Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-11165 State: PUBLISHED Published: 2019-12-16T19:12:39 Last Updated: 2024-08-04T22:48:08.671Z Vendors: n/a Products: Intel(R) FPGA SDK for OpenCL(TM) Pro Edition Problem Types: Denial of Service Description: Improper conditions check in the Linux kernel driver for the Intel(R) FPGA SDK for OpenCL(TM) Pro Edition before version 19.4 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00284.html - https://support.f5.com/csp/article/K07357521?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2019-11166 State: PUBLISHED Published: 2019-09-16T15:58:08 Last Updated: 2024-08-04T22:48:09.016Z Vendors: n/a Products: Intel(R) Easy Streaming Wizard Advisory Problem Types: Escalation of Privilege Description: Improper file permissions in the installer for Intel(R) Easy Streaming Wizard before version 2.1.0731 may allow an authenticated user to potentially enable escalation of privilege via local attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00285.html
CVE ID: CVE-2019-11167 State: PUBLISHED Published: 2019-10-11T17:57:08 Last Updated: 2024-08-04T22:48:08.811Z Vendors: Intel® Products: Smart Connect Technology for Intel® NUC Advisory Problem Types: Escalation of Privilege Description: Improper file permission in software installer for Intel(R) Smart Connect Technology for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00286.html
CVE ID: CVE-2019-11168 State: PUBLISHED Published: 2019-11-14T16:35:58 Last Updated: 2024-08-04T22:48:09.015Z Vendors: n/a Products: Intel(R) BMC Problem Types: Escalation of Privilege, Denial of Service, Information Disclosure Description: Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.html - https://support.f5.com/csp/article/K64346530?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2019-11169 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-11170 State: PUBLISHED Published: 2019-11-14T16:36:15 Last Updated: 2024-08-04T22:48:08.893Z Vendors: n/a Products: Intel(R) BMC Problem Types: Escalation of Privilege, Denial of Service, Information Disclosure Description: Authentication bypass in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.html
CVE ID: CVE-2019-11171 State: PUBLISHED Published: 2019-11-14T16:36:30 Last Updated: 2024-08-04T22:48:08.681Z Vendors: n/a Products: Intel(R) BMC Problem Types: Escalation of Privilege, Denial of Service, Information Disclosure Description: Heap corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.html
CVE ID: CVE-2019-11172 State: PUBLISHED Published: 2019-11-14T16:36:45 Last Updated: 2024-08-04T22:48:08.660Z Vendors: n/a Products: Intel(R) BMC Problem Types: Information Disclosure Description: Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.html
CVE ID: CVE-2019-11173 State: PUBLISHED Published: 2019-11-14T16:37:00 Last Updated: 2024-08-04T22:48:08.971Z Vendors: n/a Products: Intel(R) BMC Problem Types: Denial of Service, Information Disclosure Description: Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.html
CVE ID: CVE-2019-11174 State: PUBLISHED Published: 2019-11-14T16:37:10 Last Updated: 2024-08-04T22:48:08.697Z Vendors: n/a Products: Intel(R) BMC Problem Types: Information Disclosure Description: Insufficient access control in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.html
CVE ID: CVE-2019-11175 State: PUBLISHED Published: 2019-11-14T16:37:26 Last Updated: 2024-08-04T22:48:08.961Z Vendors: n/a Products: Intel(R) BMC Problem Types: Denial of Service Description: Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.html
CVE ID: CVE-2019-11176 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-11177 State: PUBLISHED Published: 2019-11-14T16:37:36 Last Updated: 2024-08-04T22:48:08.990Z Vendors: n/a Products: Intel(R) BMC Problem Types: Denial of Service Description: Unhandled exception in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.html
CVE ID: CVE-2019-11178 State: PUBLISHED Published: 2019-11-14T16:37:44 Last Updated: 2024-08-04T22:48:08.984Z Vendors: n/a Products: Intel(R) BMC Problem Types: Denial of Service, Information Disclosure Description: Stack overflow in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information disclosure and/or denial of service via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.html
CVE ID: CVE-2019-11179 State: PUBLISHED Published: 2019-11-14T16:38:07 Last Updated: 2024-08-04T22:48:08.997Z Vendors: n/a Products: Intel(R) BMC Problem Types: Information Disclosure Description: Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information disclosure via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.html
CVE ID: CVE-2019-11180 State: PUBLISHED Published: 2019-11-14T16:38:15 Last Updated: 2024-08-04T22:48:08.317Z Vendors: n/a Products: Intel(R) BMC Problem Types: Escalation of Privilege Description: Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.html
CVE ID: CVE-2019-11181 State: PUBLISHED Published: 2019-11-14T16:38:23 Last Updated: 2024-08-04T22:48:08.908Z Vendors: n/a Products: Intel(R) BMC Problem Types: Escalation of Privilege Description: Out of bound read in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable escalation of privilege via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.html
CVE ID: CVE-2019-11182 State: PUBLISHED Published: 2019-11-14T16:38:31 Last Updated: 2024-08-04T22:48:08.986Z Vendors: n/a Products: Intel(R) BMC Problem Types: Denial of Service Description: Memory corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.html
CVE ID: CVE-2019-11183 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-11184 State: PUBLISHED Published: 2019-09-16T15:59:11 Last Updated: 2024-08-04T22:48:09.017Z Vendors: n/a Products: Partial Information Disclosure Advisory Problem Types: Information Disclosure Description: A race condition in specific microprocessors using Intel (R) DDIO cache allocation and RDMA may allow an authenticated user to potentially enable partial information disclosure via adjacent access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00290.html - https://arxiv.org/abs/1909.04841 - https://support.f5.com/csp/article/K43220413 - https://security.netapp.com/advisory/ntap-20
//arxiv.org/abs/1909.04841 - https://support.f5.com/csp/article/K43220413 - https://security.netapp.com/advisory/ntap-20190926-0001/ - https://support.f5.com/csp/article/K43220413?utm_source=f5support&amp%3Butm_medium=RSS - https://ieeexplore.ieee.org/document/9152768
CVE ID: CVE-2019-11185 State: PUBLISHED Published: 2019-06-03T20:34:53 Last Updated: 2024-08-04T22:48:08.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WP Live Chat Support Pro plugin through 8.0.26 for WordPress contains an arbitrary file upload vulnerability. This results from an incomplete patch for CVE-2018-12426. Arbitrary file upload is achieved by using a non-blacklisted executable file extension in conjunction with a whitelisted file extension, and prepending "magic bytes" to the payload to pass MIME checks. Specifically, an unauthenticated remote user submits a crafted file upload POST request to the REST api remote_upload endpoint. The file contains data that w
te user submits a crafted file upload POST request to the REST api remote_upload endpoint. The file contains data that will fool the plugin's MIME check into classifying it as an image (which is a whitelisted file extension) and finally a trailing .phtml file extension. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-live-chat-support/#developers - https://wp-livechat.com/ - https://wpvulndb.com/vulnerabilities/9320
CVE ID: CVE-2019-11187 State: PUBLISHED Published: 2019-08-15T16:21:51 Last Updated: 2024-08-04T22:48:08.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker to log into any account with a username containing the case-insensitive substring "success" when an arbitrary password is provided. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gonicus/gosa/commits/master - https://lists.debian.org/debian-lts-announce/2019/08/msg00009.html
CVE ID: CVE-2019-11189 State: PUBLISHED Published: 2020-02-20T21:36:02 Last Updated: 2024-08-04T22:48:08.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Authentication Bypass by Spoofing in org.onosproject.acl (access control) and org.onosproject.mobility (host mobility) in ONOS v2.0 and earlier allows attackers to bypass network access control via data plane packet injection. To exploit the vulnerability, an attacker sends a gratuitous ARP reply that causes the host mobility application to remove existing access control flow denial rules in the network. The access control application does not re-install flow deny rules, so the attacker can bypass the intended access control
access control application does not re-install flow deny rules, so the attacker can bypass the intended access control policy. Additional Analyst Notes: - CVE Program Container: References: - https://www.ndss-symposium.org/wp-content/uploads/2020/02/24080.pdf
CVE ID: CVE-2019-11190 State: PUBLISHED Published: 2019-04-11T23:06:40 Last Updated: 2024-08-04T22:48:08.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 4.8 allows local users to bypass ASLR on setuid programs (such as /bin/su) because install_exec_creds() is called too late in load_elf_binary() in fs/binfmt_elf.c, and thus the ptrace_may_access() check has a race condition when reading /proc/pid/stat. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2019/04/03/4 - https://www.openwall.com/lists/oss-security/2019/04/03/4/1 - https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.g
w.openwall.com/lists/oss-security/2019/04/03/4/1 - https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/commit/?id=a5b5352558f6808db0589644ea5401b3e3148a0d - https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/commit/?id=e1676b55d874a43646e8b2c46d87f2f3e45516ff - http://www.securityfocus.com/bid/107890 - http://www.openwall.com/lists/oss-security/2019/04/15/1 - https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html - https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html - https://usn.ubuntu.com/4008-1/ - https://usn.ubuntu.com/4008-2/ - https://usn.ubuntu.com/4008-3/ - http://lists.opensuse.org/opensuse-security-announce/2019-06
//usn.ubuntu.com/4008-2/ - https://usn.ubuntu.com/4008-3/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html
CVE ID: CVE-2019-11191 State: PUBLISHED Published: 2019-04-11T23:07:29 Last Updated: 2024-08-04T22:48:08.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel through 5.0.7, when CONFIG_IA32_AOUT is enabled and ia32_aout is loaded, allows local users to bypass ASLR on setuid a.out programs (if any exist) because install_exec_creds() is called too late in load_aout_binary() in fs/binfmt_aout.c, and thus the ptrace_may_access() check has a race condition when reading /proc/pid/stat. NOTE: the software maintainer disputes that this is a vulnerability because ASLR for a.out format executables has never been supported Additional Analyst Notes: - CVE Program Container: R
because ASLR for a.out format executables has never been supported Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2019/04/03/4 - https://www.openwall.com/lists/oss-security/2019/04/03/4/1 - http://www.securityfocus.com/bid/107887 - http://www.openwall.com/lists/oss-security/2019/04/18/5 - http://www.openwall.com/lists/oss-security/2019/05/22/7 - https://usn.ubuntu.com/4007-2/ - https://usn.ubuntu.com/4008-1/ - https://usn.ubuntu.com/4006-1/ - https://usn.ubuntu.com/4006-2/ - https://usn.ubuntu.com/4007-1/ - https://usn.ubuntu.com/4008-3/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html
CVE ID: CVE-2019-11193 State: PUBLISHED Published: 2019-04-30T18:36:27 Last Updated: 2024-08-04T22:48:08.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FileManager in InfinitumIT DirectAdmin through v1.561 has XSS via CMD_FILE_MANAGER, CMD_SHOW_USER, and CMD_SHOW_RESELLER; an attacker can bypass the CSRF protection with this, and take over the administration panel. Additional Analyst Notes: - CVE Program Container: References: - https://numanozdemir.com/respdisc/directadmin.pdf - http://packetstormsecurity.com/files/152494/DirectAdmin-1.561-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/46694
CVE ID: CVE-2019-11196 State: PUBLISHED Published: 2019-04-12T02:56:10 Last Updated: 2024-08-04T22:48:09.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication bypass vulnerability in all versions of ValuePLUS Integrated University Management System (IUMS) allows unauthenticated, remote attackers to gain administrator privileges via the Teachers Web Panel (TWP) User ID or Password field. If exploited, the attackers could perform any actions with administrator privileges (e.g., enumerate/delete all the students' personal information or modify various settings). Additional Analyst Notes: - CVE Program Container: References: - https://blog.ziaurrashid.com/sql-injectio
us settings). Additional Analyst Notes: - CVE Program Container: References: - https://blog.ziaurrashid.com/sql-injection-auth-bypass-on-iums/
CVE ID: CVE-2019-11198 State: PUBLISHED Published: 2019-08-05T17:13:06 Last Updated: 2024-08-04T22:48:08.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sitecore CMS 9.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) #300583 - List Manager Dashboard module, (2) #307638 - Campaign Creator module, (3) #316994 - Attributes field, (4) I#316995 - Icon Selection module, (5) #317000 - Latitude field, (6) #317000 - Longitude field, (7) #317017 - UploadPackage2.aspx module, (8) #317072 - Context menu, or (9) I#317073 - Insert from Template dialog. Additional Analyst Notes: - CVE Program Con
, (8) #317072 - Context menu, or (9) I#317073 - Insert from Template dialog. Additional Analyst Notes: - CVE Program Container: References: - https://outpost24.com/blog - https://dev.sitecore.net/Downloads/Sitecore%20Experience%20Platform/92/Sitecore%20Experience%20Platform%2092%20Initial%20Release/Release%20Notes
CVE ID: CVE-2019-11199 State: PUBLISHED Published: 2019-07-29T15:36:51 Last Updated: 2024-08-04T22:48:08.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr ERP/CRM 9.0.1 was affected by stored XSS within uploaded files. These vulnerabilities allowed the execution of a JavaScript payload each time any regular user or administrative user clicked on the malicious link hosted on the same domain. The vulnerabilities could be exploited by low privileged users to target administrators. The viewimage.php page did not perform any contextual output encoding and would display the content within the uploaded file with a user-requested MIME type. Additional Analyst Notes: - CVE Prog
would display the content within the uploaded file with a user-requested MIME type. Additional Analyst Notes: - CVE Program Container: References: - https://know.bishopfox.com/advisories/dolibarr-version-9-0-1-vulnerabilities
CVE ID: CVE-2019-11200 State: PUBLISHED Published: 2019-07-29T15:39:02 Last Updated: 2024-08-04T22:48:08.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr ERP/CRM 9.0.1 provides a web-based functionality that backs up the database content to a dump file. However, the application performs insufficient checks on the export parameters to mysqldump, which can lead to execution of arbitrary binaries on the server. (Malicious binaries can be uploaded by abusing other functionalities of the application.) Additional Analyst Notes: - CVE Program Container: References: - https://know.bishopfox.com/advisories/dolibarr-version-9-0-1-vulnerabilities
CVE ID: CVE-2019-11201 State: PUBLISHED Published: 2019-07-29T15:40:53 Last Updated: 2024-08-04T22:48:08.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr ERP/CRM 9.0.1 provides a module named website that provides for creation of public websites with a WYSIWYG editor. It was identified that the editor also allowed inclusion of dynamic code, which can lead to code execution on the host machine. An attacker has to check a setting on the same page, which specifies the inclusion of dynamic content. Thus, a lower privileged user of the application can execute code under the context and permissions of the underlying web server. Additional Analyst Notes: - CVE Program Contai
cute code under the context and permissions of the underlying web server. Additional Analyst Notes: - CVE Program Container: References: - https://know.bishopfox.com/advisories/dolibarr-version-9-0-1-vulnerabilities
CVE ID: CVE-2019-11202 State: PUBLISHED Published: 2019-07-30T16:01:47 Last Updated: 2024-08-04T22:48:08.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered that affects the following versions of Rancher: v2.0.0 through v2.0.13, v2.1.0 through v2.1.8, and v2.2.0 through 2.2.1. When Rancher starts for the first time, it creates a default admin user with a well-known password. After initial setup, the Rancher administrator may choose to delete this default admin user. If Rancher is restarted, the default admin user will be recreated with the well-known default password. An attacker could exploit this by logging in with the default admin credentials. This can
e well-known default password. An attacker could exploit this by logging in with the default admin credentials. This can be mitigated by deactivating the default admin user rather than completing deleting them. Additional Analyst Notes: - CVE Program Container: References: - https://forums.rancher.com/c/announcements - https://rancher.com/docs/rancher/v2.x/en/security/
CVE ID: CVE-2019-11203 State: PUBLISHED Published: 2019-04-24T20:20:12.316749Z Last Updated: 2024-09-16T20:28:07.150Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO Silver Fabric Enabler for ActiveMatrix BPM Problem Types: The impact of this vulnerability includes the theoretical possibility that an unprivileged remote attacker could gain full access to the APIs exposed by the affected ActiveMatrix BPM components. Description: The workspace client, openspace client, app development client, and REST API of TIBCO Software Inc.'s TIBCO ActiveM
ion: The workspace client, openspace client, app development client, and REST API of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contain cross site scripting (XSS) and cross-site request forgery vulnerabilities. Affected releases are TIBCO Software Inc.'s TIBCO ActiveMatrix BPM: versions up to and including 4.2.0, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric: versions up to and including 4.2.0, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM: versions up to and including 1.4.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco
M: versions up to and including 1.4.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2019/04/tibco-security-advisory-april-24-2019-tibco-activematrix-bpm-2019-11203 - http://www.securityfocus.com/bid/108057