-lts-announce/2019/05/msg00012.html - https://security.gentoo.org/glsa/202003-14 - https://usn.ubuntu.com/4540-1/
CVE ID: CVE-2019-11366 State: PUBLISHED Published: 2019-04-20T12:58:09 Last Updated: 2024-08-04T22:48:09.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If thread_data is NULL when assigned to current, and modified by another thread before a certain tftpd_list.c check, there is a crash when dereferencing current->next. Additional Analyst Notes: - CVE Program Container: References: - https://pulsesecurity.co.nz/advisories/atftpd-mu
>next. Additional Analyst Notes: - CVE Program Container: References: - https://pulsesecurity.co.nz/advisories/atftpd-multiple-vulnerabilities - https://sourceforge.net/p/atftp/code/ci/382f76a90b44f81fec00e2f609a94def4a5d3580/ - https://www.debian.org/security/2019/dsa-4438 - https://seclists.org/bugtraq/2019/May/16 - https://lists.debian.org/debian-lts-announce/2019/05/msg00012.html - https://security.gentoo.org/glsa/202003-14 - https://usn.ubuntu.com/4540-1/
CVE ID: CVE-2019-11367 State: PUBLISHED Published: 2019-06-03T20:16:01 Last Updated: 2024-08-04T22:48:09.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in AUO Solar Data Recorder before 1.3.0. The web portal uses HTTP Basic Authentication and provides the account and password in the WWW-Authenticate attribute. By using this account and password, anyone can login successfully. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1H1L5s14Omnx1eJAdRlRninnqUKLJ_xDA/view - https://github.com/nepenthe0320/cve_poc/blob/master/CVE-2019-11367 - http://packetstormsecurity.com/files/153151/AUO-Solar-Data-Recorder-Incor
enthe0320/cve_poc/blob/master/CVE-2019-11367 - http://packetstormsecurity.com/files/153151/AUO-Solar-Data-Recorder-Incorrect-Access-Control.html
CVE ID: CVE-2019-11368 State: PUBLISHED Published: 2019-06-03T20:13:35 Last Updated: 2024-08-04T22:48:09.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS was discovered in AUO Solar Data Recorder before 1.3.0 via the protect/config.htm addr parameter. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1X42Rdb_u4YVieXRqs0jOjyJZOb7DCJT6 - https://github.com/nepenthe0320/cve_poc/blob/master/CVE-2019-11368
CVE ID: CVE-2019-11369 State: PUBLISHED Published: 2019-06-03T19:48:25 Last Updated: 2024-08-04T22:48:09.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Carel pCOWeb prior to B1.2.4. In /config/pw_changeusers.html the device stores cleartext passwords, which may allow sensitive information to be read by someone with access to the device. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=12Sq6oaxe1mC1y71Emo1YladjDjwTdNfb - https://github.com/nepenthe0320/cve_poc/blob/master/CVE-2019-11369 - http://seclists.org/fulldisclosure/2019/Oct/45
CVE ID: CVE-2019-11370 State: PUBLISHED Published: 2019-06-03T19:44:10 Last Updated: 2024-08-04T22:48:09.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pw_snmp.html "System contact" field. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1WkmtsCVNCtxwWH2fe9DtHow_Nedp1a7j - https://github.com/nepenthe0320/cve_poc/blob/master/CVE-2019-11370
CVE ID: CVE-2019-11371 State: PUBLISHED Published: 2019-04-20T17:23:20 Last Updated: 2024-08-04T22:48:09.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: BWA (aka Burrow-Wheeler Aligner) 0.7.17 r1198 has a Buffer Overflow via a long prefix that is mishandled in bns_fasta2bntseq and bns_dump at btnseq.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lh3/bwa/issues/239
CVE ID: CVE-2019-11372 State: PUBLISHED Published: 2019-04-20T14:05:17 Last Updated: 2024-08-04T22:48:09.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read in MediaInfoLib::File__Tags_Helper::Synched_Test in Tag/File__Tags.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MediaArea/MediaInfoLib/pull/1111 - https://sourceforge.net/p/mediainfo/bugs/1101/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BYKBAXS35KFMU4YLO37VGDIKHEL5HSPO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fed
g/message/BYKBAXS35KFMU4YLO37VGDIKHEL5HSPO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B752JY7TABWSVYHFATD37XDD6PVIO5C6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BC4Z4BGGMSSVTRKVD3OCW4JLH3K2ZNGP/ - https://usn.ubuntu.com/3988-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYF5I42OBJR7HKJD2OFS6LP26I52IT3M/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOA4AWTRLWVQBZZAKXXQHP7M2NK6CB3Z/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/
WTRLWVQBZZAKXXQHP7M2NK6CB3Z/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJYASICJ2VUUNGHDBB62FGYQN2SNITM5/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00069.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00083.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00028.html
CVE ID: CVE-2019-11373 State: PUBLISHED Published: 2019-04-20T14:05:36 Last Updated: 2024-08-04T22:48:09.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read in File__Analyze::Get_L8 in File__Analyze_Buffer.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MediaArea/MediaInfoLib/pull/1111 - https://sourceforge.net/p/mediainfo/bugs/1101/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BYKBAXS35KFMU4YLO37VGDIKHEL5HSPO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/mes
5KFMU4YLO37VGDIKHEL5HSPO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B752JY7TABWSVYHFATD37XDD6PVIO5C6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BC4Z4BGGMSSVTRKVD3OCW4JLH3K2ZNGP/ - https://usn.ubuntu.com/3988-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYF5I42OBJR7HKJD2OFS6LP26I52IT3M/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOA4AWTRLWVQBZZAKXXQHP7M2NK6CB3Z/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJYASICJ2V
M2NK6CB3Z/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJYASICJ2VUUNGHDBB62FGYQN2SNITM5/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00069.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00083.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00028.html
CVE ID: CVE-2019-11374 State: PUBLISHED Published: 2019-04-20T14:35:05 Last Updated: 2024-08-04T22:48:09.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: 74CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin&c=admin&a=add URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/203/ - https://www.exploit-db.com/exploits/46738/ - http://packetstormsecurity.com/files/152603/74CMS-5.0.1-Cross-Site-Request-Forgery.html
CVE ID: CVE-2019-11375 State: PUBLISHED Published: 2019-04-20T14:35:15 Last Updated: 2024-08-04T22:48:09.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Msvod v10 has a CSRF vulnerability to change user information via the admin/member/edit.html URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/198/ - https://www.exploit-db.com/exploits/46739/ - http://packetstormsecurity.com/files/152604/Msvod-10-Cross-Site-Request-Forgery.html
CVE ID: CVE-2019-11376 State: PUBLISHED Published: 2019-04-20T14:35:52 Last Updated: 2024-11-15T15:05:29.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: SOY CMS v3.0.2 allows remote attackers to execute arbitrary PHP code via a <?php substring in the second text box. NOTE: the vendor indicates that there was an assumption that the content is "made editable on its own. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.iwantacve.cn/index.php/archives/212/ - https://github.com/inunosinsi/soycms/issues/5
CVE ID: CVE-2019-11377 State: PUBLISHED Published: 2019-04-20T14:36:04 Last Updated: 2024-08-04T22:48:09.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: wcms/wex/finder/action.php in WCMS v0.3.2 has a Arbitrary File Upload Vulnerability via developer/finder because .php is a valid extension according to the fm_get_text_exts function. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/208/ - https://github.com/vedees/wcms/issues/2
CVE ID: CVE-2019-11378 State: PUBLISHED Published: 2019-04-20T14:51:46 Last Updated: 2024-08-04T22:48:09.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ProjectSend r1053. upload-process-form.php allows finished_files[]=../ directory traversal. It is possible for users to read arbitrary files and (potentially) access the supporting database, delete arbitrary files, access user passwords, or run arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/projectsend/projectsend/issues/700 - http://www.securityfocus.com/bid/108069