Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-14307 State: PUBLISHED Published: 2019-08-26T14:18:04 Last Updated: 2024-08-05T00:12:43.520Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for SNMP, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-:*:*:*:*:*:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:
:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-:*:*:*:*:*:*:* up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252sf:-:*:*:*:*:*:*:*. Additional Analyst Notes: - CVE Program Container: References: - https://www.ricoh-usa.com/en/support-and-download - https://www.ricoh.com/info/2019/0823_1/ - http://jvn.jp/en/jp/JVN11708203/index.html
CVE ID: CVE-2019-14308 State: PUBLISHED Published: 2019-08-26T13:28:30 Last Updated: 2024-08-05T00:12:43.376Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Several Ricoh printers have multiple buffer overflows parsing LPD packets, which allow an attacker to cause a denial of service or code execution via crafted requests to the LPD service. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-:*:*:*:*:*:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Another aff
uding) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-:*:*:*:*:*:*:* up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252sf:-:*:*:*:*:*:*:*. Additional Analyst Notes: - CVE Program Container: References: - https://www.ricoh-usa.com/en/support-and-download - https://www.ricoh.com/info/2019/0823_1/ - http://jvn.jp/en/jp/JVN11708203/index.html
CVE ID: CVE-2019-14309 State: PUBLISHED Published: 2020-03-13T18:47:15 Last Updated: 2024-08-05T00:12:43.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within the printer firmware. This would allow to an attacker to access and read information stored on the shared FTP folders. Additional Analyst Notes: - CVE Program Container: References: - https://www.ricoh-usa.com/en/support-and-download - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-ricoh-printers/
CVE ID: CVE-2019-14310 State: PUBLISHED Published: 2020-03-13T18:45:22 Last Updated: 2024-08-05T00:12:43.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ricoh SP C250DN 1.05 devices allow denial of service (issue 2 of 3). Unauthenticated crafted packets to the IPP service will cause a vulnerable device to crash. A memory corruption has been identified in the way of how the embedded device parsed the IPP packets Additional Analyst Notes: - CVE Program Container: References: - https://www.ricoh-usa.com/en/support-and-download - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-ricoh-printers/
CVE ID: CVE-2019-14312 State: PUBLISHED Published: 2019-08-09T12:31:53 Last Updated: 2024-08-05T00:12:43.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aptana Jaxer 1.0.3.4547 is vulnerable to a local file inclusion vulnerability in the wikilite source code viewer. This vulnerability allows a remote attacker to read internal files on the server via a tools/sourceViewer/index.html?filename=../ URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aptana/Jaxer/commits/master - http://packetstormsecurity.com/files/153985/Aptana-Jaxer-1.0.3.4547-Local-File-Inclusion.html
CVE ID: CVE-2019-14313 State: PUBLISHED Published: 2019-07-30T17:31:06 Last Updated: 2024-08-05T00:12:43.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in the 10Web Photo Gallery plugin before 1.5.31 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via filemanager/model.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/photo-gallery/#developers - https://plugins.trac.wordpress.org/changeset/2128378 - https://fortiguard.com/zeroday/FG-VD-19-101 - https://wpvulndb.com/vulnerabilities/9480
CVE ID: CVE-2019-14314 State: PUBLISHED Published: 2019-08-27T15:58:40 Last Updated: 2024-08-05T00:12:43.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via modules/nextgen_gallery_display/package.module.nextgen_gallery_display.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/nextgen-gallery/#developers - https://wpvulndb.com/vulnerabilities/9816 - https://de.wordpress.org/plugins/nextgen-gall
/nextgen-gallery/#developers - https://wpvulndb.com/vulnerabilities/9816 - https://de.wordpress.org/plugins/nextgen-gallery/#developers
CVE ID: CVE-2019-14315 State: PUBLISHED Published: 2019-07-28T00:23:02 Last Updated: 2024-08-05T00:12:43.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbitrary web script or HTML via the CKEditorFuncNum parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sunhater/kcfinder/issues/180
CVE ID: CVE-2019-14317 State: PUBLISHED Published: 2019-12-11T17:30:30 Last Updated: 2024-08-05T00:12:43.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: wolfSSL and wolfCrypt 4.1.0 and earlier (formerly known as CyaSSL) generate biased DSA nonces. This allows a remote attacker to compute the long term private key from several hundred DSA signatures via a lattice attack. The issue occurs because dsa.c fixes two bits of the generated nonces. Additional Analyst Notes: - CVE Program Container: References: - https://www.wolfssl.com/docs/security-vulnerabilities/
CVE ID: CVE-2019-14318 State: PUBLISHED Published: 2019-07-30T16:26:56 Last Updated: 2024-08-05T00:12:43.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because scalar multiplication in ecp.cpp (prime field curves, small leakage) and algebra.cpp (binary field curves, large leakage) is not constant time and leaks the bit length of the scalar among other information. Additional Analyst Notes: - CVE Program Container: Reference
leaks the bit length of the scalar among other information. Additional Analyst Notes: - CVE Program Container: References: - https://eprint.iacr.org/2011/232.pdf - https://tches.iacr.org/index.php/TCHES/article/view/7337 - https://github.com/weidai11/cryptopp/issues/869 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00066.html - http://www.openwall.com/lists/oss-security/2019/10/02/2 - https://minerva.crocs.fi.muni.cz/
CVE ID: CVE-2019-14319 State: PUBLISHED Published: 2019-09-04T19:57:59 Last Updated: 2024-08-05T00:12:43.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TikTok (formerly Musical.ly) application 12.2.0 for Android and iOS performs unencrypted transmission of images, videos, and likes. This allows an attacker to extract private sensitive information by sniffing network traffic. Additional Analyst Notes: - CVE Program Container: References: - https://play.google.com/store/apps/details?id=com.zhiliaoapp.musically&hl=en_US - http://p16.muscdn.com/img/musically-maliva-obj/1626792871331845~c5_100x100.jpeg - http://p16.muscdn.com/img/tos-maliva-p-0068/d9e7889f4f2d43028b41947cb095
y-maliva-obj/1626792871331845~c5_100x100.jpeg - http://p16.muscdn.com/img/tos-maliva-p-0068/d9e7889f4f2d43028b41947cb0950c32~noop.image - https://github.com/MelroyB/CVE-2019-14319/blob/master/CVE%202019-14319%20.pdf
CVE ID: CVE-2019-14322 State: PUBLISHED Published: 2019-07-28T12:36:59 Last Updated: 2024-08-05T00:12:43.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames. Additional Analyst Notes: - CVE Program Container: References: - https://palletsprojects.com/blog/werkzeug-0-15-5-released/ - http://packetstormsecurity.com/files/163398/Pallets-Werkzeug-0.15.4-Path-Traversal.html
CVE ID: CVE-2019-14323 State: PUBLISHED Published: 2019-07-28T12:43:39 Last Updated: 2024-08-05T00:12:43.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSDP Responder 1.x through 1.5 mishandles incoming network messages, leading to a stack-based buffer overflow by 1 byte. This results in a crash of the server, but only when strict stack checking is enabled. This is caused by an off-by-one error in ssdp_recv in ssdpd.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/troglobit/ssdp-responder/issues/1 - https://github.com/troglobit/ssdp-responder/commit/ce04b1f29a137198182f60bbb628d5ceb8171765
CVE ID: CVE-2019-14326 State: PUBLISHED Published: 2020-04-14T18:58:23 Last Updated: 2024-08-05T00:12:43.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in AndyOS Andy versions up to 46.11.113. By default, it starts telnet and ssh (ports 22 and 23) with root privileges in the emulated Android system. This can be exploited by remote attackers to gain full access to the device, or by malicious apps installed inside the emulator to perform privilege escalation from a normal user to root (unlike with standard methods of getting root privileges on Android - e.g., the SuperSu program - the user is not asked for consent). There is no authentication performed
leges on Android - e.g., the SuperSu program - the user is not asked for consent). There is no authentication performed - access to a root shell is given upon a successful connection. NOTE: although this was originally published with a slightly different CVE ID number, the correct ID for this Andy vulnerability has always been CVE-2019-14326. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/seqred-s-a/cve-2019-14326 - https://seqred.pl/en/cve-privilege-escalation-in-andy/
CVE ID: CVE-2019-14327 State: PUBLISHED Published: 2019-07-30T12:24:22 Last Updated: 2024-08-05T00:12:43.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF vulnerability in Settings form in the Custom Simple Rss plugin 2.0.6 for WordPress allows attackers to change the plugin settings. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9483 - https://wordpress.org/plugins/custom-simple-rss/#developers
CVE ID: CVE-2019-14328 State: PUBLISHED Published: 2019-07-28T13:27:39 Last Updated: 2024-08-05T00:12:43.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/simple-membership/#developers - http://packetstormsecurity.com/files/153801/WordPress-Simple-Membership-3.8.4-Cross-Site-Request-Forgery.html - https://wpvulndb.com/vulnerabilities/9482
CVE ID: CVE-2019-14329 State: PUBLISHED Published: 2019-07-28T13:46:07 Last Updated: 2024-08-05T00:12:43.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EspoCRM before 5.6.6. There is stored XSS due to lack of filtration of user-supplied data in Create Task. A malicious attacker can modify the parameter name to contain JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://www.cinquino.eu/EspoCRM.htm - https://github.com/espocrm/espocrm/commit/4ab7d19776011288b875abd3eef1e1f6f75289e2 - https://github.com/espocrm/espocrm/compare/5.6.5...5.6.6
CVE ID: CVE-2019-14330 State: PUBLISHED Published: 2019-07-28T13:46:15 Last Updated: 2024-08-05T00:12:43.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EspoCRM before 5.6.6. Stored XSS exists due to lack of filtration of user-supplied data in Create Case. A malicious attacker can modify the firstName and lastName to contain JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://www.cinquino.eu/EspoCRM.htm - https://github.com/espocrm/espocrm/commit/4ab7d19776011288b875abd3eef1e1f6f75289e2 - https://github.com/espocrm/espocrm/compare/5.6.5...5.6.6
CVE ID: CVE-2019-14331 State: PUBLISHED Published: 2019-07-28T13:46:22 Last Updated: 2024-08-05T00:12:43.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EspoCRM before 5.6.6. Stored XSS exists due to lack of filtration of user-supplied data in Create User. A malicious attacker can modify the firstName and lastName to contain JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://www.cinquino.eu/EspoCRM.htm - https://github.com/espocrm/espocrm/commit/4ab7d19776011288b875abd3eef1e1f6f75289e2 - https://github.com/espocrm/espocrm/compare/5.6.5...5.6.6
CVE ID: CVE-2019-14332 State: PUBLISHED Published: 2019-08-01T12:22:40 Last Updated: 2024-08-05T00:12:43.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is use of weak ciphers for SSH such as diffie-hellman-group1-sha1. Additional Analyst Notes: - CVE Program Container: References: - https://us.dlink.com/en/security-advisory - https://www.dlink.com/en/security-bulletin - http://packetstormsecurity.com/files/153840/D-Link-6600-AP-XSS-DoS-Information-Disclosure.html
CVE ID: CVE-2019-14333 State: PUBLISHED Published: 2019-08-01T12:26:27 Last Updated: 2024-08-05T00:12:43.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is a pre-authenticated denial of service attack against the access point via a long action parameter to admin.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://us.dlink.com/en/security-advisory - https://www.dlink.com/en/security-bulletin - http://packetstormsecurity.com/files/153840/D-Link-6600-AP-XSS-DoS-Information-Disclosure.html
CVE ID: CVE-2019-14334 State: PUBLISHED Published: 2019-08-01T12:27:36 Last Updated: 2024-08-05T00:12:43.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link 6600-AP, DWL-3600AP, and DWL-8610AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated Certificate and RSA Private Key extraction through an insecure sslcert-get.cgi HTTP command. Additional Analyst Notes: - CVE Program Container: References: - https://us.dlink.com/en/security-advisory - https://www.dlink.com/en/security-bulletin - http://packetstormsecurity.com/files/153840/D-Link-6600-AP-XSS-DoS-Information-Disclosure.html
CVE ID: CVE-2019-14335 State: PUBLISHED Published: 2019-08-08T13:05:48 Last Updated: 2024-08-05T00:12:43.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated denial of service leading to the reboot of the AP via the admin.cgi?action=%s URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf - http://packetstormsecurity.com/files/153840/D-Link-6600-AP-XSS-DoS-Information-Disclosure.html
CVE ID: CVE-2019-14336 State: PUBLISHED Published: 2019-08-01T12:30:38 Last Updated: 2024-08-05T00:12:43.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated dump of all of the config files through a certain admin.cgi?action= insecure HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://us.dlink.com/en/security-advisory - https://www.dlink.com/en/security-bulletin - http://packetstormsecurity.com/files/153840/D-Link-6600-AP-XSS-DoS-Information-Disclosure.html
CVE ID: CVE-2019-14337 State: PUBLISHED Published: 2019-08-01T12:31:42 Last Updated: 2024-08-05T00:12:43.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is an ability to escape to a shell in the restricted command line interface, as demonstrated by the `/bin/sh -c wget` sequence. Additional Analyst Notes: - CVE Program Container: References: - https://us.dlink.com/en/security-advisory - https://www.dlink.com/en/security-bulletin - http://packetstormsecurity.com/files/153840/D-Link-6600-AP-XSS-DoS-Information-Disclosure.html
CVE ID: CVE-2019-14338 State: PUBLISHED Published: 2019-08-01T12:32:40 Last Updated: 2024-08-05T00:12:43.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is a post-authentication admin.cgi?action= XSS vulnerability on the management interface. Additional Analyst Notes: - CVE Program Container: References: - https://us.dlink.com/en/security-advisory - https://www.dlink.com/en/security-bulletin - http://packetstormsecurity.com/files/153840/D-Link-6600-AP-XSS-DoS-Information-Disclosure.html
CVE ID: CVE-2019-14339 State: PUBLISHED Published: 2019-09-05T19:40:42 Last Updated: 2024-08-05T00:12:43.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access. This allows an attacker's malicious application to obtain sensitive information including factory passwords for the administrator web interface and WPA2-PSK key. Additional Analyst Notes: - CVE Program Container: References: - https://play.google.com/store/apps/details?id=jp.co.canon.bsd.ad.pixmaprint&hl=en_US - http://packetstormsecurity.com/files/154266/C
.google.com/store/apps/details?id=jp.co.canon.bsd.ad.pixmaprint&hl=en_US - http://packetstormsecurity.com/files/154266/Canon-PRINT-2.5.5-URI-Injection.html
CVE ID: CVE-2019-14343 State: PUBLISHED Published: 2019-11-15T13:00:01 Last Updated: 2024-08-05T00:12:43.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: TemaTres 3.0 has stored XSS via the value parameter to the vocab/admin.php?vocabulario_id=list URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.hackpuntes.com - https://sourceforge.net/p/tematres/mailman/tematres-help/ - https://github.com/tematres/TemaTres-Vocabulary-Server/commits/master - https://medium.com/%40Pablo0xSantiago/cve-2019-14343-ebc120800053 - http://packetstormsecurity.com/files/155376/TemaTres-3.0-Cross-Site-Scripting.html
CVE ID: CVE-2019-14344 State: PUBLISHED Published: 2019-12-13T15:59:46 Last Updated: 2024-08-05T00:12:43.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: TemaTres 3.0 has reflected XSS via the replace_string or search_string parameter to the vocab/admin.php?doAdmin=bulkReplace URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tematres/TemaTres-Vocabulary-Server/commits/master - https://medium.com/%40Pablo0xSantiago/cve-2019-14344-tematres-3-0-cross-site-scripting-reflected-xss-3826a23c7fff
CVE ID: CVE-2019-14345 State: PUBLISHED Published: 2019-11-15T13:03:59 Last Updated: 2024-08-05T00:12:43.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: TemaTres 3.0 allows remote unprivileged users to create an administrator account Additional Analyst Notes: - CVE Program Container: References: - https://www.hackpuntes.com - https://sourceforge.net/p/tematres/mailman/tematres-help/ - https://github.com/tematres/TemaTres-Vocabulary-Server/commits/master - https://medium.com/%40Pablo0xSantiago/cve-2019-14345-ff6f6d9fd30f
CVE ID: CVE-2019-14346 State: PUBLISHED Published: 2019-08-06T14:23:59 Last Updated: 2024-08-05T00:12:43.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internal/Views/config.php in Schben Adive 2.0.7 allows admin/config CSRF to change a user password. Additional Analyst Notes: - CVE Program Container: References: - https://www.adive.es/ - https://hackpuntes.com/cve-2019-14346-adive-framework-2-0-7-cross-site-request-forgery/ - http://packetstormsecurity.com/files/153989/Adive-Framework-2.0.7-Cross-Site-Request-Forgery.html
CVE ID: CVE-2019-14347 State: PUBLISHED Published: 2019-08-06T16:34:23 Last Updated: 2024-08-05T00:12:43.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an administrator account via admin/user/add, as demonstrated by a Python PoC script. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ferdinandmartin/adive-php - https://hackpuntes.com/cve-2019-14347-escalacion-de-privilegios-en-adive/ - http://packetstormsecurity.com/files/155213/Adive-Framework-2.0.7-Privilege-Escalation.html
CVE ID: CVE-2019-14348 State: PUBLISHED Published: 2019-08-05T15:00:09 Last Updated: 2024-08-05T00:12:43.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information via the joomsport_season/new-yorkers/?action=playerlist sid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://hackpuntes.com/cve-2019-14348-joomsport-for-sports-sql-injection/ - https://wpvulndb.com/vulnerabilities/9499 - http://packetstormsecurity.com/files/153963/WordPress-JoomSport-3.3-SQL-Injection.html
CVE ID: CVE-2019-14349 State: PUBLISHED Published: 2019-07-28T15:26:51 Last Updated: 2024-08-05T00:12:43.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: EspoCRM version 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the api/v1/Document functionality for storing documents in the account tab. An attacker can upload a crafted file that contains JavaScript code in its name. This code will be executed when a user opens a page of any profile with this. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/espocrm/espocrm/issues/1358
CVE ID: CVE-2019-14350 State: PUBLISHED Published: 2019-07-28T15:26:58 Last Updated: 2024-08-05T00:12:43.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: EspoCRM 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the Knowledge base. A malicious attacker can inject JavaScript code in the body parameter during api/v1/KnowledgeBaseArticle knowledge-base record creation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/espocrm/espocrm/issues/1356