|
219241
|
9.8 |
CRITICAL
Network
|
gnu
|
libredwg
|
An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_common_entity_handle_data in common_entity_handle_data.spec.
|
CWE-476
NULL Pointer Dereference
|
CVE-2019-20914
|
2024-11-21 13:39 |
2020-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219242
|
8.1 |
HIGH
Network
|
gnu
|
libredwg
|
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in dwg_encode_entity in common_entity_data.spec.
|
CWE-125
Out-of-bounds Read
|
CVE-2019-20913
|
2024-11-21 13:39 |
2020-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219243
|
8.8 |
HIGH
Network
|
gnu
|
libredwg
|
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a stack overflow in bits.c, possibly related to bit_read_TF.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-20912
|
2024-11-21 13:39 |
2020-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219244
|
6.5 |
MEDIUM
Network
|
gnu
|
libredwg
|
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bit_calc_CRC in bits.c, related to a for loop.
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2019-20911
|
2024-11-21 13:39 |
2020-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219245
|
8.1 |
HIGH
Network
|
gnu
|
libredwg
|
An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in decode_R13_R2000 in decode.c, a different vulnerability than CVE-2019-20011.
|
CWE-125
Out-of-bounds Read
|
CVE-2019-20910
|
2024-11-21 13:39 |
2020-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219246
|
7.5 |
HIGH
Network
|
gnu
|
libredwg
|
An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_LWPOLYLINE in dwg.spec.
|
CWE-476
NULL Pointer Dereference
|
CVE-2019-20909
|
2024-11-21 13:39 |
2020-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219247
|
6.7 |
MEDIUM
Local
|
linux
opensuse
canonical
|
linux_kernel
leap
ubuntu_linux
|
An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. Incorrect access permissions for the efivar_ssdt ACPI variable could be used by attackers to bypass lockdown or s…
|
NVD-CWE-noinfo
|
CVE-2019-20908
|
2024-11-21 13:39 |
2020-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219248
|
7.5 |
HIGH
Network
|
python
opensuse
debian
fedoraproject
canonical
netapp
oracle
|
python
leap
debian_linux
fedora
ubuntu_linux
active_iq_unified_manager
cloud_volumes_ontap_mediator
zfs_storage_appliance_kit
|
In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2019-20907
|
2024-11-21 13:39 |
2020-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219249
|
6.1 |
MEDIUM
Network
|
atlassian
|
jira
jira_server
|
The login.jsp resource in Jira before version 8.5.2, and from version 8.6.0 before version 8.6.1 allows remote attackers to redirect users to a different website which they may use as part of perform…
|
CWE-601
Open Redirect
|
CVE-2019-20901
|
2024-11-21 13:39 |
2020-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219250
|
4.8 |
MEDIUM
Network
|
atlassian
|
jira_server
jira_data_center
|
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the Add Field module. The af…
|
CWE-79
Cross-site Scripting
|
CVE-2019-20900
|
2024-11-21 13:39 |
2020-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
