rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-15795 python-apt uses MD5 for validation
python-apt only checks the MD5 sums of downloaded files in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py in version 1.9.0ubuntu1 and earlier. This allows a man-in-the-middle attack which could potentially be used to install altered packages and has been fixed in versions 1.9.0ubuntu1.2, 1.6.5ubuntu0.1, 1.1.0~beta1ubuntu0.16.04.7, 0.9.3.5ubuntu3+esm2, and 0.8.3ubuntu7.5.
Problem types: cwe_id: CWE-327
description: CWE-327 Use of a Broken or Risky Cryptographic Algorithm
Affected products: vendor: Canonical
product: Python-apt
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.7
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Credits: lang: en
value: Julian Andres Klode
Published: 2020-03-26T13:00:21.299Z
CVE-2019-15796 python-apt downloads from untrusted sources
Python-apt doesn't check if hashes are signed in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py or in `_fetch_archives()` of apt/cache.py in version 1.9.3ubuntu2 and earlier. This allows downloads from unsigned repositories which shouldn't be allowed and has been fixed in verisions 1.9.5, 1.9.0ubuntu1.2, 1.6.5ubuntu0.1, 1.1.0~beta1ubuntu0.16.04.7, 0.9.3.5ubuntu3+esm2, and 0.8.3ubuntu7.5.
Problem types: cwe_id: CWE-287
description: CWE-287 Improper Authentication
Affected products: vendor: Canonical
product: Python-apt
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.7
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Credits: lang: en
value: Julian Andres Klode
Published: 2020-03-26T13:00:21.745Z
CVE-2019-15799 
An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. User accounts created through the web interface of the device, when given non-admin level privileges, have the same level of privileged access as administrators when connecting to the device via SSH (while their permissions via the web interface are in fact restricted). This allows normal users to obtain the administrative password by running the tech-support command via the CLI: this contains the encrypted passwords for all users on the device. As these passwords are encrypted using well-known and static parameters, they can be decrypted and the original passwords (including the administrator password) can be obtained.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-14T20:16:33.000Z
CVE-2019-15800 
An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. Due to lack of input validation in the cmd_sys_traceroute_exec(), cmd_sys_arp_clear(), and cmd_sys_ping_exec() functions in the libclicmd.so library contained in the firmware, an attacker could leverage these functions to call system() and execute arbitrary commands on the switches. (Note that these functions are currently not called in this version of the firmware, however an attacker could use other vulnerabilities to finally use these vulnerabilities to gain code execution.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-14T20:16:20.000Z
CVE-2019-15801 
An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware image contains encrypted passwords that are used to authenticate users wishing to access a diagnostics or password-recovery menu. Using the hardcoded cryptographic key found elsewhere in the firmware, these passwords can be decrypted. This is related to fds_sys_passDebugPasswd_ret() and fds_sys_passRecoveryPasswd_ret() in libfds.so.0.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-14T20:16:08.000Z
CVE-2019-15802 
An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. The firmware hashes and encrypts passwords using a hardcoded cryptographic key in sal_util_str_encrypt() in libsal.so.0.0. The parameters (salt, IV, and key data) are used to encrypt and decrypt all passwords using AES256 in CBC mode. With the parameters known, all previously encrypted passwords can be decrypted. This includes the passwords that are part of configuration backups or otherwise embedded as part of the firmware.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-14T20:16:03.000Z
CVE-2019-15803 
An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. Through an undocumented sequence of keypresses, undocumented functionality is triggered. A diagnostics shell is triggered via CTRL-ALT-t, which prompts for the password returned by fds_sys_passDebugPasswd_ret(). The firmware contains access control checks that determine if remote users are allowed to access this functionality. The function that performs this check (fds_sys_remoteDebugEnable_ret in libfds.so) always return TRUE with no actual checks performed. The diagnostics menu allows for reading/writing arbitrary registers and various other configuration parameters which are believed to be related to the network interface chips.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-14T20:15:56.000Z
CVE-2019-15804 
An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. By sending a signal to the CLI process, undocumented functionality is triggered. Specifically, a menu can be triggered by sending the SIGQUIT signal to the CLI application (e.g., through CTRL+\ via SSH). The access control check for this menu does work and prohibits accessing the menu, which contains "Password recovery for specific user" options. The menu is believed to be accessible using a serial console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-14T20:15:46.000Z
CVE-2019-15805 
CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative interface because they include the current base64 encoded password within http://192.168.1.1/login.html. Any user connected to the Wi-Fi can exploit this.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-29T17:21:59.000Z
CVE-2019-15806 
CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative interface because they include the current base64 encoded password within http://192.168.1.1/basic_sett.html. Any user connected to the Wi-Fi can exploit this.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-29T17:21:43.000Z
CVE-2019-15807 
In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander discovery fails. This will cause a BUG and denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-29T17:32:06.000Z
CVE-2019-15809 
Smart cards from the Athena SCS manufacturer, based on the Atmel Toolbox 00.03.11.05 and the AT90SC chip, contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because the Atmel Toolbox 00.03.11.05 contains two versions of ECDSA signature functions, described as fast and secure, but the affected cards chose to use the fast version, which leaks the bit length of the random nonce via timing. This affects Athena IDProtect 010b.0352.0005, Athena IDProtect 010e.1245.0002, Athena IDProtect 0106.0130.0401, Athena IDProtect 010e.1245.0002, Valid S/A IDflex V 010b.0352.0005, SafeNet eToken 4300 010e.1245.0002, TecSec Armored Card 010e.0264.0001, and TecSec Armored Card 108.0264.0001.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-03T13:17:24.000Z
CVE-2019-15810 
Insufficient sanitization during device search in Netdisco 2.042010 allows for reflected XSS via manipulation of a URL parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-30T16:03:06.000Z
CVE-2019-15811 
In DomainMOD through 4.13, the parameter daterange in the file reporting/domains/cost-by-month.php has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-29T18:58:58.000Z
CVE-2019-15813 
Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-04T13:44:47.000Z
CVE-2019-15814 
Multiple stored XSS vulnerabilities in Sentrifugo 3.2 could allow authenticated users to inject arbitrary web script or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-04T13:50:05.000Z
CVE-2019-15815 
ZyXEL P-1302-T10D v3 devices with firmware version 2.00(ABBX.3) and earlier do not properly enforce access control and could allow an unauthorized user to access certain pages that require admin privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-12T17:05:40.000Z
CVE-2019-15816 
The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via save_settings_page and other save_ functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T12:28:13.000Z
CVE-2019-15817 
The easy-property-listings plugin before 3.4 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T12:30:26.000Z
CVE-2019-15818 
The simple-301-redirects-addon-bulk-uploader plugin through 1.2.4 for WordPress has no requirement for authentication for action=bulk301export or action=bulk301clearlist.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T12:32:43.000Z
CVE-2019-15819 
The nd-restaurant-reservations plugin before 1.5 for WordPress has no requirement for nd_rst_import_settings_php_function authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T12:37:36.000Z
CVE-2019-15820 
The login-or-logout-menu-item plugin before 1.2.0 for WordPress has no requirement for lolmi_save_settings authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T12:39:14.000Z
CVE-2019-15821 
The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T12:41:07.000Z
CVE-2019-15822 
The wps-child-theme-generator plugin before 1.2 for WordPress has classes/helpers.php directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T12:42:35.000Z
CVE-2019-15823 
The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T12:49:10.000Z
CVE-2019-15824 
The wps-hide-login plugin before 1.5.3 for WordPress has an adminhash protection bypass.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T12:57:19.000Z
CVE-2019-15825 
The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T12:58:11.000Z
CVE-2019-15826 
The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T12:59:08.000Z
CVE-2019-15827 
The onesignal-free-web-push-notifications plugin before 1.17.8 for WordPress has XSS via the subdomain parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T13:08:25.000Z
CVE-2019-15828 
The one-click-ssl plugin before 1.4.7 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T13:10:10.000Z
CVE-2019-15829 
The photoblocks-grid-gallery plugin before 1.1.33 for WordPress has wp-admin/admin.php?page=photoblocks-edit&id= XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T13:11:38.000Z
CVE-2019-15830 
The icegram plugin before 1.10.29 for WordPress has ig_cat_list XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T13:12:58.000Z
CVE-2019-15831 
The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T13:27:05.000Z
CVE-2019-15832 
The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T13:31:08.000Z
CVE-2019-15833 
The simple-mail-address-encoder plugin before 1.7 for WordPress has reflected XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T13:32:26.000Z
CVE-2019-15834 
The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T16:06:04.000Z
CVE-2019-15835 
The wp-better-permalinks plugin before 3.0.5 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T16:07:28.000Z
CVE-2019-15836 
The wp-ultimate-recipe plugin before 3.12.7 for WordPress has stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T16:08:56.000Z
CVE-2019-15837 
The webp-express plugin before 0.14.8 for WordPress has stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T16:10:56.000Z
CVE-2019-15838 
The custom-404-pro plugin before 3.2.8 for WordPress has reflected XSS, a different vulnerability than CVE-2019-14789.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T16:12:02.000Z
CVE-2019-15839 
The sina-extension-for-elementor plugin before 2.2.1 for WordPress has local file inclusion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T16:14:10.000Z
CVE-2019-15840 
The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T16:15:31.000Z
CVE-2019-15841 
The facebook-for-woocommerce plugin before 1.9.15 for WordPress has CSRF via ajax_woo_infobanner_post_click, ajax_woo_infobanner_post_xout, or ajax_fb_toggle_visibility.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T16:16:57.000Z
CVE-2019-15842 
The easy-pdf-restaurant-menu-upload plugin before 1.1.2 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T16:19:06.000Z
CVE-2019-15843 
A malicious file upload vulnerability was discovered in Xiaomi Millet mobile phones 1-6.3.9.3. A particular condition involving a man-in-the-middle attack may lead to partial data leakage or malicious file writing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-18T14:29:44.000Z
CVE-2019-15845 
Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T16:45:08.000Z
CVE-2019-15846 
Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-06T10:15:43.000Z
CVE-2019-15847 
The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-02T22:03:34.000Z
CVE-2019-15848 
JetBrains TeamCity 2019.1 and 2019.1.1 allows cross-site scripting (XSS), potentially making it possible to send an arbitrary HTTP request to a TeamCity server under the name of the currently logged-in user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T19:38:45.000Z
CVE-2019-15849 
eQ-3 HomeMatic CCU3 firmware 3.41.11 allows session fixation. An attacker can create session IDs and send them to the victim. After the victim logs in to the session, the attacker can use that session. The attacker could create SSH logins after a valid session and easily compromise the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-17T13:33:20.000Z
CVE-2019-15850 
eQ-3 HomeMatic CCU3 firmware version 3.41.11 allows Remote Code Execution in the ReGa.runScript method. An authenticated attacker can easily execute code and compromise the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-17T13:38:15.000Z
CVE-2019-15854 
An issue was discovered in Maarch RM before 2.5. A privilege escalation vulnerability allows an authenticated user with lowest privileges to give herself highest administration privileges via a crafted PUT request to an unauthorized resource.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-17T16:41:57.000Z
CVE-2019-15855 
An issue was discovered in Maarch RM before 2.5. A path traversal vulnerability allows an unauthenticated remote attacker to overwrite any files with a crafted POST request if the default installation procedure was followed. This results in a permanent Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-17T16:38:06.000Z
CVE-2019-15858 
admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import, as demonstrated by storing an XSS payload for remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-03T06:14:03.000Z
CVE-2019-15859 
Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 allows a remote attacker to get full access to a device via the /password.jsn URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T15:04:24.000Z
CVE-2019-15860 
Xpdf 2.00 allows a SIGSEGV in XRef::constructXRef in XRef.cc. NOTE: 2.00 is a version from November 2002.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-03T06:39:23.000Z
CVE-2019-15862 
An issue was discovered in CKFinder through 2.6.2.1. Improper checks of file names allows remote attackers to upload files without any extension (even if the application was configured to accept files only with a defined set of extensions). This affects CKFinder for ASP, CKFinder for ASP.NET, CKFinder for ColdFusion, and CKFinder for PHP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-26T20:50:21.000Z
CVE-2019-15863 
The ConvertPlus plugin before 3.4.5 for WordPress has an unintended account creation (with the none role) via a request for variants.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-03T11:41:51.000Z
CVE-2019-15864 
The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-03T11:49:09.000Z
CVE-2019-15865 
The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-03T11:49:58.000Z
CVE-2019-15866 
The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wp_ajax_crellyslider_importSlider.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-03T11:51:33.000Z
CVE-2019-15867 
The slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13# password for the slickpopupteam account, after a Subscriber calls a certain AJAX action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-03T11:53:12.000Z
CVE-2019-15868 
The affiliates-manager plugin before 2.6.6 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-03T11:54:55.000Z
CVE-2019-15869 
The JobCareer theme before 2.5.1 for WordPress has stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-03T11:57:12.000Z
CVE-2019-15870 
The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-03T11:58:37.000Z
CVE-2019-15871 
The LoginPress plugin before 1.1.4 for WordPress has no capability check for updates to settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-03T12:19:47.000Z
CVE-2019-15872 
The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-03T12:17:11.000Z
CVE-2019-15873 
The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pm_template_preview&html=<?php substring followed by PHP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-03T12:22:19.000Z
CVE-2019-15874 
In FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before r356036, and 11.3-RELEASE before 11.3-RELEASE-p8, incomplete packet data validation may result in memory access after it has been freed leading to a kernel panic or other unpredictable results.
Problem types: description: Out-of-bounds read
Affected products: vendor: n/a
product: FreeBSD
Published: 2020-04-28T23:41:36.000Z
CVE-2019-15875 
In FreeBSD 12.1-STABLE before r354734, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r354735, and 11.3-RELEASE before 11.3-RELEASE-p6, due to incorrect initialization of a stack data structure, core dump files may contain up to 20 bytes of kernel data previously stored on the stack.
Problem types: description: Kernel information exposure
Affected products: vendor: n/a
product: FreeBSD
Published: 2020-02-18T15:26:47.000Z
CVE-2019-15876 
In FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r356090, and 11.3-RELEASE before 11.3-RELEASE-p7, driver specific ioctl command handlers in the oce network driver failed to check whether the caller has sufficient privileges allowing unprivileged users to send passthrough commands to the device firmware.
Problem types: description: Missing authorization
Affected products: vendor: n/a
product: FreeBSD
Published: 2020-04-28T19:11:39.000Z