rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-6293 
An issue was discovered in the function mark_beginning_as_normal in nfa.c in flex 2.6.4. There is a stack exhaustion problem caused by the mark_beginning_as_normal function making recursive calls to itself in certain scenarios involving lots of '*' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-15T00:00:00.000Z
CVE-2019-6294 
An issue was discovered in EasyCMS 1.5. There is CSRF via the index.php?s=/admin/articlem/insert/navTabId/listarticle/callbackType/closeCurrent URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-15T14:00:00.000Z
CVE-2019-6295 
Cleanto 5.0 has SQL Injection via the assets/lib/service_method_ajax.php service_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-15T14:00:00.000Z
CVE-2019-6296 
Cleanto 5.0 has SQL Injection via the assets/lib/export_ajax.php id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-15T14:00:00.000Z
CVE-2019-6318 
HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient solution bundle signature validation that potentially allows execution of arbitrary code.
Problem types: description: Execution of arbitrary code.
Affected products: vendor: HP
product: HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers
Published: 2019-04-11T14:45:48.000Z
CVE-2019-6319 
HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A (firmware version SWP1FN1912BR or higher) have a Cross-Site Request Forgery (CSRF) vulnerability that could lead to a denial of service (DOS) or device misconfiguration.
Problem types: description: Cross-Site Request Forgery in HP DeskJet 3630 Printers
Affected products: vendor: HP Inc.
product: HP DeskJet 3630 All-in-One Printer series
Published: 2020-01-09T19:04:25.000Z
CVE-2019-6320 
Certain HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A (firmware version SWP1FN1912BR or higher) have a Cross-Site Request Forgery (CSRF) vulnerability that could lead to a denial of service (DOS) or device misconfiguration.
Problem types: description: Cross-Site Request Forgery in HP DeskJet 3630 Printers
Affected products: vendor: HP Inc.
product: HP DeskJet 3630 All-in-One Printer series
Published: 2020-01-09T18:59:47.000Z
CVE-2019-6321 
HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is disabled by default.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure, Loss of Confidentiality, Loss of Integrity
Affected products: vendor: n/a
product: HP Z4 G4 Workstation (Xeon W)
vendor: n/a
product: HP Z4 G4 Workstation (Xeon W) (Linux)
vendor: n/a
product: HP Z4 G4 Core-X Workstation
vendor: n/a
product: HP Z4 G4 Core-X Workstation (Linux)
vendor: n/a
product: HP Z6 G4 Workstation
vendor: n/a
product: HP Z6 G4 Workstation (Linux)
vendor: n/a
product: HP Z8 G4 Workstation
vendor: n/a
product: HP Z8 G4 Workstation (Linux)
Published: 2019-05-29T19:55:14.000Z
CVE-2019-6322 
HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is enabled by default.
Problem types: description: Escalation of Privilege, Denial of Service, Information Disclosure, Loss of Confidentiality, Loss of Integrity
Affected products: vendor: n/a
product: HP Z4 G4 Workstation (Xeon W)
vendor: n/a
product: HP Z4 G4 Workstation (Xeon W) (Linux)
vendor: n/a
product: HP Z4 G4 Core-X Workstation
vendor: n/a
product: HP Z4 G4 Core-X Workstation (Linux)
vendor: n/a
product: HP Z6 G4 Workstation
vendor: n/a
product: HP Z6 G4 Workstation (Linux)
vendor: n/a
product: HP Z8 G4 Workstation
vendor: n/a
product: HP Z8 G4 Workstation (Linux)
Published: 2019-05-29T19:56:26.000Z
CVE-2019-6323 
HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have an embedded web server potentially vulnerable to reflected XSS in wireless configuration page.
Problem types: description: Reflected XSS.
Affected products: vendor: n/a
product: HP Color LaserJet Pro M280-M281 Multifunction Printer series; HP LaserJet Pro MFP M28-M31 Printer series
Published: 2019-06-17T15:55:05.000Z
CVE-2019-6324 
HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have an embedded web server potentially vulnerable to stored XSS in wireless configuration page
Problem types: description: Stored XSS.
Affected products: vendor: n/a
product: HP Color LaserJet Pro M280-M281 Multifunction Printer series; HP LaserJet Pro MFP M28-M31 Printer series
Published: 2019-06-17T15:55:14.000Z
CVE-2019-6325 
HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have an embedded web server that is potentially vulnerable to Cross-site Request Forgery.
Problem types: description: CSRF.
Affected products: vendor: n/a
product: HP Color LaserJet Pro M280-M281 Multifunction Printer series; HP LaserJet Pro MFP M28-M31 Printer series
Published: 2019-06-17T15:55:24.000Z
CVE-2019-6326 
HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have embedded web server attributes which may be potentially vulnerable to Buffer Overflow.
Problem types: description: Buffer overflow.
Affected products: vendor: n/a
product: HP Color LaserJet Pro M280-M281 Multifunction Printer series; HP LaserJet Pro MFP M28-M31 Printer series
Published: 2019-06-17T15:55:30.000Z
CVE-2019-6327 
HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have an IPP Parser potentially vulnerable to Buffer Overflow.
Problem types: description: Buffer overflow.
Affected products: vendor: n/a
product: HP Color LaserJet Pro M280-M281 Multifunction Printer series; HP LaserJet Pro MFP M28-M31 Printer series
Published: 2019-06-17T15:55:40.000Z
CVE-2019-6328 
HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6329.
Problem types: description: Elevation of Privilege
Affected products: vendor: HP
product: HP Support Assistant
Published: 2019-06-25T16:23:47.000Z
CVE-2019-6329 
HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6328.
Problem types: description: Elevation of Privilege
Affected products: vendor: HP
product: HP Support Assistant
Published: 2019-06-25T16:24:33.000Z
CVE-2019-6330 
A potential security vulnerability has been identified in the software solution HP Access Control versions prior to 16.7. This vulnerability could potentially grant elevation of privilege.
Problem types: description: Elevation of privilege vulnerability is found in HP Access Control
Affected products: vendor: n/a
product: HP Access Control
Published: 2020-01-09T18:37:31.000Z
CVE-2019-6331 
An issue was found in Samsung Mobile Print (Android) versions prior to 4.08.007. A potential security vulnerability caused by incomplete obfuscation of application configuration information.
Problem types: description: Exposure of Application Configuration Details in Samsung Mobile Print (Android)
Affected products: vendor: n/a
product: Samsung Mobile Print (Android)
Published: 2020-01-09T18:28:51.000Z
CVE-2019-6332 
A potential security vulnerability has been identified with certain HP InkJet printers. The vulnerability could be exploited to allow cross-site scripting (XSS). Affected products and versions include: HP DeskJet 2600 All-in-One Printer series model numbers 4UJ28B, V1N01A - V1N08A, Y5H60A - Y5H80A; HP DeskJet Ink Advantage 2600 All-in-One Printer series model numbers V1N02A - V1N02B, Y5Z00A - Y5Z04B; HP DeskJet Ink Advantage 5000 All-in-One Printer series model numbers M2U86A - M2U89B; HP DeskJet Ink Advantage 5200 All-in-One Printer series model numbers M2U76A - M2U78B; HP ENVY 5000 All-in-One Printer series model numbers M2U85A - M2U85B, M2U91A - M2U94B, Z4A54A - Z4A74A; HP ENVY Photo 6200 All-in-One Printer series model numbers K7G18A-K7G26B, K7S21B, Y0K13D - Y0K15A; HP ENVY Photo 7100 All-in-One Printer series model numbers 3XD89A, K7G93A-K7G99A, Z3M37A - Z3M52A; HP ENVY Photo 7800 All-in-One Printer series model numbers K7R96A, K7S00A - K7S10D, Y0G42D - Y0G52B; HP Ink Tank Wireless 410 series model numbers Z4B53A - Z4B55A, Z6Z95A - Z6Z99A, 4DX94A - 4DX95A, 4YF79A, Z7A01A; HP OfficeJet 5200 All-in-One Printer series model numbers M2U75A, M2U81A-M2U84B, Z4B12A - Z4B14A, Z4B27A - Z4B29A; HP Smart Tank Wireless 450 series model numbers Z4B56A, Z6Z96A - Z6Z98A.
Problem types: description: Cross-site Scripting (XSS) in HP InkJet Printers
Affected products: vendor: HP Inc.
product: HP DeskJet 2600 All-in-One Printer series
vendor: HP Inc.
product: HP DeskJet Ink Advantage 2600 All-in-One Printer series
vendor: HP Inc.
product: HP DeskJet Ink Advantage 5000 All-in-One Printer series
vendor: HP Inc.
product: HP DeskJet Ink Advantage 5200 All-in-One Printer series
vendor: HP Inc.
product: HP ENVY 5000 All-in-One Printer series
vendor: HP Inc.
product: HP ENVY Photo 6200 All-in-One Printer series
vendor: HP Inc.
product: HP ENVY Photo 7100 All-in-One Printer series
vendor: HP Inc.
product: HP ENVY Photo 7800 All-in-One Printer series
vendor: HP Inc.
product: HP Ink Tank Wireless 410 series
vendor: HP Inc.
product: HP OfficeJet 5200 All-in-One Printer series
vendor: HP Inc.
product: HP Smart Tank Wireless 450 series
Published: 2020-01-09T18:23:38.000Z
CVE-2019-6333 
A potential security vulnerability has been identified with certain versions of HP Touchpoint Analytics prior to version 4.1.4.2827. This vulnerability may allow a local attacker with administrative privileges to execute arbitrary code via an HP Touchpoint Analytics system service.
Problem types: description: Execution of arbitrary code.
Affected products: vendor: HP
product: Touchpoint Analytics
Published: 2019-10-11T16:06:27.000Z
CVE-2019-6334 
HP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers have a solution to check application signature that may allow potential execution of arbitrary code.
Problem types: description: Execution of arbitrary code
Affected products: vendor: n/a
product: HP Color LaserJet CM4540 MFP,HP Color LaserJet Managed flow MFP M880zm,HP Color LaserJet Enterprise flow MFP M880z,HP Color LaserJet Enterprise M552,HP Color LaserJet Managed M553,HP Color LaserJet Enterprise M553,HP Color LaserJet Managed M651,HP Color LaserJet Enterprise M651,HP Color LaserJet Enterprise M652,HP Color LaserJet Enterprise M653,HP Color LaserJet Enterprise M750,HP Color LaserJet Managed E75245,HP Color LaserJet Enterprise M751,HP Color LaserJet Enterprise M855,HP Color LaserJet Enterprise Flow MFP M577,HP Color LaserJet Enterprise MFP M577,HP Color LaserJet Enterprise Flow MFP M680,HP Color LaserJet Enterprise MFP M680,HP Color LaserJet Enterprise flow MFP M681,HP Color LaserJet Enterprise MFP M681,HP Color LaserJet Enterprise flow MFP M682,HP Color LaserJet Enterprise MFP M682,HP Color LaserJet Enterprises CP5525,HP Color LaserJet Managed E55040dw,HP Color LaserJet Managed E65050/60,HP Color LaserJet Managed flow MFP E77822/25/30,HP Color LaserJet Managed flow MFP E57540,HP Color LaserJet Managed MFP E57540,HP Color LaserJet Managed flow MFP E67550/60,HP Color LaserJet Managed MFP E67550/60,HP Color LaserJet Managed MFP E77422/28,HP Color LaserJet Managed MFP E77822/25/30,HP Color LaserJet Managed flow MFP E87640/50/60,HP Color LaserJet Managed MFP E87640/50/60,HP Color LaserJet Managed Flow MFP M577,HP Color LaserJet Managed MFP M577,HP Color LaserJet Managed Flow MFP M680,HP Color LaserJet Managed MFP M680,HP LaserJet Enterprise 500 Color M551HP LaserJet Enterprise color flow MFP M575,HP LaserJet Enterprise 500 color MFP M575,HP LaserJet Enterprise Flow MFP M525,HP LaserJet Enterprise 500 MFP M525f,HP LaserJet Enterprise 600 M601,HP LaserJet Enterprise 600 M602,HP LaserJet Enterprise 600 M603,HP Color LaserJet Managed MFP M775,HP LaserJet Enterprise 700 color MFP M775,HP LaserJet Enterprise 700 M712,HP LaserJet Managed flow MFP M630,HP LaserJet Enterprise flow MFP M630,HP LaserJet Managed flow MFP M830,HP LaserJet Enterprise flow MFP M830,HP LaserJet Enterprise M4555 MFP,HP Las ...[truncated*]
Published: 2019-10-16T14:16:49.000Z
CVE-2019-6335 
A potential security vulnerability has been identified with Samsung Laser Printers. This vulnerability could potentially be exploited to create a denial of service.
Problem types: description: Denial of Service
Affected products: vendor: Samsung
product: Laser Printers
Published: 2019-10-11T17:34:56.000Z
CVE-2019-6337 
For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.
Problem types: description: Buffer Overflow, Disclosure of Information
Affected products: vendor: n/a
product: HP OfficeJet Pro 8210 Printer series,HP PageWide 352dw Printer,HP PageWide 377dw Multifunction Printer,HP PageWide Managed P55250dw Printer series,HP PageWide Managed P57750dw Multifunction Printer series,HP PageWide Managed P52750dw Multifunction Printer,HP PageWide Pro 452dn Printer series,HP PageWide Pro 452dw Printer series,HP PageWide Pro 477dn Multifunction Printer series,HP PageWide Pro 477dw Multifunction Printer series,HP PageWide Pro 552dw Printer series,HP PageWide Pro 577dw Multifunction Printer series
Published: 2019-11-07T14:37:09.000Z
CVE-2019-6338 third-party PEAR Archive_Tar library updates
In Drupal Core versions 7.x prior to 7.62, 8.6.x prior to 8.6.6 and 8.5.x prior to 8.5.9; Drupal core uses the third-party PEAR Archive_Tar library. This library has released a security update which impacts some Drupal configurations. Refer to CVE-2018-1000888 for details
Problem types: description: 3rd party library weekness
Affected products: vendor: Drupal
product: Drupal core
Published: 2019-01-22T15:00:00.000Z
CVE-2019-6339 PHAR stream wrapper Arbitrary PHP code execution
In Drupal Core versions 7.x prior to 7.62, 8.6.x prior to 8.6.6 and 8.5.x prior to 8.5.9; A remote code execution vulnerability exists in PHP's built-in phar stream wrapper when performing file operations on an untrusted phar:// URI. Some Drupal code (core, contrib, and custom) may be performing file operations on insufficiently validated user input, thereby being exposed to this vulnerability. This vulnerability is mitigated by the fact that such code paths typically require access to an administrative permission or an atypical configuration.
Problem types: description: Remote Code Execution
Affected products: vendor: Drupal
product: Drupal core
Published: 2019-01-22T15:00:00.000Z
CVE-2019-6340 Drupal core - Highly critical - Remote Code Execution
Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can lead to arbitrary PHP code execution in some cases. A site is only affected by this if one of the following conditions is met: The site has the Drupal 8 core RESTful Web Services (rest) module enabled and allows PATCH or POST requests, or the site has another web services module enabled, like JSON:API in Drupal 8, or Services or RESTful Web Services in Drupal 7. (Note: The Drupal 7 Services module itself does not require an update at this time, but you should apply other contributed updates associated with this advisory if Services is in use.)
Problem types: description: Remote code execution
Affected products: vendor: Drupal
product: Drupal Core
Published: 2019-02-21T21:00:00.000Z
CVE-2019-6341 Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-004
In Drupal 7 versions prior to 7.65; Drupal 8.6 versions prior to 8.6.13;Drupal 8.5 versions prior to 8.5.14. Under certain circumstances the File module/subsystem allows a malicious user to upload a file that can trigger a cross-site scripting (XSS) vulnerability.
Problem types: description: Cross Site Scripting
Affected products: vendor: Drupal
product: Drupal core
Published: 2019-03-26T18:04:37.000Z
CVE-2019-6342 Drupal core - Critical - Access bypass - SA-CORE-2019-008
An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be mitigated by disabling the Workspaces module. It does not affect any release other than Drupal 8.7.4.
Problem types: description: Access Bypasss
Affected products: vendor: Drupal
product: Drupal Core
Published: 2020-05-28T20:59:46.000Z
CVE-2019-6438 
SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-31T08:00:00.000Z
CVE-2019-6439 
examples/benchmark/tls_bench.c in a benchmark tool in wolfSSL through 3.15.7 has a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-16T03:00:00.000Z
CVE-2019-6440 
Zemana AntiMalware before 3.0.658 Beta mishandles update logic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-16T04:00:00.000Z
CVE-2019-6441 
An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices. The password reset functionality of the router doesn't have backend validation for the current password and doesn't require any type of authentication. By making a POST request to the apply.cgi file of the router, the attacker can change the admin username and password of the router.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-19T20:08:16.000Z
CVE-2019-6442 
An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can write one byte out of bounds in ntpd via a malformed config request, related to config_remotely in ntp_config.c, yyparse in ntp_parser.tab.c, and yyerror in ntp_parser.y.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-16T05:00:00.000Z
CVE-2019-6443 
An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in ntp_control.c in ntpd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-16T05:00:00.000Z
CVE-2019-6444 
An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read because attacker-controlled data is dereferenced by ntohl() in ntpd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-16T05:00:00.000Z
CVE-2019-6445 
An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd crash in ntp_control.c, related to ctl_getitem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-16T05:00:00.000Z
CVE-2019-6446 
An issue was discovered in NumPy before 1.16.3. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in (for example) loading serialized Python object arrays from trusted and authenticated sources.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-16T05:00:00.000Z
CVE-2019-6447 
The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network. This TCP port remains open after the ES application has been launched once, and responds to unauthenticated application/json data over HTTP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-16T14:00:00.000Z
CVE-2019-6451 
On SOYAL AR-727H and AR-829Ev5 devices, all CGI programs allow unauthenticated POST access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-06T18:08:24.000Z
CVE-2019-6452 
Kyocera Command Center RX TASKalfa4501i and TASKalfa5052ci allows remote attackers to abuse the Test button in the machine address book to obtain a cleartext FTP or SMB password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-06T18:06:26.000Z
CVE-2019-6453 
mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling (Chrome is not exploitable).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-02-18T15:00:00.000Z
CVE-2019-6454 
An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T16:38:57.000Z
CVE-2019-6455 
An issue was discovered in GNU Recutils 1.8. There is a double-free problem in the function rec_mset_elem_destroy() in the file rec-mset.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-16T18:00:00.000Z
CVE-2019-6456 
An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_fex_size() in the file rec-fex.c of librec.a.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-16T18:00:00.000Z
CVE-2019-6457 
An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_aggregate_reg_new in rec-aggregate.c in librec.a.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-16T18:00:00.000Z
CVE-2019-6458 
An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_buf_new in rec-buf.c when called from rec_parse_rset in rec-parser.c in librec.a.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-16T18:00:00.000Z
CVE-2019-6459 
An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_extract_type in rec-utils.c in librec.a.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-16T18:00:00.000Z
CVE-2019-6460 
An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_field_set_name() in the file rec-field.c in librec.a.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-16T18:00:00.000Z