rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-19277 
A vulnerability has been identified in SIPORT MP (All versions < 3.1.4). Vulnerable versions of the device allow the creation of special accounts ("service users") with administrative privileges that could enable a remote authenticated attacker to perform actions that are not visible to other users of the system, such as granting persons access to a secured area.
Problem types: cwe_id: CWE-778
description: CWE-778: Insufficient Logging
Affected products: vendor: Siemens AG
product: SIPORT MP
Published: 2020-03-10T19:16:17.000Z
CVE-2019-19278 
A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-.... MLFB 6SR4...-.....-.... MLFB 6SR5...-.....-.... With option A30 (HMIs 12 inches or larger) (All versions), SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR325.-.....-.... (High Availability) (All versions). The affected device contains a vulnerability that could allow an unauthenticated attacker to restore the affected device to a point where predefined application and operating system protection mechanisms are not in place. Successful exploitation requires physical access to the system, but no system privileges and no user interaction. An attacker could use the vulnerability to compromise confidentialiy, integrity and availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.
Problem types: cwe_id: CWE-693
description: CWE-693: Protection Mechanism Failure
Affected products: vendor: Siemens AG
product: SINAMICS PERFECT HARMONY GH180 Drives

 MLFB 6SR32..-.....-....

 MLFB 6SR4...-.....-....

 MLFB 6SR5...-.....-....

 With option A30 (HMIs 12 inches or larger)
vendor: Siemens AG
product: SINAMICS PERFECT HARMONY GH180 Drives

 MLFB 6SR325.-.....-.... (High Availability)
Published: 2020-01-16T15:35:24.000Z
CVE-2019-19279 
A vulnerability has been identified in SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100 Ethernet communication modules (All versions). Specially crafted packets sent to port 50000/UDP of the EN100 Ethernet communication modules could cause a Denial-of-Service of the affected device. A manual reboot is required to recover the service of the device. At the time of advisory publication no public exploitation of this security vulnerability was known to Siemens.
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: Siemens AG
product: SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100 Ethernet communication modules
Published: 2020-03-10T19:16:17.000Z
CVE-2019-19281 
A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V2.5 and < V20.8), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 and < V2.8), SIMATIC S7-1500 Software Controller (All versions >= V2.5 and < V20.8). Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a Denial-of-Service condition. The vulnerability can be triggered if specially crafted UDP packets are sent to the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the device availability.
Problem types: cwe_id: CWE-400
description: CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')
Affected products: vendor: Siemens AG
product: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
vendor: Siemens AG
product: SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
vendor: Siemens AG
product: SIMATIC S7-1500 Software Controller
Published: 2020-03-10T19:16:17.000Z
CVE-2019-19283 
A vulnerability has been identified in XHQ (All Versions < 6.1). The application's web server could expose non-sensitive information about the server's architecture. This could allow an attacker to adapt further attacks to the version in place.
Problem types: cwe_id: CWE-200
description: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: Siemens
product: XHQ
Published: 2020-12-14T21:05:17.000Z
CVE-2019-19284 
A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow Cross-Site Scripting (XSS) attacks if an attacker is able to modify content of particular web pages, causing the application to behave in unexpected ways for legitimate users.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Siemens
product: XHQ
Published: 2020-12-14T21:05:17.000Z
CVE-2019-19285 
A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow injections that could lead to XSS attacks if unsuspecting users are tricked into accessing a malicious link.
Problem types: cwe_id: CWE-80
description: CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Affected products: vendor: Siemens
product: XHQ
Published: 2020-12-14T21:05:17.000Z
CVE-2019-19286 
A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow SQL injection attacks if an attacker is able to modify content of particular web pages.
Problem types: cwe_id: CWE-89
description: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: Siemens
product: XHQ
Published: 2020-12-14T21:05:17.000Z
CVE-2019-19287 
A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow attackers to traverse through the file system of the server based by sending specially crafted packets over the network without authentication.
Problem types: cwe_id: CWE-23
description: CWE-23: Relative Path Traversal
Affected products: vendor: Siemens
product: XHQ
Published: 2020-12-14T21:05:17.000Z
CVE-2019-19288 
A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Siemens
product: XHQ
Published: 2020-12-14T21:05:18.000Z
CVE-2019-19289 
A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into accessing a malicious link.
Problem types: cwe_id: CWE-352
description: CWE-352: Cross-Site Request Forgery (CSRF)
Affected products: vendor: Siemens
product: XHQ
Published: 2020-12-14T21:05:18.000Z
CVE-2019-19290 
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The DOWNLOADS section in the web interface of the Control Center
Server (CCS) contains a path traversal vulnerability
that could allow an authenticated remote attacker to access and download
arbitrary files from the server where CCS is installed.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Siemens
product: Control Center Server (CCS)
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:U/RC:C
baseScore: 6.5
baseSeverity: MEDIUM
Published: 2020-03-10T19:16:17.000Z
CVE-2019-19291 
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0). The FTP services of the SiVMS/SiNVR Video Server and the Control Center Server (CCS) maintain
log files that store login credentials in cleartext.
In configurations where the FTP service is enabled, authenticated remote
attackers could extract login credentials of other users of the service.
Problem types: cwe_id: CWE-313
description: CWE-313: Cleartext Storage in a File or on Disk
Affected products: vendor: Siemens
product: Control Center Server (CCS)
default_status: unknown
vendor: Siemens
product: SiNVR/SiVMS Video Server
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:U/RC:C
baseScore: 5.3
baseSeverity: MEDIUM
Published: 2020-03-10T19:16:17.000Z
CVE-2019-19292 
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains an SQL injection
vulnerability in its XML-based communication protocol as provided by default
on ports 5444/tcp and 5440/tcp.
An authenticated remote attacker could exploit this vulnerability to
read or modify the CCS database and potentially execute administrative
database operations or operating system commands.
Problem types: cwe_id: CWE-89
description: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: Siemens
product: Control Center Server (CCS)
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
baseScore: 8.8
baseSeverity: HIGH
Published: 2020-03-10T19:16:17.000Z
CVE-2019-19293 
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The web interface of the Control Center Server (CCS) contains a
reflected Cross-site Scripting (XSS) vulnerability
that could allow an unauthenticated remote attacker to steal sensitive data
or execute administrative actions on behalf of a legitimate administrator
of the CCS web interface.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Siemens
product: Control Center Server (CCS)
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N/E:P/RL:U/RC:C
baseScore: 6.1
baseSeverity: MEDIUM
Published: 2020-03-10T19:16:17.000Z
CVE-2019-19294 
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The web interface of the Control Center Server (CCS) contains
multiple stored Cross-site Scripting (XSS) vulnerabilities in several input
fields.
This could allow an authenticated remote attacker to inject malicious
JavaScript code into the CCS web application that is later executed
in the browser context of any other user who views the relevant CCS
web content.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Siemens
product: Control Center Server (CCS)
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:P/RL:U/RC:C
baseScore: 6.3
baseSeverity: MEDIUM
Published: 2020-03-10T19:16:17.000Z
CVE-2019-19295 
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) does not enforce logging of
security-relevant activities in its XML-based communication protocol
as provided by default on ports 5444/tcp and 5440/tcp.
An authenticated remote attacker could exploit this vulnerability to
perform covert actions that are not visible in the application log.
Problem types: cwe_id: CWE-778
description: CWE-778: Insufficient Logging
Affected products: vendor: Siemens
product: Control Center Server (CCS)
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:U/RC:C
baseScore: 4.3
baseSeverity: MEDIUM
Published: 2020-03-10T19:16:17.000Z
CVE-2019-19296 
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The two FTP services (default ports 21/tcp and 5411/tcp) of the SiVMS/SiNVR Video
Server contain a path traversal vulnerability
that could allow an authenticated remote attacker to access and download
arbitrary files from the server, if the FTP services are enabled.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Siemens
product: SiNVR/SiVMS Video Server
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:U/RC:C
baseScore: 6.8
baseSeverity: MEDIUM
Published: 2020-03-10T19:16:17.000Z
CVE-2019-19297 
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The streaming service (default port 5410/tcp) of the SiVMS/SiNVR Video Server
contains a path traversal vulnerability, that could allow an
unauthenticated remote attacker to access and download arbitrary files from the server.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Siemens
product: SiNVR/SiVMS Video Server
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:U/RC:C
baseScore: 7.5
baseSeverity: HIGH
Published: 2020-03-10T19:16:17.000Z
CVE-2019-19298 
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0), SiNVR/SiVMS Video Server (All versions >= V5.0.0 < V5.0.2). The streaming service (default port 5410/tcp) of the SiVMS/SiNVR Video Server
contains a input validation vulnerability, that could allow
an unauthenticated remote attacker to cause a Denial-of-Service condition
by sending malformed HTTP requests.
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: Siemens
product: SiNVR/SiVMS Video Server
default_status: unknown
vendor: Siemens
product: SiNVR/SiVMS Video Server
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C
baseScore: 7.5
baseSeverity: HIGH
Published: 2020-03-10T19:16:17.000Z
CVE-2019-19299 
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0), SiNVR/SiVMS Video Server (All versions >= V5.0.0 < V5.0.2), SiNVR/SiVMS Video Server (All versions >= V5.0.2). The streaming service (default port 5410/tcp) of the SiVMS/SiNVR Video Server
applies weak cryptography when exposing device (camera) passwords.
This could allow an unauthenticated remote attacker to read and decrypt
the passwords and conduct further attacks.
Problem types: cwe_id: CWE-326
description: CWE-326: Inadequate Encryption Strength
Affected products: vendor: Siemens
product: SiNVR/SiVMS Video Server
default_status: unknown
vendor: Siemens
product: SiNVR/SiVMS Video Server
default_status: unknown
vendor: Siemens
product: SiNVR/SiVMS Video Server
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:U/RC:C
baseScore: 7.5
baseSeverity: HIGH
Published: 2020-03-10T19:16:17.000Z
CVE-2019-19306 
The Zoho CRM Lead Magnet plugin 1.6.9.1 for WordPress allows XSS via module, EditShortcode, or LayoutName.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T14:58:56.000Z
CVE-2019-19307 
An integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to achieve remote DoS (infinite loop), or possibly cause an out-of-bounds write, by sending a crafted MQTT protocol packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-26T15:15:04.000Z
CVE-2019-19308 
In text_to_glyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0, there is a NULL pointer dereference while parsing a TTF font file that lacks a name section (due to a g_strconcat call that returns NULL).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-27T14:37:38.000Z
CVE-2019-19309 
GitLab Enterprise Edition (EE) 8.90 and later through 12.5 has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-03T16:38:26.000Z
CVE-2019-19310 
GitLab Enterprise Edition (EE) 9.0 and later through 12.5 allows Information Disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-03T16:39:35.000Z
CVE-2019-19311 
GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 allows XSS in group and profile fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-03T15:22:22.000Z
CVE-2019-19312 
GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 has Incorrect Access Control. After a project changed to private, previously forked repositories were still able to get information about the private project through the API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-05T21:37:15.000Z
CVE-2019-19313 
GitLab EE 12.3 through 12.5, 12.4.3, and 12.3.6 allows Denial of Service. Certain characters were making it impossible to create, edit, or view issues and commits.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-05T21:42:26.000Z
CVE-2019-19314 
GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-05T21:47:51.000Z
CVE-2019-19315 
NLSSRV32.EXE in Nalpeiron Licensing Service 7.3.4.0, as used with Nitro PDF and other products, allows Elevation of Privilege via the \\.\mailslot\nlsX86ccMailslot mailslot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-17T14:44:30.000Z
CVE-2019-19316 
When using the Azure backend with a shared access signature (SAS), Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-02T20:50:44.000Z
CVE-2019-19317 
lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-05T13:53:16.000Z
CVE-2019-19318 
In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer,
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-27T23:41:36.000Z
CVE-2019-19319 
In the Linux kernel before 5.2, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call, aka CID-345c0dbf3a30.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-27T22:48:19.000Z
CVE-2019-19324 
Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T17:26:52.000Z
CVE-2019-19325 
SilverStripe through 4.4.x before 4.4.5 and 4.5.x before 4.5.2 allows Reflected XSS on the login form and custom forms. Silverstripe Forms allow malicious HTML or JavaScript to be inserted through non-scalar FormField attributes, which allows performing XSS (Cross-Site Scripting) on some forms built with user input (Request data). This can lead to phishing attempts to obtain a user's credentials or other sensitive user input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-17T19:59:29.000Z
CVE-2019-19326 
Silverstripe CMS sites through 4.4.4 which have opted into HTTP Cache Headers on responses served by the framework's HTTP layer can be vulnerable to web cache poisoning. Through modifying the X-Original-Url and X-HTTP-Method-Override headers, responses with malicious HTTP headers can return unexpected responses to other consumers of this cached response. Most other headers associated with web cache poisoning are already disabled through request hostname forgery whitelists.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-15T18:54:55.000Z
CVE-2019-19327 
ui/ResultView.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07 allows HTML injection when reporting the number of results and number of milliseconds. NOTE: this GUI code is no longer bundled with the Wikibase Wikidata Query Service snapshots, such as 0.3.6-SNAPSHOT.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-27T15:28:38.000Z
CVE-2019-19328 
ui/editor/tooltip/Rdf.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07 allows HTML injection in tooltips for entities. NOTE: this GUI code is no longer bundled with the Wikibase Wikidata Query Service snapshots, such as 0.3.6-SNAPSHOT.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-27T15:28:25.000Z
CVE-2019-19329 
In Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07, when mathematical expressions in results are displayed directly, arbitrary JavaScript execution can occur, aka XSS. This was addressed by introducing MathJax as a new mathematics rendering engine. NOTE: this GUI code is no longer bundled with the Wikibase Wikidata Query Service snapshots, such as 0.3.6-SNAPSHOT.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-27T15:28:10.000Z
CVE-2019-19330 
The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-27T15:53:26.000Z
CVE-2019-19331 
knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A records can be squashed into one DNS message (limit is 64kB).
Problem types: cwe_id: CWE-407
description: CWE-407
Affected products: vendor: CZ.NIC
product: knot-resolver
Published: 2019-12-16T00:00:00.000Z
CVE-2019-19332 
An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system, resulting in a denial of service.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: Linux
product: Kernel
Published: 2020-01-09T14:41:03.000Z
CVE-2019-19333 
In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "bits". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a denial of service or possibly gain code execution.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: Red Hat
product: libyang
Published: 2019-12-06T15:19:58.000Z
CVE-2019-19334 
In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "identityref". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a denial of service or possibly gain code execution.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: Red Hat
product: libyang
Published: 2019-12-06T15:22:19.000Z