rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-20739 
NETGEAR R8500 devices before v1.0.2.128 are affected by a buffer overflow by an unauthenticated attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T19:18:29.000Z
CVE-2019-20740 
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects DGN2200v4 before 1.0.0.110, DGND2200Bv4 before 1.0.0.109, R7300 before 1.0.0.70, R8300 before 1.0.2.130, and R8500 before 1.0.2.130.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T19:19:33.000Z
CVE-2019-20741 
NETGEAR WAC510 devices before 5.0.10.2 are affected by disclosure of sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T19:22:48.000Z
CVE-2019-20742 
NETGEAR WAC510 devices before 8.0.1.3 are affected by stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T19:23:40.000Z
CVE-2019-20743 
NETGEAR WAC510 devices before 8.0.1.3 are affected by stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T19:24:15.000Z
CVE-2019-20744 
NETGEAR WAC510 devices before 5.0.10.2 are affected by disclosure of sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T19:38:46.000Z
CVE-2019-20745 
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WAC505 before 5.0.10.2 and WAC510 before 5.0.10.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T20:41:31.000Z
CVE-2019-20746 
Certain NETGEAR devices are affected by reflected XSS. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 before 1.0.1.44, DM200 before 1.0.0.58, R7800 before 1.0.2.58, R8900 before 1.0.4.12, R9000 before 1.0.4.8, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK40 before 2.3.0.28, RBS40 before 2.3.0.28, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, RBS50 before 2.3.0.32, WN3000RPv2 before 1.0.0.68, WN3000RPv3 before 1.0.2.70, WN3100RPv2 before 1.0.0.60, WNDR4300v2 before 1.0.0.58, WNDR4500v3 before 1.0.0.58, and WNR2000v5 before 1.0.0.68.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T20:57:38.000Z
CVE-2019-20747 
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.58, D7800 before 1.0.1.40, R7500v2 before 1.0.3.34, R7800 before 1.0.2.52, R8900 before 1.0.4.2, R9000 before 1.0.3.16, RAX120 before 1.0.0.74, RBK20 before 2.3.0.22, RBR20 before 2.3.0.22, RBS20 before 2.3.0.22, RBK50 before 2.3.0.22, RBR50 before 2.3.0.22, RBS50 before 2.3.0.22, RBK40 before 2.3.0.22, RBS40 before 2.3.0.22, SRK60 before 2.2.0.64, SRR60 before 2.2.0.64, SRS60 before 2.2.0.64, WNDR3700v4 before 1.0.2.102, WNDR4300 before 1.0.2.104, WNDR4300v2 before 1.0.0.56, WNDR4500v3 before 1.0.0.56, and WNR2000v5 before 1.0.0.66.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T20:58:15.000Z
CVE-2019-20748 
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 before 1.0.1.44, R7500v2 before 1.0.3.38, R7800 before 1.0.2.52, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK40 before 2.3.0.28, RBS40 before 2.3.0.28, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, and RBS50 before 2.3.0.32.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T20:58:53.000Z
CVE-2019-20749 
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.47, EX6100v2 before 1.0.1.76, EX6150v2 before 1.0.1.76, R7500v2 before 1.0.3.38, R7800 before 1.0.2.52, R8900 before 1.0.4.12, R9000 before 1.0.4.12, WN2000RPTv3 before 1.0.1.32, WN3000RPv3 before 1.0.2.70, and WN3100RPv2 before 1.0.0.66.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T20:59:52.000Z
CVE-2019-20750 
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.47, EX6150v2 before 1.0.1.76, R7500v2 before 1.0.3.38, R7800 before 1.0.2.52, R8900 before 1.0.4.12, R9000 before 1.0.4.12, WN2000RPTv3 before 1.0.1.32, WN3000RPv3 before 1.0.2.70, and WN3100RPv2 before 1.0.0.66.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T21:00:25.000Z
CVE-2019-20751 
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.60, DM200 before 1.0.0.61, EX2700 before 1.0.1.48, EX6100v2 before 1.0.1.76, EX6150v2 before 1.0.1.76, EX6200v2 before 1.0.1.72, EX8000 before 1.0.1.180, R7800 before 1.0.2.52, R8900 before 1.0.4.26, R9000 before 1.0.4.26, WN2000RPTv3 before 1.0.1.32, WN3000RPv2 before 1.0.0.68, WN3000RPv3 before 1.0.2.70, WN3100RPv2 before 1.0.0.66, WNDR4300v2 before 1.0.0.58, WNDR4500v3 before 1.0.0.58, and WNR2000v5 before 1.0.0.68.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T21:01:32.000Z
CVE-2019-20752 
Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 before 1.0.1.44, DM200 before 1.0.0.58, R7800 before 1.0.2.58, R8900 before 1.0.4.12, R9000 before 1.0.4.12, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK40 before 2.3.0.28, RBS40 before 2.3.0.28, RBK50 before 2.3.0.32, RBR50 before 2.3.0.32, RBS50 before 2.3.0.32, WN3000RPv2 before 1.0.0.68, WN3000RPv3 before 1.0.2.70, WN3100RPv2 before 1.0.0.60, WNDR4300v2 before 1.0.0.58, WNDR4500v3 before 1.0.0.58, and WNR2000v5 before 1.0.0.68.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T21:04:31.000Z
CVE-2019-20753 
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects DGN2200v1 before 1.0.0.58, D8500 before 1.0.3.42, D7000v2 before 1.0.0.51, D6400 before 1.0.0.78, D6220 before 1.0.0.44, JNDR3000 before 1.0.0.24, R8000 before 1.0.4.18, R8500 before 1.0.2.122, R8300 before 1.0.2.122, R7900 before 1.0.2.16, R7000P before 1.3.2.34, R7300DST before 1.0.0.68, R7100LG before 1.0.0.46, R6900P before 1.3.2.34, R7000 before 1.0.9.28, R6900 before 1.0.1.46, R6700 before 1.0.1.46, R6400v2 before 1.0.2.56, R6400 before 1.0.1.42, R6300v2 before 1.0.4.28, R6250 before 1.0.4.26, WNDR3400v3 before 1.0.1.22, WNDR4500v2 before 1.0.0.72, and WNR3500Lv2 before 1.2.0.50.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T21:06:54.000Z
CVE-2019-20754 
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects DGN2200 before 1.0.0.58, DGN2200B before 1.0.0.58, D8500 before 1.0.3.42, D7000v2 before 1.0.0.51, D6400 before 1.0.0.80, D6220 before 1.0.0.44, EX7000 before 1.0.0.66, EX6200 before 1.0.3.88, EX6150 before 1.0.0.42, EX7500 before 1.0.0.46, JNDR3000 before 1.0.0.24, R8000 before 1.0.4.18, R8500 before 1.0.2.122, R8300 before 1.0.2.122, R7900P before 1.4.0.10, R8000P before 1.4.0.10, R7900 before 1.0.2.16, R7000P before 1.3.1.44, R7300DST before 1.0.0.68, R7100LG before 1.0.0.46, R6900P before 1.3.1.44, R7000 before 1.0.9.32, R6900 before 1.0.1.46, R6700 before 1.0.1.46, R6400v2 before 1.0.2.56, R6400 before 1.0.1.42, R6300v2 before 1.0.4.28, R6250 before 1.0.4.26, WNDR4500v2 before 1.0.0.72, and WNR3500Lv2 before 1.2.0.54.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T21:07:26.000Z
CVE-2019-20755 
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6220 before 1.0.0.46, D6400 before 1.0.0.80, D7000v2 before 1.0.0.51, D8500 before 1.0.3.42, DGN2200v1 before 1.0.0.58, DGN2200B before 1.0.0.58, JNDR3000 before 1.0.0.24, RBW30 before 2.1.4.16, R6250 before 1.0.4.26, R6300v2 before 1.0.4.28, R6400 before 1.0.1.42, R6400v2 before 1.0.2.56, R6700 before 1.0.1.46, R6900 before 1.0.1.46, R7000 before 1.0.9.32, R6900P before 1.3.1.44, R7100LG before 1.0.0.46, R7300DST before 1.0.0.68, R7000P before 1.3.1.44, R7900 before 1.0.2.16, R8000P before 1.4.0.10, R7900P before 1.4.0.10, R8300 before 1.0.2.122, R8500 before 1.0.2.122, R8000 before 1.0.4.18, WNDR3400v3 before 1.0.1.22, WNDR4500v2 before 1.0.0.72, WNR3500Lv2 before 1.2.0.54, WN3100RP before 1.0.0.20, and WN2500RPv2 before 1.0.1.54.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T21:08:03.000Z
CVE-2019-20756 
Certain NETGEAR devices are affected by reflected XSS. This affects EX7000 before 1.0.0.64, EX6200 before 1.0.3.86, EX6150 before 1.0.0.38, EX6130 before 1.0.0.22, EX6120 before 1.0.0.40, EX6100 before 1.0.2.22, EX6000 before 1.0.0.30, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70, R8300 before 1.0.2.94, R7300DST before 1.0.0.62, R7000P before 1.3.0.20, R6900P before 1.3.0.20, R6400 before 1.0.1.32, R6300v2 before 1.0.4.24, R8500 before 1.0.2.94, WNDR3400v3 before 1.0.1.18, and WN2500RPv2 before 1.0.1.52.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T21:08:55.000Z
CVE-2019-20757 
NETGEAR R7800 devices before 1.0.2.62 are affected by command injection by an authenticated user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T21:09:47.000Z
CVE-2019-20758 
NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T21:10:19.000Z
CVE-2019-20759 
NETGEAR R9000 devices before 1.0.4.26 are affected by stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T21:11:12.000Z
CVE-2019-20760 
NETGEAR R9000 devices before 1.0.4.26 are affected by authentication bypass.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T21:11:53.000Z
CVE-2019-20761 
NETGEAR R7800 devices before 1.0.2.62 are affected by command injection by an authenticated user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T21:12:37.000Z
CVE-2019-20762 
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D8500 before 1.0.3.43, R8500 before 1.0.2.128, R8300 before 1.0.2.128, R8000 before 1.0.4.28, R7300DST before 1.0.0.68, R7100LG before 1.0.0.48, R6900P before 1.3.1.44, R7900P before 1.4.1.30, R8000P before 1.4.1.30, R7000P before 1.3.1.44, R7000 before 1.0.9.34, R6900 before 1.0.2.4, R6700 before 1.0.2.6, and R6400 before 1.0.1.44.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T21:13:36.000Z
CVE-2019-20763 
NETGEAR R7800 devices before 1.0.2.52 are affected by a stack-based buffer overflow by an authenticated user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T21:14:08.000Z
CVE-2019-20764 
NETGEAR R7800 devices before 1.0.2.52 are affected by a stack-based buffer overflow by an authenticated user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T21:14:38.000Z
CVE-2019-20765 
NETGEAR R7800 devices before 1.0.2.52 are affected by a stack-based buffer overflow by an authenticated user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T21:15:41.000Z
CVE-2019-20766 
NETGEAR R7800 devices before 1.0.2.52 are affected by a stack-based buffer overflow by an authenticated user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T21:16:24.000Z
CVE-2019-20767 
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.60, D3600 before 1.0.0.75, D6000 before 1.0.0.75, R9000 before 1.0.4.26, R8900 before 1.0.4.26, R7800 before 1.0.2.52, WNDR4500v3 before 1.0.0.58, WNDR4300v2 before 1.0.0.58, WNDR4300 before 1.0.2.104, WNDR3700v4 before 1.0.2.102, and WNR2000v5 before 1.0.0.66.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-15T13:42:05.000Z
CVE-2019-20768 
ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparm_item_guid and sys_id parameters in an Incident Request to service_catalog.do.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-05T21:13:31.000Z
CVE-2019-20769 
An issue was discovered in LG PC Suite for LG G3 and earlier (aka LG PC Suite v5.3.27 and earlier). DLL Hijacking can occur via a Trojan horse DLL in the current working directory. The LG ID is LVE-MOT-190001 (November 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-17T13:32:34.000Z
CVE-2019-20770 
An issue was discovered on LG mobile devices with Android OS 9.0 software. The HAL service has a buffer overflow that leads to arbitrary code execution. The LG ID is LVE-SMP-190013 (September 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-17T13:33:43.000Z
CVE-2019-20771 
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. WapService allows unconfirmed configuration changes via a modified OMACP message. The LG ID is LVE-SMP-190006 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-17T13:22:04.000Z
CVE-2019-20772 
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. The Account subsystem allows authorization bypass. The LG ID is LVE-SMP-190007 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-17T13:35:06.000Z
CVE-2019-20773 
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. Unprivileged applications can execute shell commands via the connectivity service. The LG ID is LVE-SMP-190008 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-17T13:36:26.000Z
CVE-2019-20774 
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. A system service allows local retrieval of the user's password. The LG ID is LVE-SMP-190009 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-17T13:37:29.000Z
CVE-2019-20775 
An issue was discovered on LG mobile devices with Android OS 9.0 (Qualcomm SDM450, SDM845, SM6150, and SM8150 chipsets) software. Weak encryption leads to local information disclosure. The LG ID is LVE-SMP-190010 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-17T13:38:36.000Z
CVE-2019-20776 
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. A TZ trusted application can crash via crafted input. The LG ID is LVE-SMP-190005 (July 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-17T13:39:35.000Z
CVE-2019-20777 
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. WapService mishandles OTA Provisioning on V40 and G7 devices. The LG ID is LVE-SMP-190006 (July 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-17T13:40:19.000Z
CVE-2019-20778 
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. The Backup subsystem does not properly restrict operations or validate their input. The LG ID is LVE-SMP-190004 (June 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-17T13:41:24.000Z
CVE-2019-20779 
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. A TrustZone trusted application can crash via crafted input. The LG ID is LVE-SMP-190003 (May 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-17T13:42:34.000Z
CVE-2019-20780 
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Certain security settings, related to whether packages are verified and accepted only from known sources, are mishandled. The LG ID is LVE-SMP-190002 (April 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-17T13:43:35.000Z
CVE-2019-20781 
An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T13:08:35.000Z
CVE-2019-20782 
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. LG Advanced Flash (LAF) has a buffer overflow. The LG ID is LVE-SMP-190001 (March 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-17T13:45:09.000Z
CVE-2019-20783 
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 (North America CDMA) software. The LTE protocol implementation allows a bypass of AKA (Authentication and Key Agreement). The LG ID is LVE-SMP-180014 (February 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-17T13:46:14.000Z
CVE-2019-20784 
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 (MTK chipsets) software. Interaction of GPS with 911 emergency calls is mishandled. The LG ID is LVE-SMP-180012 (January 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-17T13:47:07.000Z
CVE-2019-20785 
An issue was discovered on LG mobile devices with Android OS 8.0 and 8.1 software for the DTAG carrier. RILD in the radio layer uses an uninitialized variable. The LG ID is LVE-SMP-180013 (January 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-17T13:47:57.000Z
CVE-2019-20786 
handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-19T19:57:36.000Z
CVE-2019-20787 
Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-22T16:19:49.000Z
CVE-2019-20788 
libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value. NOTE: this may overlap CVE-2019-15690.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-23T18:06:55.000Z
CVE-2019-20789 
Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-26T16:06:57.000Z
CVE-2019-20790 
OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-27T14:00:46.000Z
CVE-2019-20791 
OpenThread before 2019-12-13 has a stack-based buffer overflow in MeshCoP::Commissioner::GeneratePskc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-28T17:35:52.000Z
CVE-2019-20792 
OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T03:53:57.000Z
CVE-2019-20794 
An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. A user can create their own PID namespace, and mount a FUSE filesystem. Upon interaction with this FUSE filesystem, if the userspace component is terminated via a kill of the PID namespace's pid 1, it will result in a hung task, and resources being permanently locked up until system reboot. This can result in resource exhaustion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-09T17:35:50.000Z
CVE-2019-20795 
iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors (such as C library configuration) may block exploitability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-09T20:16:02.000Z
CVE-2019-20797 
An issue was discovered in e6y prboom-plus 2.5.1.5. There is a buffer overflow in client and server code responsible for handling received UDP packets, as demonstrated by I_SendPacket or I_SendPacketTo in i_network.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-17T23:06:33.000Z
CVE-2019-20798 
An XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104. The requested URL is improperly displayed on the About page in the default configuration of the web server and its administrator panel. The XSS in the administrator panel can be used to reconfigure the server and execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-17T23:06:16.000Z
CVE-2019-20799 
In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker to destabilize the work of a server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-17T23:06:01.000Z
CVE-2019-20800 
In Cherokee through 1.2.104, remote attackers can trigger an out-of-bounds write in cherokee_handler_cgi_add_env_pair in handler_cgi.c by sending many request headers, as demonstrated by a GET request with many "Host: 127.0.0.1" headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-17T23:05:45.000Z
CVE-2019-20801 
An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application's file-transfer web server allows for cross-origin requests from any domain, and the WebSocket server lacks authorization control. Any web site can execute JavaScript code (that accesses a user's data) via cross-origin requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-17T23:05:30.000Z
CVE-2019-20802 
An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application's file-transfer web server improperly displays directory names, leading to Stored XSS, which may be used to steal a user's data. This requires user interaction because there is no known direct way for an attacker to create a crafted directory name on a victim's device. However, a crafted directory name can occur if a victim extracts a ZIP archive that was provided by an attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-17T23:05:13.000Z
CVE-2019-20803 
Gila CMS before 1.11.6 has reflected XSS via the admin/content/postcategory id parameter, which is mishandled for g_preview_theme.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-21T21:51:11.000Z