rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-20571 
An issue was discovered on Samsung mobile devices with O(8.x) (with TEEGRIS) software. There is type confusion in the WVDRM Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14885 (September 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:38:28.000Z
CVE-2019-20572 
An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (Exynos chipsets) software. load_kernel has a buffer overflow via untrusted data. The Samsung ID is SVE-2019-14939 (September 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:39:42.000Z
CVE-2019-20573 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. There is local SQL injection in the RCS Content Provider. The Samsung IDs are SVE-2019-14059, SVE-2019-14685 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:41:33.000Z
CVE-2019-20574 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. There is local SQL injection in the Wi-Fi history Content Provider. The Samsung ID is SVE-2019-14061 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:42:49.000Z
CVE-2019-20575 
An issue was discovered on Samsung mobile devices with P(9.0) software. The WPA3 handshake feature allows a downgrade or dictionary attack. The Samsung ID is SVE-2019-14204 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:43:50.000Z
CVE-2019-20576 
An issue was discovered on Samsung mobile devices with P(9.0) software. The MemorySaver Content Provider allows SQL injection. The Samsung ID is SVE-2019-14365 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:47:42.000Z
CVE-2019-20577 
An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software. The MALI GPU Driver allows a kernel panic. The Samsung ID is SVE-2019-14372 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:46:34.000Z
CVE-2019-20578 
An issue was discovered on Samsung mobile devices with P(9.0) (Exynos 9820 chipsets) software. A Buffer overflow occurs when loading the UH Partition during Secure Boot. The Samsung ID is SVE-2019-14412 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:48:53.000Z
CVE-2019-20579 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Gallery allows attackers to enable Location information sharing from the lock screen. The Samsung ID is SVE-2019-14462 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:50:23.000Z
CVE-2019-20580 
An issue was discovered on Samsung mobile devices with P(9.0) software. The Motion photo player allows attackers to bypass the Secure Folder feature to view images. The Samsung ID is SVE-2019-14653 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:51:21.000Z
CVE-2019-20581 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. A stack overflow in the HDCP Trustlet causes arbitrary code execution. The Samsung ID is SVE-2019-14665 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:52:13.000Z
CVE-2019-20582 
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) devices (Exynos9810 chipsets) software. There is a use after free in the ion driver. The Samsung ID is SVE-2019-14837 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:53:07.000Z
CVE-2019-20583 
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. There is type confusion in the EXT_FR Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14847 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:54:10.000Z
CVE-2019-20584 
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. There is type confusion in the HDCP Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14850 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:55:03.000Z
CVE-2019-20585 
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. There is type confusion in the SEC_FR Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14851 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:57:01.000Z
CVE-2019-20586 
An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (with TEEGRIS) software. There is type confusion in the FINGERPRINT Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14864 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:57:51.000Z
CVE-2019-20587 
An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (with TEEGRIS) software. There is type confusion in the MLDAP Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14867 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:58:44.000Z
CVE-2019-20588 
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. There is type confusion in the SEM Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14891 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:59:41.000Z
CVE-2019-20589 
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. There is type confusion in the SKPM Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14892 (August 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:00:32.000Z
CVE-2019-20590 
An issue was discovered on Samsung mobile devices with O(8.x) (Qualcomm chipsets) software. There is an integer underflow in the Secure Storage Trustlet. The Samsung ID is SVE-2019-13952 (July 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:01:46.000Z
CVE-2019-20591 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. There is local SQL injection in the Gear VR Service Content Provider. The Samsung ID is SVE-2019-14058 (July 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:02:43.000Z
CVE-2019-20592 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. There is local SQL injection in the Story Video Editor Content Provider. The Samsung ID is SVE-2019-14062 (July 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:03:38.000Z
CVE-2019-20593 
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. Gallery leaks Private Mode thumbnails. The Samsung ID is SVE-2019-14208 (July 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:49:37.000Z
CVE-2019-20594 
An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (Exynos chipsets) software. A heap overflow exists in the bootloader. The Samsung ID is SVE-2019-14371 (July 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:04:40.000Z
CVE-2019-20595 
An issue was discovered on Samsung mobile devices with P(9.0) software. Quick Panel allows enabling or disabling the Bluetooth stack without authentication. The Samsung ID is SVE-2019-14545 (July 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:05:32.000Z
CVE-2019-20596 
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) (Exynos chipsets) software. There is information disclosure in the GateKeeper Trustlet. The Samsung ID is SVE-2019-13958 (June 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:07:05.000Z
CVE-2019-20597 
An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) software. SPENgesture allows arbitrary applications to read or modify user-input logs. The Samsung ID is SVE-2019-14170 (June 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:07:53.000Z
CVE-2019-20598 
An issue was discovered on Samsung mobile devices with O(8.x) software. Bixby leaks the keyboard's learned words, and the clipboard contents, via the lock screen. The Samsung IDs are SVE-2018-12896, SVE-2018-12897 (May 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:09:02.000Z
CVE-2019-20599 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Voice Assistant mishandles the notification audibility of a secured app. The Samsung ID is SVE-2018-13326 (May 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:10:03.000Z
CVE-2019-20600 
An issue was discovered on Samsung mobile devices with O(8.0) and P(9.0) (Exynos8890 chipsets) software. A use-after-free occurs in the MALI GPU driver. The Samsung ID is SVE-2019-13921-1 (May 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:11:01.000Z
CVE-2019-20601 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos7570, 7580, 7870, 7880, and 8890 chipsets) software. RKP memory corruption causes an arbitrary write to protected memory. The Samsung ID is SVE-2019-13921-2 (May 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:12:10.000Z
CVE-2019-20602 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.0), and P(9.0) (Qualcomm chipsets) software. The Authnr Trustlet has a NULL pointer dereference. The Samsung ID is SVE-2019-13949 (May 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:13:08.000Z
CVE-2019-20603 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.0), and P(9.0) (Qualcomm chipsets) software. The ESECOMM Trustlet has a NULL pointer dereference. The Samsung ID is SVE-2019-13950 (May 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:14:16.000Z
CVE-2019-20604 
An issue was discovered on Samsung mobile devices with O(8.x) software. Attackers can disable Gallery permanently. The Samsung ID is SVE-2019-14031 (May 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:15:09.000Z
CVE-2019-20605 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. A heap overflow occurs for baseband in the Shannon modem. The Samsung ID is SVE-2019-14071 (May 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:16:13.000Z
CVE-2019-20606 
An issue was discovered on Samsung mobile devices with any (before May 2019) software. A phishing attack against OMACP can change the network and internet settings. The Samsung ID is SVE-2019-14073 (May 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:17:18.000Z
CVE-2019-20607 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (MSM8996, MSM8998, Exynos7420, Exynos7870, Exynos8890, and Exynos8895 chipsets) software. A heap overflow in the keymaster Trustlet allows attackers to write to TEE memory, and achieve arbitrary code execution. The Samsung ID is SVE-2019-14126 (May 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:20:02.000Z
CVE-2019-20608 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. An attacker can use Emergency mode to disable features. The Samsung IDs are SVE-2018-13164, SVE-2018-13165 (April 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:21:33.000Z
CVE-2019-20609 
An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can use Smartwatch to view Secure Folder notification content. The Samsung ID is SVE-2019-13899 (April 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:22:25.000Z
CVE-2019-20610 
An issue was discovered on Samsung mobile devices with N(7.X) and O(8.X) (Exynos 7570, 7870, 7880, 7885, 8890, 8895, and 9810 chipsets) software. A double-fetch vulnerability in Trustlet allows arbitrary TEE code execution. The Samsung ID is SVE-2019-13910 (April 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:23:34.000Z
CVE-2019-20611 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), Go(8.1), P(9.0), and Go(9.0) (Exynos chipsets) software. A baseband stack overflow leads to arbitrary code execution. The Samsung ID is SVE-2019-13963 (April 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:24:46.000Z
CVE-2019-20612 
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) (Broadcom Wi-Fi, and SEC Wi-Fi chipsets) software. Wi-Fi allows a denial of service via TCP SYN packets. The Samsung ID is SVE-2018-13162 (March 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:27:49.000Z
CVE-2019-20613 
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. There is time-based SQL injection in Contacts. The Samsung ID is SVE-2018-13452 (March 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:28:57.000Z
CVE-2019-20614 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Allshare allows attackers to access sensitive information. The Samsung ID is SVE-2018-13453 (March 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:29:51.000Z
CVE-2019-20615 
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. Attackers can bypass Factory Reset Protection (FRP) via SVoice T&C. The Samsung ID is SVE-2018-13547 (March 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:30:41.000Z
CVE-2019-20616 
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. Gallery leaks a thumbnail of Private Mode content. The Samsung ID is SVE-2018-13563 (March 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:31:33.000Z
CVE-2019-20617 
An issue was discovered on Samsung mobile devices with P(9.0) software. Secure Folder leaks preview data of recent apps. The Samsung ID is SVE-2018-13764 (March 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:32:29.000Z
CVE-2019-20618 
An issue was discovered on Samsung mobile devices with P(9.0) software. The Pin Window feature allows unauthenticated unpinning of an app. The Samsung ID is SVE-2018-13765 (March 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:33:40.000Z
CVE-2019-20619 
An issue was discovered on Samsung mobile devices with P(9.0) software. Secure Startup leaks keyboard suggested words. The Samsung ID is SVE-2019-13773 (March 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:34:30.000Z
CVE-2019-20620 
An issue was discovered on Samsung mobile devices with P(9.0) software. The Settings application allows unauthenticated changes. The Samsung IDs are SVE-2019-13814, SVE-2019-13815 (March 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:36:20.000Z
CVE-2019-20621 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. There is a baseband heap overflow. The Samsung ID is SVE-2018-13187 (February 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:37:42.000Z
CVE-2019-20622 
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. There is a baseband stack overflow. The Samsung ID is SVE-2018-13188 (February 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:38:39.000Z
CVE-2019-20623 
An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) software. Gallery has uninitialized memory disclosure. The Samsung ID is SVE-2018-13060 (February 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:39:53.000Z
CVE-2019-20624 
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. S-Voice leaks keyboard learned words via the lock screen. The Samsung ID is SVE-2018-12981 (February 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:40:59.000Z
CVE-2019-20625 
An issue was discovered on Samsung mobile devices with N(7.1) and O(8.x) (Exynos chipsets) software. The ion debugfs driver allows information disclosure. The Samsung ID is SVE-2018-13427 (February 2019).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T19:41:46.000Z
CVE-2019-20626 
The remote keyless system on Honda HR-V 2017 vehicles sends the same RF signal for each door-open request, which might allow a replay attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-23T16:12:53.000Z
CVE-2019-20627 
AutoUpdater.cs in AutoUpdater.NET before 1.5.8 allows XXE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-23T16:55:03.000Z
CVE-2019-20628 
An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a Use-After-Free vulnerability in gf_m2ts_process_pmt in media_tools/mpegts.c that can cause a denial of service via a crafted MP4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:15:11.000Z
CVE-2019-20629 
An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in gf_m2ts_process_pmt in media_tools/mpegts.c that can cause a denial of service via a crafted MP4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:15:04.000Z
CVE-2019-20630 
An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in BS_ReadByte (called from gf_bs_read_bit) in utils/bitstream.c that can cause a denial of service via a crafted MP4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:14:55.000Z
CVE-2019-20631 
An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gf_list_count in utils/list.c that can cause a denial of service via a crafted MP4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:14:47.000Z
CVE-2019-20632 
An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gf_odf_delete_descriptor in odf/desc_private.c that can cause a denial of service via a crafted MP4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T18:14:37.000Z
CVE-2019-20633 
GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-25T16:44:49.000Z
CVE-2019-20634 
An issue was discovered in Proofpoint Email Protection through 2019-09-08. By collecting scores from Proofpoint email headers, it is possible to build a copy-cat Machine Learning Classification model and extract insights from this model. The insights gathered allow an attacker to craft emails that receive preferable scores, with a goal of delivering malicious emails.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseSeverity: LOW
baseScore: 3.7
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Published: 2020-03-30T20:50:59.000Z
CVE-2019-20635 
codeBeamer before 9.5.0-RC3 does not properly restrict the ability to execute custom Java code and access the Java class loader via computed fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-02T15:04:48.000Z
CVE-2019-20636 
In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input_set_keycode, aka CID-cb222aed03d7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-08T13:58:43.000Z
CVE-2019-20637 
An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1. It does not clear a pointer between the handling of one client request and the next request within the same connection. This sometimes causes information to be disclosed from the connection workspace, such as data structures associated with previous requests within this connection or VCL-related temporary headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-08T23:01:30.000Z
CVE-2019-20638 
NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of administrative credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-15T17:10:33.000Z
CVE-2019-20639 
Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-15T17:11:38.000Z
CVE-2019-20640 
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.32, D7000 before 1.0.1.68, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.38, R6050 before 1.0.1.18, R6080 before 1.0.0.38, R6120 before 1.0.0.46, R6220 before 1.1.0.80, R6260 before 1.1.0.40, R6700v2 before 1.2.0.36, R6800 before 1.2.0.36, R6900v2 before 1.2.0.36, WNR2020 before 1.1.0.62, and XR500 before 2.3.2.32.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-15T17:12:56.000Z