Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-11443 State: PUBLISHED Published: 2018-05-25T12:00:00 Last Updated: 2024-08-05T08:10:14.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/NinjaXshell/be613dab99601f6abce884f6bc3d83a8 - https://www.exploit-db.com/exploits/44764/
CVE ID: CVE-2018-11444 State: PUBLISHED Published: 2018-05-25T12:00:00 Last Updated: 2024-08-05T08:10:14.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/NinjaXshell/4c0509096cb4ec6543b3f8050369920c - https://www.exploit-db.com/exploits/44765/
CVE ID: CVE-2018-11445 State: PUBLISHED Published: 2018-05-25T12:00:00 Last Updated: 2024-08-05T08:10:14.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF issue was discovered on the User Add/System Settings Page (system-settings-user-new2.php) in EasyService Billing 1.0. A User can be added with the Admin role. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44763/ - https://gist.github.com/NinjaXshell/a5fae5e2d1031ca59160fbe29d94279c
CVE ID: CVE-2018-11446 State: PUBLISHED Published: 2018-06-25T11:00:00 Last Updated: 2024-08-05T08:10:14.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: The buy function of a smart contract implementation for Gold Reward (GRX), an Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the buyer because of overflow of the multiplication of its argument amount and a manipulable variable buyPrice, aka the "tradeTrap" issue. Additional Analyst Notes: - CVE Program Container: References: - https://peckshield.com/2018/06/11/tradeTrap/
CVE ID: CVE-2018-11447 State: PUBLISHED Published: 2018-06-26T18:00:00Z Last Updated: 2024-09-17T02:17:05.410Z Vendors: Siemens AG Products: SCALANCE M875 Problem Types: CWE-121 Description: A vulnerability has been identified in SCALANCE M875 (All versions). The web interface on port 443/tcp could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by an legitimate user, who must be authenticated to the web interface as administrative user. A successful attack could allow an attacker to interact with the web interface as an administrative user. This could allow the attacker to
could allow an attacker to interact with the web interface as an administrative user. This could allow the attacker to read or modify the device configuration, or to exploit other vulnerabilities that require authentication as administrative user. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-977428.pdf
CVE ID: CVE-2018-11448 State: PUBLISHED Published: 2018-06-26T18:00:00Z Last Updated: 2024-09-16T16:28:54.785Z Vendors: Siemens AG Products: SCALANCE M875 Problem Types: CWE-352 Description: A vulnerability has been identified in SCALANCE M875 (All versions). The web interface on port 443/tcp could allow a stored Cross-Site Scripting (XSS) attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires that the attacker has access to the web interface of an affected device. The attacker must be authenticated as administrative user on the web interface. Afterwards, a legitimate user must access the web interface. A successful attack could allow an a
on the web interface. Afterwards, a legitimate user must access the web interface. A successful attack could allow an attacker to execute malicious code in the browser of a legitimate user. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-977428.pdf
CVE ID: CVE-2018-11449 State: PUBLISHED Published: 2018-06-26T18:00:00Z Last Updated: 2024-09-17T03:44:14.245Z Vendors: Siemens AG Products: SCALANCE M875 Problem Types: CWE-79 Description: A vulnerability has been identified in SCALANCE M875 (All versions). An attacker with access to the local file system might obtain passwords for administrative users. Successful exploitation requires read access to files on the local file system. A successful attack could allow an attacker to obtain administrative passwords. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-port
his security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-977428.pdf
CVE ID: CVE-2018-11450 State: PUBLISHED Published: 2018-07-09T20:00:00Z Last Updated: 2024-09-16T21:04:28.705Z Vendors: Siemens AG Products: Siemens PLM Software TEAMCENTER Problem Types: CWE-79 Description: A reflected Cross-Site-Scripting (XSS) vulnerability has been identified in Siemens PLM Software TEAMCENTER (V9.1.2.5). If a user visits the login portal through the URL crafted by the attacker, the attacker can insert html/javascript and thus alter/rewrite the login portal page. Siemens PLM Software TEAMCENTER V9.1.3 and newer are not affected. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LucvanDonk/Siemens-Siemens-PLM-Software-TEAMCENTER-Reflected
: - CVE Program Container: References: - https://github.com/LucvanDonk/Siemens-Siemens-PLM-Software-TEAMCENTER-Reflected-Cross-Site-Scripting-XSS-vulnerability/wiki
CVE ID: CVE-2018-11451 State: PUBLISHED Published: 2018-07-23T21:00:00 Last Updated: 2024-08-05T08:10:14.145Z Vendors: Siemens AG Products: Firmware variant IEC 61850 for EN100 Ethernet module, Firmware variant PROFINET IO for EN100 Ethernet module, Firmware variant Modbus TCP for EN100 Ethernet module, Firmware variant DNP3 TCP for EN100 Ethernet module, Firmware variant IEC104 for EN100 Ethernet module, SIPROTEC 5 relays with CPU variants CP300 and CP100 and the respective Ethernet communication modules, SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules Problem Types: Other Description: A vulnerability has been identified in Firmware variant IEC 61
t communication modules Problem Types: Other Description: A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.33), Firmware variant PROFINET IO for EN100 Ethernet module (All versions), Firmware variant Modbus TCP for EN100 Ethernet module (All versions), Firmware variant DNP3 TCP for EN100 Ethernet module (All versions), Firmware variant IEC104 for EN100 Ethernet module (All versions < V1.22), SIPROTEC 5 relays with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.80), SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules (All versions < V7.58). S
), SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules (All versions < V7.58). Specially crafted packets to port 102/tcp could cause a denial-of-service condition in the affected products. A manual restart is required to recover the EN100 module functionality of the affected devices. Successful exploitation requires an attacker with network access to send multiple packets to the affected products or modules. As a precondition the IEC 61850-MMS communication needs to be activated on the affected products or modules. No user interaction or privileges are required to exploit the vulnerability. The vulnerability could allow causing a Denial-of-Service cond
or privileges are required to exploit the vulnerability. The vulnerability could allow causing a Denial-of-Service condition of the network functionality of the device, compromising the availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-635129.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-325546.pdf - https://www.securityfocus.com/bid/106221
CVE ID: CVE-2018-11452 State: PUBLISHED Published: 2018-07-23T21:00:00 Last Updated: 2024-08-05T08:10:14.304Z Vendors: Siemens AG Products: Firmware variant IEC 61850 for EN100 Ethernet module, Firmware variant PROFINET IO for EN100 Ethernet module, Firmware variant Modbus TCP for EN100 Ethernet module, Firmware variant DNP3 TCP for EN100 Ethernet module, Firmware variant IEC104 for EN100 Ethernet module Problem Types: Other Description: A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.33), Firmware variant PROFINET IO for EN100 Ethernet module (All versions), Firmware variant Modbus TCP for EN100 Ethernet module (All versions), F
NET IO for EN100 Ethernet module (All versions), Firmware variant Modbus TCP for EN100 Ethernet module (All versions), Firmware variant DNP3 TCP for EN100 Ethernet module (All versions), Firmware variant IEC104 for EN100 Ethernet module (All versions < V1.22). Specially crafted packets to port 102/tcp could cause a denial-of-service condition in the EN100 communication module if oscillographs are running. A manual restart is required to recover the EN100 module functionality. Successful exploitation requires an attacker with network access to send multiple packets to the EN100 module. As a precondition the IEC 61850-MMS communication needs to be activated on the affected EN100 modules. No us
100 module. As a precondition the IEC 61850-MMS communication needs to be activated on the affected EN100 modules. No user interaction or privileges are required to exploit the security vulnerability. The vulnerability could allow causing a Denial-of-Service condition of the network functionality of the device, compromising the availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-635129.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-325546.pdf - https://www.securityfocus.com/bid/106221
CVE ID: CVE-2018-11453 State: PUBLISHED Published: 2018-08-07T15:00:00Z Last Updated: 2024-09-16T17:42:55.535Z Vendors: Siemens AG Products: SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V15 Problem Types: CWE-276 Description: A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13 (All versions < V13 SP2 Update 2), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14 (All versions < V14 SP1 U
V13 (All versions < V13 SP2 Update 2), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14 (All versions < V14 SP1 Update 6), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V15 (All versions < V15 Update 2). Improper file permissions in the default installation of TIA Portal may allow an attacker with local file system access to insert specially crafted files which may prevent TIA Portal startup (Denial-of-Service) or lead to local code execution. No special privileges are required, but the victim needs to attempt to start TIA Portal after the manipulation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105115 - https://cert-portal.s
al Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105115 - https://cert-portal.siemens.com/productcert/pdf/ssa-979106.pdf
CVE ID: CVE-2018-11454 State: PUBLISHED Published: 2018-08-07T15:00:00Z Last Updated: 2024-09-16T18:03:30.602Z Vendors: Siemens AG Products: SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V15 Problem Types: CWE-276 Description: A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13 (All versions < V13 SP2 Update 2), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14 (All versions < V14 SP1 U
V13 (All versions < V13 SP2 Update 2), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14 (All versions < V14 SP1 Update 6), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V15 (All versions < V15 Update 2). Improper file permissions in the default installation of TIA Portal may allow an attacker with local file system access to manipulate resources which may be transferred to devices and executed there by a different user. No special privileges are required, but the victim needs to transfer the manipulated files to a device. Execution is caused on the target device rather than on the PG device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus
rather than on the PG device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105115 - https://cert-portal.siemens.com/productcert/pdf/ssa-979106.pdf
CVE ID: CVE-2018-11455 State: PUBLISHED Published: 2018-08-07T15:00:00 Last Updated: 2024-08-05T08:10:14.446Z Vendors: Siemens AG Products: Automation License Manager 5, Automation License Manager 6 Problem Types: CWE-22 Description: A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4), Automation License Manager 6 (All versions < 6.0.1). A directory traversal vulnerability could allow a remote attacker to move arbitrary files, which can result in code execution, compromising confidentiality, integrity and availability of the system. Successful exploitation requires a network connection to the affected device. The attacker does not need privileges or s
Successful exploitation requires a network connection to the affected device. The attacker does not need privileges or special conditions of the system, but user interaction is required. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105114 - https://cert-portal.siemens.com/productcert/pdf/ssa-920962.pdf
CVE ID: CVE-2018-11456 State: PUBLISHED Published: 2018-08-07T15:00:00 Last Updated: 2024-08-05T08:10:14.363Z Vendors: Siemens AG Products: Automation License Manager 5 Problem Types: CWE-284 Description: A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4). An attacker with network access to the device could send specially crafted network packets to determine whether or not a network port on another remote system is accessible or not. This allows the attacker to do basic network scanning using the victims machine. Successful exploitation requires a network connection to the affected device. The attacker does not need privileges, no user interaction is
tion requires a network connection to the affected device. The attacker does not need privileges, no user interaction is required. The impact is limited to determining whether or not a port on a target system is accessible by the affected device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105114 - https://cert-portal.siemens.com/productcert/pdf/ssa-920962.pdf
CVE ID: CVE-2018-11457 State: PUBLISHED Published: 2018-12-12T16:00:00 Last Updated: 2024-08-05T08:10:14.429Z Vendors: Siemens AG Products: SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 Problem Types: CWE-122 Description: A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions < V4.8 SP3). The integrated web server on port 4842/tcp of the affected products could allow a remote attacker to execute code with privileged permissions on the system by sending specially crafted network requests to port 4842/tcp. Please note that this vulnerability is onl
on the system by sending specially crafted network requests to port 4842/tcp. Please note that this vulnerability is only exploitable if port 4842/tcp is manually opened in the firewall configuration of network port X130. The security vulnerability could be exploited by an attacker with network access to the affected devices on port 4842/tcp. Successful exploitation requires no privileges and no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the web server. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References:
c exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106185 - https://cert-portal.siemens.com/productcert/pdf/ssa-170881.pdf
CVE ID: CVE-2018-11458 State: PUBLISHED Published: 2018-12-12T16:00:00 Last Updated: 2024-08-05T08:10:14.359Z Vendors: Siemens AG Products: SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 Problem Types: CWE-190 Description: A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions < V4.8 SP3). The integrated VNC server on port 5900/tcp of the affected products could allow a remote attacker to execute code with privileged permissions on the system by sending specially crafted network requests to port 5900/tcp. Please note that this vulnerability is onl
on the system by sending specially crafted network requests to port 5900/tcp. Please note that this vulnerability is only exploitable if port 5900/tcp is manually opened in the firewall configuration of network port X130. The security vulnerability could be exploited by an attacker with network access to the affected devices and port. Successful exploitation requires no privileges and no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the VNC server. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - http:/
tation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106185 - https://cert-portal.siemens.com/productcert/pdf/ssa-170881.pdf
CVE ID: CVE-2018-11459 State: PUBLISHED Published: 2018-12-12T16:00:00 Last Updated: 2024-08-05T08:10:14.329Z Vendors: Siemens AG Products: SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 Problem Types: CWE-693 Description: A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions < V4.8 SP3). A local attacker could modify a user-writeable configuration file so that after reboot or manual initiation the system reloads the modified configur
y a user-writeable configuration file so that after reboot or manual initiation the system reloads the modified configuration file and attacker-controlled code is executed with elevated privileges. The security vulnerability could be exploited by an attacker with local access to the affected system. Successful exploitation requires user privileges but no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106185 - ht
was known. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106185 - https://cert-portal.siemens.com/productcert/pdf/ssa-170881.pdf
CVE ID: CVE-2018-11460 State: PUBLISHED Published: 2018-12-12T16:00:00 Last Updated: 2024-08-05T08:10:14.579Z Vendors: Siemens AG Products: SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 Problem Types: CWE-693 Description: A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions < V4.8 SP3). A local attacker with elevated user privileges (manufact) could modify a CRAMFS archive so that after reboot the system loads the modified CRAMFS fi
ed user privileges (manufact) could modify a CRAMFS archive so that after reboot the system loads the modified CRAMFS file and attacker-controlled code is executed with root privileges. The security vulnerability could be exploited by an attacker with local access to the affected systems. Successful exploitation requires elevated user privileges (manufact) but no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10
rability was known. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106185 - https://cert-portal.siemens.com/productcert/pdf/ssa-170881.pdf
CVE ID: CVE-2018-11461 State: PUBLISHED Published: 2018-12-12T16:00:00 Last Updated: 2024-08-05T08:10:14.628Z Vendors: Siemens AG Products: SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 Problem Types: CWE-264 Description: A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions < V4.8 SP3). A local attacker with user privileges could use the service command application for privilege escalation to an elevated user but not root. The secur
rivileges could use the service command application for privilege escalation to an elevated user but not root. The security vulnerability could be exploited by an attacker with local access to the affected systems. Successful exploitation requires user privileges but no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106185 - https://cert-portal.siemens.com/productcert/pdf/ssa-170881.pdf