Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-16466 State: PUBLISHED Published: 2020-01-15T16:13:14 Last Updated: 2024-08-05T01:17:40.088Z Vendors: Adobe Products: Adobe Experience Manager Problem Types: Reflected Cross-Site Scripting Description: Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/experience-manager/apsb20-01.html
CVE ID: CVE-2019-16467 State: PUBLISHED Published: 2020-01-15T16:16:10 Last Updated: 2024-08-05T01:17:40.255Z Vendors: Adobe Products: Adobe Experience Manager Problem Types: Reflected Cross-Site Scripting Description: Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/experience-manager/apsb20-01.html
CVE ID: CVE-2019-16468 State: PUBLISHED Published: 2020-01-15T16:15:44 Last Updated: 2024-08-05T01:17:40.228Z Vendors: Adobe Products: Adobe Experience Manager Problem Types: User Interface Injection Description: Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an user interface injection vulnerability. Successful exploitation could lead to sensitive information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/experience-manager/apsb20-01.html
CVE ID: CVE-2019-16469 State: PUBLISHED Published: 2020-01-15T16:15:22 Last Updated: 2024-08-05T01:17:40.232Z Vendors: Adobe Products: Adobe Experience Manager Problem Types: Expression Language injection Description: Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability. Successful exploitation could lead to sensitive information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/experience-manager/apsb20-01.html
CVE ID: CVE-2019-16470 State: PUBLISHED Published: 2023-09-11T13:50:57.732Z Last Updated: 2024-08-05T01:17:40.256Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-121 Description: Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE ID: CVE-2019-16471 State: PUBLISHED Published: 2023-09-11T13:50:59.657Z Last Updated: 2024-08-05T01:17:40.280Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE ID: CVE-2019-16508 State: PUBLISHED Published: 2019-10-01T11:07:51 Last Updated: 2024-08-05T01:17:39.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Imagination Technologies driver for Chrome OS before R74-11895.B, R75 before R75-12105.B, and R76 before R76-12208.0.0 allows attackers to trigger an Integer Overflow and gain privileges via a malicious application. This occurs because of intentional access for the GPU process to /dev/dri/card1 and the PowerVR ioctl handler, as demonstrated by PVRSRVBridgeSyncPrimOpCreate. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/chromium/issues/detail?id=960106
CVE ID: CVE-2019-16510 State: PUBLISHED Published: 2019-09-19T15:39:34 Last Updated: 2024-08-05T01:17:40.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: libIEC61850 through 1.3.3 has a use-after-free in MmsServer_waitReady in mms/iso_mms/server/mms_server.c, as demonstrated by server_example_goose. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mz-automation/libiec61850/issues/164
CVE ID: CVE-2019-16511 State: PUBLISHED Published: 2019-09-19T15:54:04 Last Updated: 2024-08-05T01:17:40.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DTF in FireGiant WiX Toolset before 3.11.2. Microsoft.Deployment.Compression.Cab.dll and Microsoft.Deployment.Compression.Zip.dll allow directory traversal during CAB or ZIP archive extraction, because the full name of an archive file (even with a ../ sequence) is concatenated with the destination path. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wixtoolset/issues/issues/6075 - https://wixtoolset.org/development/wips/6075-dtf-zip-slip/ - https://www.firegiant.
.com/wixtoolset/issues/issues/6075 - https://wixtoolset.org/development/wips/6075-dtf-zip-slip/ - https://www.firegiant.com/blog/2019/9/18/wix-v3.11.2-released/ - https://github.com/GitHubAssessments/CVE_Assessments_09_2019
CVE ID: CVE-2019-16512 State: PUBLISHED Published: 2020-01-23T17:14:36 Last Updated: 2024-08-05T01:17:40.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is stored XSS in the Appearance modifier. Additional Analyst Notes: - CVE Program Container: References: - https://know.bishopfox.com/advisories - https://know.bishopfox.com/advisories/connectwise-control - https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34 - https://www.crn.com/news/managed-services/connectwise-control-msp-security-vulnerabilities-are-severe-bishop-fox - ht
- https://www.crn.com/news/managed-services/connectwise-control-msp-security-vulnerabilities-are-severe-bishop-fox - https://www.crn.com/slide-shows/managed-services/connectwise-control-attack-chain-exploit-20-questions-for-security-researcher-bishop-fox
CVE ID: CVE-2019-16513 State: PUBLISHED Published: 2020-01-23T17:11:11 Last Updated: 2024-08-05T01:17:40.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. CSRF can be used to send API requests. Additional Analyst Notes: - CVE Program Container: References: - https://know.bishopfox.com/advisories - https://know.bishopfox.com/advisories/connectwise-control - https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34 - https://www.crn.com/news/managed-services/connectwise-control-msp-security-vulnerabilities-are-severe-bishop-fox - https://www
//www.crn.com/news/managed-services/connectwise-control-msp-security-vulnerabilities-are-severe-bishop-fox - https://www.crn.com/slide-shows/managed-services/connectwise-control-attack-chain-exploit-20-questions-for-security-researcher-bishop-fox
CVE ID: CVE-2019-16514 State: PUBLISHED Published: 2020-01-23T17:21:38 Last Updated: 2024-08-05T01:17:40.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. The server allows remote code execution. Administrative users could upload an unsigned extension ZIP file containing executable code that is subsequently executed by the server. Additional Analyst Notes: - CVE Program Container: References: - https://know.bishopfox.com/advisories - https://know.bishopfox.com/advisories/connectwise-control - https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-91
isories/connectwise-control - https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34 - https://www.crn.com/news/managed-services/connectwise-control-msp-security-vulnerabilities-are-severe-bishop-fox - https://www.crn.com/slide-shows/managed-services/connectwise-control-attack-chain-exploit-20-questions-for-security-researcher-bishop-fox
CVE ID: CVE-2019-16515 State: PUBLISHED Published: 2020-01-23T17:26:25 Last Updated: 2024-08-05T01:17:40.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. Certain HTTP security headers are not used. Additional Analyst Notes: - CVE Program Container: References: - https://know.bishopfox.com/advisories - https://wpvulndb.com/vulnerabilities/10013 - https://know.bishopfox.com/advisories/connectwise-control - https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34 - https://www.crn.com/news/managed-services/connectwise-control-msp-security-v
dings-in-connectwise-control-9155eec36a34 - https://www.crn.com/news/managed-services/connectwise-control-msp-security-vulnerabilities-are-severe-bishop-fox
CVE ID: CVE-2019-16516 State: PUBLISHED Published: 2020-01-23T17:24:10 Last Updated: 2024-08-05T01:17:40.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is a user enumeration vulnerability, allowing an unauthenticated attacker to determine with certainty if an account exists for a given username. Additional Analyst Notes: - CVE Program Container: References: - https://know.bishopfox.com/advisories - https://know.bishopfox.com/advisories/connectwise-control - https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34 - https://www.cr
- https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34 - https://www.crn.com/news/managed-services/connectwise-control-msp-security-vulnerabilities-are-severe-bishop-fox - https://www.crn.com/slide-shows/managed-services/connectwise-control-attack-chain-exploit-20-questions-for-security-researcher-bishop-fox - http://packetstormsecurity.com/files/165432/ConnectWise-Control-19.2.24707-Username-Enumeration.html
CVE ID: CVE-2019-16517 State: PUBLISHED Published: 2020-01-23T17:19:23 Last Updated: 2024-08-05T01:17:40.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is a CORS misconfiguration, which reflected the Origin provided by incoming requests. This allowed JavaScript running on any domain to interact with the server APIs and perform administrative actions, without the victim's knowledge. Additional Analyst Notes: - CVE Program Container: References: - https://know.bishopfox.com/advisories - https://know.bishopfox.com/advisories/connectwise-control - https://blog.huntresslabs.com
now.bishopfox.com/advisories - https://know.bishopfox.com/advisories/connectwise-control - https://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34 - https://www.crn.com/news/managed-services/connectwise-control-msp-security-vulnerabilities-are-severe-bishop-fox - https://www.crn.com/slide-shows/managed-services/connectwise-control-attack-chain-exploit-20-questions-for-security-researcher-bishop-fox
CVE ID: CVE-2019-16518 State: PUBLISHED Published: 2019-09-23T14:07:41 Last Updated: 2024-08-05T01:17:40.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Swell Kit Mod devices that use the Vandy Vape platform. An attacker may be able to trigger an unintended temperature in the victim's mouth and throat via Bluetooth Low Energy (BLE) packets that specify large power or voltage values. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/crypt0crc/cve-2019-16518
CVE ID: CVE-2019-16519 State: PUBLISHED Published: 2019-10-14T15:31:32 Last Updated: 2024-08-05T01:17:40.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: ESET Cyber Security 6.7.900.0 for macOS allows a local attacker to execute unauthorized commands as root by abusing an undocumented feature in scheduled tasks. Additional Analyst Notes: - CVE Program Container: References: - http://support.eset.com/ca7317/ - https://danishcyberdefence.dk/blog/esets-cyber-security
CVE ID: CVE-2019-16520 State: PUBLISHED Published: 2019-10-16T13:58:06 Last Updated: 2024-08-05T01:17:40.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/all-in-one-seo-pack/#developers - https://semperplugins.com/all-in-one-seo-pack-changelog/ - https://github.com/semperfiwebdesign/all-in-one-seo-pack/issues/2888 - https://github.com/sbaresearch/ad
ck-changelog/ - https://github.com/semperfiwebdesign/all-in-one-seo-pack/issues/2888 - https://github.com/sbaresearch/advisories/tree/public/2019/SBA-ADV-20190913-04_WordPress_Plugin_All_in_One_SEO_Pack - http://www.openwall.com/lists/oss-security/2019/10/16/5 - https://wpvulndb.com/vulnerabilities/9915
CVE ID: CVE-2019-16521 State: PUBLISHED Published: 2019-10-16T14:05:40 Last Updated: 2024-08-05T01:17:40.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: The broken-link-checker plugin through 1.11.8 for WordPress (aka Broken Link Checker) is susceptible to Reflected XSS due to improper encoding and insertion of an HTTP GET parameter into HTML. The filter function on the page listing all detected broken links can be exploited by providing an XSS payload in the s_filter GET parameter in a filter_id=search request. NOTE: this is an end-of-life product. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/broken-link-checker/#developers -
al Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/broken-link-checker/#developers - https://github.com/sbaresearch/advisories/tree/public/2019/SBA-ADV-20190913-02_WordPress_Plugin_Broken_Link_Checker - http://www.openwall.com/lists/oss-security/2019/10/16/3 - https://wpvulndb.com/vulnerabilities/9917
CVE ID: CVE-2019-16522 State: PUBLISHED Published: 2019-10-16T14:10:03 Last Updated: 2024-08-05T01:17:39.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eu-cookie-law plugin through 3.0.6 for WordPress (aka EU Cookie Law (GDPR)) is susceptible to Stored XSS due to improper encoding of several configuration options in the admin area and the displayed cookie consent message. This affects Font Color, Background Color, and the Disable Cookie text. An attacker with high privileges can attack other users. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/eu-cookie-law/#developers - https://github.com/sbaresearch/advisories/tree/publi
rences: - https://wordpress.org/plugins/eu-cookie-law/#developers - https://github.com/sbaresearch/advisories/tree/public/2019/SBA-ADV-20190913-01_WordPress_Plugin_EU_Cookie_Law - https://wpvulndb.com/vulnerabilities/9918
CVE ID: CVE-2019-16523 State: PUBLISHED Published: 2019-10-16T14:02:04 Last Updated: 2024-08-05T01:17:40.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: The events-manager plugin through 5.9.5 for WordPress (aka Events Manager) is susceptible to Stored XSS due to improper encoding and insertion of data provided to the attribute map_style of shortcodes (locations_map and events_map) provided by the plugin. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/events-manager/#developers - https://github.com/sbaresearch/advisories/tree/public/2019/SBA-ADV-20190913-03_WordPress_Plugin_Events_Manager - http://www.openwall.com/lists/oss-secu
advisories/tree/public/2019/SBA-ADV-20190913-03_WordPress_Plugin_Events_Manager - http://www.openwall.com/lists/oss-security/2019/10/16/4 - https://wpvulndb.com/vulnerabilities/9916
CVE ID: CVE-2019-16524 State: PUBLISHED Published: 2019-09-26T15:45:33 Last Updated: 2024-08-05T01:17:40.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: The easy-fancybox plugin before 1.8.18 for WordPress (aka Easy FancyBox) is susceptible to Stored XSS in the Settings Menu inc/class-easyfancybox.php due to improper encoding of arbitrarily submitted settings parameters. This occurs because there is no inline styles output filter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/easy-fancybox/#developers - https://github.com/sbaresearch/advisories/tree/public/2019/SBA-ADV-20190911-01_Easy_FancyBox_WP_Plugin_Stored_XSS - https://wp
//github.com/sbaresearch/advisories/tree/public/2019/SBA-ADV-20190911-01_Easy_FancyBox_WP_Plugin_Stored_XSS - https://wpvulndb.com/vulnerabilities/9891
CVE ID: CVE-2019-16525 State: PUBLISHED Published: 2019-09-19T19:02:16 Last Updated: 2024-08-05T01:17:40.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in the checklist plugin before 1.1.9 for WordPress. The fill parameter is not correctly filtered in the checklist-icon.php file, and it is possible to inject JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9877 - https://plugins.trac.wordpress.org/changeset/2155029/ - https://packetstormsecurity.com/files/154436/WordPress-Checklist-1.1.5-Cross-Site-Scripting.html - https://wordpress.org/plugins/checklist/#developers
CVE ID: CVE-2019-16528 State: PUBLISHED Published: 2020-03-20T20:37:15 Last Updated: 2024-08-05T01:17:41.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the AbuseFilter extension for MediaWiki. includes/special/SpecialAbuseLog.php allows attackers to obtain sensitive information, such as deleted/suppressed usernames and summaries, from AbuseLog revision data. This affects REL1_32 and REL1_33. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T224203 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538051/ - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538053
/mediawiki/extensions/AbuseFilter/+/538051/ - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538053/ - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538054/
CVE ID: CVE-2019-16529 State: PUBLISHED Published: 2020-03-19T22:51:21 Last Updated: 2024-08-05T01:17:39.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the CheckUser extension through 1.35.0 for MediaWiki. Oversighted edit summaries are still visible in CheckUser results in violation of MediaWiki's permissions model. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T207094 - https://phabricator.wikimedia.org/rECHU22ddd638ba79903361df88c755232a532cbdbfb3
CVE ID: CVE-2019-16530 State: PUBLISHED Published: 2019-10-21T13:02:10 Last Updated: 2024-08-05T01:17:40.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://issues.sonatype.org/secure/ReleaseNote.jspa - https://support.sonatype.com/hc/en-us/articles/360036132453
CVE ID: CVE-2019-16531 State: PUBLISHED Published: 2019-09-20T00:47:00 Last Updated: 2024-08-05T01:17:39.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AndyRixon/LayerBB/pull/40 - https://github.com/0xB9/LayerBB-1.1.3-CSRF/blob/master/README.md - https://github.com/AndyRixon/LayerBB/compare/1.1.3...1.1.4 - http://packetstormsecurity.com/files/154549/LayerBB-1.1.3-Cross-Site-Request-Forgery.html
CVE ID: CVE-2019-16532 State: PUBLISHED Published: 2019-09-26T14:27:29 Last Updated: 2024-08-05T01:17:40.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: An HTTP Host header injection vulnerability exists in YzmCMS V5.3. A malicious user can poison a web cache or trigger redirections. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47422 - https://github.com/yzmcms/yzmcms/issues/28
CVE ID: CVE-2019-16533 State: PUBLISHED Published: 2019-09-20T15:22:20 Last Updated: 2024-08-05T01:17:40.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product. Additional Analyst Notes: - CVE Program Container: References: - https://www.facebook.com/Huang.YuHsiang.Phone/posts/1815316691945755 - https://www.draytek.com/about/security-advisory/urgent-security-updates-to-draytek-routers
CVE ID: CVE-2019-16534 State: PUBLISHED Published: 2019-09-20T15:23:27 Last Updated: 2024-08-05T01:17:40.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen. NOTE: this is an end-of-life product. Additional Analyst Notes: - CVE Program Container: References: - https://www.facebook.com/Huang.YuHsiang.Phone/posts/1815316691945755 - https://www.draytek.com/about/security-advisory/urgent-security-updates-to-draytek-routers
CVE ID: CVE-2019-16535 State: PUBLISHED Published: 2019-12-30T14:35:21 Last Updated: 2024-08-05T01:17:40.278Z Vendors: n/a Products: ClickHouse Problem Types: DOS, RCE Description: In all versions of ClickHouse before 19.14, an OOB read, OOB write and integer underflow in decompression algorithms can be used to achieve RCE or DoS via native protocol. Additional Analyst Notes: - CVE Program Container: References: - https://clickhouse.yandex/docs/en/security_changelog/
CVE ID: CVE-2019-16536 State: PUBLISHED Published: 2025-05-21T07:13:15.603Z Last Updated: 2025-05-21T13:49:34.919Z Vendors: Clickhouse Products: DB Problem Types: CWE-120 Description: Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://clickhouse.com/docs/whats-new/security-changelog
CVE ID: CVE-2019-16538 State: PUBLISHED Published: 2019-11-21T14:11:20 Last Updated: 2024-08-05T01:17:40.259Z Vendors: Jenkins project Products: Jenkins Script Security Plugin Description: A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.67 and earlier related to the handling of default parameter expressions in closures allowed attackers to execute arbitrary code in sandboxed scripts. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1658 - http://www.openwall.com/lists/oss-security/2019/11/21/1
CVE ID: CVE-2019-16539 State: PUBLISHED Published: 2019-11-21T14:11:20 Last Updated: 2024-08-05T01:17:40.199Z Vendors: Jenkins project Products: Jenkins Support Core Plugin Description: A missing permission check in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete support bundles. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1634 - http://www.openwall.com/lists/oss-security/2019/11/21/1