rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-9028 
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function InflateDimensions() in inflate.c when called from ReadNextCell in mat5.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T12:00:00.000Z
CVE-2019-9029 
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds read with a SEGV in the function Mat_VarReadNextInfo5() in mat5.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T12:00:00.000Z
CVE-2019-9030 
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in Mat_VarReadNextInfo5() in mat5.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T12:00:00.000Z
CVE-2019-9031 
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a NULL pointer dereference in the function Mat_VarFree() in mat.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T12:00:00.000Z
CVE-2019-9032 
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds write problem causing a SEGV in the function Mat_VarFree() in mat.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T12:00:00.000Z
CVE-2019-9033 
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for the "Rank and Dimension" feature in the function ReadNextCell() in mat5.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T12:00:00.000Z
CVE-2019-9034 
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for a memcpy in the function ReadNextCell() in mat5.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T12:00:00.000Z
CVE-2019-9035 
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function ReadNextStructField() in mat5.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T12:00:00.000Z
CVE-2019-9036 
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a heap-based buffer overflow in the function ReadNextFunctionHandle() in mat5.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T12:00:00.000Z
CVE-2019-9037 
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a buffer over-read in the function Mat_VarPrint() in mat.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T12:00:00.000Z
CVE-2019-9038 
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds read problem with a SEGV in the function ReadNextCell() in mat5.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T12:00:00.000Z
CVE-2019-9039 
In Couchbase Sync Gateway 2.1.2, an attacker with access to the Sync Gateway’s public REST API was able to issue additional N1QL statements and extract sensitive data or call arbitrary N1QL functions through the parameters "startkey" and "endkey" on the "_all_docs" endpoint. By issuing nested queries with CPU-intensive operations they may have been able to cause increased resource usage and denial of service conditions. The _all_docs endpoint is not required for Couchbase Mobile replication and external access to this REST endpoint has been blocked to mitigate this issue. This issue has been fixed in versions 2.5.0 and 2.1.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-26T18:55:45.000Z
CVE-2019-9040 
S-CMS PHP v3.0 has a CSRF vulnerability to add a new admin user via the admin/ajax.php?type=admin&action=add URI, a related issue to CVE-2018-19332.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T18:00:00.000Z
CVE-2019-9041 
An issue was discovered in ZZZCMS zzzphp V1.6.1. In the inc/zzz_template.php file, the parserIfLabel() function's filtering is not strict, resulting in PHP code execution, as demonstrated by the if:assert substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T18:00:00.000Z
CVE-2019-9042 
An issue was discovered in Sitemagic CMS v4.4. In the index.php?SMExt=SMFiles URI, the user can upload a .php file to execute arbitrary code, as demonstrated by 404.php. This can only occur if the administrator neglects to set FileExtensionFilter and there are untrusted user accounts. NOTE: The maintainer states that this is not a vulnerability but a feature used in conjunction with External Modules
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T18:00:00.000Z
CVE-2019-9047 
GoRose v1.0.4 has SQL Injection when the order_by or group_by parameter can be controlled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T21:00:00.000Z
CVE-2019-9048 
An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete a theme (aka topic) via a /admin.php?action=theme_delete&var1= URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T19:00:00.000Z
CVE-2019-9049 
An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete modules via a /admin.php?action=module_delete&var1= URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T19:00:00.000Z
CVE-2019-9050 
An issue was discovered in Pluck 4.7.9-dev1. It allows administrators to execute arbitrary code by using action=installmodule to upload a ZIP archive, which is then extracted and executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T19:00:00.000Z
CVE-2019-9051 
An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete articles via a /admin.php?action=deletepage&var1= URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T19:00:00.000Z
CVE-2019-9052 
An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete pictures via a /admin.php?action=deleteimage&var1= URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T19:00:00.000Z
CVE-2019-9053 
An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1_idlist parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T16:15:38.000Z
CVE-2019-9055 
An issue was discovered in CMS Made Simple 2.2.8. In the module DesignManager (in the files action.admin_bulk_css.php and action.admin_bulk_template.php), with an unprivileged user with Designer permission, it is possible reach an unserialize call with a crafted value in the m1_allparms parameter, and achieve object injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T16:25:59.000Z
CVE-2019-9056 
An issue was discovered in CMS Made Simple 2.2.8. In the module FrontEndUsers (in the file class.FrontEndUsersManipulate.php or class.FrontEndUsersManipulator.php), it is possible to reach an unserialize call with an untrusted __FEU__ cookie, and achieve authenticated object injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-11T19:26:42.000Z
CVE-2019-9057 
An issue was discovered in CMS Made Simple 2.2.8. In the module FilePicker, it is possible to reach an unserialize call with an untrusted parameter, and achieve authenticated object injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T16:34:22.000Z
CVE-2019-9058 
An issue was discovered in CMS Made Simple 2.2.8. In the administrator page admin/changegroupperm.php, it is possible to send a crafted value in the sel_groups parameter that leads to authenticated object injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T16:40:52.000Z
CVE-2019-9059 
An issue was discovered in CMS Made Simple 2.2.8. It is possible, with an administrator account, to achieve command injection by modifying the path of the e-mail executable in Mail Settings, setting "sendmail" in the "Mailer" option, and launching the "Forgot your password" feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T16:45:38.000Z
CVE-2019-9060 
An issue was discovered in CMS Made Simple 2.2.8. It is possible to achieve unauthenticated path traversal in the CGExtensions module (in the file action.setdefaulttemplate.php) with the m1_filename parameter; and through the action.showmessage.php file, it is possible to read arbitrary file content (by using that path traversal with m1_prefname set to cg_errormsg and m1_resettodefault=1).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-17T15:47:53.000Z
CVE-2019-9061 
An issue was discovered in CMS Made Simple 2.2.8. In the module ModuleManager (in the file action.installmodule.php), it is possible to reach an unserialize call with untrusted input and achieve authenticated object injection by using the "install module" feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T16:49:42.000Z
CVE-2019-9062 
PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery (CSRF) in my-account.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T21:00:00.000Z
CVE-2019-9063 
PHP Scripts Mall Auction website script 2.0.4 allows parameter tampering of the payment amount.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T21:00:00.000Z
CVE-2019-9064 
PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T21:00:00.000Z
CVE-2019-9065 
PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T21:00:00.000Z
CVE-2019-9066 
PHP Scripts Mall PHP Appointment Booking Script 3.0.3 allows HTML injection in a user profile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-23T21:00:00.000Z
CVE-2019-9070 
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in d_expression_1 in cp-demangle.c after many recursive calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-24T00:00:00.000Z
CVE-2019-9071 
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a stack consumption issue in d_count_templates_scopes in cp-demangle.c after many recursive calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-24T00:00:00.000Z
CVE-2019-9072 
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in setup_group in elf.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-24T00:00:00.000Z
CVE-2019-9073 
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in _bfd_elf_slurp_version_tables in elf.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-24T00:00:00.000Z
CVE-2019-9074 
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfd_getl32 in libbfd.c, when called from pex64_get_runtime_function in pei-x86_64.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-24T00:00:00.000Z
CVE-2019-9075 
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap in archive64.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-24T00:00:00.000Z
CVE-2019-9076 
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in elf_read_notes in elf.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-24T00:00:00.000Z
CVE-2019-9077 
An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS option section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-24T00:00:00.000Z
CVE-2019-9078 
zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as sCrIpT.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-24T17:00:00.000Z
CVE-2019-9080 
DomainMOD before 4.14.0 uses MD5 without a salt for password storage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-20T19:06:39.000Z
CVE-2019-9082 
ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-24T18:00:00.000Z
CVE-2019-9083 
SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanager/main.php dbsel parameter. NOTE: This product is discontinued.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T17:06:53.000Z
CVE-2019-9084 
In Hoteldruid before 2.3.1, a division by zero was discovered in $num_tabelle in tab_tariffe.php (aka the numtariffa1 parameter) due to the mishandling of non-numeric values, as demonstrated by the /tab_tariffe.php?anno=[YEAR]&numtariffa1=1a URI. It could allow an administrator to conduct remote denial of service (disrupting certain business functions of the product).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T20:31:36.000Z
CVE-2019-9085 
Hoteldruid before v2.3.1 allows remote authenticated users to cause a denial of service (invoice-creation outage) via the n_file parameter to visualizza_contratto.php with invalid arguments (any non-numeric value), as demonstrated by the anno=2019&id_transazione=1&numero_contratto=1&n_file=a query string to visualizza_contratto.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-24T17:33:43.000Z
CVE-2019-9086 
HotelDruid before v2.3.1 has SQL Injection via the /visualizza_tabelle.php anno parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T20:41:49.000Z
CVE-2019-9087 
HotelDruid before v2.3.1 has SQL Injection via the /tab_tariffe.php numtariffa1 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-07T20:39:18.000Z
CVE-2019-9093 
A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in file/file/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing a JavaScript payload in the filename parameter is echoed back, which resulted in reflected XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-18T22:05:36.000Z
CVE-2019-9094 
A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in /s/adada/cfiles/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing JavaScript in the filename is echoed back in JavaScript code, which resulted in XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-18T22:06:48.000Z
CVE-2019-9095 
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker may be able to intercept weakly encrypted passwords and gain administrative access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-11T14:27:58.000Z
CVE-2019-9096 
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. Insufficient password requirements for the MGate web application may allow an attacker to gain access by brute-forcing account passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-11T14:27:58.000Z
CVE-2019-9097 
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A high rate of transit traffic may cause a low-memory condition and a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-11T14:27:58.000Z
CVE-2019-9098 
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An Integer overflow in the built-in web server allows remote attackers to initiate DoS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-11T14:27:58.000Z
CVE-2019-9099 
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A Buffer overflow in the built-in web server allows remote attackers to initiate DoS, and probably to execute arbitrary code (issue 1 of 2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-11T14:27:58.000Z
CVE-2019-9101 
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. Sensitive information is sent to the web server in cleartext, which may allow an attacker to discover the credentials if they are able to observe traffic between the web browser and the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-11T14:27:58.000Z
CVE-2019-9102 
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A predictable mechanism of generating tokens allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-11T14:27:58.000Z
CVE-2019-9103 
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker can access sensitive information (e.g., conduct username disclosure attacks) on the built-in WEB-service without authorization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-11T14:27:58.000Z
CVE-2019-9104 
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. The application's configuration file contains parameters that represent passwords in cleartext.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-11T14:27:58.000Z
CVE-2019-9105 
The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to make several types of API calls without authentication, as demonstrated by retrieving password hashes via an inc/utils/REST_API.php?command=CallAPI&customurl=alladminusers call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-31T21:21:15.000Z
CVE-2019-9106 
The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to execute or include local .php files, as demonstrated by menu=php://filter/convert.base64-encode/resource=index.php to read index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-31T21:22:41.000Z
CVE-2019-9107 
XSS exists in WUZHI CMS 4.1.0 via index.php?m=attachment&f=imagecut&v=init&imgurl=[XSS] to coreframe/app/attachment/imagecut.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T01:00:00.000Z
CVE-2019-9108 
XSS exists in WUZHI CMS 4.1.0 via index.php?m=core&f=map&v=baidumap&x=[XSS]&y=[XSS] to coreframe/app/core/map.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T01:00:00.000Z
CVE-2019-9109 
XSS exists in WUZHI CMS 4.1.0 via index.php?m=message&f=message&v=add&username=[XSS] to coreframe/app/message/message.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T01:00:00.000Z
CVE-2019-9110 
XSS exists in WUZHI CMS 4.1.0 via index.php?m=content&f=postinfo&v=listing&set_iframe=[XSS] to coreframe/app/content/postinfo.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T01:00:00.000Z
CVE-2019-9111 
The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the count argument in sde_evtlog_filter_write in drivers/gpu/drm/msm/sde_dbg.c. This is exploitable for a device crash via a syscall by a crafted application on a rooted device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T04:00:00.000Z
CVE-2019-9112 
The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the count argument in _sde_debugfs_conn_cmd_tx_write in drivers/gpu/drm/msm/sde/sde_connector.c. This is exploitable for a device crash via a syscall by a crafted application on a rooted device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T04:00:00.000Z
CVE-2019-9113 
Ming (aka libming) 0.4.8 has a NULL pointer dereference in the function getString() in the decompile.c file in libutil.a.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T04:00:00.000Z
CVE-2019-9114 
Ming (aka libming) 0.4.8 has an out of bounds write vulnerability in the function strcpyext() in the decompile.c file in libutil.a.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T04:00:00.000Z
CVE-2019-9115 
In irisnet-crypto before 1.1.7 for IRISnet, the util/utils.js file allows code execution because of unsafe eval usage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-25T04:00:00.000Z