Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-13485 State: PUBLISHED Published: 2019-08-27T16:25:52 Last Updated: 2024-08-04T23:57:38.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the history viewer component via a long hostname or service parameter to history.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/svn2github/xymon/blob/master/branches/4.3.28/web/history.c - https://lists.debian.org/debian-lts-announce/2019/08/msg00032.html - https://lists.xymon.com/archive/2019-July/046570.html
CVE ID: CVE-2019-13486 State: PUBLISHED Published: 2019-08-27T16:01:29 Last Updated: 2024-08-04T23:57:38.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Xymon through 4.3.28, a stack-based buffer overflow exists in the status-log viewer component because of &nbsp; expansion in svcstatus.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/svn2github/xymon/blob/master/branches/4.3.28/web/svcstatus.c - https://lists.debian.org/debian-lts-announce/2019/08/msg00032.html - https://lists.xymon.com/archive/2019-July/046570.html
CVE ID: CVE-2019-13488 State: PUBLISHED Published: 2019-07-10T21:18:38 Last Updated: 2024-08-04T23:57:39.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in static/js/trape.js in Trape through 2019-05-08 allows remote attackers to inject arbitrary web script or HTML via the country, query, or refer parameter to the /register URI, because the jQuery prepend() method is used. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jofpin/trape/issues/169
CVE ID: CVE-2019-13489 State: PUBLISHED Published: 2019-07-10T21:18:52 Last Updated: 2024-08-04T23:57:39.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trape through 2019-05-08 has SQL injection via the data[2] variable in core/db.py, as demonstrated by the /bs t parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jofpin/trape/issues/168
CVE ID: CVE-2019-13493 State: PUBLISHED Published: 2019-07-17T19:10:51 Last Updated: 2024-08-04T23:57:39.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Sitecore 9.0 rev 171002, Persistent XSS exists in the Media Library and File Manager. An authenticated unprivileged user can modify the uploaded file extension parameter to inject arbitrary JavaScript. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/153613/Sitecore-9.0-Rev-171002-Cross-Site-Scripting.html
CVE ID: CVE-2019-13494 State: PUBLISHED Published: 2019-07-12T03:57:39 Last Updated: 2024-08-04T23:57:38.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: nodeimp.exe in Castle Rock SNMPc before 9.0.12.1 and 10.x before 10.0.9 has a stack-based buffer overflow via a long variable string in a Map Objects text file. Additional Analyst Notes: - CVE Program Container: References: - https://www.mogozobo.com/?p=3534 - http://packetstormsecurity.com/files/153612/SNMPc-Enterprise-Edition-9-10-Mapping-Filename-Buffer-Overflow.html
CVE ID: CVE-2019-13495 State: PUBLISHED Published: 2020-03-31T17:04:56 Last Updated: 2024-08-04T23:57:39.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: In firmware version 4.50 of Zyxel XGS2210-52HP, multiple stored cross-site scripting (XSS) issues allows remote authenticated users to inject arbitrary web script via an rpSys.html Name or Location field. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/leona4040/6541e3b11da6ea7675d0498d0db98832
CVE ID: CVE-2019-13496 State: PUBLISHED Published: 2019-11-04T16:56:36 Last Updated: 2024-08-04T23:57:38.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender product, and replacing a failed SAML response with a successful SAML response. Additional Analyst Notes: - CVE Program Container: References: - https://support.oneidentity.com/cloud-access-manager/kb/311391/cloud-access-manager-8-1-4-hotfix-1 - https://github.com/FurqanKhan1/CVE-2019-13496
CVE ID: CVE-2019-13497 State: PUBLISHED Published: 2019-11-04T17:08:14 Last Updated: 2024-08-04T23:57:39.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests. Additional Analyst Notes: - CVE Program Container: References: - https://support.oneidentity.com/cloud-access-manager/kb/311391/cloud-access-manager-8-1-4-hotfix-1 - https://github.com/FurqanKhan1/CVE-2019-13497
CVE ID: CVE-2019-13498 State: PUBLISHED Published: 2019-07-29T16:01:19 Last Updated: 2024-08-04T23:57:38.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which may allow man-in-the-middle (MITM) attacks. This issue is fixed in version 8.1.4. Additional Analyst Notes: - CVE Program Container: References: - https://support.oneidentity.com/technical-documents/cloud-access-manager/8.1.4/release-notes#TOPIC-1028731 - https://github.com/FurqanKhan1/CVE-2019-13498
CVE ID: CVE-2019-13503 State: PUBLISHED Published: 2019-07-11T01:49:10 Last Updated: 2024-08-04T23:57:39.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: mq_parse_http in mongoose.c in Mongoose 6.15 has a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mongoose/pull/1035 - https://fuzzit.dev/2019/07/11/discovering-cve-2019-13504-cve-2019-13503-and-the-importance-of-api-fuzzing/
CVE ID: CVE-2019-13504 State: PUBLISHED Published: 2019-07-11T00:00:00 Last Updated: 2024-08-04T23:57:38.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp in Exiv2 through 0.27.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/pull/943 - http://www.securityfocus.com/bid/109117 - https://fuzzit.dev/2019/07/11/discovering-cve-2019-13504-cve-2019-13503-and-the-importance-of-api-fuzzing/ - https://lists.debian.org/debian-lts-announce/2019/07/msg00015.html - https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html
CVE ID: CVE-2019-13505 State: PUBLISHED Published: 2019-07-11T12:26:29 Last Updated: 2024-08-04T23:57:39.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Appointment Hour Booking plugin 1.1.44 for WordPress allows XSS via the E-mail field, as demonstrated by email_1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ivoschyk-cs/CVE-s/blob/master/Appointment%20Hour%20Booking%20%E2%80%93%20WordPress%20Booking%20Plugin%20--%20stored%20XSS - https://wordpress.org/plugins/appointment-hour-booking/#developers - https://wpvulndb.com/vulnerabilities/9458
CVE ID: CVE-2019-13506 State: PUBLISHED Published: 2019-07-11T13:07:05 Last Updated: 2024-08-04T23:57:38.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: @nuxt/devalue before 1.2.3, as used in Nuxt.js before 2.6.2, mishandles object keys, leading to XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nuxt/nuxt.js/releases/tag/v2.6.2 - https://github.com/nuxt/devalue/pull/8 - https://github.com/nuxt/nuxt.js/commit/0d5dfe71917191c5b07f373896311f2d8f6b75be - https://github.com/nuxt/devalue/releases/tag/v1.2.3 - https://github.com/nuxt/nuxt.js/compare/c0776eb...8d14cd4 - https://www.npmjs.com/advisories/814
CVE ID: CVE-2019-13507 State: PUBLISHED Published: 2019-07-11T13:26:09 Last Updated: 2024-08-04T23:57:38.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: hidea.com AZ Admin 1.0 has news_det.php?cod= SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47034
CVE ID: CVE-2019-13508 State: PUBLISHED Published: 2019-10-31T20:55:15 Last Updated: 2024-08-04T23:57:39.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeTDS through 1.1.11 has a Buffer Overflow. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/4173-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00067.html
CVE ID: CVE-2019-13509 State: PUBLISHED Published: 2019-07-18T15:34:59 Last Updated: 2024-08-04T23:57:39.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes (non external) secrets. It potentially applies to other API users of the stack API if they resend the secret. Additional Analyst Notes: - CVE Program Container: References: - https://docs.docker.com/engine/release-notes/ - http://www.securityfocus.com/bid
- CVE Program Container: References: - https://docs.docker.com/engine/release-notes/ - http://www.securityfocus.com/bid/109253 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PFFBVE7O73TAVY2BCWXSA2OOSLJVCPXC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N674WD3OBDPHLWY6EABRHQH5ON6SUJBU/ - https://security.netapp.com/advisory/ntap-20190828-0003/ - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.html - https://www.debian.org/security/2019/dsa-4521 - https://seclists.org/bugtraq/2019/Sep/21
CVE ID: CVE-2019-13510 State: PUBLISHED Published: 2019-08-15T18:15:24 Last Updated: 2024-08-04T23:57:39.494Z Vendors: n/a Products: Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier Problem Types: CWE-416 Description: Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciously crafted Arena file opened by an unsuspecting user may result in the application crashing or the execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-213-05 - https://www.zerodayinitiative.com/advisories/ZDI-19-800/ - https://www.zerodayinitiat
ov/ics/advisories/icsa-19-213-05 - https://www.zerodayinitiative.com/advisories/ZDI-19-800/ - https://www.zerodayinitiative.com/advisories/ZDI-19-801/ - https://www.zerodayinitiative.com/advisories/ZDI-19-994/ - https://www.zerodayinitiative.com/advisories/ZDI-19-999/ - https://www.zerodayinitiative.com/advisories/ZDI-19-998/ - https://www.zerodayinitiative.com/advisories/ZDI-19-1000/ - https://www.zerodayinitiative.com/advisories/ZDI-20-927/ - https://www.zerodayinitiative.com/advisories/ZDI-20-931/ - https://www.zerodayinitiative.com/advisories/ZDI-20-926/ - https://www.zerodayinitiative.com/advisories/ZDI-20-929/ - https://www.zerodayinitiative.com/advisories/ZDI-20-928/ - https://www.zer
erodayinitiative.com/advisories/ZDI-20-929/ - https://www.zerodayinitiative.com/advisories/ZDI-20-928/ - https://www.zerodayinitiative.com/advisories/ZDI-20-930/
CVE ID: CVE-2019-13511 State: PUBLISHED Published: 2019-08-15T18:15:13 Last Updated: 2024-08-04T23:57:39.281Z Vendors: n/a Products: Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier Problem Types: CWE-200 Description: Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain an INFORMATION EXPOSURE CWE-200. A maliciously crafted Arena file opened by an unsuspecting user may result in the limited exposure of information related to the targeted workstation. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-213-05 - https://www.zerodayinitiative.com/advisories/ZDI-20-814/ - https:/
tps://www.us-cert.gov/ics/advisories/icsa-19-213-05 - https://www.zerodayinitiative.com/advisories/ZDI-20-814/ - https://www.zerodayinitiative.com/advisories/ZDI-20-810/ - https://www.zerodayinitiative.com/advisories/ZDI-20-811/ - https://www.zerodayinitiative.com/advisories/ZDI-20-813/ - https://www.zerodayinitiative.com/advisories/ZDI-20-812/
CVE ID: CVE-2019-13512 State: PUBLISHED Published: 2019-08-15T18:08:22 Last Updated: 2024-08-04T23:57:39.515Z Vendors: n/a Products: Fuji Electric FRENIC Loader 3.5.0.0 and prior Problem Types: CWE-125 Description: Fuji Electric FRENIC Loader 3.5.0.0 and prior is vulnerable to an out-of-bounds read vulnerability, which may allow an attacker to read limited information from the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-213-02
CVE ID: CVE-2019-13513 State: PUBLISHED Published: 2019-08-15T18:20:18 Last Updated: 2024-08-04T23:57:39.179Z Vendors: n/a Products: Delta Industrial Automation DOPSoft Problem Types: CWE-125 Description: In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger multiple out-of-bounds read vulnerabilities, which may allow information disclosure, remote code execution, or crash of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-225-01 - https://www.zerodayinitiative.com/advisories/ZDI-19-720/ - https://www.zerodayinitiative.com/advisories/ZDI-19-
225-01 - https://www.zerodayinitiative.com/advisories/ZDI-19-720/ - https://www.zerodayinitiative.com/advisories/ZDI-19-722/ - https://www.zerodayinitiative.com/advisories/ZDI-19-719/ - https://www.zerodayinitiative.com/advisories/ZDI-19-718/ - https://www.zerodayinitiative.com/advisories/ZDI-19-721/
CVE ID: CVE-2019-13514 State: PUBLISHED Published: 2019-08-15T18:42:51 Last Updated: 2024-08-04T23:57:39.174Z Vendors: n/a Products: Delta Industrial Automation DOPSoft Problem Types: CWE-416 Description: In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger a use-after-free vulnerability, which may allow information disclosure, remote code execution, or crash of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-225-01 - https://www.zerodayinitiative.com/advisories/ZDI-19-717/
CVE ID: CVE-2019-13515 State: PUBLISHED Published: 2019-08-15T18:39:36 Last Updated: 2024-08-04T23:57:39.455Z Vendors: n/a Products: OSIsoft PI Web API Problem Types: CWE-532 Description: OSIsoft PI Web API 2018 and prior may allow disclosure of sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-225-02
CVE ID: CVE-2019-13516 State: PUBLISHED Published: 2019-08-15T18:49:15 Last Updated: 2024-08-04T23:57:39.193Z Vendors: n/a Products: OSIsoft PI Web API Problem Types: CWE-693 Description: In OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a cross-site request forgery protection setting that has not taken effect. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-225-02
CVE ID: CVE-2019-13517 State: PUBLISHED Published: 2019-09-06T13:50:43 Last Updated: 2024-08-04T23:57:39.505Z Vendors: n/a Products: BD Problem Types: CWE-384 Description: In Pyxis ES Versions 1.3.4 through to 1.6.1 and Pyxis Enterprise Server, with Windows Server Versions 4.4 through 4.12, a vulnerability has been identified where existing access privileges are not restricted in coordination with the expiration of access based on active directory user account changes when the device is joined to an AD domain. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-19-248-01
CVE ID: CVE-2019-13518 State: PUBLISHED Published: 2019-09-04T14:40:56 Last Updated: 2024-08-04T23:57:39.001Z Vendors: n/a Products: EZ Touch Editor Problem Types: CWE-121 Description: An attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of the EZ Touch Editor Versions 2.1.0 and prior. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-246-01
CVE ID: CVE-2019-13519 State: PUBLISHED Published: 2020-01-27T22:56:50 Last Updated: 2024-08-04T23:57:39.301Z Vendors: Rockwell Products: Rockwell Automation Arena Simulation Software Problem Types: CWE-843 Description: A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted workstation. Rockwell Automation has released version 16.00.01 of Arena Simulation Software to address the reported vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-213-05 - https://
l Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-213-05 - https://www.zerodayinitiative.com/advisories/ZDI-19-802/
CVE ID: CVE-2019-13520 State: PUBLISHED Published: 2019-08-20T19:38:39 Last Updated: 2024-08-04T23:57:38.997Z Vendors: n/a Products: Alpha5 Smart Loader Problem Types: CWE-121 Description: Multiple buffer overflow issues have been identified in Alpha5 Smart Loader: All versions prior to 4.2. An attacker could use specially crafted project files to overflow the buffer and execute code under the privileges of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-227-02 - https://www.zerodayinitiative.com/advisories/ZDI-19-798/ - https://www.zerodayinitiative.com/advisories/ZDI-19-820/
CVE ID: CVE-2019-13521 State: PUBLISHED Published: 2020-01-27T22:52:54 Last Updated: 2024-08-04T23:57:39.211Z Vendors: Rockwell Products: Rockwell Automation Arena Simulation Software Problem Types: CWE-357 Description: A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted workstation. Rockwell Automation has released version 16.00.01 of Arena Simulation Software to address the reported vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-213-05 - https://
l Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-213-05 - https://www.zerodayinitiative.com/advisories/ZDI-19-799/
CVE ID: CVE-2019-13522 State: PUBLISHED Published: 2019-09-04T14:29:00 Last Updated: 2024-08-04T23:57:39.167Z Vendors: n/a Products: EZ PLC Editor Problem Types: CWE-119 Description: An attacker could use a specially crafted project file to corrupt the memory and execute code under the privileges of the EZ PLC Editor Versions 1.8.41 and prior. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-246-02
CVE ID: CVE-2019-13523 State: PUBLISHED Published: 2019-09-26T14:22:59 Last Updated: 2024-08-04T23:57:39.391Z Vendors: Honeywell Products: Performance IP Cameras, Performance NVRs Problem Types: CWE-200 Description: In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data in JSON format for IP cameras and NVRs (Network Video Recorders), which can be accessed without authentication over the network. Affected performance IP Cameras: HBD3PR2,H4D3PRV3,HED3PR3,H4D3PRV2,HBD3PR1,H4W8PR2,HBW8PR2,H2W2PC1M,H2W4PER3,H2W2PER3,HEW2PER3,HEW4PER3B,HBW2PER1,HEW4PER2,HEW4PER2B,HEW2PER2,H4W2PER2,HB
2,HBD3PR1,H4W8PR2,HBW8PR2,H2W2PC1M,H2W4PER3,H2W2PER3,HEW2PER3,HEW4PER3B,HBW2PER1,HEW4PER2,HEW4PER2B,HEW2PER2,H4W2PER2,HBW2PER2,H4W2PER3, and HPW2P1. Affected Performance Series NVRs: HEN08104,HEN08144,HEN081124,HEN16104,HEN16144,HEN16184,HEN16204,HEN162244,HEN16284,HEN16304,HEN16384,HEN32104,HEN321124,HEN32204,HEN32284,HEN322164,HEN32304, HEN32384,HEN323164,HEN64204,HEN64304,HEN643164,HEN643324,HEN643484,HEN04103,HEN04113,HEN04123,HEN08103,HEN08113,HEN08123,HEN08143,HEN16103,HEN16123,HEN16143,HEN16163,HEN04103L,HEN08103L,HEN16103L,HEN32103L. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-260-03
CVE ID: CVE-2019-13524 State: PUBLISHED Published: 2020-01-16T17:53:12 Last Updated: 2024-08-04T23:57:39.193Z Vendors: n/a Products: GE PACSystems RX3i Problem Types: CWE-20 Description: GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/320 All versions(End of Life) may allow an attacker sending specially manipulated packets to cause the module state to change to halt-mode, resulting in a denial-of-service condition. An operator must reboot the CPU module after removing battery or energy pack to recover from halt-mode. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/ic
om halt-mode. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-014-01
CVE ID: CVE-2019-13525 State: PUBLISHED Published: 2019-10-25T17:57:13 Last Updated: 2024-08-04T23:57:39.168Z Vendors: n/a Products: Honeywell IP-AK2 Problem Types: CWE-306 Description: In IP-AK2 Access Control Panel Version 1.04.07 and prior, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data, which can be accessed without authentication over the network. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-297-02
CVE ID: CVE-2019-13526 State: PUBLISHED Published: 2019-08-29T22:48:17 Last Updated: 2024-08-04T23:57:39.105Z Vendors: n/a Products: Datalogic AV7000 Linear barcode scanner Problem Types: CWE-288 Description: Datalogic AV7000 Linear barcode scanner all versions prior to 4.6.0.0 is vulnerable to authentication bypass, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-239-02
CVE ID: CVE-2019-13527 State: PUBLISHED Published: 2019-09-24T21:16:22 Last Updated: 2024-08-04T23:57:38.957Z Vendors: n/a Products: Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier Problem Types: CWE-824 Description: In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Arena file opened by an unsuspecting user may result in the use of a pointer that has not been initialized. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-213-05 - https://www.zerodayinitiative.com/advisories/ZDI-19-993/
CVE ID: CVE-2019-13528 State: PUBLISHED Published: 2019-09-24T21:23:48 Last Updated: 2024-08-04T23:57:39.149Z Vendors: n/a Products: Niagara Problem Types: CWE-285 Description: A specific utility may allow an attacker to gain read access to privileged files in the Niagara AX 3.8u4 (JACE 3e, JACE 6e, JACE 7, JACE-8000), Niagara 4.4u3 (JACE 3e, JACE 6e, JACE 7, JACE-8000), and Niagara 4.7u1 (JACE-8000, Edge 10). Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-19-262-01