Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-9746 State: PUBLISHED Published: 2019-03-13T16:00:00Z Last Updated: 2024-09-16T19:41:28.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libwebm before 2019-03-08, a NULL pointer dereference caused by the functions OutputCluster and OutputTracks in webm_info.cc will trigger an abort, which allows a DoS attack, a similar issue to CVE-2018-19212. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/webm/issues/detail?id=1605 - https://chromium.googlesource.com/webm/libwebm/+/2427abe0bde234987ed005a3adca461e9a85dfb7
CVE ID: CVE-2019-9747 State: PUBLISHED Published: 2019-03-13T19:00:00Z Last Updated: 2024-09-16T22:25:09.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: In tinysvcmdns through 2018-01-16, a maliciously crafted mDNS (Multicast DNS) packet triggers an infinite loop while parsing an mDNS query. When mDNS compressed labels point to each other, the function uncompress_nlabel goes into an infinite loop trying to analyze the packet with an mDNS query. As a result, the mDNS server hangs after receiving the malicious mDNS packet. NOTE: the product's web site states "This project is un-maintained, and has been since 2013. ... There are known vulnerabilities ... You are advised to NOT u
This project is un-maintained, and has been since 2013. ... There are known vulnerabilities ... You are advised to NOT use this library for any new projects / products." Additional Analyst Notes: - CVE Program Container: References: - https://bitbucket.org/geekman/tinysvcmdns/issues/11/denial-of-service-vulnerability-infinite
CVE ID: CVE-2019-9748 State: PUBLISHED Published: 2019-03-13T19:00:00Z Last Updated: 2024-09-17T04:19:43.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: In tinysvcmdns through 2018-01-16, an mDNS server processing a crafted packet can perform arbitrary data read operations up to 16383 bytes from the start of the buffer. This can lead to a segmentation fault in uncompress_nlabel in mdns.c and a crash of the server (depending on the memory protection of the CPU and the operating system), or disclosure of memory content via error messages or a server response. NOTE: the product's web site states "This project is un-maintained, and has been since 2013. ... There are known vulnera
NOTE: the product's web site states "This project is un-maintained, and has been since 2013. ... There are known vulnerabilities ... You are advised to NOT use this library for any new projects / products." Additional Analyst Notes: - CVE Program Container: References: - https://bitbucket.org/geekman/tinysvcmdns/issues/10/arbitrary-memory-read-while-parsing
CVE ID: CVE-2019-9749 State: PUBLISHED Published: 2019-03-13T19:00:00Z Last Updated: 2024-09-16T22:29:41.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the MQTT input plugin in Fluent Bit through 1.0.4. When this plugin acts as an MQTT broker (server), it mishandles incoming network messages. After processing a crafted packet, the plugin's mqtt_packet_drop function (in /plugins/in_mqtt/mqtt_prot.c) executes the memmove() function with a negative size parameter. That leads to a crash of the whole Fluent Bit server via a SIGSEGV signal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fluent/fluent-bit/issues/1135
CVE ID: CVE-2019-9750 State: PUBLISHED Published: 2019-03-13T19:00:00Z Last Updated: 2024-09-16T20:12:10.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IoTivity through 1.3.1, the CoAP server interface can be used for Distributed Denial of Service attacks using source IP address spoofing and UDP-based traffic amplification. The reflected traffic is 6 times bigger than spoofed requests. This occurs because the construction of a "4.01 Unauthorized" response is mishandled. NOTE: the vendor states "While this is an interesting attack, there is no plan for maintainer to fix, as we are migrating to IoTivity Lite." Additional Analyst Notes: - CVE Program Container: References: -
intainer to fix, as we are migrating to IoTivity Lite." Additional Analyst Notes: - CVE Program Container: References: - https://jira.iotivity.org/browse/IOT-3267
CVE ID: CVE-2019-9751 State: PUBLISHED Published: 2019-03-13T22:00:00Z Last Updated: 2024-09-16T20:42:19.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Ticket Request System (OTRS) 6.x before 6.0.17 and 7.x before 7.0.5. An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS. This is related to Kernel/Output/Template/Document.pm. Additional Analyst Notes: - CVE Program Container: References: - https://community.otrs.com/security-advisory-2019-02-security-update-for-otrs-framework
CVE ID: CVE-2019-9752 State: PUBLISHED Published: 2019-03-13T22:00:00 Last Updated: 2024-08-04T22:01:54.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16, and 7.x before 7.0.4. An attacker who is logged into OTRS as an agent or a customer user may upload a carefully crafted resource in order to cause execution of JavaScript in the context of OTRS. This is related to Content-type mishandling in Kernel/Modules/PictureUpload.pm. Additional Analyst Notes: - CVE Program Container: References: - https://community.otrs.com/security-advisory-2019-01-security-update-for-otrs-framework - htt
m Container: References: - https://community.otrs.com/security-advisory-2019-01-security-update-for-otrs-framework - https://lists.debian.org/debian-lts-announce/2019/03/msg00023.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html
CVE ID: CVE-2019-9753 State: PUBLISHED Published: 2019-06-03T18:05:33 Last Updated: 2024-08-04T22:01:54.134Z Severity: LOW (CVSS 3.5 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:N/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Ticket Request System (OTRS) 7.x before 7.0.5. An attacker who is logged into OTRS as an agent or a customer user can use the search result screens to disclose information from invalid system entities. Following is the list of affected entities: Custom Pages, FAQ Articles, Service Catalogue Items, ITSM Configuration Items. Additional Analyst Notes: - CVE Program Container: References: - https://community.otrs.com/security-advi
uration Items. Additional Analyst Notes: - CVE Program Container: References: - https://community.otrs.com/security-advisory-2019-03-security-update-for-otrs-framework
CVE ID: CVE-2019-9754 State: PUBLISHED Published: 2019-03-13T22:00:00Z Last Updated: 2024-09-17T00:11:36.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 1 byte out of bounds write in the end_macro function in tccpp.c. Additional Analyst Notes: - CVE Program Container: References: - https://lists.nongnu.org/archive/html/tinycc-devel/2019-03/msg00038.html
CVE ID: CVE-2019-9755 State: PUBLISHED Published: 2019-06-05T14:57:27 Last Updated: 2024-08-04T22:01:54.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.tuxera.com/community/release-history/ - https://a
onal Analyst Notes: - CVE Program Container: References: - https://www.tuxera.com/community/release-history/ - https://access.redhat.com/errata/RHSA-2019:2308 - https://access.redhat.com/errata/RHSA-2019:3345 - https://access.redhat.com/errata/RHBA-2019:3723 - https://security.gentoo.org/glsa/202007-45
CVE ID: CVE-2019-9756 State: PUBLISHED Published: 2019-04-17T16:11:22 Last Updated: 2024-08-04T22:01:54.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control, a different vulnerability than CVE-2019-9732. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/54243
CVE ID: CVE-2019-9757 State: PUBLISHED Published: 2019-10-29T16:30:50 Last Updated: 2024-08-04T22:01:54.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LabKey Server 19.1.0. Sending an SVG containing an XXE payload to the endpoint visualization-exportImage.view or visualization-exportPDF.view allows local files to be read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2019-9757 - https://rhinosecuritylabs.com/application-security/labkey-server-vulnerabilities-to-rce
CVE ID: CVE-2019-9758 State: PUBLISHED Published: 2019-10-29T16:40:27 Last Updated: 2024-08-04T22:01:54.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LabKey Server 19.1.0. The display name of a user is vulnerable to stored XSS that can execute on administrators from security/permissions.view, security/addUsers.view, or wiki/Administration/page.view in the admin panel, leading to privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://rhinosecuritylabs.com/application-security/labkey-server-vulnerabilities-to-rce - https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2019-9758
CVE ID: CVE-2019-9759 State: PUBLISHED Published: 2019-04-02T13:22:44 Last Updated: 2024-08-04T22:01:54.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TONGDA Office Anywhere 10.18.190121. There is a SQL Injection vulnerability via the general/approve_center/list/input_form/work_handle.php run_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://expzh.com/TONGDA-OA-SQL-Injection.pdf
CVE ID: CVE-2019-9760 State: PUBLISHED Published: 2019-03-14T01:00:00 Last Updated: 2024-08-04T22:01:54.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that sends crafted responses. Long responses can also crash the FTP client with memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/w4fz5uck5/FTPGetter/blob/master/xpl.py - https://www.exploit-db.com/exploits/46543/
CVE ID: CVE-2019-9761 State: PUBLISHED Published: 2019-03-14T01:00:00 Last Updated: 2024-08-04T22:01:54.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XXE issue was discovered in PHPSHE 1.7, which can be used to read any file in the system or scan the internal network without authentication. This occurs because of the call to wechat_getxml in include/plugin/payment/wechat/notify_url.php. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/koyshe/phpshe/issues/ITC0C
CVE ID: CVE-2019-9762 State: PUBLISHED Published: 2019-03-14T01:00:00 Last Updated: 2024-08-04T22:01:54.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/koyshe/phpshe/issues/ITC0C
CVE ID: CVE-2019-9763 State: PUBLISHED Published: 2019-06-19T17:02:44 Last Updated: 2024-08-04T22:01:54.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Openfind Mail2000 6.0 and 7.0 Webmail. XSS can occur via an '<object data="data:text/html' substring in an e-mail message (The vendor subsequently patched this). Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/keniver/1f6092242ee79a8456a86bb7624bc171 - https://www.openfind.com.tw/taiwan/download/m2k/patch/Openfind_OF-ISAC-19-004.pdf - https://www.openfind.com.tw/taiwan/download/m2k/patch/Openfind_OF-ISAC-19-005.pdf
CVE ID: CVE-2019-9764 State: PUBLISHED Published: 2019-03-26T13:05:51 Last Updated: 2024-08-04T22:01:54.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: HashiCorp Consul 1.4.3 lacks server hostname verification for agent-to-agent TLS communication. In other words, the product behaves as if verify_server_hostname were set to false, even when it is actually set to true. This is fixed in 1.4.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hashicorp/consul/issues/5519
CVE ID: CVE-2019-9765 State: PUBLISHED Published: 2019-03-14T07:00:00 Last Updated: 2024-08-04T22:01:54.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Blog_mini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails() function, related to app/templates/_article_comments.html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xpleaf/Blog_mini/issues/43
CVE ID: CVE-2019-9766 State: PUBLISHED Published: 2019-03-14T07:00:00 Last Updated: 2024-08-04T22:01:54.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .mp3 file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45403
CVE ID: CVE-2019-9767 State: PUBLISHED Published: 2019-03-14T07:00:00 Last Updated: 2024-08-04T22:01:54.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wma file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45412 - https://packetstormsecurity.com/files/149371/Free-MP3-CD-Ripper-2.6-Local-Buffer-Overflow.html - http://packetstormsecurity.com/files/160157/Free-MP3-CD-Ripper-2.8-Buffer-Overflow.html
CVE ID: CVE-2019-9768 State: PUBLISHED Published: 2019-03-14T07:00:00 Last Updated: 2024-08-04T22:01:54.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timestamp, which makes it easier for attackers to estimate whether a Word document contains a token. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thinkst/canarytokens/issues/35 - https://www.exploit-db.com/exploits/46589/ - http://packetstormsecurity.com/files/152182/Canarytokens-2019-03-01-Detection-Bypass.html
CVE ID: CVE-2019-9769 State: PUBLISHED Published: 2019-03-14T07:00:00 Last Updated: 2024-08-04T22:01:54.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: PilusCart 1.4.1 is vulnerable to index.php?module=users&action=newUser CSRF, leading to the addition of a new user as administrator. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46531
CVE ID: CVE-2019-9770 State: PUBLISHED Published: 2019-03-14T07:00:00 Last Updated: 2024-08-04T22:01:54.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwg_decode_eed_data at decode.c for the y dimension. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/bugs/index.php?55893 - https://github.com/LibreDWG/libredwg/issues/99 - http://www.securityfocus.com/bid/107447 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html
CVE ID: CVE-2019-9771 State: PUBLISHED Published: 2019-03-14T07:00:00 Last Updated: 2024-08-04T22:01:54.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function bit_convert_TU at bits.c. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/bugs/index.php?55893 - https://github.com/LibreDWG/libredwg/issues/99 - http://www.securityfocus.com/bid/107447 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html
CVE ID: CVE-2019-9772 State: PUBLISHED Published: 2019-03-14T07:00:00 Last Updated: 2024-08-04T22:01:54.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LEADER at dwg.spec. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/bugs/index.php?55893 - https://github.com/LibreDWG/libredwg/issues/99 - http://www.securityfocus.com/bid/107447 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html
CVE ID: CVE-2019-9773 State: PUBLISHED Published: 2019-03-14T07:00:00 Last Updated: 2024-08-04T22:01:54.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwg_decode_eed_data at decode.c for the z dimension. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/bugs/index.php?55893 - https://github.com/LibreDWG/libredwg/issues/99 - http://www.securityfocus.com/bid/107447 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html
CVE ID: CVE-2019-9774 State: PUBLISHED Published: 2019-03-14T07:00:00 Last Updated: 2024-08-04T22:01:54.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function bit_read_B at bits.c. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/bugs/index.php?55893 - https://github.com/LibreDWG/libredwg/issues/99 - http://www.securityfocus.com/bid/107447 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html
CVE ID: CVE-2019-9775 State: PUBLISHED Published: 2019-03-14T07:00:00 Last Updated: 2024-08-04T22:01:54.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function dwg_dxf_BLOCK_CONTROL at dwg.spec. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/bugs/index.php?55893 - https://github.com/LibreDWG/libredwg/issues/99 - http://www.securityfocus.com/bid/107447 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html
CVE ID: CVE-2019-9776 State: PUBLISHED Published: 2019-03-14T07:00:00 Last Updated: 2024-08-04T22:01:54.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LTYPE at dwg.spec (later than CVE-2019-9779). Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/bugs/index.php?55893 - https://github.com/LibreDWG/libredwg/issues/99 - http://www.securityfocus.com/bid/107447 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html
CVE ID: CVE-2019-9777 State: PUBLISHED Published: 2019-03-14T07:00:00 Last Updated: 2024-08-04T22:01:54.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read in the function dxf_header_write at header_variables_dxf.spec. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/bugs/index.php?55893 - https://github.com/LibreDWG/libredwg/issues/99 - http://www.securityfocus.com/bid/107447 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html
CVE ID: CVE-2019-9778 State: PUBLISHED Published: 2019-03-14T07:00:00 Last Updated: 2024-08-04T22:01:54.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read in the function dwg_dxf_LTYPE at dwg.spec. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/bugs/index.php?55893 - https://github.com/LibreDWG/libredwg/issues/99 - http://www.securityfocus.com/bid/107447 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html
CVE ID: CVE-2019-9779 State: PUBLISHED Published: 2019-03-14T07:00:00 Last Updated: 2024-08-04T22:01:54.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LTYPE at dwg.spec (earlier than CVE-2019-9776). Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/bugs/index.php?55893 - https://github.com/LibreDWG/libredwg/issues/99 - http://www.securityfocus.com/bid/107447 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html
CVE ID: CVE-2019-9785 State: PUBLISHED Published: 2019-03-14T14:00:00Z Last Updated: 2024-09-16T17:14:18.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: gitnote 3.1.0 allows remote attackers to execute arbitrary code via a crafted Markdown file, as demonstrated by a javascript:window.parent.top.require('child_process').execFile substring in the onerror attribute of an IMG element. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhaopengme/gitnote/issues/209 - https://github.com/CCCCCrash/POCs/tree/master/Web/gitnote
CVE ID: CVE-2019-9787 State: PUBLISHED Published: 2019-03-14T16:00:00 Last Updated: 2024-08-04T22:01:54.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 5.1.1 does not properly filter comment content, leading to Remote Code Execution by unauthenticated users in a default configuration. This occurs because CSRF protection is mishandled, and because Search Engine Optimization of A elements is performed incorrectly, leading to XSS. The XSS results in administrative access, which allows arbitrary changes to .php files. This is related to wp-admin/includes/ajax-actions.php and wp-includes/comment.php. Additional Analyst Notes: - CVE Program Container: References: -