Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-14523 State: PUBLISHED Published: 2019-08-02T11:18:28 Last Updated: 2024-08-05T00:19:41.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Schism Tracker through 20190722. There is an integer underflow via a large plen in fmt_okt_load_song in the Amiga Oktalyzer parser in fmt/okt.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/schismtracker/schismtracker/issues/202 - https://github.com/schismtracker/schismtracker/releases/tag/20190805 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00083.html - https://s
-announce/2019-08/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00083.html - https://security.gentoo.org/glsa/202107-12
CVE ID: CVE-2019-14524 State: PUBLISHED Published: 2019-08-02T11:18:12 Last Updated: 2024-08-05T00:19:41.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Schism Tracker through 20190722. There is a heap-based buffer overflow via a large number of song patterns in fmt_mtm_load_song in fmt/mtm.c, a different vulnerability than CVE-2019-14465. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/schismtracker/schismtracker/issues/201 - https://github.com/schismtracker/schismtracker/releases/tag/20190805 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00072.html - http://lists.opensuse.org/opensuse-securit
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00083.html
CVE ID: CVE-2019-14525 State: PUBLISHED Published: 2019-08-05T11:22:30 Last Updated: 2024-08-05T00:19:41.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Octopus Deploy 2019.4.0 through 2019.6.x before 2019.6.6, and 2019.7.x before 2019.7.6, an authenticated system administrator is able to view sensitive values by visiting a server configuration page or making an API call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/5753 - https://github.com/OctopusDeploy/Issues/issues/5754 - https://octopus.com/downloads/compare?from=2019.6.6&to=2019.7.7
CVE ID: CVE-2019-14526 State: PUBLISHED Published: 2019-08-14T20:50:12 Last Updated: 2024-08-05T00:19:41.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03. The web-interface Cross-Site Request Forgery token is stored in a dynamically generated JavaScript file, and therefore can be embedded in third party pages, and re-used against the Nighthawk web interface. This entirely bypasses the intended security benefits of the use of a CSRF-protection token. Additional Analyst Notes: - CVE Program Container: References: - https://www.pentestpartners.com/security-blog/how-not-to-do-cross-site-request-forger
E Program Container: References: - https://www.pentestpartners.com/security-blog/how-not-to-do-cross-site-request-forgery-protection-the-netgear-nighthawk-m1/
CVE ID: CVE-2019-14527 State: PUBLISHED Published: 2019-08-14T20:51:37 Last Updated: 2024-08-05T00:19:41.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03. System commands can be executed, via the web interface, after authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.pentestpartners.com/security-blog/how-not-to-do-cross-site-request-forgery-protection-the-netgear-nighthawk-m1/
CVE ID: CVE-2019-14528 State: PUBLISHED Published: 2019-08-02T13:25:20 Last Updated: 2024-08-05T00:19:41.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: GnuCOBOL 2.2 has a heap-based buffer overflow in read_literal in cobc/scanner.l via crafted COBOL source code. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/open-cobol/bugs/583/
CVE ID: CVE-2019-14529 State: PUBLISHED Published: 2019-08-02T13:46:30 Last Updated: 2024-08-05T00:19:41.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenEMR before 5.0.2 allows SQL Injection in interface/forms/eye_mag/save.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openemr/openemr/pull/2592 - https://github.com/Wezery/CVE-2019-14529
CVE ID: CVE-2019-14530 State: PUBLISHED Published: 2019-08-13T13:32:30 Last Updated: 2024-08-05T00:19:41.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in custom/ajax_download.php in OpenEMR before 5.0.2 via the fileName parameter. An attacker can download any file (that is readable by the user www-data) from server storage. If the requested file is writable for the www-data user and the directory /var/www/openemr/sites/default/documents/cqm_qrda/ exists, it will be deleted from server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openemr/openemr/pull/2592 - https://github.com/Wezery/CVE-2019-14530 - http://packe
er: References: - https://github.com/openemr/openemr/pull/2592 - https://github.com/Wezery/CVE-2019-14530 - http://packetstormsecurity.com/files/163215/OpenEMR-5.0.1.7-Path-Traversal.html - http://packetstormsecurity.com/files/163375/OpenEMR-5.0.1.7-Path-Traversal.html - https://github.com/Hacker5preme/Exploits/tree/main/CVE-2019-14530-Exploit
CVE ID: CVE-2019-14531 State: PUBLISHED Published: 2019-08-02T14:07:51 Last Updated: 2024-08-05T00:19:41.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an out of bounds read on iso9660 while parsing System Use Sharing Protocol data in fs/iso9660.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sleuthkit/sleuthkit/issues/1576
CVE ID: CVE-2019-14532 State: PUBLISHED Published: 2019-08-02T14:07:40 Last Updated: 2024-08-05T00:19:41.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an off-by-one overwrite due to an underflow on tools/hashtools/hfind.cpp while using a bogus hash table. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sleuthkit/sleuthkit/issues/1575 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5EY53OYU7UZLAJWNIVVNR3EX2RNCCFTB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQR2QY3IAF2IG6
CCFTB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQR2QY3IAF2IG6HGBSKGL66VUDOTC3OA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFQKIE5U3LS5U7POPGS7YHLUSW2URWGJ/
CVE ID: CVE-2019-14533 State: PUBLISHED Published: 2019-08-29T18:43:45 Last Updated: 2024-08-05T00:19:41.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=vlc.git&a=search&h=refs/heads/master&st=commit&s=cve-2019 - https://www.debian.org/security/2019/dsa-4504 - https://seclists.org/bugtraq/2019/Aug/36 - https://www.videolan.org/security/sb-vlc308.html - https://security.gentoo.org/glsa/201909-02 - https://usn.ubuntu.com/4131-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-04
entoo.org/glsa/201909-02 - https://usn.ubuntu.com/4131-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html
CVE ID: CVE-2019-14534 State: PUBLISHED Published: 2019-08-29T18:41:33 Last Updated: 2024-08-05T00:19:41.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=vlc.git&a=search&h=refs/heads/master&st=commit&s=cve-2019 - https://www.debian.org/security/2019/dsa-4504 - https://seclists.org/bugtraq/2019/Aug/36 - https://www.videolan.org/security/sb-vlc308.html - https://security.gentoo.org/glsa/201909-02 - https://usn.ubuntu.com/41
ttps://www.videolan.org/security/sb-vlc308.html - https://security.gentoo.org/glsa/201909-02 - https://usn.ubuntu.com/4131-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html
CVE ID: CVE-2019-14535 State: PUBLISHED Published: 2019-08-29T17:38:30 Last Updated: 2024-08-05T00:19:41.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted WMV file. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=vlc.git&a=search&h=refs/heads/master&st=commit&s=cve-2019 - https://www.debian.org/security/2019/dsa-4504 - https://seclists.org/bugtraq/2019/Aug/36 - https://www.videolan.org/security/sb-vlc308.html - https://security.gentoo.org/glsa/201909-02 - https://usn.ubuntu
/36 - https://www.videolan.org/security/sb-vlc308.html - https://security.gentoo.org/glsa/201909-02 - https://usn.ubuntu.com/4131-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html
CVE ID: CVE-2019-14537 State: PUBLISHED Published: 2019-08-07T16:43:52 Last Updated: 2024-08-05T00:19:41.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/YOURLS/YOURLS/releases - https://github.com/YOURLS/YOURLS/commits/master - https://github.com/YOURLS/YOURLS/pull/2542 - https://github.com/Wocanilo/CVE-2019-14537 - https://security-garage.com/index.php/cves/cve-2019-14537-api-authentication-bypass-via-type-juggling
CVE ID: CVE-2019-14540 State: PUBLISHED Published: 2019-09-15T21:45:22 Last Updated: 2024-08-05T00:19:41.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/0fcef7321095ce0bc597d468d150cff3d647f4cb3aef3bd4d20e1c69%40%3Ccommits.tinkerpop.apache.org%3E - https://lists.apache.org/thread.html/40c00861b53bb611dee7d6f35f864aa7d1c1bd77df28db597cbf27e1%40%3Cissues.hbase.apache.org%3E - https://lists.apache.org/thread.html/a4f2c9fb36642a48912cdec6836ec00e
df28db597cbf27e1%40%3Cissues.hbase.apache.org%3E - https://lists.apache.org/thread.html/a4f2c9fb36642a48912cdec6836ec00e497427717c5d377f8d7ccce6%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/a360b46061c91c5cad789b6c3190aef9b9f223a2b75c9c9f046fe016%40%3Cissues.hbase.apache.org%3E - https://lists.apache.org/thread.html/dc6b5cad721a4f6b3b62ed1163894941140d9d5656140fb757505ca0%40%3Cissues.hbase.apache.org%3E - https://lists.apache.org/thread.html/ad0d238e97a7da5eca47a014f0f7e81f440ed6bf74a93183825e18b9%40%3Cissues.hbase.apache.org%3E - https://lists.apache.org/thread.html/e90c3feb21702e68a8c08afce37045adb3870f2bf8223fa403fb93fb%40%3Ccommits.hbase.apache.org%3E
//lists.apache.org/thread.html/e90c3feb21702e68a8c08afce37045adb3870f2bf8223fa403fb93fb%40%3Ccommits.hbase.apache.org%3E - https://lists.debian.org/debian-lts-announce/2019/10/msg00001.html - https://www.debian.org/security/2019/dsa-4542 - https://seclists.org/bugtraq/2019/Oct/6 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TH5VFUN4P7CCIP7KSEXYA5MUTFCUDUJT/ - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.htm
eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3200 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q7CANA7KV53JROZDX5Z5P26UG5VN2K43/ - https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E - https://access.redhat.com/errata/RHSA-2020:0164 - https://access.redhat.com/errata/RHSA-2020:0159 - https://access.redhat.com/errata/RHSA-2020:0160 - https://access.redhat.com/
//access.redhat.com/errata/RHSA-2020:0159 - https://access.redhat.com/errata/RHSA-2020:0160 - https://access.redhat.com/errata/RHSA-2020:0161 - https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E - https://access.redhat.com/errata/RHSA-2020:0445 - https://lists.apache.org/thread.html/r8aaf4ee16bbaf6204731d4770d96ebb34b258cd79b491f9cdd7f2540%40%3Ccommits.nifi.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html
acle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://github.com/FasterXML/jackson-databind/issues/2449 - https://github.com/FasterXML/jackson-databind/blob/master/release-notes/VERSION-2.x - https://github.com/FasterXML/jackson-databind/issues/2410 - https://security.netapp.com/advisory/ntap-20191004-0002/ - https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2020.
9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2020.html
CVE ID: CVE-2019-14541 State: PUBLISHED Published: 2019-08-02T20:10:53 Last Updated: 2024-08-05T00:19:41.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: GnuCOBOL 2.2 has a stack-based buffer overflow in cb_encode_program_id in cobc/typeck.c via crafted COBOL source code. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/open-cobol/bugs/584/
CVE ID: CVE-2019-14544 State: PUBLISHED Published: 2019-08-02T21:17:37 Last Updated: 2024-08-05T00:19:41.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: routes/api/v1/api.go in Gogs 0.11.86 lacks permission checks for routes: deploy keys, collaborators, and hooks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gogs/gogs/issues/5764
CVE ID: CVE-2019-14546 State: PUBLISHED Published: 2019-08-05T18:54:41 Last Updated: 2024-08-05T00:19:41.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EspoCRM before 5.6.9. Stored XSS was executed on the Preference page as well as while sending an email when a malicious payload was inserted inside the Email Signature in the Preference page. The attacker could insert malicious JavaScript inside his email signature, which fires when the victim replies or forwards the mail, thus helping him steal victims' cookies (hence compromising their accounts). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/espocrm/espocrm/co
their accounts). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/espocrm/espocrm/commit/ffd3f762ce4a8de3b8962f33513e073c55d943b5 - https://github.com/espocrm/espocrm/releases/tag/5.6.9 - https://github.com/espocrm/espocrm/issues/1369 - https://gauravnarwani.com/publications/CVE-2019-14546/
CVE ID: CVE-2019-14547 State: PUBLISHED Published: 2019-08-05T18:59:28 Last Updated: 2024-08-05T00:19:41.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EspoCRM before 5.6.9. Stored XSS was executed when a attacker sends an attachment to admin with malicious JavaScript in the filename. This JavaScript executed when an admin selects the particular file from the list of all attachments. The attacker could inject the JavaScript inside the filename and send it to users, thus helping him steal victims' cookies (hence compromising their accounts). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/espocrm/espocrm/commit/ff
accounts). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/espocrm/espocrm/commit/ffd3f762ce4a8de3b8962f33513e073c55d943b5 - https://github.com/espocrm/espocrm/releases/tag/5.6.9 - https://github.com/espocrm/espocrm/issues/1369 - https://gauravnarwani.com/publications/cve-2019-14547/
CVE ID: CVE-2019-14548 State: PUBLISHED Published: 2019-08-05T18:55:21 Last Updated: 2024-08-05T00:19:41.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EspoCRM before 5.6.9. Stored XSS in the body of an Article was executed when a victim opens articles received through mail. This Article can be formed by an attacker using the Knowledge Base feature in the tab list. The attacker could inject malicious JavaScript inside the body of the article, thus helping him steal victims' cookies (hence compromising their accounts). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/espocrm/espocrm/commit/ffd3f762ce4a8de3b8962f335
nalyst Notes: - CVE Program Container: References: - https://github.com/espocrm/espocrm/commit/ffd3f762ce4a8de3b8962f33513e073c55d943b5 - https://github.com/espocrm/espocrm/releases/tag/5.6.9 - https://github.com/espocrm/espocrm/issues/1369 - https://gauravnarwani.com/publications/cve-2019-14548/
CVE ID: CVE-2019-14549 State: PUBLISHED Published: 2019-08-05T18:48:46 Last Updated: 2024-08-05T00:19:41.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EspoCRM before 5.6.9. Stored XSS was executed inside the title and breadcrumb of a newly formed entity available to all the users. A malicious user can inject JavaScript in these values of an entity, thus stealing user cookies when someone visits the publicly accessible link. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/espocrm/espocrm/commit/ffd3f762ce4a8de3b8962f33513e073c55d943b5 - https://github.com/espocrm/espocrm/releases/tag/5.6.9 - https://github.com/es
ffd3f762ce4a8de3b8962f33513e073c55d943b5 - https://github.com/espocrm/espocrm/releases/tag/5.6.9 - https://github.com/espocrm/espocrm/issues/1369 - https://gauravnarwani.com/publications/cve-2019-14549/
CVE ID: CVE-2019-14550 State: PUBLISHED Published: 2019-08-05T18:52:57 Last Updated: 2024-08-05T00:19:41.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EspoCRM before 5.6.9. Stored XSS was executed when a victim clicks on the Edit Dashboard feature present on the Homepage. An attacker can load malicious JavaScript inside the add tab list feature, which would fire when a user clicks on the Edit Dashboard button, thus helping him steal victims' cookies (hence compromising their accounts). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/espocrm/espocrm/commit/ffd3f762ce4a8de3b8962f33513e073c55d943b5 - https://github
ainer: References: - https://github.com/espocrm/espocrm/commit/ffd3f762ce4a8de3b8962f33513e073c55d943b5 - https://github.com/espocrm/espocrm/releases/tag/5.6.9 - https://github.com/espocrm/espocrm/issues/1369 - https://gauravnarwani.com/publications/cve-2019-14550/
CVE ID: CVE-2019-14551 State: PUBLISHED Published: 2019-08-03T01:46:16 Last Updated: 2024-08-05T00:19:41.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Das Q before 2019-08-02 allows web sites to execute arbitrary code on client machines, as demonstrated by a cross-origin /install request with an attacker-controlled releaseUrl, which triggers download and execution of code within a ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - https://griffinbyatt.com/2019/08/02/Das-Vulnerabilities.html
CVE ID: CVE-2019-14552 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14553 State: PUBLISHED Published: 2020-11-23T15:50:19 Last Updated: 2024-08-05T00:19:41.314Z Vendors: n/a Products: Extensible Firmware Interface Development Kit (EDK II) Problem Types: information disclosure Description: Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.tianocore.org/show_bug.cgi?id=960
CVE ID: CVE-2019-14554 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14555 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-14556 State: PUBLISHED Published: 2020-10-05T13:49:56 Last Updated: 2024-08-05T00:19:41.313Z Vendors: n/a Products: Intel BIOS Problem Types: Escalation of Privilege, Denial of Service, Information Disclosure Description: Improper initialization in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html
CVE ID: CVE-2019-14557 State: PUBLISHED Published: 2020-10-05T13:45:04 Last Updated: 2024-08-05T00:19:41.234Z Vendors: n/a Products: Intel BIOS Problem Types: Escalation of Privilege, Denial of Service Description: Buffer overflow in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable elevation of privilege or denial of service via adjacent access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html
CVE ID: CVE-2019-14558 State: PUBLISHED Published: 2020-10-05T13:47:37 Last Updated: 2024-08-05T00:19:41.348Z Vendors: n/a Products: Intel BIOS Problem Types: Denial of Service Description: Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html - https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html
CVE ID: CVE-2019-14559 State: PUBLISHED Published: 2020-11-23T15:50:32 Last Updated: 2024-08-05T00:19:41.363Z Vendors: n/a Products: Extensible Firmware Interface Development Kit (EDK II) Problem Types: Denial of Service Description: Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.tianocore.org/show_bug.cgi?id=2031 - https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html