Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-9060 State: PUBLISHED Published: 2021-09-17T15:47:53 Last Updated: 2024-08-04T21:38:46.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CMS Made Simple 2.2.8. It is possible to achieve unauthenticated path traversal in the CGExtensions module (in the file action.setdefaulttemplate.php) with the m1_filename parameter; and through the action.showmessage.php file, it is possible to read arbitrary file content (by using that path traversal with m1_prefname set to cg_errormsg and m1_resettodefault=1). Additional Analyst Notes: - CVE Program Container: References: - https://www.cmsmadesimple.org/2019/03/Announcing-CMS-Made-Simple-v2.2.10-S
Notes: - CVE Program Container: References: - https://www.cmsmadesimple.org/2019/03/Announcing-CMS-Made-Simple-v2.2.10-Spuzzum - http://dev.cmsmadesimple.org/project/changelog/5819 - https://newsletter.cmsmadesimple.org/w/89247Qog4jCRCuRinvhsofwg - https://forum.cmsmadesimple.org/viewtopic.php?f=1&t=80285
CVE ID: CVE-2019-9061 State: PUBLISHED Published: 2019-03-26T16:49:42 Last Updated: 2024-08-04T21:38:46.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CMS Made Simple 2.2.8. In the module ModuleManager (in the file action.installmodule.php), it is possible to reach an unserialize call with untrusted input and achieve authenticated object injection by using the "install module" feature. Additional Analyst Notes: - CVE Program Container: References: - https://www.cmsmadesimple.org/2019/03/Announcing-CMS-Made-Simple-v2.2.10-Spuzzum - https://newsletter.cmsmadesimple.org/w/89247Qog4jCRCuRinvhsofwg
CVE ID: CVE-2019-9062 State: PUBLISHED Published: 2019-02-23T21:00:00 Last Updated: 2024-08-04T21:38:45.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery (CSRF) in my-account.php. Additional Analyst Notes: - CVE Program Container: References: - https://hackingvila.wordpress.com/2019/02/19/php-scripts-mall-online-food-ordering-script-has-cross-site-request-forgery-csrf-php-script-mall/
CVE ID: CVE-2019-9063 State: PUBLISHED Published: 2019-02-23T21:00:00 Last Updated: 2024-08-04T21:38:46.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Auction website script 2.0.4 allows parameter tampering of the payment amount. Additional Analyst Notes: - CVE Program Container: References: - https://hackingvila.wordpress.com/2019/02/21/php-scripts-mall-auction-website-script-has-parameter-tampering/
CVE ID: CVE-2019-9064 State: PUBLISHED Published: 2019-02-23T21:00:00 Last Updated: 2024-08-04T21:38:46.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file. Additional Analyst Notes: - CVE Program Container: References: - https://hackingvila.wordpress.com/2019/02/18/directory-traveler-or-path-traveler-vulnerability-in-cab-booking-script-php-script-mall/
CVE ID: CVE-2019-9065 State: PUBLISHED Published: 2019-02-23T21:00:00 Last Updated: 2024-08-04T21:38:45.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount. Additional Analyst Notes: - CVE Program Container: References: - https://hackingvila.wordpress.com/2019/02/21/php-scripts-mall-custom-t-shirt-ecommerce-script-has-parameter-tampering/
CVE ID: CVE-2019-9066 State: PUBLISHED Published: 2019-02-23T21:00:00 Last Updated: 2024-08-04T21:38:45.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall PHP Appointment Booking Script 3.0.3 allows HTML injection in a user profile. Additional Analyst Notes: - CVE Program Container: References: - https://hackingvila.wordpress.com/2019/02/22/php-scripts-mall-php-appointment-booking-script-has-html-injection-via-an-edit-my-profile/
CVE ID: CVE-2019-9070 State: PUBLISHED Published: 2019-02-24T00:00:00 Last Updated: 2024-08-04T21:38:45.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in d_expression_1 in cp-demangle.c after many recursive calls. Additional Analyst Notes: - CVE Program Container: References: - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=89395 - https://sourceware.org/bugzilla/show_bug.cgi?id=24229 - https://security.netapp.com/advisory/ntap-20190314-0003/ - http://www.securityfocus.com/bid/107147 - https://support.f5.com/csp/article/K13534168 - https://usn.ubuntu.com/4326-1/ -
ttp://www.securityfocus.com/bid/107147 - https://support.f5.com/csp/article/K13534168 - https://usn.ubuntu.com/4326-1/ - https://usn.ubuntu.com/4336-1/ - https://security.gentoo.org/glsa/202107-24
CVE ID: CVE-2019-9071 State: PUBLISHED Published: 2019-02-24T00:00:00 Last Updated: 2024-08-04T21:38:46.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a stack consumption issue in d_count_templates_scopes in cp-demangle.c after many recursive calls. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=24227 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=89394 - https://security.netapp.com/advisory/ntap-20190314-0003/ - http://www.securityfocus.com/bid/107147 - https://support.f5.com/csp/article/K02884135 - https://usn.ubuntu.com/432
3/ - http://www.securityfocus.com/bid/107147 - https://support.f5.com/csp/article/K02884135 - https://usn.ubuntu.com/4326-1/ - https://usn.ubuntu.com/4336-1/ - https://security.gentoo.org/glsa/202107-24
CVE ID: CVE-2019-9072 State: PUBLISHED Published: 2019-02-24T00:00:00 Last Updated: 2024-08-04T21:38:46.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in setup_group in elf.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=24237 - https://sourceware.org/bugzilla/show_bug.cgi?id=24232 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=89396 - https://security.netapp.com/advisory/ntap-20190314-0003/ - https://support.f5.com/csp/article/K12541829 - https
=89396 - https://security.netapp.com/advisory/ntap-20190314-0003/ - https://support.f5.com/csp/article/K12541829 - https://security.gentoo.org/glsa/202107-24
CVE ID: CVE-2019-9073 State: PUBLISHED Published: 2019-02-24T00:00:00 Last Updated: 2024-08-04T21:38:46.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in _bfd_elf_slurp_version_tables in elf.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=24233 - https://security.netapp.com/advisory/ntap-20190314-0003/ - https://support.f5.com/csp/article/K37121474 - https://usn.ubuntu.com/4336-1/ - https://security.gentoo.org/glsa/202107-24
CVE ID: CVE-2019-9074 State: PUBLISHED Published: 2019-02-24T00:00:00 Last Updated: 2024-08-04T21:38:46.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfd_getl32 in libbfd.c, when called from pex64_get_runtime_function in pei-x86_64.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=24235 - https://security.netapp.com/advisory/ntap-20190314-0003/ - https://support.f5.com/csp/article/K09092524 - https://usn.ubuntu.com/4336-1/ - http://lists.opensu
tap-20190314-0003/ - https://support.f5.com/csp/article/K09092524 - https://usn.ubuntu.com/4336-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html - https://security.gentoo.org/glsa/202107-24
CVE ID: CVE-2019-9075 State: PUBLISHED Published: 2019-02-24T00:00:00 Last Updated: 2024-08-04T21:38:46.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap in archive64.c. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190314-0003/ - https://sourceware.org/bugzilla/show_bug.cgi?id=24236 - https://support.f5.com/csp/article/K42059040 - https://usn.ubuntu.com/4336-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg000
article/K42059040 - https://usn.ubuntu.com/4336-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html - https://security.gentoo.org/glsa/202107-24
CVE ID: CVE-2019-9076 State: PUBLISHED Published: 2019-02-24T00:00:00 Last Updated: 2024-08-04T21:38:46.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in elf_read_notes in elf.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=24238 - https://security.netapp.com/advisory/ntap-20190314-0003/ - https://support.f5.com/csp/article/K44650639 - https://security.gentoo.org/glsa/202107-24
CVE ID: CVE-2019-9077 State: PUBLISHED Published: 2019-02-24T00:00:00 Last Updated: 2024-08-04T21:38:46.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS option section. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=24243 - http://www.securityfocus.com/bid/107139 - https://security.netapp.com/advisory/ntap-20190314-0003/ - https://support.f5.com/csp/article/K00056379 - https://usn.ubuntu.com/4336-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html
/K00056379 - https://usn.ubuntu.com/4336-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html - https://security.gentoo.org/glsa/202107-24
CVE ID: CVE-2019-9078 State: PUBLISHED Published: 2019-02-24T17:00:00 Last Updated: 2024-08-04T21:38:46.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as sCrIpT. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NS-Sp4ce/ZZCMS-XSS/blob/master/xss.md
CVE ID: CVE-2019-9080 State: PUBLISHED Published: 2020-10-20T19:06:39 Last Updated: 2024-08-04T21:38:46.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: DomainMOD before 4.14.0 uses MD5 without a salt for password storage. Additional Analyst Notes: - CVE Program Container: References: - https://domainmod.org/changelog/
CVE ID: CVE-2019-9081 State: REJECTED Published: 2019-02-24T17:00:00 Last Updated: 2022-08-19T23:15:37 Description: No description available.
CVE ID: CVE-2019-9082 State: PUBLISHED Published: 2019-02-24T18:00:00.000Z Last Updated: 2025-10-21T23:45:43.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xiayulei/open_source_bms/issues/33 - https://www.exploit-db.com/exploits/46488/ - http://packetstormsecurity.com/files/157218/ThinkPHP-5.0.23-Remote-Code-Execution.html
CVE ID: CVE-2019-9083 State: PUBLISHED Published: 2019-03-17T17:06:53 Last Updated: 2024-08-04T21:38:46.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanager/main.php dbsel parameter. NOTE: This product is discontinued. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/Feb/51
CVE ID: CVE-2019-9084 State: PUBLISHED Published: 2019-06-07T20:31:36 Last Updated: 2024-08-04T21:38:46.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Hoteldruid before 2.3.1, a division by zero was discovered in $num_tabelle in tab_tariffe.php (aka the numtariffa1 parameter) due to the mishandling of non-numeric values, as demonstrated by the /tab_tariffe.php?anno=[YEAR]&numtariffa1=1a URI. It could allow an administrator to conduct remote denial of service (disrupting certain business functions of the product). Additional Analyst Notes: - CVE Program Container: References: - http://www.hoteldruid.com/en/download.html - https://metamorfosec.com/Files/Advisories/METS-2019
ontainer: References: - http://www.hoteldruid.com/en/download.html - https://metamorfosec.com/Files/Advisories/METS-2019-005-A_division_by_zero_in_Hoteldruid_before_v2.3.1.txt
CVE ID: CVE-2019-9085 State: PUBLISHED Published: 2019-06-24T17:33:43 Last Updated: 2024-08-04T21:38:46.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hoteldruid before v2.3.1 allows remote authenticated users to cause a denial of service (invoice-creation outage) via the n_file parameter to visualizza_contratto.php with invalid arguments (any non-numeric value), as demonstrated by the anno=2019&id_transazione=1&numero_contratto=1&n_file=a query string to visualizza_contratto.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.hoteldruid.com/en/download.html - https://metamorfosec.com/Files/Advisories/METS-2019-006-An_Invalid_Arguments_in_Hoteldr
oteldruid.com/en/download.html - https://metamorfosec.com/Files/Advisories/METS-2019-006-An_Invalid_Arguments_in_Hoteldruid_before_v2.3.1.txt
CVE ID: CVE-2019-9086 State: PUBLISHED Published: 2019-06-07T20:41:49 Last Updated: 2024-08-04T21:38:46.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: HotelDruid before v2.3.1 has SQL Injection via the /visualizza_tabelle.php anno parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.hoteldruid.com/en/download.html - https://metamorfosec.com/Files/Advisories/METS-2019-007-A_SQL_Injection_in_HotelDruid_before_v2.3.1.txt
CVE ID: CVE-2019-9087 State: PUBLISHED Published: 2019-06-07T20:39:18 Last Updated: 2024-08-04T21:38:46.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: HotelDruid before v2.3.1 has SQL Injection via the /tab_tariffe.php numtariffa1 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.hoteldruid.com/en/download.html - https://metamorfosec.com/Files/Advisories/METS-2019-008-A_SQL_Injection_in_HotelDruid_before_v2.3.1.txt
CVE ID: CVE-2019-9093 State: PUBLISHED Published: 2019-03-18T22:05:36 Last Updated: 2024-08-04T21:38:46.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in file/file/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing a JavaScript payload in the filename parameter is echoed back, which resulted in reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/humhub/humhub/blob/master/protected/humhub/docs/CHANGELOG.md
CVE ID: CVE-2019-9094 State: PUBLISHED Published: 2019-03-18T22:06:48 Last Updated: 2024-08-04T21:38:46.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in /s/adada/cfiles/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing JavaScript in the filename is echoed back in JavaScript code, which resulted in XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/humhub/humhub/blob/master/protected/humhub/docs/CHANGELOG.md
CVE ID: CVE-2019-9095 State: PUBLISHED Published: 2020-03-11T14:27:58 Last Updated: 2024-08-04T21:38:46.245Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker may be able to intercept weakly encrypted passwords and gain administrative access. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-01 - https://www.moxa.com/en/support/support/security-advisory/mb3710-3180-
//www.us-cert.gov/ics/advisories/icsa-20-056-01 - https://www.moxa.com/en/support/support/security-advisory/mb3710-3180-3270-3280-3480-3660-vulnerabilities
CVE ID: CVE-2019-9096 State: PUBLISHED Published: 2020-03-11T14:27:58 Last Updated: 2024-08-04T21:38:46.372Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. Insufficient password requirements for the MGate web application may allow an attacker to gain access by brute-forcing account passwords. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-01 - https://www.moxa.com/en/su
CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-01 - https://www.moxa.com/en/support/support/security-advisory/mb3710-3180-3270-3280-3480-3660-vulnerabilities
CVE ID: CVE-2019-9097 State: PUBLISHED Published: 2020-03-11T14:27:58 Last Updated: 2024-08-04T21:38:46.553Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A high rate of transit traffic may cause a low-memory condition and a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-01 - https://www.moxa.com/en/support/support/security-advisory/mb3710-3180-3270-3280
cert.gov/ics/advisories/icsa-20-056-01 - https://www.moxa.com/en/support/support/security-advisory/mb3710-3180-3270-3280-3480-3660-vulnerabilities
CVE ID: CVE-2019-9098 State: PUBLISHED Published: 2020-03-11T14:27:58 Last Updated: 2024-08-04T21:38:46.470Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An Integer overflow in the built-in web server allows remote attackers to initiate DoS. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-01 - https://www.moxa.com/en/support/support/security-advisory/mb3710-3180-3270-3280-
ert.gov/ics/advisories/icsa-20-056-01 - https://www.moxa.com/en/support/support/security-advisory/mb3710-3180-3270-3280-3480-3660-vulnerabilities
CVE ID: CVE-2019-9099 State: PUBLISHED Published: 2020-03-11T14:27:58 Last Updated: 2024-08-04T21:38:46.380Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A Buffer overflow in the built-in web server allows remote attackers to initiate DoS, and probably to execute arbitrary code (issue 1 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-01 - https://www.moxa.com/en/sup
CVE ID: CVE-2019-9101 State: PUBLISHED Published: 2020-03-11T14:27:58 Last Updated: 2024-08-04T21:38:46.542Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. Sensitive information is sent to the web server in cleartext, which may allow an attacker to discover the credentials if they are able to observe traffic between the web browser and the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/ad
browser and the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-01 - https://www.moxa.com/en/support/support/security-advisory/mb3710-3180-3270-3280-3480-3660-vulnerabilities
CVE ID: CVE-2019-9102 State: PUBLISHED Published: 2020-03-11T14:27:58 Last Updated: 2024-08-04T21:38:46.451Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AC:L/AV:N/A:L/C:N/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A predictable mechanism of generating tokens allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-01 - https://www.moxa.com/en/sup
CVE ID: CVE-2019-9103 State: PUBLISHED Published: 2020-03-11T14:27:58 Last Updated: 2024-08-04T21:38:46.524Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker can access sensitive information (e.g., conduct username disclosure attacks) on the built-in WEB-service without authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-01 - https://www.moxa.com/en/su
CVE ID: CVE-2019-9104 State: PUBLISHED Published: 2020-03-11T14:27:58 Last Updated: 2024-08-04T21:38:46.393Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. The application's configuration file contains parameters that represent passwords in cleartext. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-056-01 - https://www.moxa.com/en/support/support/security-advisory/mb3710-318
s://www.us-cert.gov/ics/advisories/icsa-20-056-01 - https://www.moxa.com/en/support/support/security-advisory/mb3710-3180-3270-3280-3480-3660-vulnerabilities