deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-17381
Published: 2019-06-19
Description: SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filter_order_Dir or filter_order parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/author/?a=8844; https://www.exploit-db.com/exploits/45462; https://www.exploit-db.com/author/?a=8844
CVE: CVE-2018-17386
Published: 2019-06-19
Description: SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATH_INFO to mydeals/ or listdeals/.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/author/?a=8844; https://www.exploit-db.com/exploits/45452; https://www.exploit-db.com/author/?a=8844
CVE: CVE-2018-17387
Published: 2019-06-19
Description: CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.exploit-db.com/author/?a=8844; https://www.exploit-db.com/exploits/42648; https://www.exploit-db.com/author/?a=8844
CVE: CVE-2018-17388
Published: 2019-06-19
Description: SQL Injection exists in Twilio WEB To Fax Machine System 1.0 via the email or password parameter to login_check.php, or the id parameter to add_email.php or edit_content.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/author/?a=8844; https://www.exploit-db.com/exploits/46139; https://www.exploit-db.com/author/?a=8844
CVE: CVE-2019-12890
Published: 2019-06-19
Description: RedwoodHQ 2.5.5 does not require any authentication for database operations, which allows remote attackers to create admin users via a con.automationframework users insert_one call.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.exploit-db.com/exploits/46992; https://www.youtube.com/watch?v=MK9AvoJDtxY; https://www.exploit-db.com/exploits/46992
CVE: CVE-2019-9763
Published: 2019-06-19
Description: An issue was discovered in Openfind Mail2000 6.0 and 7.0 Webmail. XSS can occur via an '<object data="data:text/html' substring in an e-mail message (The vendor subsequently patched this).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/keniver/1f6092242ee79a8456a86bb7624bc171; https://www.openfind.com.tw/taiwan/download/m2k/patch/Openfind_OF-ISAC-19-004.pdf; https://www.openfind.com.tw/taiwan/download/m2k/patch/Openfind_OF-ISAC-19-005.pdf
CVE: CVE-2018-16593
Published: 2019-06-19
Description: The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://fortiguard.com/zeroday/FG-VD-18-036; https://www.sony.co.uk/electronics/support/articles/00201041; https://fortiguard.com/zeroday/FG-VD-18-036
CVE: CVE-2018-16594
Published: 2019-06-19
Description: The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://fortiguard.com/zeroday/FG-VD-18-036; https://www.sony.co.uk/electronics/support/articles/00201041; https://fortiguard.com/zeroday/FG-VD-18-036
CVE: CVE-2018-16595
Published: 2019-06-19
Description: The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices has a Buffer Overflow.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://fortiguard.com/zeroday/FG-VD-18-036; https://www.sony.co.uk/electronics/support/articles/00201041; https://fortiguard.com/zeroday/FG-VD-18-036
CVE: CVE-2019-1985
Published: 2019-06-19
Description: In findAvailSpellCheckerLocked of TextServicesManagerService.java, there is a possible way to bypass the warning dialog when selecting an untrusted spell checker due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0Android ID: A-118694079
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-1989
Published: 2019-06-19
Description: In ih264d_fmt_conv_420sp_to_420p of ih264d_format_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-118399205
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-1990
Published: 2019-06-19
Description: In ihevcd_fmt_conv_420sp_to_420p of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-118453553
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2004
Published: 2019-06-19
Description: In publishKeyEvent, publishMotionEvent and sendUnchainedFinishedSignal of InputTransport.cpp, there are uninitialized data leading to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-115739809
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2005
Published: 2019-06-19
Description: In onPermissionGrantResult of GrantPermissionsActivity.java, there is a possible incorrectly granted permission due to a missing permission check. This could lead to local escalation of privilege on a locked device with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-68777217
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2006
Published: 2019-06-19
Description: In serviceDied of HalDeathHandlerHidl.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege in the audio server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9Android ID: A-116665972
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-362, CWE-416, CWE-787
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2007
Published: 2019-06-19
Description: In getReadIndex and getWriteIndex of FifoControllerBase.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in the audio server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9Android ID: A-120789744
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-787
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2008
Published: 2019-06-19
Description: In createEffect of AudioFlinger.cpp, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-122309228
CVSS Score: 7.5 (HIGH)
CWE: CWE-362, CWE-787
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2009
Published: 2019-06-19
Description: In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120665616
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2010
Published: 2019-06-19
Description: In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-118152591
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2011
Published: 2019-06-19
Description: In readNullableNativeHandleNoDup of Parcel.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-120084106
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2012
Published: 2019-06-19
Description: In rw_t3t_act_handle_fmt_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120497437
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2013
Published: 2019-06-19
Description: In rw_t3t_act_handle_sro_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120497583
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2014
Published: 2019-06-19
Description: In rw_t3t_handle_get_sc_poll_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120499324
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2015
Published: 2019-06-19
Description: In rw_t3t_act_handle_check_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120503926
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2016
Published: 2019-06-19
Description: In NFA_SendRawFrame of nfa_dm_api.cc, there is a possible out-of-bound write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120664978
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2018-9561
Published: 2019-06-19
Description: In llcp_util_parse_connect of llcp_util.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-111660010
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2018-9563
Published: 2019-06-19
Description: In llcp_util_parse_cc of llcp_util.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-114237888
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2018-9564
Published: 2019-06-19
Description: In llcp_util_parse_link_params of llcp_util.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-114238578
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2003
Published: 2019-06-19
Description: In addLinks of Linkify.java, there is a possible phishing vector due to an unusual root cause. This could lead to remote code execution or misdirection of clicks with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-116321860
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2017
Published: 2019-06-19
Description: In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-121035711
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2018
Published: 2019-06-19
Description: In resetPasswordInternal of DevicePolicyManagerService.java, there is a possible bypass of password reset protection due to an unusual root cause. Remote user interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9Android ID: A-110172241
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2019
Published: 2019-06-19
Description: In ce_t4t_data_cback of ce_t4t.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-115635871
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2020
Published: 2019-06-19
Description: In llcp_dlc_proc_rr_rnr_pdu of llcp_dlc.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-116788646
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2021
Published: 2019-06-19
Description: In rw_t3t_act_handle_ndef_detect_rsp of rw_t3t.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120428041
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2022
Published: 2019-06-19
Description: In rw_t3t_act_handle_fmt_rsp and rw_t3t_act_handle_sro_rsp of rw_t3t.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120506143
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2023
Published: 2019-06-19
Description: In ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller. This could allow an app to add or replace a HAL service with its own service, gaining code execution in a privileged process.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-121035042Upstream kernel
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2019-2024
Published: 2019-06-19
Description: In em28xx_unregister_dvb of em28xx-dvb.c, there is a possible use after free issue. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-111761954References: Upstream kernel
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/2019-03-01; https://usn.ubuntu.com/4094-1/; https://usn.ubuntu.com/4118-1/
CVE: CVE-2019-2025
Published: 2019-06-19
Description: In binder_thread_read of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-116855682References: Upstream kernel
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-667
References: https://source.android.com/security/bulletin/2019-03-01; https://source.android.com/security/bulletin/2019-03-01
CVE: CVE-2017-14394
Published: 2019-06-19
Description: OAuth 2.0 Authorization Server of ForgeRock Access Management (OpenAM) 13.5.0-13.5.1 and Access Management (AM) 5.0.0-5.1.1 does not correctly validate redirect_uri for some invalid requests, which allows attackers to perform phishing via an unvalidated redirect.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://backstage.forgerock.com/knowledge/kb/article/a45958025; https://backstage.forgerock.com/knowledge/kb/article/a45958025
CVE: CVE-2017-14395
Published: 2019-06-19
Description: Auth 2.0 Authorization Server of ForgeRock Access Management (OpenAM) 13.5.0-13.5.1 and Access Management (AM) 5.0.0-5.1.1 does not correctly validate redirect_uri for some invalid requests, which allows attackers to execute a script in the user's browser via reflected XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://backstage.forgerock.com/knowledge/kb/article/a45958025; https://backstage.forgerock.com/knowledge/kb/article/a45958025
CVE: CVE-2019-12893
Published: 2019-06-19
Description: Alternate Pic View 2.600 has a User Mode Write AV starting at PicViewer!PerfgrapFinalize+0x[PII_REDACTED]0a8868.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://code610.blogspot.com/2019/05/crashing-alternate-pic-view.html; https://code610.blogspot.com/2019/05/crashing-alternate-pic-view.html
CVE: CVE-2019-12894
Published: 2019-06-19
Description: Alternate Pic View 2.600 has a Read Access Violation at the Instruction Pointer after a call from PicViewer!PerfgrapFinalize+0x[PII_REDACTED]0a9a1b.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://code610.blogspot.com/2019/05/crashing-alternate-pic-view.html; https://code610.blogspot.com/2019/05/crashing-alternate-pic-view.html
CVE: CVE-2019-12895
Published: 2019-06-19
Description: In Alternate Pic View 2.600, the Exception Handler Chain is Corrupted starting at PicViewer!PerfgrapFinalize+0x[PII_REDACTED]0b916d.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://code610.blogspot.com/2019/05/crashing-alternate-pic-view.html; https://code610.blogspot.com/2019/05/crashing-alternate-pic-view.html
CVE: CVE-2019-12896
Published: 2019-06-19
Description: Edraw Max 7.9.3 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x[PII_REDACTED]001a77.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://code610.blogspot.com/2019/05/crashing-edraw-max.html; https://code610.blogspot.com/2019/05/crashing-edraw-max.html
CVE: CVE-2019-12897
Published: 2019-06-19
Description: Edraw Max 7.9.3 has a Read Access Violation at the Instruction Pointer after a call from ObjectModule!Paint::Clear+0x[PII_REDACTED]000074.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://code610.blogspot.com/2019/05/crashing-edraw-max.html; https://code610.blogspot.com/2019/05/crashing-edraw-max.html
CVE: CVE-2019-12898
Published: 2019-06-19
Description: Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at image00400000+0x[PII_REDACTED]17a45e.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://code610.blogspot.com/2019/05/crashing-devicenet-builder.html; https://code610.blogspot.com/2019/05/crashing-devicenet-builder.html
CVE: CVE-2019-12899
Published: 2019-06-19
Description: Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at ntdll!RtlQueueWorkItem+0x[PII_REDACTED]0005e3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://code610.blogspot.com/2019/05/crashing-devicenet-builder.html; https://code610.blogspot.com/2019/05/crashing-devicenet-builder.html