Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-15128 State: PUBLISHED Published: 2019-09-06T21:15:07 Last Updated: 2024-08-05T00:34:53.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: iF.SVNAdmin through 1.6.2 allows svnadmin/usercreate.php CSRF to create a user. Additional Analyst Notes: - CVE Program Container: References: - https://zeroauth.ltd/blog/2019/08/23/cve-2019-15128-if-svnadmin-through-1-6-2-allows-svnadmin-usercreate-php-csrf-to-create-a-user/
CVE ID: CVE-2019-15129 State: PUBLISHED Published: 2019-08-18T16:22:26 Last Updated: 2024-08-05T00:34:53.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to access all candidates' files in the photo folder on the website by specifying a "user id" parameter and file name, such as in a recruitment_online/upload/user/[user_id]/photo/[file_name] URI. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/izadgot/38a7dd553f8024ed3154134dae0414fd
CVE ID: CVE-2019-15130 State: PUBLISHED Published: 2019-08-18T16:23:04 Last Updated: 2024-08-05T00:34:53.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to upload any file type to a candidate's profile picture folder via a crafted recruitment_online/personalData/act_personaltab.cfm multiple-part POST request with a predictable WRC01_USERID parameter. Moreover, the attacker can upload executable content (e.g., asp or aspx) for executing OS commands on the server. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/izadgot/38a7dd553f8024e
server. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/izadgot/38a7dd553f8024ed3154134dae0414fd
CVE ID: CVE-2019-15131 State: PUBLISHED Published: 2019-09-17T11:54:29 Last Updated: 2024-08-05T00:34:53.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Code42 Enterprise 6.7.5 and earlier, 6.8.4 through 6.8.8, and 7.0.0 a vulnerability has been identified that may allow arbitrary files to be uploaded to Code42 servers and executed. This vulnerability could allow an attacker to create directories and save files on Code42 servers, which could potentially lead to code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories - https://code42.com/r/su
t.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories - https://code42.com/r/support/CVE-2019-15131
CVE ID: CVE-2019-15132 State: PUBLISHED Published: 2019-08-17T00:00:00 Last Updated: 2024-08-05T00:34:53.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zabbix through 4.4.0alpha1 allows User Enumeration. With login requests, it is possible to enumerate application usernames based on the variability of server responses (e.g., the "Login name or password is incorrect" and "No permissions for system access" messages, or just blocking for a number of seconds). This affects both api_jsonrpc.php and index.php. Additional Analyst Notes: - CVE Program Container: References: - https://support.zabbix.com/browse/ZBX-16532 - https://lists.debian.org/debian-lts-announce/2021/04/msg00018.
ferences: - https://support.zabbix.com/browse/ZBX-16532 - https://lists.debian.org/debian-lts-announce/2021/04/msg00018.html - https://lists.debian.org/debian-lts-announce/2023/04/msg00013.html
CVE ID: CVE-2019-15133 State: PUBLISHED Published: 2019-08-17T00:00:00 Last Updated: 2024-08-05T00:34:53.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GIFLIB before 2019-02-16, a malformed GIF file triggers a divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c if the height field of the ImageSize data structure is equal to zero. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13008 - https://usn.ubuntu.com/4107-1/ - https://lists.debian.org/debian-lts-announce/2022/12/msg00008.html
CVE ID: CVE-2019-15134 State: PUBLISHED Published: 2019-08-17T17:54:54 Last Updated: 2024-08-05T00:34:53.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: RIOT through 2019.07 contains a memory leak in the TCP implementation (gnrc_tcp), allowing an attacker to consume all memory available for network packets and thus effectively stopping all network threads from working. This is related to _receive in sys/net/gnrc/transport_layer/tcp/gnrc_tcp_eventloop.c upon receiving an ACK before a SYN. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RIOT-OS/RIOT/pull/12001
CVE ID: CVE-2019-15135 State: PUBLISHED Published: 2019-08-18T15:43:21 Last Updated: 2024-08-05T00:34:53.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: The handshake protocol in Object Management Group (OMG) DDS Security 1.1 sends cleartext information about all of the capabilities of a participant (including capabilities inapplicable to the current session), which makes it easier for attackers to discover potentially sensitive reachability information on a Data Distribution Service (DDS) network. Additional Analyst Notes: - CVE Program Container: References: - https://arxiv.org/abs/1908.05310 - https://www.omg.org/spec/DDS-SECURITY/1.1/PDF
CVE ID: CVE-2019-15136 State: PUBLISHED Published: 2019-08-18T15:43:46 Last Updated: 2024-08-05T00:34:53.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition permissions from remote participant connections, which can lead to policy bypass for a secure Data Distribution Service (DDS) partition. Additional Analyst Notes: - CVE Program Container: References: - https://arxiv.org/abs/1908.05310 - https://github.com/eProsima/Fast-RTPS/issues/443
CVE ID: CVE-2019-15137 State: PUBLISHED Published: 2019-08-18T15:44:12 Last Updated: 2024-08-05T00:34:53.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings (instead of the permission expressions themselves), which can lead to unintended connections between participants in a Data Distribution Service (DDS) network. Additional Analyst Notes: - CVE Program Container: References: - https://arxiv.org/abs/1908.05310 - https://github.com/eProsima/Fast-RTPS/issues/441
CVE ID: CVE-2019-15138 State: PUBLISHED Published: 2019-09-20T19:13:13 Last Updated: 2024-08-05T00:34:53.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: The html-pdf package 2.2.0 for Node.js has an arbitrary file read vulnerability via an HTML file that uses XMLHttpRequest to access a file:/// URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.npmjs.com/advisories/1095 - https://security.netapp.com/advisory/ntap-20191017-0005/
CVE ID: CVE-2019-15139 State: PUBLISHED Published: 2019-08-18T18:31:18 Last Updated: 2024-08-05T00:34:53.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from an out-of-bounds Read) in ReadXWDImage in coders/xwd.c by crafting a corrupted XWD image file, a different vulnerability than CVE-2019-11472. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1553 - https://github.com/ImageMagick/ImageMagick/commit/c78993d138bf480ab4652b5a48379d4ff75ba5f
gick/ImageMagick/issues/1553 - https://github.com/ImageMagick/ImageMagick/commit/c78993d138bf480ab4652b5a48379d4ff75ba5f7 - https://lists.debian.org/debian-lts-announce/2019/10/msg00028.html - https://usn.ubuntu.com/4192-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3IYH7QSNXXOIDFTYLY455ANZ3JWQ7FCS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FS76VNCFL3FVRMGXQEMHBOKA7EE46BTS/ - https://www.debian.org/security/2020/dsa-4712 - https:
sts.fedoraproject.org/message/FS76VNCFL3FVRMGXQEMHBOKA7EE46BTS/ - https://www.debian.org/security/2020/dsa-4712 - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2019-15140 State: PUBLISHED Published: 2019-08-18T18:31:06 Last Updated: 2024-08-05T00:34:53.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1554 - https://github.com/ImageMagick/ImageMagick/commit/f7206618d27c2e69d977abf40e3035a33e5f6be0 - https://lists.debian.org/debian-lts-announce/2019
geMagick/ImageMagick/commit/f7206618d27c2e69d977abf40e3035a33e5f6be0 - https://lists.debian.org/debian-lts-announce/2019/10/msg00028.html - https://usn.ubuntu.com/4192-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html - https://www.debian.org/security/2020/dsa-4712 - https://www.debian.org/security/2020/dsa-4715
CVE ID: CVE-2019-15141 State: PUBLISHED Published: 2019-08-18T18:30:56 Last Updated: 2024-08-05T00:42:03.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from a heap-based buffer over-read) via a crafted TIFF image file, related to TIFFRewriteDirectory, TIFFWriteDirectory, TIFFWriteDirectorySec, and TIFFWriteDirectoryTagColormap in tif_dirwrite.c of LibTIFF. NOTE: this occurs because of an incomplete fix for CVE-2019-11597. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1560 -
ditional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1560 - https://github.com/ImageMagick/ImageMagick6/commit/3c53413eb544cc567309b4c86485eae43e956112 - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html
CVE ID: CVE-2019-15142 State: PUBLISHED Published: 2019-08-18T18:30:43 Last Updated: 2024-08-05T00:42:03.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buffer over-read) by crafting a DJVU file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/djvu/bugs/296/ - https://sourceforge.net/p/djvu/djvulibre-git/ci/970fb11a296b5bbdc5e8425851253d2c5913c45e/ - https://lists.debian.org/debian-lts-announce/2019/08/msg00036.html - http://lists.opensuse.or
5e8425851253d2c5913c45e/ - https://lists.debian.org/debian-lts-announce/2019/08/msg00036.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00086.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00087.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPMG3VY33XGMIKE6QDYIUVS6A7GNTHTK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RYZTGKWY3NAKMIMTFYGN4ZO5XEQWPYRL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7F7544WASYMOTFDR2WUEOQLN3ZEXNU4/ - https://usn.ubuntu.com/4198-1/ - https://lists.fedo
0lists.fedoraproject.org/message/M7F7544WASYMOTFDR2WUEOQLN3ZEXNU4/ - https://usn.ubuntu.com/4198-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/ - https://security.gentoo.org/glsa/202007-36 - https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html - https://www.debian.org/security/2021/dsa-5032
CVE ID: CVE-2019-15143 State: PUBLISHED Published: 2019-08-18T18:30:29 Last Updated: 2024-08-05T00:42:03.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error (resource exhaustion caused by a GBitmap::read_rle_raw infinite loop) by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/djvu/bugs/297/ - https://sourceforge.net/p/djvu/djvulibre-git/ci/b1f4e1b2187d9e5010cd01ceccf20b4a11ce723f/ - https://lists.debian.org/debian-lts-announce/2019/08/msg00036.html -
-git/ci/b1f4e1b2187d9e5010cd01ceccf20b4a11ce723f/ - https://lists.debian.org/debian-lts-announce/2019/08/msg00036.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00086.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00087.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPMG3VY33XGMIKE6QDYIUVS6A7GNTHTK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RYZTGKWY3NAKMIMTFYGN4ZO5XEQWPYRL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7F7544WASYMOTFDR2WUEOQLN3ZEXNU4/ - https://usn.ubuntu.com/419
s/list/package-announce%40lists.fedoraproject.org/message/M7F7544WASYMOTFDR2WUEOQLN3ZEXNU4/ - https://usn.ubuntu.com/4198-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/ - https://security.gentoo.org/glsa/202007-36 - https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html - https://www.debian.org/security/2021/dsa-5032
CVE ID: CVE-2019-15144 State: PUBLISHED Published: 2019-08-18T18:30:18 Last Updated: 2024-08-05T00:42:03.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: In DjVuLibre 3.5.27, the sorting functionality (aka GArrayTemplate<TYPE>::sort) allows attackers to cause a denial-of-service (application crash due to an Uncontrolled Recursion) by crafting a PBM image file that is mishandled in libdjvu/GContainer.h. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/djvu/bugs/299/ - https://sourceforge.net/p/djvu/djvulibre-git/ci/e15d51510048927f172f1bf1f27ede65907d940d/ - https://lists.debian.org/debian-lts-announce/2019/08/msg00036.html - http://lis
d51510048927f172f1bf1f27ede65907d940d/ - https://lists.debian.org/debian-lts-announce/2019/08/msg00036.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00086.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00087.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPMG3VY33XGMIKE6QDYIUVS6A7GNTHTK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RYZTGKWY3NAKMIMTFYGN4ZO5XEQWPYRL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7F7544WASYMOTFDR2WUEOQLN3ZEXNU4/ - https://usn.ubuntu.com/4198-1/ - http
age-announce%40lists.fedoraproject.org/message/M7F7544WASYMOTFDR2WUEOQLN3ZEXNU4/ - https://usn.ubuntu.com/4198-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/ - https://security.gentoo.org/glsa/202007-36 - https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html - https://www.debian.org/security/2021/dsa-5032
CVE ID: CVE-2019-15145 State: PUBLISHED Published: 2019-08-18T18:30:05 Last Updated: 2024-08-05T00:42:03.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by crafting a corrupted JB2 image file that is mishandled in JB2Dict::JB2Codec::get_direct_context in libdjvu/JB2Image.h because of a missing zero-bytes check in libdjvu/GBitmap.h. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/djvu/bugs/298/ - https://sourceforge.net/p/djvu/djvulibre-git/ci/9658b01431cd7ff6344d7787f855179e73fe81a7/ - https://lists.debian.org/debian-lt
//sourceforge.net/p/djvu/djvulibre-git/ci/9658b01431cd7ff6344d7787f855179e73fe81a7/ - https://lists.debian.org/debian-lts-announce/2019/08/msg00036.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00086.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00087.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPMG3VY33XGMIKE6QDYIUVS6A7GNTHTK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RYZTGKWY3NAKMIMTFYGN4ZO5XEQWPYRL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7F7544WASYMOTFDR2WUEOQLN3ZE
://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7F7544WASYMOTFDR2WUEOQLN3ZEXNU4/ - https://usn.ubuntu.com/4198-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/ - https://security.gentoo.org/glsa/202007-36 - https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html - https://www.debian.org/security/2021/dsa-5032
CVE ID: CVE-2019-15146 State: PUBLISHED Published: 2019-08-18T18:29:43 Last Updated: 2024-08-05T00:42:03.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: GoPro GPMF-parser 1.2.2 has a heap-based buffer over-read (4 bytes) in GPMF_Next in GPMF_parser.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gopro/gpmf-parser/issues/60 - https://github.com/gopro/gpmf-parser/commit/341f12cd5b97ab419e53853ca00176457c9f1681
CVE ID: CVE-2019-15147 State: PUBLISHED Published: 2019-08-18T18:29:33 Last Updated: 2024-08-05T00:42:03.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: GoPro GPMF-parser 1.2.2 has an out-of-bounds read and SEGV in GPMF_Next in GPMF_parser.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gopro/gpmf-parser/issues/60 - https://github.com/gopro/gpmf-parser/commit/341f12cd5b97ab419e53853ca00176457c9f1681
CVE ID: CVE-2019-15148 State: PUBLISHED Published: 2019-08-18T18:29:22 Last Updated: 2024-08-05T00:42:03.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: GoPro GPMF-parser 1.2.2 has an out-of-bounds write in OpenMP4Source in demo/GPMF_mp4reader.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gopro/gpmf-parser/issues/60 - https://github.com/gopro/gpmf-parser/commit/341f12cd5b97ab419e53853ca00176457c9f1681
CVE ID: CVE-2019-15149 State: PUBLISHED Published: 2019-08-18T19:56:18 Last Updated: 2024-08-05T00:42:03.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with hypothetical other factors, i.e., an affected use case within a library caller, and a bug in the message receiver policy code that led to reliance on this extra protection mechanism Additional Analyst Notes: - CVE Program Container: References:
that led to reliance on this extra protection mechanism Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dw/mitogen/commit/5924af1566763e48c42028399ea0cd95c457b3dc - https://mitogen.networkgenomics.com/changelog.html#v0-2-8-2019-08-18
CVE ID: CVE-2019-15150 State: PUBLISHED Published: 2019-08-19T03:41:04 Last Updated: 2024-08-05T00:42:00.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the OAuth2 Client extension before 0.4 for MediaWiki, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Schine/MW-OAuth2Client/commit/6a4fe4500ddd72ad4e826d9d63b2d69512bd10d1 - https://github.com/Schine/MW-OAuth2Client/releases/tag/v0.4 - http://www.openwall.com/lists/oss-security/2019/08/19/1 - https://seclists.org/bugtraq/2019/Aug/32 - http://packetstormsecurity.com/files/154140/Medi
/oss-security/2019/08/19/1 - https://seclists.org/bugtraq/2019/Aug/32 - http://packetstormsecurity.com/files/154140/MediaWiki-OAuth2-Client-0.3-Cross-Site-Request-Forgery.html - http://seclists.org/fulldisclosure/2019/Aug/25
CVE ID: CVE-2019-15151 State: PUBLISHED Published: 2019-08-18T20:19:36 Last Updated: 2024-08-05T00:42:03.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/adplug/adplug/issues/91 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS/
CVE ID: CVE-2019-15160 State: PUBLISHED Published: 2019-08-19T05:40:00 Last Updated: 2024-08-05T00:42:00.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SweetXml (aka sweet_xml) package through 0.6.6 for Erlang and Elixir allows attackers to cause a denial of service (resource consumption) via an XML entity expansion attack with an inline DTD. Additional Analyst Notes: - CVE Program Container: References: - https://hex.pm/packages/sweet_xml - https://github.com/kbrw/sweet_xml/issues/71
CVE ID: CVE-2019-15161 State: PUBLISHED Published: 2019-10-03T18:24:25 Last Updated: 2024-08-05T00:42:00.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request. Additional Analyst Notes: - CVE Program Container: References: - https://www.tcpdump.org/public-cve-list.txt - https://github.com/the-tcpdump-group/libpcap/blob/libpcap-1.9/CHANGES - https://github.com/the-tcpdump-group/libpcap/commit/617b12c0339db4891d117b661982126c495439ea - https://lists.fedoraproject.org/archives/list/package-announce%40lis