Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
sperReports Server for ActiveMatrix BPM: versions up to and including 6.4.2, TIBCO JasperReports Library: versions up to and including 6.2.4; 6.3.0; 6.3.2; 6.3.3; 6.4.0; 6.4.1; 6.4.2, TIBCO JasperReports Library Community Edition: versions up to and including 6.4.3, TIBCO JasperReports Library for ActiveMatrix BPM: versions up to and including 6.4.2, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 6.4.2, TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 6.4.2, TIBCO Jaspersoft Studio: versions up to and including 6.2.4; 6.3.0; 6.3.2; 6.3.3; 6.4.0; 6.4.2, TIBCO Jaspersoft Studio Community Edition: versions up to and including 6.4.3, TIBCO
6.3.0; 6.3.2; 6.3.3; 6.4.0; 6.4.2, TIBCO Jaspersoft Studio Community Edition: versions up to and including 6.4.3, TIBCO Jaspersoft Studio for ActiveMatrix BPM: versions up to and including 6.4.2. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/support/advisories/2018/04/tibco-security-advisory-april-17-2018-tibco-jasperreports-2018-5429
CVE ID: CVE-2018-5430 State: PUBLISHED Published: 2018-04-17T18:00:00.000Z Last Updated: 2025-10-21T23:45:52.130Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: TIBCO Software Inc. Products: TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS Problem Types: The impact includes the possible read-only access by authenticated users to web application configuration files that contain the credentials used by the server. Those credentials could then be used to affect external systems accessed by the Jas
the credentials used by the server. Those credentials could then be used to affect external systems accessed by the JasperReports Server. Description: The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contain a vulnerability which may allow any authenticated user read-only access to the contents of the web application, including key configuration files. Affected releases include TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.2.4; 6.3.0; 6.3.2;
ed releases include TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.2.4; 6.3.0; 6.3.2; 6.3.3;6.4.0; 6.4.2, TIBCO JasperReports Server Community Edition: versions up to and including 6.4.2, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.2, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 6.4.2, TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 6.4.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/44623/ - https://rhinosecuritylabs.com/application-security/authenticated-file-read-vulnerability-in
oit-db.com/exploits/44623/ - https://rhinosecuritylabs.com/application-security/authenticated-file-read-vulnerability-in-jasperreports/ - https://www.tibco.com/support/advisories/2018/04/tibco-security-advisory-april-17-2018-tibco-jasperreports-2018-5430
CVE ID: CVE-2018-5431 State: PUBLISHED Published: 2018-04-17T18:00:00Z Last Updated: 2024-09-17T01:56:35.755Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N) Vendors: TIBCO Software Inc. Products: TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS Problem Types: The impact includes the theoretical possibility of a user performing operations using another user's access, including administrative functions being performed by a non-administrative user. Description: The domain designer component of TIBCO Soft
trative functions being performed by a non-administrative user. Description: The domain designer component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability which may allow, in the context of a non-default permissions configuration, persisted cross-site scripting (XSS) attacks. Affected releases include TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.2.4; 6.3.0; 6.3.2; 6.3.3; 6.4.0; 6.4.2, TIBCO JasperReports Server Community Edition: version
ions up to and including 6.2.4; 6.3.0; 6.3.2; 6.3.3; 6.4.0; 6.4.2, TIBCO JasperReports Server Community Edition: versions up to and including 6.4.2, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.2, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 6.4.2, TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 6.4.2. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/support/advisories/2018/04/tibco-security-advisory-april-17-2018-tibco-jasperreports-2018-5431
CVE ID: CVE-2018-5432 State: PUBLISHED Published: 2018-06-13T13:00:00Z Last Updated: 2024-09-17T02:05:57.067Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition for z/Linux Problem Types: The impact of the vulnerability includes the theoretical possibility of a user performing operations using another user's access, including administrative functions being performed by a non-administrative user. The impact also theoretically includes access to all administrative information, including deployment variable settings ("global variables") Description: The TIB
cess to all administrative information, including deployment variable settings ("global variables") Description: The TIBCO Administrator server component of of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, and TIBCO Administrator - Enterprise Edition for z/Linux contains multiple vulnerabilities wherein a malicious user could theoretically perform cross-site scripting (XSS) attacks by way of manipulating artifacts prior to uploading them. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions up to and including 5.10.0, and TIBCO Administrator - Enterprise Edition for z/Linux: versions up to and including 5.9.1. Additional Analyst Not
.0, and TIBCO Administrator - Enterprise Edition for z/Linux: versions up to and including 5.9.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104458 - https://www.tibco.com/support/advisories/2018/06/security-advisory-june-12-2018-tibco-administrator-enterprise-edition-2018-5432
CVE ID: CVE-2018-5433 State: PUBLISHED Published: 2018-06-13T13:00:00Z Last Updated: 2024-09-17T01:26:56.135Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: TIBCO Software Inc. Products: TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition for z/Linux Problem Types: The impact of the vulnerability includes the theoretical possibility of disclosing contents of files on the host machine that are accessible to the system account used to run the affected component. Description: The TIBCO Administrator server component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, and TIBCO Administrator - Enterprise Edition for
nent of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, and TIBCO Administrator - Enterprise Edition for z/Linux contains vulnerabilities wherein a malicious user could perform XML external entity expansion (XXE) attacks to disclose host machine information. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions up to and including 5.10.0, and TIBCO Administrator - Enterprise Edition for z/Linux: versions up to and including 5.9.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/support/advisories/2018/06/security-advisory-june-12-2018-tibco-administrator-enterprise-edition-2018-5433 - http://www.s
upport/advisories/2018/06/security-advisory-june-12-2018-tibco-administrator-enterprise-edition-2018-5433 - http://www.securityfocus.com/bid/104451
CVE ID: CVE-2018-5434 State: PUBLISHED Published: 2018-06-13T13:00:00Z Last Updated: 2024-09-16T20:31:50.987Z Severity: MEDIUM (CVSS 5.8 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: TIBCO Software Inc. Products: TIBCO Runtime Agent, TIBCO Runtime Agent for z/Linux Problem Types: The impact of the vulnerability includes the theoretical possibility of disclosing contents of files on the host machine that are accessible to the operating system account used to run the affected component. Description: The TIBCO Designer component of TIBCO Software Inc.'s TIBCO Runtime Agent, and TIBCO Runtime Agent for z/Linux contains vulnerabilities wherein a malicious user could perform XML external
Agent, and TIBCO Runtime Agent for z/Linux contains vulnerabilities wherein a malicious user could perform XML external entity expansion (XXE) attacks to disclose host machine information. Affected releases are TIBCO Software Inc.'s TIBCO Runtime Agent: versions up to and including 5.10.0, and TIBCO Runtime Agent for z/Linux: versions up to and including 5.9.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104454 - https://www.tibco.com/support/advisories/2018/06/security-advisory-june-12-2018-tibco-runtime-agent-2018-5434
CVE ID: CVE-2018-5435 State: PUBLISHED Published: 2018-06-27T16:00:00Z Last Updated: 2024-09-16T19:51:48.227Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, TIBCO Spotfire Desktop Language Packs Problem Types: The impact of this vulnerability includes the theoretical possibility that an unprivileged remote attacker could execute code with the privileges of the user account running the affected component. Description: The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of T
ning the affected component. Description: The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs contain multiple vulnerabilities that may allow for remote code execution. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analyst: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0; 7.12.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 7.12.0, TIBCO Spotfire Deployment Kit: versions up to and including 7.8.0;
AWS Marketplace: versions up to and including 7.12.0, TIBCO Spotfire Deployment Kit: versions up to and including 7.8.0; 7.9.0;7.9.1;7.10.0;7.10.1;7.11.0; 7.12.0, TIBCO Spotfire Desktop: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0;7.12.0, TIBCO Spotfire Desktop Language Packs: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2018/06/tibco-security-advisory-june-26-2018-tibco-spotfire-2018-5435
CVE ID: CVE-2018-5436 State: PUBLISHED Published: 2018-06-27T16:00:00Z Last Updated: 2024-09-17T01:26:22.747Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: TIBCO Software Inc. Products: TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server Problem Types: The impact of this vulnerability includes the theoretical possibly that an authenticated user could gain access to user and data source credentials, and then use those credentials for additional access. Description: The Spotfire server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contain multiple vulnerabilities t
c.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contain multiple vulnerabilities that may allow for the disclosure of information, including user and data source credentials. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 7.12.0, TIBCO Spotfire Server: versions up to and including 7.8.1; 7.9.0; 7.10.0; 7.11.0; 7.12.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/support/advisories/2018/06/tibco-security-advisory-june-26-2018-tibco-spotfire-2018-5436 - http://www.tibco.com/services/support/advisories
CVE ID: CVE-2018-5437 State: PUBLISHED Published: 2018-06-27T16:00:00Z Last Updated: 2024-09-17T01:25:43.883Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: TIBCO Software Inc. Products: TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, TIBCO Spotfire Desktop Language Packs Problem Types: The impact of this vulnerability includes the theoretical possibly that an authenticated user could gain access to additional confidential information, including credentials to access additional resources. Description: The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client component
ls to access additional resources. Description: The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs contain multiple vulnerabilities that may allow for unauthorized information disclosure. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analyst: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0; 7.12.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 7.12.0, TIBCO Spotfire Deployment Kit: versions up to
lytics Platform for AWS Marketplace: versions up to and including 7.12.0, TIBCO Spotfire Deployment Kit: versions up to and including 7.8.0; 7.9.0;7.9.1;7.10.0;7.10.1;7.11.0; 7.12.0, TIBCO Spotfire Desktop: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0;7.12.0, TIBCO Spotfire Desktop Language Packs: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/support/advisories/2018/06/tibco-security-advisory-june-26-2018-tibco-spotfire-2018-5437 - http://www.tibco.com/services/support/advisories
CVE ID: CVE-2018-5438 State: PUBLISHED Published: 2018-03-20T17:00:00 Last Updated: 2024-08-05T05:33:44.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Philips ISCV application prior to version 2.3.0 has an insufficient session expiration vulnerability where an attacker could reuse the session of a previously logged in user. This vulnerability exists when using ISCV together with an Electronic Medical Record (EMR) system, where ISCV is in KIOSK mode for multiple users and using Windows authentication. This may allow an attacker to gain unauthorized access to patient health information and potentially modify this information. Additional Analyst Notes: - CVE Program Container:
patient health information and potentially modify this information. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.philips.com/healthcare/about/customer-support/product-security - https://ics-cert.us-cert.gov/advisories/ICSMA-18-025-01 - http://www.securityfocus.com/bid/102847
CVE ID: CVE-2018-5439 State: PUBLISHED Published: 2018-02-19T18:00:00 Last Updated: 2024-08-05T05:33:44.375Z Vendors: n/a Products: Nortek Linear eMerge E3 Series Problem Types: CWE-77 Description: A Command Injection issue was discovered in Nortek Linear eMerge E3 series Versions V0.32-07e and prior. A remote attacker may be able to execute arbitrary code on a target machine with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-046-01
CVE ID: CVE-2018-5440 State: PUBLISHED Published: 2018-02-15T10:00:00 Last Updated: 2024-08-05T05:33:44.368Z Vendors: n/a Products: 3S-Smart Software Solutions GmbH CODESYS Web Server Problem Types: CWE-121 Description: A Stack-based Buffer Overflow issue was discovered in 3S-Smart CODESYS Web Server. Specifically: all Microsoft Windows (also WinCE) based CODESYS web servers running stand-alone Version 2.3, or as part of the CODESYS runtime system running prior to Version V1.1.9.19. A crafted request may cause a buffer overflow and could therefore execute arbitrary code on the web server or lead to a denial-of-service condition due to a crash in the web server. Additional Analyst Notes: - CV
the web server or lead to a denial-of-service condition due to a crash in the web server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102909 - https://ics-cert.us-cert.gov/advisories/ICSA-18-032-02
CVE ID: CVE-2018-5441 State: PUBLISHED Published: 2018-01-30T20:00:00 Last Updated: 2024-08-05T05:33:44.317Z Vendors: n/a Products: PHOENIX CONTACT mGuard Problem Types: CWE-354 Description: An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal checksums for verification of the internal integrity of the update packages. Verification may not always be performed correctly, allowing an attacker to modify firmware update packages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102907 - https://ics-cert.us-cert.gov/advisories/ICSA-18-030-01 -
ainer: References: - http://www.securityfocus.com/bid/102907 - https://ics-cert.us-cert.gov/advisories/ICSA-18-030-01 - https://cert.vde.com/en-us/advisories/vde-2018-001
CVE ID: CVE-2018-5442 State: PUBLISHED Published: 2018-02-05T18:00:00 Last Updated: 2024-08-05T05:33:44.394Z Vendors: n/a Products: Fuji Electric V-Server VPR Problem Types: CWE-121 Description: A Stack-based Buffer Overflow issue was discovered in Fuji Electric V-Server VPR 4.0.1.0 and prior. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-032-01 - http://www.securityfocus.com/bid/102903
CVE ID: CVE-2018-5443 State: PUBLISHED Published: 2018-01-25T03:00:00 Last Updated: 2024-08-05T05:33:44.434Z Vendors: n/a Products: Advantech WebAccess/SCADA Problem Types: CWE-89 Description: A SQL Injection issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. WebAccess/SCADA does not properly sanitize its inputs for SQL commands. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-023-01 - http://www.securityfocus.com/bid/102781
CVE ID: CVE-2018-5445 State: PUBLISHED Published: 2018-01-25T03:00:00 Last Updated: 2024-08-05T05:33:44.377Z Vendors: n/a Products: Advantech WebAccess/SCADA Problem Types: CWE-22 Description: A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. An attacker has read access to files within the directory structure of the target device. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-023-01 - http://www.securityfocus.com/bid/102781
CVE ID: CVE-2018-5446 State: PUBLISHED Published: 2018-05-04T18:00:00Z Last Updated: 2025-05-22T17:40:34.569Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Medtronic Products: 2090 CareLink Programmer, 29901 Encore Programmer Problem Types: CWE-257 Description: Medtronic 2090 CareLink Programmer uses a per-product username and password that is stored in a recoverable format. Additional Analyst Notes: - CVE Program Container: References: - https://global.medtronic.com/xg-en/product-security/security-bulletins/carelink-2090-29901.html - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-058-01
CVE ID: CVE-2018-5447 State: PUBLISHED Published: 2018-01-25T22:00:00 Last Updated: 2024-08-05T05:33:44.407Z Vendors: n/a Products: Nari PCS-9611 Problem Types: CWE-20 Description: An Improper Input Validation issue was discovered in Nari PCS-9611 relay. An improper input validation vulnerability has been identified that affects a service within the software that may allow a remote attacker to arbitrarily read/access system resources and affect the availability of the system. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-025-01
CVE ID: CVE-2018-5448 State: PUBLISHED Published: 2018-05-04T18:00:00Z Last Updated: 2025-05-22T17:43:06.800Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Medtronic Products: 2090 CareLink Programmer, 29901 Encore Programmer Problem Types: CWE-23 Description: Medtronic 2090 CareLink Programmer’s software deployment network contains a directory traversal vulnerability that could allow an attacker to read files on the system. Additional Analyst Notes: - CVE Program Container: References: - https://global.medtronic.com/xg-en/product-security/security-bulletins/carelink-2090-29901.html - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-058-01
CVE ID: CVE-2018-5449 State: PUBLISHED Published: 2018-03-05T17:00:00 Last Updated: 2024-08-05T05:33:44.399Z Vendors: n/a Products: Moxa OnCell G3100-HSPA Series Problem Types: CWE-476 Description: A NULL Pointer Dereference issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application does not check for a NULL value, allowing for an attacker to perform a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-060-02
CVE ID: CVE-2018-5451 State: PUBLISHED Published: 2018-03-28T17:00:00Z Last Updated: 2024-09-17T04:00:25.428Z Vendors: Philips Products: Philips Alice 6 System Problem Types: CWE-287 Description: In Philips Alice 6 System version R8.0.2 or prior, when an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct. This weakness can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with sensitive information or the ability to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-18-086-01 - http://www.sec
t Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-18-086-01 - http://www.securityfocus.com/bid/103537
CVE ID: CVE-2018-5452 State: PUBLISHED Published: 2018-03-07T18:00:00 Last Updated: 2024-08-05T05:33:44.310Z Vendors: n/a Products: Emerson ControlWave Micro Process Automation Controller Problem Types: CWE-121 Description: A Stack-based Buffer Overflow issue was discovered in Emerson Process Management ControlWave Micro Process Automation Controller: ControlWave Micro [ProConOS v.4.01.280] firmware: CWM v.05.78.00 and prior. A stack-based buffer overflow vulnerability caused by sending crafted packets on Port 20547 could force the PLC to change its state into halt mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103180 - https://ics-cer