Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-16288 State: PUBLISHED Published: 2019-09-13T15:00:30 Last Updated: 2024-08-05T01:10:41.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Tenda N301 wireless routers, a long string in the wifiSSID parameter of a goform/setWifi POST request causes the device to crash. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/yu8hPE8w
CVE ID: CVE-2019-16289 State: PUBLISHED Published: 2019-09-13T14:58:03 Last Updated: 2024-08-05T01:10:41.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: The insert-php (aka Woody ad snippets) plugin before 2.2.8 for WordPress allows authenticated XSS via the winp_item parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/insert-php/#developers - https://generaleg0x01.com/2019/09/13/xss-woody/ - https://wpvulndb.com/vulnerabilities/9880
CVE ID: CVE-2019-16293 State: PUBLISHED Published: 2019-09-13T16:06:32 Last Updated: 2024-08-05T01:10:41.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Create Discoveries feature of Open-AudIT before 3.2.0 allows an authenticated attacker to execute arbitrary OS commands via a crafted value for a URL field. Additional Analyst Notes: - CVE Program Container: References: - https://community.opmantek.com/display/OA/Errata+-+3.1.2+Security+issue%2C+September+2019
CVE ID: CVE-2019-16294 State: PUBLISHED Published: 2019-09-14T15:39:57 Last Updated: 2024-08-05T01:10:41.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file. Additional Analyst Notes: - CVE Program Container: References: - https://notepad-plus-plus.org/download/v7.7.html - https://www.scintilla.org/ScintillaHistory.html - https://github.com/bi7s/CVE/tree/master/CVE-2019-16294 - http://packetstormsecurity.com/files/154706/Notepad-Code-Execution-Denial-Of-Service.html
CVE ID: CVE-2019-16295 State: PUBLISHED Published: 2019-10-31T20:59:30 Last Updated: 2024-08-05T01:10:41.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS in filemanager2.php in CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.885 exists via the cmd_arg parameter. This can be exploited by a local attacker who supplies a crafted filename within a directory visited by the victim. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/154990/CWP-0.9.8.885-Cross-Site-Scripting.html - https://centos-webpanel.com/changelog-cwp7
CVE ID: CVE-2019-16297 State: PUBLISHED Published: 2020-02-20T21:38:40 Last Updated: 2024-08-05T01:10:41.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Network Operating System (ONOS) 1.14. In the P4 tutorial application (org.onosproject.p4tutorial), the host event listener does not handle the following event types: HOST_MOVED, HOST_REMOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.ndss-symposium.org/wp-content/uploads/2020/02/24080.pdf
CVE ID: CVE-2019-16298 State: PUBLISHED Published: 2020-02-20T21:39:56 Last Updated: 2024-08-05T01:10:41.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual broadband network gateway application (org.onosproject.virtualbng), the host event listener does not handle the following event types: HOST_MOVED, HOST_REMOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.ndss-symposium.org/wp-content/uploads/2020/02/24080.pdf
CVE ID: CVE-2019-16299 State: PUBLISHED Published: 2020-02-20T21:40:58 Last Updated: 2024-08-05T01:10:41.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Network Operating System (ONOS) 1.14. In the mobility application (org.onosproject.mobility), the host event listener does not handle the following event types: HOST_ADDED, HOST_REMOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.ndss-symposium.org/wp-content/uploads/2020/02/24080.pdf
CVE ID: CVE-2019-16300 State: PUBLISHED Published: 2020-02-20T21:42:43 Last Updated: 2024-08-05T01:10:41.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Network Operating System (ONOS) 1.14. In the access control application (org.onosproject.acl), the host event listener does not handle the following event types: HOST_REMOVED. In combination with other applications, this could lead to the absence of intended code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.ndss-symposium.org/wp-content/uploads/2020/02/24080.pdf
CVE ID: CVE-2019-16301 State: PUBLISHED Published: 2020-02-20T21:43:32 Last Updated: 2024-08-05T01:10:41.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual tenant network application (org.onosproject.vtn), the host event listener does not handle the following event types: HOST_MOVED. In combination with other applications, this could lead to the absence of intended code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.ndss-symposium.org/wp-content/uploads/2020/02/24080.pdf
CVE ID: CVE-2019-16302 State: PUBLISHED Published: 2020-02-20T21:44:19 Last Updated: 2024-08-05T01:10:41.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Network Operating System (ONOS) 1.14. In the Ethernet VPN application (org.onosproject.evpnopenflow), the host event listener does not handle the following event types: HOST_MOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.ndss-symposium.org/wp-content/uploads/2020/02/24080.pdf
CVE ID: CVE-2019-16303 State: PUBLISHED Published: 2019-09-13T23:43:41 Last Updated: 2024-08-05T01:10:41.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: A class generated by the Generator in JHipster before 6.3.0 and JHipster Kotlin through 1.1.0 produces code that uses an insecure source of randomness (apache.commons.lang3 RandomStringUtils). This allows an attacker (if able to obtain their own password reset URL) to compute the value for all other password resets for other accounts, thus allowing privilege escalation or account takeover. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jhipster/generator-jhipster/security/advisories/GHSA-m
Notes: - CVE Program Container: References: - https://github.com/jhipster/generator-jhipster/security/advisories/GHSA-mwp6-j9wf-968c - https://github.com/jhipster/generator-jhipster/issues/10401 - https://github.com/jhipster/generator-jhipster/commit/88448b85fd3e8e49df103f0061359037c2c68ea7 - https://github.com/jhipster/jhipster-kotlin/issues/183 - https://www.jhipster.tech/2019/09/13/jhipster-release-6.3.0.html - https://lists.apache.org/thread.html/r6d243e7e3f25daeb242dacf3def411fba32a9388d3ff84918cb28ddd%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/rc87fa35a48b5d70b06af6fb81785ed82e82686eb83307aae6d250dc9%40%3Cissues.commons.apache.org%3E - https://lists.apach
d.html/rc87fa35a48b5d70b06af6fb81785ed82e82686eb83307aae6d250dc9%40%3Cissues.commons.apache.org%3E - https://lists.apache.org/thread.html/rc3f00f5d3d2ec0e2381a3b9096d5f5b4d46ec1587ee7e251a3dbb897%40%3Cissues.commons.apache.org%3E
CVE ID: CVE-2019-16305 State: PUBLISHED Published: 2019-09-14T14:04:54 Last Updated: 2024-08-05T01:10:41.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MobaXterm 11.1 and 12.1, the protocol handler is vulnerable to command injection. A crafted link can trigger a popup asking whether the user wants to run MobaXterm to handle the link. If accepted, another popup appears asking for further confirmation. If this is also accepted, command execution is achieved, as demonstrated by the MobaXterm://`calc` URI. Additional Analyst Notes: - CVE Program Container: References: - https://freetom.github.io/0day/2019/09/14/MobaXterm-command-exec-in-protocol-handler.html
CVE ID: CVE-2019-16307 State: PUBLISHED Published: 2019-09-14T16:19:22 Last Updated: 2024-08-05T01:10:41.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross-Site Scripting (XSS) vulnerability in the webEx module in webExMeetingLogin.jsp and deleteWebExMeetingCheck.jsp in Fuji Xerox DocuShare through 7.0.0.C1.609 allows remote attackers to inject arbitrary web script or HTML via the handle parameter (webExMeetingLogin.jsp) and meetingKey parameter (deleteWebExMeetingCheck.jsp). Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/izadgot/3efc75f62f9c9567c8f11bad74165425
CVE ID: CVE-2019-16309 State: PUBLISHED Published: 2019-09-14T15:23:17 Last Updated: 2024-08-05T01:10:41.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlameCMS 3.3.5 has SQL injection in account/login.php via accountName. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/317/
CVE ID: CVE-2019-16310 State: PUBLISHED Published: 2019-09-14T15:23:05 Last Updated: 2024-08-05T01:10:41.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: NIUSHOP V1.11 has XSS via the index.php?s=/admin URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/304/
CVE ID: CVE-2019-16311 State: PUBLISHED Published: 2019-09-14T15:22:54 Last Updated: 2024-08-05T01:10:41.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: NIUSHOP V1.11 has CSRF via search&#95;info to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/304/
CVE ID: CVE-2019-16312 State: PUBLISHED Published: 2019-09-14T15:22:44 Last Updated: 2024-08-05T01:10:41.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: s-cms V3.0 has XSS in index.php?type=text via the S_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/320/
CVE ID: CVE-2019-16313 State: PUBLISHED Published: 2019-09-14T15:22:34 Last Updated: 2024-08-05T01:10:41.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: ifw8 Router ROM v4.31 allows credential disclosure by reading the action/usermanager.htm HTML source code. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/311/
CVE ID: CVE-2019-16314 State: PUBLISHED Published: 2019-09-14T15:22:21 Last Updated: 2024-08-05T01:10:41.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Indexhibit 2.1.5 allows a product reinstallation, with resultant remote code execution, via /ndxzstudio/install.php?p=2. Additional Analyst Notes: - CVE Program Container: References: - http://www.iwantacve.cn/index.php/archives/324/
CVE ID: CVE-2019-16317 State: PUBLISHED Published: 2019-09-14T17:01:41 Last Updated: 2024-08-05T01:10:41.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Pimcore before 5.7.1, an attacker with limited privileges can trigger execution of a .phar file via a phar:// URL in a filename parameter, because PHAR uploads are not blocked and are reachable within the phar://../../../../../../../../var/www/html/web/var/assets/ directory, a different vulnerability than CVE-2019-10867 and CVE-2019-16318. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pimcore/pimcore/commit/6ee5d8536d0802e377594cbe39083e822710aab9 - https://snyk.io/vuln/SNYK-PHP-PIMCOR
ttps://github.com/pimcore/pimcore/commit/6ee5d8536d0802e377594cbe39083e822710aab9 - https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-451599
CVE ID: CVE-2019-16318 State: PUBLISHED Published: 2019-09-14T17:01:15 Last Updated: 2024-08-05T01:10:41.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Pimcore before 5.7.1, an attacker with limited privileges can bypass file-extension restrictions via a 256-character filename, as demonstrated by the failure of automatic renaming of .php to .php.txt for long filenames, a different vulnerability than CVE-2019-10867 and CVE-2019-16317. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pimcore/pimcore/commit/732f1647cc6e0a29b5b1f5d904b4d726b5e9455f - https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-451598
CVE ID: CVE-2019-16319 State: PUBLISHED Published: 2019-09-15T15:15:14 Last Updated: 2024-08-05T01:10:41.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by checking for a message length of zero. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2019-21.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16020 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=02ddd49885c6a09e936a76aceb726ed06539704a - http://lists.opensuse.org/o
.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=02ddd49885c6a09e936a76aceb726ed06539704a - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html - https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html
CVE ID: CVE-2019-16320 State: PUBLISHED Published: 2019-09-15T15:43:29 Last Updated: 2024-08-05T01:10:41.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cobham Sea Tel v170 224521 through v194 225444 devices allow attackers to obtain potentially sensitive information, such as a vessel's latitude and longitude, via the public SNMP community. Additional Analyst Notes: - CVE Program Container: References: - https://misteralfa-hack.blogspot.com/2019/09/cobham-terminales-satelitales-seatel.html
CVE ID: CVE-2019-16321 State: PUBLISHED Published: 2019-09-15T15:42:49 Last Updated: 2024-08-05T01:10:41.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: ScadaBR 1.0CE, and 1.1.x through 1.1.0-RC, has XSS via a request for a nonexistent resource, as demonstrated by the dwr/test/ PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - https://misteralfa-hack.blogspot.com/2019/09/scadabr-scada-vulnerable-xss.html
CVE ID: CVE-2019-16326 State: PUBLISHED Published: 2019-12-26T17:27:42 Last Updated: 2024-08-05T01:10:41.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-601 B1 2.00NA devices have CSRF because no anti-CSRF token is implemented. A remote attacker could exploit this in conjunction with CVE-2019-16327 to enable remote router management and device compromise. NOTE: this is an end-of-life product. Additional Analyst Notes: - CVE Program Container: References: - https://0x62626262.wordpress.com/2019/12/24/dlink-dir-601-router-authentication-bypass-and-csrf/
CVE ID: CVE-2019-16327 State: PUBLISHED Published: 2019-12-26T17:28:35 Last Updated: 2024-08-05T01:10:41.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-601 B1 2.00NA devices are vulnerable to authentication bypass. They do not check for authentication at the server side and rely on client-side validation, which is bypassable. NOTE: this is an end-of-life product. Additional Analyst Notes: - CVE Program Container: References: - https://0x62626262.wordpress.com/2019/12/24/dlink-dir-601-router-authentication-bypass-and-csrf/
CVE ID: CVE-2019-16328 State: PUBLISHED Published: 2019-10-03T19:51:43 Last Updated: 2024-08-05T01:10:41.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: In RPyC 4.1.x through 4.1.1, a remote attacker can dynamically modify object attributes to construct a remote procedure call that executes code for an RPyC service with default configuration settings. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tomerfiliba/rpyc - https://rpyc.readthedocs.io/en/latest/docs/security.html - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00046.html - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00004.html
CVE ID: CVE-2019-16330 State: PUBLISHED Published: 2019-10-17T16:55:11 Last Updated: 2024-08-05T01:10:41.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: In NCH Express Accounts Accounting v7.02, persistent cross site scripting (XSS) exists in Invoices/Sales Orders/Items/Customers/Quotes input field. An authenticated unprivileged user can add/modify the Invoices/Sales Orders/Items/Customers/Quotes fields parameter to inject arbitrary JavaScript. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47505
CVE ID: CVE-2019-16332 State: PUBLISHED Published: 2019-09-15T21:00:40 Last Updated: 2024-08-05T01:10:41.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in the swagger-config.yaml.php file, and it is possible to inject JavaScript code, aka XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9868 - https://packetstormsecurity.com/files/154369/WordPress-API-Bearer-Auth-20181229-Cross-Site-Scripting.html - https://plugins.trac.wordpress.org/changeset/2152730 - https://wordpress.org/plugins/api-bearer-auth/#developers
CVE ID: CVE-2019-16333 State: PUBLISHED Published: 2019-09-15T21:22:58 Last Updated: 2024-08-05T01:10:41.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: GetSimple CMS v3.3.15 has Persistent Cross-Site Scripting (XSS) in admin/theme-edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1313
CVE ID: CVE-2019-16334 State: PUBLISHED Published: 2019-09-15T21:22:43 Last Updated: 2024-08-05T01:10:41.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Bludit v3.9.2, there is a persistent XSS vulnerability in the Categories -> Add New Category -> Name field. NOTE: this may overlap CVE-2017-16636. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bludit/bludit/issues/1078
CVE ID: CVE-2019-16335 State: PUBLISHED Published: 2019-09-15T21:45:50 Last Updated: 2024-08-05T01:10:41.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/0fcef7321095ce0bc597d468d150cff3d647f4cb3aef3bd4d20e1c69%40%3Ccommits.tinkerpop.apache.org%3E - https://lists.apache.org/thread.html/40c00861b53bb611dee7d6f35f864aa7d1c1bd77df28db597cbf27e1%40%3Cissues.hbase.apache.org%3E - https://li
he.org/thread.html/40c00861b53bb611dee7d6f35f864aa7d1c1bd77df28db597cbf27e1%40%3Cissues.hbase.apache.org%3E - https://lists.apache.org/thread.html/a360b46061c91c5cad789b6c3190aef9b9f223a2b75c9c9f046fe016%40%3Cissues.hbase.apache.org%3E - https://lists.apache.org/thread.html/dc6b5cad721a4f6b3b62ed1163894941140d9d5656140fb757505ca0%40%3Cissues.hbase.apache.org%3E - https://lists.apache.org/thread.html/ad0d238e97a7da5eca47a014f0f7e81f440ed6bf74a93183825e18b9%40%3Cissues.hbase.apache.org%3E - https://lists.apache.org/thread.html/e90c3feb21702e68a8c08afce37045adb3870f2bf8223fa403fb93fb%40%3Ccommits.hbase.apache.org%3E - https://lists.debian.org/debian-lts-announce/2019/10/msg00001.html - https://
3fb93fb%40%3Ccommits.hbase.apache.org%3E - https://lists.debian.org/debian-lts-announce/2019/10/msg00001.html - https://www.debian.org/security/2019/dsa-4542 - https://seclists.org/bugtraq/2019/Oct/6 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TH5VFUN4P7CCIP7KSEXYA5MUTFCUDUJT/ - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apa
3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3200 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q7CANA7KV53JROZDX5Z5P26UG5VN2K43/ - https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E - https://access.redhat.com/errata/RHSA-2020:0164 - https://access.redhat.com/errata/RHSA-2020:0159 - https://access.redhat.com/errata/RHSA-2020:0160 - https://access.redhat.com/errata/RHSA-2020:0161 - https://lists.apache.org/thread.html/rca37935d661f4689cb
A-2020:0160 - https://access.redhat.com/errata/RHSA-2020:0161 - https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E - https://access.redhat.com/errata/RHSA-2020:0445 - https://access.redhat.com/errata/RHSA-2020:0729 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://github.com/FasterXML/jackson-databind/issues/2449 - https://security.netapp.com/advisory/ntap-20191004-0002/ - https://lists.apache.org/thread.html/r
databind/issues/2449 - https://security.netapp.com/advisory/ntap-20191004-0002/ - https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2020.html
CVE ID: CVE-2019-16336 State: PUBLISHED Published: 2020-02-12T17:59:37 Last Updated: 2024-08-05T01:10:41.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channel frames with a payload length larger than the configured link layer maximum RX payload size, which allows attackers (in radio range) to cause a denial of service (crash) via a crafted BLE Link Layer frame. Additional Analyst Notes: - CVE Program Container: References: - https://community.cypress.com/thread/48573 - https://asset-group.github.io/disclosures/sweyntooth/ - https://www.youtube.com/watch?v=Iw8sIBLWE_w - ht
/thread/48573 - https://asset-group.github.io/disclosures/sweyntooth/ - https://www.youtube.com/watch?v=Iw8sIBLWE_w - https://community.cypress.com/thread/53680
CVE ID: CVE-2019-16337 State: PUBLISHED Published: 2020-03-19T17:12:34 Last Updated: 2024-08-05T01:10:41.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hncbd90 component in Hancom Office 9.6.1.9403 allows a use-after-free via an unknown object in a crafted .docx file. Additional Analyst Notes: - CVE Program Container: References: - http://help.hancom.com/update_en_multilang/details/HOfficeNEO_update.htm - https://starlabs.sg/advisories/