Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-14897 State: PUBLISHED Published: 2019-11-29T14:00:18 Last Updated: 2024-08-05T00:26:39.202Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: Red Hat Products: kernel Problem Types: CWE-121 Description: A stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CV
her STA. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14897 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MN6MLCN7G7VFTSXSZYXKXEFCUMFBUAXQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4ISVNIC44SOGXTUBCIZFSUNQJ5LRKNZ/ - https://usn.ubuntu.com/4228-1/ - https://usn.ubuntu.com/4227-1/ - https://usn.ubuntu.com/4226-1/ - https://usn.ubuntu.com/4225-1/ - https://usn.ubuntu.com/4228-2/ - https://usn.ubuntu.com/4227-2/ - http://packetstormsecurity.com/files/155879/Kernel-Live-Patch-Security-Notice-LSN-0061-1.html - https
untu.com/4227-2/ - http://packetstormsecurity.com/files/155879/Kernel-Live-Patch-Security-Notice-LSN-0061-1.html - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://usn.ubuntu.com/4225-2/ - http://packetstormsecurity.com/files/156185/Kernel-Live-Patch-Security-Notice-LSN-0062-1.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
CVE ID: CVE-2019-14898 State: PUBLISHED Published: 2020-05-08T13:50:58 Last Updated: 2024-08-05T00:26:39.172Z Severity: HIGH (CVSS 7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Linux kernel Products: kernel Problem Types: CWE-362, CWE-667 Description: The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local user could use this flaw to obtain sensitive information, cause a denial of service, or possibly have other unspecified impacts by triggering a race condition with mmget_not_zero or get_task_mm calls. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpuApr2021.html - https://cdn.kernel.
tes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpuApr2021.html - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.114 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.37 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1790 - https://security.netapp.com/advisory/ntap-20200608-0001/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14898
CVE ID: CVE-2019-14899 State: PUBLISHED Published: 2019-12-11T14:45:12 Last Updated: 2024-08-05T00:26:39.138Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: VPN Problem Types: CWE-300 Description: A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is using a VPN, make positive inferences about the websites they are visiting, and determine the correct sequence and acknowledgement numbers in use, allowing the bad actor to inject data into the TCP stream. This provides everything that is needed for an attacker to hijack ac
g the bad actor to inject data into the TCP stream. This provides everything that is needed for an attacker to hijack active connections inside the VPN tunnel. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14899 - https://openvpn.net/security-advisory/no-flaws-found-in-openvpn-software/ - https://support.apple.com/kb/HT211288 - https://support.apple.com/kb/HT211290 - https://support.apple.com/kb/HT211289 - http://seclists.org/fulldisclosure/2020/Jul/25 - http://seclists.org/fulldisclosure/2020/Jul/24 - http://seclists.org/fulldisclosure/2020/Jul/23 - http://www.openwall.com/lists/oss-security/2020/08/13/2 - https://suppo
http://seclists.org/fulldisclosure/2020/Jul/23 - http://www.openwall.com/lists/oss-security/2020/08/13/2 - https://support.apple.com/kb/HT211850 - http://www.openwall.com/lists/oss-security/2020/10/07/3 - https://support.apple.com/kb/HT211931 - http://seclists.org/fulldisclosure/2020/Nov/20 - http://seclists.org/fulldisclosure/2020/Dec/32 - http://www.openwall.com/lists/oss-security/2021/07/05/1
CVE ID: CVE-2019-14900 State: PUBLISHED Published: 2020-07-06T18:35:01 Last Updated: 2024-08-05T00:26:39.118Z Vendors: n/a Products: Hibernate Problem Types: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.c
ibly conduct further attacks. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1666499 - https://lists.apache.org/thread.html/r833c1276e41334fa675848a08daf0c61f39009f9f9a400d9f7006d44%40%3Cdev.turbine.apache.org%3E - https://security.netapp.com/advisory/ntap-20220210-0020/
CVE ID: CVE-2019-14901 State: PUBLISHED Published: 2019-11-29T14:05:14 Last Updated: 2024-08-05T00:26:39.139Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: kernel Problem Types: CWE-400, CWE-122 Description: A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confide
y of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14901 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MN6MLCN7G7VFTSXSZYXKXEFCUMFBUAXQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4ISVNIC44SOGXTUBCIZFSUNQJ5LRKNZ/ - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html - https://usn.ubuntu.com/4228-1/ - https://usn.ubuntu.com/4227-1/
.org/opensuse-security-announce/2019-12/msg00029.html - https://usn.ubuntu.com/4228-1/ - https://usn.ubuntu.com/4227-1/ - https://usn.ubuntu.com/4226-1/ - https://usn.ubuntu.com/4225-1/ - https://usn.ubuntu.com/4228-2/ - https://usn.ubuntu.com/4227-2/ - http://packetstormsecurity.com/files/155879/Kernel-Live-Patch-Security-Notice-LSN-0061-1.html - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://usn.ubuntu.com/4225-2/ - https://access.redhat.com/errata/RHSA-2020:0204 - http://packetstormsecurity.com/files/156185/Kernel-Live-Patch-Security-Notice-LSN-0062-1.html - https://access.redhat.com/errata/RHSA-2020:0328 - https://access.redhat.com/errata/RHSA-2020:0339 - ht
LSN-0062-1.html - https://access.redhat.com/errata/RHSA-2020:0328 - https://access.redhat.com/errata/RHSA-2020:0339 - https://access.redhat.com/errata/RHSA-2020:0374 - https://access.redhat.com/errata/RHSA-2020:0375 - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE ID: CVE-2019-14902 State: PUBLISHED Published: 2020-01-21T00:00:00 Last Updated: 2024-08-05T00:26:39.142Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: [UNKNOWN] Products: samba Problem Types: CWE-284 Description: There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18, where the removal of the right to create or modify a subtree would not automatically be taken away on all domain controllers. Additional Analyst Notes: - CVE Program Container: References: - https://www.samba.org/samba/security/CVE-2019-14902.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2
ferences: - https://www.samba.org/samba/security/CVE-2019-14902.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14902 - https://security.netapp.com/advisory/ntap-20200122-0001/ - https://www.synology.com/security/advisory/Synology_SA_20_01 - https://usn.ubuntu.com/4244-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00055.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GQ6U65I2K23YJC4FESW477WL55TU3PPT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ACZVNMIFQGGXNJPMHAVBN3H2U65FXQY/ - https://security.gentoo.org/glsa/202003-52 - https://lists.debian.org/
t.org/message/4ACZVNMIFQGGXNJPMHAVBN3H2U65FXQY/ - https://security.gentoo.org/glsa/202003-52 - https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html - https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html
CVE ID: CVE-2019-14903 State: REJECTED Published: 2021-03-18T18:50:47 Last Updated: 2021-03-18T18:50:47 Description: No description available.
CVE ID: CVE-2019-14904 State: PUBLISHED Published: 2020-08-25T23:21:47 Last Updated: 2024-08-05T00:26:39.194Z Vendors: n/a Products: Ansible Problem Types: CWE-20 Description: A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected. Additional Analyst Notes: - CVE Program Container: References: - https://bu
2 as well as previous versions are affected. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1776944 - https://github.com/ansible/ansible/pull/65686 - https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html - https://www.debian.org/security/2021/dsa-4950
CVE ID: CVE-2019-14905 State: PUBLISHED Published: 2020-03-31T16:20:41 Last Updated: 2024-08-05T00:34:52.317Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L) Vendors: Red Hat Products: Ansible Problem Types: CWE-20, CWE-73 Description: A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS command injections. This could result in a loss of confidentiality of the system among other issues. Additional Analyst Notes: - CVE Program Co
s could result in a loss of confidentiality of the system among other issues. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14905 - https://access.redhat.com/errata/RHSA-2020:0218 - https://access.redhat.com/errata/RHSA-2020:0216 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BNCYPQ4BY5QHBCJOAOPANB5FHATW2BR/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html
CVE ID: CVE-2019-14906 State: PUBLISHED Published: 2020-01-07T20:05:18 Last Updated: 2024-08-05T00:34:52.554Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: SDL Problem Types: CWE-787, CWE-125 Description: A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. This issue only affects Red Hat SDL packages, SDL versions through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow flaw while copying an existing surface into a new optimized one, due to a lack of validation while loading a BMP image, is possible. An application that uses SDL to parse untrusted input files may be vulne
idation while loading a BMP image, is possible. An application that uses SDL to parse untrusted input files may be vulnerable to this flaw, which could allow an attacker to make the application crash or execute code. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14906
CVE ID: CVE-2019-14907 State: PUBLISHED Published: 2020-01-21T00:00:00 Last Updated: 2024-08-05T00:34:52.321Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: samba Problem Types: CWE-125 Description: All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case
AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14907 - https://www.samba.org/samba/security/CVE-2019-14907.html - https://security.netapp.com/advisory/ntap-20200122-0001/ - https://www.synology.com/security/advisory/Synology_SA_20_01 - https://usn.ubuntu.com/4244-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00055.html - https://lists.fedoraproject.org/archives/list/package-announce%40
org/opensuse-security-announce/2020-01/msg00055.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GQ6U65I2K23YJC4FESW477WL55TU3PPT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ACZVNMIFQGGXNJPMHAVBN3H2U65FXQY/ - https://security.gentoo.org/glsa/202003-52 - https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html - https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html
CVE ID: CVE-2019-14908 State: REJECTED Published: 2021-03-18T18:52:50 Last Updated: 2021-03-18T18:52:50 Description: No description available.
CVE ID: CVE-2019-14909 State: PUBLISHED Published: 2019-12-04T14:34:06 Last Updated: 2024-08-05T00:34:52.607Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N) Vendors: n/a Products: Keycloak Problem Types: CWE-287, CWE-305, CWE-592 Description: A vulnerability was found in Keycloak 7.x where the user federation LDAP bind type is none (LDAP anonymous bind), any password, invalid or valid will be accepted. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14909
CVE ID: CVE-2019-14910 State: PUBLISHED Published: 2019-12-05T14:16:00 Last Updated: 2024-08-05T00:34:51.746Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N) Vendors: n/a Products: Keycloak Problem Types: CWE-287, CWE-305, CWE-592 Description: A vulnerability was found in keycloak 7.x, when keycloak is configured with LDAP user federation and StartTLS is used instead of SSL/TLS from the LDAP server (ldaps), in this case user authentication succeeds even if invalid password has entered. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14910
CVE ID: CVE-2019-14911 State: PUBLISHED Published: 2019-09-20T13:37:37 Last Updated: 2024-08-05T00:34:51.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PRiSE adAS 1.7.0. The OPENSSO module does not properly escape output on error, leading to reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - http://www.adas-sso.com/es/extra/download.php - https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adas
CVE ID: CVE-2019-14912 State: PUBLISHED Published: 2019-09-20T13:38:15 Last Updated: 2024-08-05T00:34:52.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PRiSE adAS 1.7.0. The OPENSSO module does not properly check the goto parameter, leading to an open redirect that leaks the session cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.adas-sso.com/es/extra/download.php - https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adas
CVE ID: CVE-2019-14913 State: PUBLISHED Published: 2019-09-20T13:38:48 Last Updated: 2024-08-05T00:34:52.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PRiSE adAS 1.7.0. Log data are not properly escaped, leading to persistent XSS in the administration panel. Additional Analyst Notes: - CVE Program Container: References: - http://www.adas-sso.com/es/extra/download.php - https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adas
CVE ID: CVE-2019-14914 State: PUBLISHED Published: 2019-09-20T13:39:25 Last Updated: 2024-08-05T00:34:52.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PRiSE adAS 1.7.0. The path is not properly escaped in the medatadata_del method, leading to an arbitrary file read and deletion via Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - http://www.adas-sso.com/es/extra/download.php - https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adas
CVE ID: CVE-2019-14915 State: PUBLISHED Published: 2019-09-20T13:39:54 Last Updated: 2024-08-05T00:34:51.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PRiSE adAS 1.7.0. Certificate data are not properly escaped. This leads to XSS when submitting a rogue certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.adas-sso.com/es/extra/download.php - https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adas
CVE ID: CVE-2019-14916 State: PUBLISHED Published: 2019-09-20T13:40:18 Last Updated: 2024-08-05T00:34:51.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PRiSE adAS 1.7.0. A file's format is not properly checked, leading to an unrestricted file upload. Additional Analyst Notes: - CVE Program Container: References: - http://www.adas-sso.com/es/extra/download.php - https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adas
CVE ID: CVE-2019-14918 State: PUBLISHED Published: 2020-01-09T16:18:22 Last Updated: 2024-08-05T00:34:51.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS in the DHCP lease-status table in Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an attacker to inject arbitrary HTML/JavaScript code to achieve client-side code execution via crafted DHCP request packets to etc_ro/web/internet/dhcpcliinfo.asp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/InnotecSystem/Device-Reversing/wiki/XSS-Injection-via-DHCP-requests
CVE ID: CVE-2019-14919 State: PUBLISHED Published: 2020-01-09T16:22:43 Last Updated: 2024-08-05T00:34:52.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exposed Telnet Service on the Billion Smart Energy Router SG600R2 with firmware v3.02.rc6 allows a local network attacker to authenticate via hardcoded credentials into a shell, gaining root execution privileges over the device. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/InnotecSystem/Device-Reversing/wiki/Firmware-Inspection
CVE ID: CVE-2019-14920 State: PUBLISHED Published: 2020-01-09T16:24:46 Last Updated: 2024-08-05T00:34:51.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an authenticated attacker to gain root execution privileges over the device via a hidden etc_ro/web/adm/system_command.asp shell feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/InnotecSystem/Device-Reversing/wiki/Firmware-Inspection
CVE ID: CVE-2019-14923 State: PUBLISHED Published: 2019-08-16T12:22:58 Last Updated: 2024-08-05T00:34:51.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: EyesOfNetwork 5.1 allows Remote Command Execution via shell metacharacters in the module/tool_all/ host field. Additional Analyst Notes: - CVE Program Container: References: - https://www.eyesofnetwork.com/?p=2072 - https://www.exploit-db.com/exploits/47280
CVE ID: CVE-2019-14924 State: PUBLISHED Published: 2019-08-10T18:34:17 Last Updated: 2024-08-05T00:34:51.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GCDWebServer before 3.5.3. The method moveItem in the GCDWebUploader class checks the FileExtension of newAbsolutePath but not oldAbsolutePath. By leveraging this vulnerability, an adversary can make an inaccessible file be available (the credential of the app, for instance). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/swisspol/GCDWebServer/issues/433 - https://github.com/swisspol/GCDWebServer/commit/02738433bf2e1b820ef48f04edd15df304081802 - https://github.co
ssues/433 - https://github.com/swisspol/GCDWebServer/commit/02738433bf2e1b820ef48f04edd15df304081802 - https://github.com/swisspol/GCDWebServer/compare/3.5.2...3.5.3
CVE ID: CVE-2019-14925 State: PUBLISHED Published: 2019-10-28T12:12:34 Last Updated: 2024-09-10T17:06:17.053677 Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. A world-readable /usr/smartrtu/init/settings.xml configuration file on the file system allows an attacker to read sensitive configuration settings such as usernames, passwords, and other sensitive RTU data due to insecure permission assignment. Additional Analyst Notes: - CVE Program Container: References: - https://www.mogozobo.com/ - https://www.mogozobo.com/?p=3593
CVE ID: CVE-2019-14926 State: PUBLISHED Published: 2019-10-28T12:10:13 Last Updated: 2024-09-10T17:08:12.590855 Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Hard-coded SSH keys allow an attacker to gain unauthorised access or disclose encrypted data on the RTU due to the keys not being regenerated on initial installation or with firmware updates. In other words, these devices use private-key values in /etc/ssh/ssh_host_rsa_key, /etc/ssh/ssh_host_ecdsa_key, and /etc/ssh/ssh_host_dsa_key files that are publicly available from the vendor web sites. Additional
sh_host_ecdsa_key, and /etc/ssh/ssh_host_dsa_key files that are publicly available from the vendor web sites. Additional Analyst Notes: - CVE Program Container: References: - https://www.mogozobo.com/ - https://www.mogozobo.com/?p=3593