Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-19255 State: PUBLISHED Published: 2020-01-03T16:18:51 Last Updated: 2024-08-05T02:09:39.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab Enterprise Edition (EE) 12.3 and later through 12.5 has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-1-released/
CVE ID: CVE-2019-19256 State: PUBLISHED Published: 2020-01-03T16:22:07 Last Updated: 2024-08-05T02:09:39.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab Enterprise Edition (EE) 12.2 and later through 12.5 has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-1-released/
CVE ID: CVE-2019-19257 State: PUBLISHED Published: 2020-01-03T16:26:28 Last Updated: 2024-08-05T02:09:39.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access Control (issue 1 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-1-released/
CVE ID: CVE-2019-19258 State: PUBLISHED Published: 2020-01-03T16:28:24 Last Updated: 2024-08-05T02:09:39.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab Enterprise Edition (EE) 10.8 and later through 12.5 has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-1-released/
CVE ID: CVE-2019-19259 State: PUBLISHED Published: 2020-01-03T16:30:51 Last Updated: 2024-08-05T02:09:39.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab Enterprise Edition (EE) 11.3 and later through 12.5 allows an Insecure Direct Object Reference (IDOR). Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-1-released/
CVE ID: CVE-2019-19260 State: PUBLISHED Published: 2020-01-03T16:32:54 Last Updated: 2024-08-05T02:09:39.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access Control (issue 2 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-1-released/
CVE ID: CVE-2019-19261 State: PUBLISHED Published: 2020-01-03T16:34:10 Last Updated: 2024-08-05T02:09:39.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab Enterprise Edition (EE) 6.7 and later through 12.5 allows SSRF. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-1-released/
CVE ID: CVE-2019-19262 State: PUBLISHED Published: 2020-01-03T16:36:00 Last Updated: 2024-08-05T02:09:39.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab Enterprise Edition (EE) 11.9 and later through 12.5 has Insecure Permissions. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-1-released/ - https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-2-released/
CVE ID: CVE-2019-19263 State: PUBLISHED Published: 2020-01-03T16:37:13 Last Updated: 2024-08-05T02:09:39.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab Enterprise Edition (EE) 8.2 and later through 12.5 has Insecure Permissions. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-1-released/
CVE ID: CVE-2019-19264 State: PUBLISHED Published: 2019-12-17T13:59:35 Last Updated: 2024-08-05T02:09:39.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Simplifile RecordFusion through 2019-11-25, the logs and hist parameters allow remote attackers to access local files via a logger/logs?/../ or logger/hist?/../ URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.securenetworkinc.com/news/2019/11/26/recordfusion-local-file-inclusion-vulnerability-cve-2019-19264
CVE ID: CVE-2019-19265 State: PUBLISHED Published: 2020-01-06T00:09:20 Last Updated: 2024-08-05T02:09:39.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 (and probably earlier versions) allows XSS (issue 1 of 2) in notes for contacts. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2020/Jan/0 - https://www.redteam-pentesting.de/en/advisories/rt-sa-2019-015/-icewarp-cross-site-scripting-in-notes-for-contacts
CVE ID: CVE-2019-19266 State: PUBLISHED Published: 2020-01-06T00:00:39 Last Updated: 2024-08-05T02:09:39.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 (and probably earlier versions) allows XSS (issue 2 of 2) in notes for objects. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2020/Jan/1 - https://www.redteam-pentesting.de/en/advisories/rt-sa-2019-016/-icewarp-cross-site-scripting-in-notes
CVE ID: CVE-2019-19269 State: PUBLISHED Published: 2019-11-26T03:34:24 Last Updated: 2024-08-05T02:09:39.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. A dereference of a NULL pointer may occur. This pointer is returned by the OpenSSL sk_X509_REVOKED_value() function when encountering an empty CRL installed by a system administrator. The dereference occurs when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/proftpd/proftpd/issues/861 - https://lists.debian.
lyst Notes: - CVE Program Container: References: - https://github.com/proftpd/proftpd/issues/861 - https://lists.debian.org/debian-lts-announce/2019/11/msg00039.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGBBCPLJSDPFG5EI5P5G7P4KEX7YSD5G/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QR65XUHPCRU3NXTSFVF2J4GWRIHC7AHW/ - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00009.html - https://security.gentoo.org/glsa/202003-35 - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2019-19270 State: PUBLISHED Published: 2019-11-26T03:34:09 Last Updated: 2024-08-05T02:09:39.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. Failure to check for the appropriate field of a CRL entry (checking twice for subject, rather than once for subject and once for issuer) prevents some valid CRLs from being taken into account, and can allow clients whose certificates have been revoked to proceed with a connection to the server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/proftpd/proftpd/issues/859 - https://lists.fedoraproject.org/archives/list/package
ner: References: - https://github.com/proftpd/proftpd/issues/859 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGBBCPLJSDPFG5EI5P5G7P4KEX7YSD5G/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QR65XUHPCRU3NXTSFVF2J4GWRIHC7AHW/ - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00009.html
CVE ID: CVE-2019-19271 State: PUBLISHED Published: 2019-11-26T03:33:56 Last Updated: 2024-08-05T02:09:39.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. A wrong iteration variable, used when checking a client certificate against CRL entries (installed by a system administrator), can cause some CRL entries to be ignored, and can allow clients whose certificates have been revoked to proceed with a connection to the server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/proftpd/proftpd/issues/860
CVE ID: CVE-2019-19272 State: PUBLISHED Published: 2019-11-26T03:33:41 Last Updated: 2024-08-05T02:09:39.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL pointer (a variable initialized to NULL) leads to a crash when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/proftpd/proftpd/issues/858
CVE ID: CVE-2019-19273 State: PUBLISHED Published: 2020-02-04T15:46:12 Last Updated: 2024-08-05T02:09:39.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Samsung mobile devices with O(8.0) and P(9.0) software and an Exynos 8895 chipset, RKP (aka the Samsung Hypervisor EL2 implementation) allows arbitrary memory write operations. The Samsung ID is SVE-2019-16265. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://census-labs.com/news/2020/10/08/samsung-hypervisor-rkp-arbitrary-zero-write/
CVE ID: CVE-2019-19274 State: PUBLISHED Published: 2019-11-26T14:08:25 Last Updated: 2024-08-05T02:09:39.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: typed_ast 1.3.0 and 1.3.1 has a handle_keywordonly_args out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source (but not necessarily execute it) may be able to crash the interpreter process. This could be a concern, for example, in a web-based service that parses (but does not execute) Python code. (This issue also affected certain Python 3.8.0-alpha prereleases.) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/python/typed_ast/commit/156afcb26c
) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/python/typed_ast/commit/156afcb26c198e162504a57caddfe0acd9ed7dce - https://github.com/python/cpython/commit/dcfcd146f8e6fc5c2fc16a4c192a0c5f5ca8c53c - https://github.com/python/cpython/commit/a4d78362397fc3bced6ea80fbc7b5f4827aec55e - https://github.com/python/typed_ast/commit/dc317ac9cff859aa84eeabe03fb5004982545b3b - https://bugs.python.org/issue36495 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LG5H4Q6LFVRX7SFXLBEJMNQFI4T5SCEA/
CVE ID: CVE-2019-19275 State: PUBLISHED Published: 2019-11-26T14:08:17 Last Updated: 2024-08-05T02:09:39.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: typed_ast 1.3.0 and 1.3.1 has an ast_for_arguments out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source (but not necessarily execute it) may be able to crash the interpreter process. This could be a concern, for example, in a web-based service that parses (but does not execute) Python code. (This issue also affected certain Python 3.8.0-alpha prereleases.) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/python/typed_ast/commit/156afcb26c198e1
itional Analyst Notes: - CVE Program Container: References: - https://github.com/python/typed_ast/commit/156afcb26c198e162504a57caddfe0acd9ed7dce - https://github.com/python/cpython/commit/dcfcd146f8e6fc5c2fc16a4c192a0c5f5ca8c53c - https://github.com/python/cpython/commit/a4d78362397fc3bced6ea80fbc7b5f4827aec55e - https://github.com/python/typed_ast/commit/dc317ac9cff859aa84eeabe03fb5004982545b3b - https://bugs.python.org/issue36495 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LG5H4Q6LFVRX7SFXLBEJMNQFI4T5SCEA/
CVE ID: CVE-2019-19276 State: PUBLISHED Published: 2021-05-12T13:18:21 Last Updated: 2024-08-05T02:09:39.475Z Vendors: Siemens Products: SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants), SIMATIC HMI KTP Mobile Panels Problem Types: CWE-787 Description: A vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels (All versions < V16 Update 4). Specially crafted packets sent to port 161/udp can cause the SNMP service of affected devices to crash. A manual restart of the device is required to resume operation of the service. Additional Analyst Notes: - CVE Program Container:
restart of the device is required to resume operation of the service. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-594364.pdf
CVE ID: CVE-2019-19277 State: PUBLISHED Published: 2020-03-10T19:16:17 Last Updated: 2024-08-05T02:09:39.511Z Vendors: Siemens AG Products: SIPORT MP Problem Types: CWE-778 Description: A vulnerability has been identified in SIPORT MP (All versions < 3.1.4). Vulnerable versions of the device allow the creation of special accounts ("service users") with administrative privileges that could enable a remote authenticated attacker to perform actions that are not visible to other users of the system, such as granting persons access to a secured area. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-978558.pdf - https://www.us-cer
CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-978558.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-042-08
CVE ID: CVE-2019-19278 State: PUBLISHED Published: 2020-01-16T15:35:24 Last Updated: 2024-08-05T02:09:39.676Z Vendors: Siemens AG Products: SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-.... MLFB 6SR4...-.....-.... MLFB 6SR5...-.....-.... With option A30 (HMIs 12 inches or larger), SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR325.-.....-.... (High Availability) Problem Types: CWE-693 Description: A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-.... MLFB 6SR4...-.....-.... MLFB 6SR5...-.....-.... With option A30 (HMIs 12 inches or larger) (All versions), SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR325.-.....-.... (High Availability
Is 12 inches or larger) (All versions), SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR325.-.....-.... (High Availability) (All versions). The affected device contains a vulnerability that could allow an unauthenticated attacker to restore the affected device to a point where predefined application and operating system protection mechanisms are not in place. Successful exploitation requires physical access to the system, but no system privileges and no user interaction. An attacker could use the vulnerability to compromise confidentialiy, integrity and availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional An
vice. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-242353.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-014-04
CVE ID: CVE-2019-19279 State: PUBLISHED Published: 2020-03-10T19:16:17 Last Updated: 2024-08-05T02:09:39.609Z Vendors: Siemens AG Products: SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100 Ethernet communication modules Problem Types: CWE-20 Description: A vulnerability has been identified in SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100 Ethernet communication modules (All versions). Specially crafted packets sent to port 50000/UDP of the EN100 Ethernet communication modules could cause a Denial-of-Service of the affected device. A manual reboot is required to recover the service of the device. At the time of advisory publication no public exploitation of this security
quired to recover the service of the device. At the time of advisory publication no public exploitation of this security vulnerability was known to Siemens. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-974843.pdf
CVE ID: CVE-2019-19281 State: PUBLISHED Published: 2020-03-10T19:16:17 Last Updated: 2024-08-05T02:09:39.528Z Vendors: Siemens AG Products: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), SIMATIC S7-1500 Software Controller Problem Types: CWE-400 Description: A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V2.5 and < V20.8), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 and < V2.8), SIMATIC S7-1500 Software Controller (All versions >= V2.5 and < V20.8). Affected dev
(All versions >= V2.5 and < V2.8), SIMATIC S7-1500 Software Controller (All versions >= V2.5 and < V20.8). Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a Denial-of-Service condition. The vulnerability can be triggered if specially crafted UDP packets are sent to the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the device availability. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/
ility. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-750824.pdf - https://www.us-cert.gov/ics/advisories/icsa-20-042-11
CVE ID: CVE-2019-19282 State: PUBLISHED Published: 2020-03-10T19:16:17 Last Updated: 2024-08-05T02:09:39.657Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: OpenPCS 7 V8.1, OpenPCS 7 V8.2, OpenPCS 7 V9.0, SIMATIC BATCH V8.1, SIMATIC BATCH V8.2, SIMATIC BATCH V9.0, SIMATIC NET PC Software V14, SIMATIC NET PC Software V15, SIMATIC NET PC Software V16, SIMATIC PCS 7 V8.1, SIMATIC PCS 7 V8.2, SIMATIC PCS 7 V9.0, SIMATIC Route Control V8.1, SIMATIC Route Control V8.2, SIMATIC Route Control V9.0, SIMATIC WinCC (TIA Portal) V13, SIMATIC WinCC (TIA Portal) V14, SIMATIC WinCC (TIA Portal) V15.1, SIMATIC WinCC (TIA Portal) V16, SIMATIC W
Portal) V13, SIMATIC WinCC (TIA Portal) V14, SIMATIC WinCC (TIA Portal) V15.1, SIMATIC WinCC (TIA Portal) V16, SIMATIC WinCC V7.3, SIMATIC WinCC V7.4, SIMATIC WinCC V7.5 Problem Types: CWE-131 Description: A vulnerability has been identified in OpenPCS 7 V8.1 (All versions), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd3), SIMATIC BATCH V8.1 (All versions), SIMATIC BATCH V8.2 (All versions < V8.2 Upd12), SIMATIC BATCH V9.0 (All versions < V9.0 SP1 Upd5), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software V16 (All versions < V16 Update 1), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7
versions), SIMATIC NET PC Software V16 (All versions < V16 Update 1), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC Route Control V8.1 (All versions), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions < V9.0 Upd4), SIMATIC WinCC (TIA Portal) V13 (All versions < V13 SP2), SIMATIC WinCC (TIA Portal) V14 (All versions < V14 SP1 Update 10), SIMATIC WinCC (TIA Portal) V15.1 (All versions < V15.1 Update 5), SIMATIC WinCC (TIA Portal) V16 (All versions < V16 Update 1), SIMATIC WinCC V7.3 (All versions), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 14), SIMATIC WinCC V7.5 (All versi
SIMATIC WinCC V7.3 (All versions), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 14), SIMATIC WinCC V7.5 (All versions < V7.5 SP1 Update 1). Through specially crafted messages, when encrypted communication is enabled, an attacker with network access could use the vulnerability to compromise the availability of the system by causing a Denial-of-Service condition. Successful exploitation requires no system privileges and no user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-270778.pdf
CVE ID: CVE-2019-19283 State: PUBLISHED Published: 2020-12-14T21:05:17 Last Updated: 2024-08-05T02:09:39.476Z Vendors: Siemens Products: XHQ Problem Types: CWE-200 Description: A vulnerability has been identified in XHQ (All Versions < 6.1). The application's web server could expose non-sensitive information about the server's architecture. This could allow an attacker to adapt further attacks to the version in place. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf
CVE ID: CVE-2019-19284 State: PUBLISHED Published: 2020-12-14T21:05:17 Last Updated: 2024-08-05T02:09:39.615Z Vendors: Siemens Products: XHQ Problem Types: CWE-79 Description: A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow Cross-Site Scripting (XSS) attacks if an attacker is able to modify content of particular web pages, causing the application to behave in unexpected ways for legitimate users. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf
CVE ID: CVE-2019-19285 State: PUBLISHED Published: 2020-12-14T21:05:17 Last Updated: 2024-08-05T02:09:39.548Z Vendors: Siemens Products: XHQ Problem Types: CWE-80 Description: A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow injections that could lead to XSS attacks if unsuspecting users are tricked into accessing a malicious link. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf
CVE ID: CVE-2019-19286 State: PUBLISHED Published: 2020-12-14T21:05:17 Last Updated: 2024-08-05T02:09:39.593Z Vendors: Siemens Products: XHQ Problem Types: CWE-89 Description: A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow SQL injection attacks if an attacker is able to modify content of particular web pages. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf
CVE ID: CVE-2019-19287 State: PUBLISHED Published: 2020-12-14T21:05:17 Last Updated: 2024-08-05T02:09:39.610Z Vendors: Siemens Products: XHQ Problem Types: CWE-23 Description: A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow attackers to traverse through the file system of the server based by sending specially crafted packets over the network without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf
CVE ID: CVE-2019-19288 State: PUBLISHED Published: 2020-12-14T21:05:18 Last Updated: 2024-08-05T02:09:39.651Z Vendors: Siemens Products: XHQ Problem Types: CWE-79 Description: A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf