admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-06-19 17:32:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2019-10-25 19:01:11 +00:00
parent 01a258e756
commit e5bf483a83
No known key found for this signature in database
GPG Key ID: 0DA1F9F56BC892E8
25 changed files with 660 additions and 510 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
2017/6xxx/CVE-2017-6059.json
View File

@ -81,6 +81,11 @@
"refsource": "REDHAT",
"name": "RHSA-2019:2112",
"url": "https://access.redhat.com/errata/RHSA-2019:2112"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2019-7b06f18a10",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJXBG3DG2FUYFGTUTSJFMPIINVFKKB4Z/"
}
]
}

5
2017/6xxx/CVE-2017-6062.json
View File

@ -66,6 +66,11 @@
"name": "https://github.com/pingidentity/mod_auth_openidc/issues/222",
"refsource": "CONFIRM",
"url": "https://github.com/pingidentity/mod_auth_openidc/issues/222"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2019-7b06f18a10",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJXBG3DG2FUYFGTUTSJFMPIINVFKKB4Z/"
}
]
}

5
2017/6xxx/CVE-2017-6413.json
View File

@ -76,6 +76,11 @@
"refsource": "REDHAT",
"name": "RHSA-2019:2112",
"url": "https://access.redhat.com/errata/RHSA-2019:2112"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2019-7b06f18a10",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJXBG3DG2FUYFGTUTSJFMPIINVFKKB4Z/"
}
]
}

5
2019/12xxx/CVE-2019-12402.json
View File

@ -53,6 +53,11 @@
"refsource": "MLIST",
"name": "[creadur-commits] 20191022 [creadur-rat] branch master updated: RAT-258: Update to latest commons-compress to fix CVE-2019-12402",
"url": "https://lists.apache.org/thread.html/54cc4e9fa6b24520135f6fa4724dfb3465bc14703c7dc7e52353a0ea@%3Ccommits.creadur.apache.org%3E"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2019-c96a8d12b0",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QLJIK2AUOZOWXR3S5XXBUNMOF3RTHTI7/"
}
]
},

5
2019/12xxx/CVE-2019-12493.json
View File

@ -61,6 +61,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20190930 [SECURITY] [DLA 1939-1] poppler security update",
"url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00033.html"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2019-a457286734",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWEWFUVITPA3Y6F4A5SJSROKYT7PRH7Q/"
}
]
}

5
2019/12xxx/CVE-2019-12515.json
View File

@ -56,6 +56,11 @@
"url": "https://github.com/PanguL4b/pocs/tree/master/xpdf/out-of-bounds-read-in-FlateStream__getChar",
"refsource": "MISC",
"name": "https://github.com/PanguL4b/pocs/tree/master/xpdf/out-of-bounds-read-in-FlateStream__getChar"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2019-a457286734",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWEWFUVITPA3Y6F4A5SJSROKYT7PRH7Q/"
}
]
}

5
2019/12xxx/CVE-2019-12957.json
View File

@ -56,6 +56,11 @@
"url": "https://forum.xpdfreader.com/viewtopic.php?f=3&t=41813",
"refsource": "MISC",
"name": "https://forum.xpdfreader.com/viewtopic.php?f=3&t=41813"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2019-a457286734",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWEWFUVITPA3Y6F4A5SJSROKYT7PRH7Q/"
}
]
}

5
2019/12xxx/CVE-2019-12958.json
View File

@ -56,6 +56,11 @@
"url": "https://forum.xpdfreader.com/viewtopic.php?f=3&t=41815",
"refsource": "MISC",
"name": "https://forum.xpdfreader.com/viewtopic.php?f=3&t=41815"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2019-a457286734",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWEWFUVITPA3Y6F4A5SJSROKYT7PRH7Q/"
}
]
}

5
2019/13xxx/CVE-2019-13281.json
View File

@ -56,6 +56,11 @@
"url": "https://forum.xpdfreader.com/viewtopic.php?f=3&t=41841",
"refsource": "MISC",
"name": "https://forum.xpdfreader.com/viewtopic.php?f=3&t=41841"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2019-a457286734",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWEWFUVITPA3Y6F4A5SJSROKYT7PRH7Q/"
}
]
}

5
2019/13xxx/CVE-2019-13282.json
View File

@ -56,6 +56,11 @@
"url": "https://forum.xpdfreader.com/viewtopic.php?f=3&t=41842",
"refsource": "MISC",
"name": "https://forum.xpdfreader.com/viewtopic.php?f=3&t=41842"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2019-a457286734",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWEWFUVITPA3Y6F4A5SJSROKYT7PRH7Q/"
}
]
}

5
2019/13xxx/CVE-2019-13283.json
View File

@ -56,6 +56,11 @@
"url": "https://forum.xpdfreader.com/viewtopic.php?f=3&t=41843",
"refsource": "MISC",
"name": "https://forum.xpdfreader.com/viewtopic.php?f=3&t=41843"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2019-a457286734",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWEWFUVITPA3Y6F4A5SJSROKYT7PRH7Q/"
}
]
}

5
2019/13xxx/CVE-2019-13286.json
View File

@ -56,6 +56,11 @@
"url": "https://github.com/PanguL4b/pocs/tree/master/xpdf/heap-buffer-overflow_JBIG2Stream__readTextRegionSeg",
"refsource": "MISC",
"name": "https://github.com/PanguL4b/pocs/tree/master/xpdf/heap-buffer-overflow_JBIG2Stream__readTextRegionSeg"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2019-a457286734",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWEWFUVITPA3Y6F4A5SJSROKYT7PRH7Q/"
}
]
}

5
2019/14xxx/CVE-2019-14823.json
View File

@ -59,6 +59,11 @@
"refsource": "REDHAT",
"name": "RHSA-2019:3067",
"url": "https://access.redhat.com/errata/RHSA-2019:3067"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2019-68c2fbcf82",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O53NXVKMF7PJCPMCJQHLMSYCUGDHGBVE/"
}
]
},

5
2019/15xxx/CVE-2019-15903.json
View File

@ -151,6 +151,11 @@
"refsource": "UBUNTU",
"name": "USN-4165-1",
"url": "https://usn.ubuntu.com/4165-1/"
},
{
"refsource": "DEBIAN",
"name": "DSA-4549",
"url": "https://www.debian.org/security/2019/dsa-4549"
}
]
}

5
2019/17xxx/CVE-2019-17109.json
View File

@ -66,6 +66,11 @@
"refsource": "CONFIRM",
"name": "https://pagure.io/koji/commits/master",
"url": "https://pagure.io/koji/commits/master"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2019-adf618865f",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7PSCCFHLNVFLDPC7DB4UJGXD6ZWBSY57/"
}
]
}

10
2019/17xxx/CVE-2019-17138.json
View File

@ -35,7 +35,7 @@
"description_data": [
{
"lang": "eng",
"value": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.909. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the conversion from JPEG to EPS. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-8809."
"value": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.909. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion from JPEG to EPS. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-8809."
}
]
},
@ -54,10 +54,14 @@
"references": {
"reference_data": [
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-19-908/"
"url": "https://www.foxitsoftware.com/support/security-bulletins.php",
"refsource": "MISC",
"name": "https://www.foxitsoftware.com/support/security-bulletins.php"
},
{
"url": "https://www.foxitsoftware.com/support/security-bulletins.php"
"url": "https://www.zerodayinitiative.com/advisories/ZDI-19-908/",
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-19-908/"
}
]
},

10
2019/17xxx/CVE-2019-17139.json
View File

@ -35,7 +35,7 @@
"description_data": [
{
"lang": "eng",
"value": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the processing of Javascript in the HTML2PDF plugin. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-8692."
"value": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of Javascript in the HTML2PDF plugin. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-8692."
}
]
},
@ -54,10 +54,14 @@
"references": {
"reference_data": [
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-19-909/"
"url": "https://www.foxitsoftware.com/support/security-bulletins.php",
"refsource": "MISC",
"name": "https://www.foxitsoftware.com/support/security-bulletins.php"
},
{
"url": "https://www.foxitsoftware.com/support/security-bulletins.php"
"url": "https://www.zerodayinitiative.com/advisories/ZDI-19-909/",
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-19-909/"
}
]
},

10
2019/17xxx/CVE-2019-17140.json
View File

@ -35,7 +35,7 @@
"description_data": [
{
"lang": "eng",
"value": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the handling of the OnFocus event. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9091."
"value": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the OnFocus event. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9091."
}
]
},
@ -54,10 +54,14 @@
"references": {
"reference_data": [
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-19-910/"
"url": "https://www.foxitsoftware.com/support/security-bulletins.php",
"refsource": "MISC",
"name": "https://www.foxitsoftware.com/support/security-bulletins.php"
},
{
"url": "https://www.foxitsoftware.com/support/security-bulletins.php"
"url": "https://www.zerodayinitiative.com/advisories/ZDI-19-910/",
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-19-910/"
}
]
},

10
2019/17xxx/CVE-2019-17141.json
View File

@ -35,7 +35,7 @@
"description_data": [
{
"lang": "eng",
"value": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the processing of script within a Calculate action of a text field. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9044."
"value": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of script within a Calculate action of a text field. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9044."
}
]
},
@ -54,10 +54,14 @@
"references": {
"reference_data": [
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-19-911/"
"url": "https://www.foxitsoftware.com/support/security-bulletins.php",
"refsource": "MISC",
"name": "https://www.foxitsoftware.com/support/security-bulletins.php"
},
{
"url": "https://www.foxitsoftware.com/support/security-bulletins.php"
"url": "https://www.zerodayinitiative.com/advisories/ZDI-19-911/",
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-19-911/"
}
]
},

10
2019/17xxx/CVE-2019-17142.json
View File

@ -35,7 +35,7 @@
"description_data": [
{
"lang": "eng",
"value": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the processing of script within a Keystroke action of a listbox field. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9081."
"value": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of script within a Keystroke action of a listbox field. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9081."
}
]
},
@ -54,10 +54,14 @@
"references": {
"reference_data": [
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-19-912/"
"url": "https://www.foxitsoftware.com/support/security-bulletins.php",
"refsource": "MISC",
"name": "https://www.foxitsoftware.com/support/security-bulletins.php"
},
{
"url": "https://www.foxitsoftware.com/support/security-bulletins.php"
"url": "https://www.zerodayinitiative.com/advisories/ZDI-19-912/",
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-19-912/"
}
]
},

6
2019/17xxx/CVE-2019-17143.json
View File

@ -35,7 +35,7 @@
"description_data": [
{
"lang": "eng",
"value": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-9273."
"value": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-9273."
}
]
},
@ -54,7 +54,9 @@
"references": {
"reference_data": [
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-19-913/"
"url": "https://www.zerodayinitiative.com/advisories/ZDI-19-913/",
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-19-913/"
}
]
},

6
2019/17xxx/CVE-2019-17144.json
View File

@ -35,7 +35,7 @@
"description_data": [
{
"lang": "eng",
"value": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the conversion of DWG files to PDF. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9274."
"value": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of DWG files to PDF. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9274."
}
]
},
@ -54,7 +54,9 @@
"references": {
"reference_data": [
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-19-914/"
"url": "https://www.zerodayinitiative.com/advisories/ZDI-19-914/",
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-19-914/"
}
]
},

6
2019/17xxx/CVE-2019-17145.json
View File

@ -35,7 +35,7 @@
"description_data": [
{
"lang": "eng",
"value": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the conversion of DXF files to PDF. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9276."
"value": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of DXF files to PDF. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9276."
}
]
},
@ -54,7 +54,9 @@
"references": {
"reference_data": [
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-19-915/"
"url": "https://www.zerodayinitiative.com/advisories/ZDI-19-915/",
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-19-915/"
}
]
},

5
2019/2xxx/CVE-2019-2114.json
View File

@ -48,6 +48,11 @@
"refsource": "CONFIRM",
"name": "https://source.android.com/security/bulletin/2019-10-01",
"url": "https://source.android.com/security/bulletin/2019-10-01"
},
{
"refsource": "MISC",
"name": "https://wwws.nightwatchcybersecurity.com/2019/10/24/nfc-beaming-bypasses-security-controls-in-android-cve-2019-2114/",
"url": "https://wwws.nightwatchcybersecurity.com/2019/10/24/nfc-beaming-bypasses-security-controls-in-android-cve-2019-2114/"
}
]
},

64
2019/5xxx/CVE-2019-5508.json
View File

@ -1,17 +1,61 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-5508",
"STATE": "RESERVED"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"description": {
"description_data": [
"CVE_data_meta": {
"ID": "CVE-2019-5508",
"ASSIGNER": "security-alert@netapp.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"vendor_name": "n/a",
"product": {
"product_data": [
{
"product_name": "Clustered Data ONTAP",
"version": {
"version_data": [
{
"version_value": "9.2 and higher"
}
]
}
}
]
}
}
]
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Denial of Service (DoS)"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "https://security.netapp.com/advisory/ntap-20191024-0001/",
"url": "https://security.netapp.com/advisory/ntap-20191024-0001/"
}
]
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "Clustered Data ONTAP versions 9.2 through 9.6 are susceptible to a vulnerability which allows an attacker to use l2ping to cause a Denial of Service (DoS)."
}
]
}