Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-9708 State: PUBLISHED Published: 2019-05-07T16:53:21 Last Updated: 2024-08-04T21:54:45.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mahara 17.10 before 17.10.8, 18.04 before 18.04.4, and 18.10 before 18.10.1. A site administrator can suspend the system user (root), causing all users to be locked out from the system. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/mahara/+bug/1817221 - https://mahara.org/interaction/forum/topic.php?id=8445
CVE ID: CVE-2019-9709 State: PUBLISHED Published: 2019-05-07T13:58:24 Last Updated: 2024-08-04T21:54:45.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mahara 17.10 before 17.10.8, 18.04 before 18.04.4, and 18.10 before 18.10.1. The collection title is vulnerable to Cross Site Scripting (XSS) due to not escaping it when viewing the collection's SmartEvidence overview page (if that feature is turned on). This can be exploited by any logged-in user. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/bugs/1819547 - https://mahara.org/interaction/forum/topic.php?id=8446
CVE ID: CVE-2019-9710 State: PUBLISHED Published: 2019-03-12T02:00:00 Last Updated: 2024-08-04T22:01:53.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in webargs before 5.1.3, as used with marshmallow and other products. JSON parsing uses a short-lived cache to store the parsed JSON body. This cache is not thread-safe, meaning that incorrect JSON payloads could have been parsed for concurrent requests. Additional Analyst Notes: - CVE Program Container: References: - https://webargs.readthedocs.io/en/latest/changelog.html - https://github.com/marshmallow-code/webargs/issues/371
CVE ID: CVE-2019-9711 State: PUBLISHED Published: 2019-03-12T18:00:00 Last Updated: 2024-08-04T22:01:53.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.4. The item_title layout in edit views lacks escaping, leading to XSS. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/773-20190302-core-xss-in-item-title-layout - http://www.securityfocus.com/bid/107371
CVE ID: CVE-2019-9712 State: PUBLISHED Published: 2019-03-12T18:00:00 Last Updated: 2024-08-04T22:01:53.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.4. The JSON handler in com_config lacks input validation, leading to XSS. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/772-20190301-core-xss-in-com-config-json-handler - http://www.securityfocus.com/bid/107374
CVE ID: CVE-2019-9713 State: PUBLISHED Published: 2019-03-12T18:00:00 Last Updated: 2024-08-04T22:01:53.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.4. The sample data plugins lack ACL checks, allowing unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/775-20190304-core-missing-acl-check-in-sample-data-plugins - http://www.securityfocus.com/bid/107372
CVE ID: CVE-2019-9714 State: PUBLISHED Published: 2019-03-12T18:00:00 Last Updated: 2024-08-04T22:01:53.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.4. The media form field lacks escaping, leading to XSS. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107369 - https://developer.joomla.org/security-centre/774-20190303-core-xss-in-media-form-field
CVE ID: CVE-2019-9717 State: PUBLISHED Published: 2019-09-19T20:28:19 Last Updated: 2024-08-04T22:01:53.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Libav 12.3, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c has a complex format argument to sscanf. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libav/libav/blob/df744e3cf66548c9167ea857104a29d2ea92819e/libavcodec/srtdec.c#L90 - https://lgtm.com/security/
CVE ID: CVE-2019-9718 State: PUBLISHED Published: 2019-03-12T06:00:00 Last Updated: 2024-08-04T22:01:53.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ff_htmlmarkup_to_ass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf. Additional Analyst Notes: - CVE Program Container: References: - https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/1f00c97bc3475c477f3c468cf2d924d5761d0982 - http://www.securityfocus.com/bid/107382 - https://usn.ubuntu.com/3967-1/ - https://seclists.org/bugtraq/2019/May/60 - https://www.de
ecurityfocus.com/bid/107382 - https://usn.ubuntu.com/3967-1/ - https://seclists.org/bugtraq/2019/May/60 - https://www.debian.org/security/2019/dsa-4449 - https://github.com/FFmpeg/FFmpeg/commit/23ccf3cabb4baf6e8af4b1af3fcc59c904736f21
CVE ID: CVE-2019-9719 State: PUBLISHED Published: 2019-09-19T20:32:34 Last Updated: 2024-08-04T22:01:53.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf. NOTE: Third parties dispute that this is a vulnerability because “no evidence of a vulnerability is provided” and only “a generic warning from a static code analysis” is provided Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libav/libav/blob/df744e3cf66548c9167ea857104a29d2ea92819e/
es: - CVE Program Container: References: - https://github.com/libav/libav/blob/df744e3cf66548c9167ea857104a29d2ea92819e/libavcodec/srtdec.c#L113 - https://github.com/libav/libav/commits/master/libavcodec/srtdec.c - https://lgtm.com/security/ - https://lgtm.com/projects/g/libav/libav/snapshot/f5f553ca3bdca0c97dd08bbf002f0d8cb193788b/files/libavcodec/srtdec.c?sort=name&dir=ASC&mode=heatmap#xeec693aa6d85853b:1
CVE ID: CVE-2019-9720 State: PUBLISHED Published: 2019-09-19T20:37:41 Last Updated: 2024-08-04T22:01:53.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libav/libav/blob/df744e3cf66548c9167ea857104a29d2ea92819e/libavcodec/srtdec.c#L161 - https://lgtm.com/security/
CVE ID: CVE-2019-9721 State: PUBLISHED Published: 2019-03-12T06:00:00 Last Updated: 2024-08-04T22:01:53.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handle_open_brace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107384 - https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/894995c41e0795c7a44f81adc4838dedc3932e65 - https://usn.ubuntu.com/3967-1/ - https://github.com/FFmpeg/FFmpeg/commit/273f2755ce8635d42da3c
44f81adc4838dedc3932e65 - https://usn.ubuntu.com/3967-1/ - https://github.com/FFmpeg/FFmpeg/commit/273f2755ce8635d42da3cde0eeba15b2e7842774
CVE ID: CVE-2019-9723 State: PUBLISHED Published: 2019-05-30T17:33:30 Last Updated: 2024-08-04T22:01:54.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: LogicalDOC Community Edition 8.x before 8.2.1 has a path traversal vulnerability that allows reading arbitrary files and the creation of directories, in the class PluginRegistry. Additional Analyst Notes: - CVE Program Container: References: - https://blog.ripstech.com/2019/logicaldoc-path-traversal/
CVE ID: CVE-2019-9724 State: PUBLISHED Published: 2019-04-24T13:56:18 Last Updated: 2024-08-04T22:01:53.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: aquaverde Aquarius CMS through 4.3.5 allows Information Exposure through Log Files because of an error in the Log-File writer component. Additional Analyst Notes: - CVE Program Container: References: - https://www.tryption.ch/de/2019/04/19/information-disclosure-im-aquarius-cms/
CVE ID: CVE-2019-9725 State: PUBLISHED Published: 2019-03-12T20:00:00Z Last Updated: 2024-09-17T02:16:21.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web manager (aka Commander) on Korenix JetPort 5601 and 5601f devices has Persistent XSS via the Port Alias field under Serial Setting. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40bertinjoseb/korenix-jetport-web-manager-persistent-xss-6cf7e2a38634
CVE ID: CVE-2019-9726 State: PUBLISHED Published: 2019-05-13T16:19:20 Last Updated: 2024-08-04T22:01:53.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal / Arbitrary File Read in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read arbitrary files of the device's filesystem. This vulnerability can be exploited by unauthenticated attackers with access to the web interface. Additional Analyst Notes: - CVE Program Container: References: - https://atomic111.github.io/article/homematic-ccu3-fileread
CVE ID: CVE-2019-9727 State: PUBLISHED Published: 2019-05-13T16:41:24 Last Updated: 2024-08-04T22:01:53.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unauthenticated password hash disclosure in the User.getUserPWD method in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to retrieve the GUI password hashes of GUI users. This vulnerability can be exploited by unauthenticated attackers with access to the web interface. Additional Analyst Notes: - CVE Program Container: References: - https://atomic111.github.io/article/homematic-ccu3-unauthenticated-password-hash-disclosure
CVE ID: CVE-2019-9729 State: PUBLISHED Published: 2019-03-12T22:00:00 Last Updated: 2024-08-04T22:01:54.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Shanda MapleStory Online V160, the SdoKeyCrypt.sys driver allows privilege escalation to NT AUTHORITY\SYSTEM because of not validating the IOCtl 0x8000c01c input value, leading to an integer signedness error and a heap-based buffer underflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DoubleLabyrinth/SdoKeyCrypt-sys-local-privilege-elevation
CVE ID: CVE-2019-9730 State: PUBLISHED Published: 2019-06-05T15:11:05 Last Updated: 2024-08-04T22:01:53.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a local attacker to increase access privileges to the Windows Registry via an unpublished API. Additional Analyst Notes: - CVE Program Container: References: - https://www.synaptics.com/company/blog/ - https://twitter.com/Jackson_T - https://support.lenovo.com/us/en/product_security/LEN-25822
CVE ID: CVE-2019-9732 State: PUBLISHED Published: 2019-05-29T16:18:36 Last Updated: 2024-08-04T22:01:53.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2019/03/14/gitlab-11-8-2-released/
CVE ID: CVE-2019-9733 State: PUBLISHED Published: 2019-04-11T18:59:36 Last Updated: 2024-08-04T22:01:54.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in JFrog Artifactory 6.7.3. By default, the access-admin account is used to reset the password of the admin account in case an administrator gets locked out from the Artifactory console. This is only allowable from a connection directly from localhost, but providing a X-Forwarded-For HTTP header to the request allows an unauthenticated user to login with the default credentials of the access-admin account while bypassing the whitelist of allowed IP addresses. The access-admin account can use Artifactory
access-admin account while bypassing the whitelist of allowed IP addresses. The access-admin account can use Artifactory's API to request authentication tokens for all users including the admin account and, in turn, assume full control of all artifacts and repositories managed by Artifactory. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/152172/JFrog-Artifactory-Administrator-Authentication-Bypass.html - https://www.ciphertechs.com/jfrog-artifactory-advisory/ - https://www.jfrog.com/confluence/display/RTF/Release+Notes#ReleaseNotes-Artifactory6.8.6
CVE ID: CVE-2019-9734 State: PUBLISHED Published: 2019-04-24T14:04:53 Last Updated: 2024-08-04T22:01:54.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aquarius CMS through 4.3.5 writes POST and GET parameters (including passwords) to a log file due to an overwriting of configuration parameters under certain circumstances. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aquaverde/aquarius-core/commit/d1dfa5b8280388a0b6f2f341f0681522dbea03b0 - https://www.tryption.ch/2019/04/19/cve-2019-9734-password-leakage-im-aquarius-cms/
CVE ID: CVE-2019-9735 State: PUBLISHED Published: 2019-03-13T02:00:00 Last Updated: 2024-08-04T22:01:53.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By setting a destination port in a security group rule along with a protocol that doesn't support that option (for example, VRRP), an authenticated user may block further application of security group rules for instances from any project/tenant on the compute hosts to which it's applied. (Only deployments using the iptables security group driver are affected.) Additional An
ute hosts to which it's applied. (Only deployments using the iptables security group driver are affected.) Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107390 - https://launchpad.net/bugs/1818385 - https://security.openstack.org/ossa/OSSA-2019-001.html - http://www.openwall.com/lists/oss-security/2019/03/18/2 - https://seclists.org/bugtraq/2019/Mar/24 - https://www.debian.org/security/2019/dsa-4409 - https://access.redhat.com/errata/RHSA-2019:0916 - https://access.redhat.com/errata/RHSA-2019:0935 - https://access.redhat.com/errata/RHSA-2019:0879 - https://usn.ubuntu.com/4036-1/
CVE ID: CVE-2019-9736 State: PUBLISHED Published: 2019-03-13T02:00:00 Last Updated: 2024-08-04T22:01:54.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: DOM-based XSS exists in 1024Tools Markdown 1.0 via vectors involving the '<EMBED SRC="data:image/svg+xml' substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cnxh/1024tools/issues/20
CVE ID: CVE-2019-9737 State: PUBLISHED Published: 2019-03-13T02:00:00 Last Updated: 2024-08-04T22:01:54.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Editor.md 1.5.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pandao/editor.md/issues/662
CVE ID: CVE-2019-9738 State: PUBLISHED Published: 2019-03-13T02:00:00 Last Updated: 2024-08-04T22:01:54.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: jimmykuu Gopher 2.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jimmykuu/gopher/issues/88
CVE ID: CVE-2019-9740 State: PUBLISHED Published: 2019-03-13T03:00:00 Last Updated: 2024-08-04T22:01:54.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the query string after a ? character) followed by an HTTP header or a Redis command. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.
5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107466 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXASHCDD4PQFKTMKQN4YOP5ZH366ABN4/ - https://access.redhat.com/errata/RHSA-2019:1260 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/ - https://lists.debian.org/debian-lts-a
age-announce%40lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/ - https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html - https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html - https://lists.debian.org/debian-lts-announce/2019/06/msg00026.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/44TS66GJMO5H3RLMVZEBGEFTB6O2LJJU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ORNTF62QPLMJXIQ7KTZQ2776LMIXEKL/ - https://access.redhat.com/errata/RHSA-2019:2030 - https://usn.ubuntu.com/4127-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/
m/errata/RHSA-2019:2030 - https://usn.ubuntu.com/4127-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00039.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00041.html - https://usn.ubuntu.com/4127-1/ - https://seclists.org/bugtraq/2019/Oct/29 - https://access.redhat.com/errata/RHSA-2019:3335 - https://access.redhat.com/errata/RHSA-2019:3520 - https://access.redhat.com/errata/RHSA-2019:3725 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/ - https://security.gentoo.org/glsa/202003-26 - https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html - http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html - http://www.openwall.com/lists/oss-security/2021/02/04/2 - https://www.oracle.com/security-alerts/cpujul2022.html - https://bugs.python.org/issue36276 - https://secur
21/02/04/2 - https://www.oracle.com/security-alerts/cpujul2022.html - https://bugs.python.org/issue36276 - https://security.netapp.com/advisory/ntap-20190619-0005/
CVE ID: CVE-2019-9741 State: PUBLISHED Published: 2019-03-13T06:00:00 Last Updated: 2024-08-04T22:01:54.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the second argument to http.NewRequest with \r\n followed by an HTTP header or a Redis command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/golang/go/issues/30794 - http://www.securityfocus.com/bid/107432 - https://lists.debian.org/debian-lts-announce/2019/04/msg00007.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap
bian-lts-announce/2019/04/msg00007.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TOOVCEPQM7TZA6VEZEEB7QZABXNHQEHH/ - https://access.redhat.com/errata/RHSA-2019:1300 - https://access.redhat.com/errata/RHSA-2019:1519 - https://lists.debian.org/debian-lts-announce/2021/03/msg00014.html - https://lists.debian.org/debian-lts-announce/2021/03/msg00015.html
CVE ID: CVE-2019-9742 State: PUBLISHED Published: 2019-03-13T14:00:00Z Last Updated: 2024-09-17T02:11:08.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: gdwfpcd.sys in G Data Total Security before 2019-02-22 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks FILE_DEVICE_SECURE_OPEN and therefore files and directories "inside" the \\.\gdwfpcd device are not properly protected, leading to unintended impersonation or object creation. Additional Analyst Notes: - CVE Program Container: References: - https://nafiez.github.io/security/bypass/2019/03/12/gdata-total-security-acl-bypass.html - https://github.com/nafiez/nafiez.github.io/blob/master/_posts
y/bypass/2019/03/12/gdata-total-security-acl-bypass.html - https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2019-03-13-gdata-total-security-acl-bypass.md
CVE ID: CVE-2019-9743 State: PUBLISHED Published: 2019-03-26T19:57:56 Last Updated: 2024-08-04T22:01:54.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on PHOENIX CONTACT RAD-80211-XD and RAD-80211-XD/HP-BUS devices. Command injection can occur in the WebHMI component. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/de-de/advisories/vde-2019-007 - http://www.securityfocus.com/bid/107596
CVE ID: CVE-2019-9744 State: PUBLISHED Published: 2019-03-26T19:50:47 Last Updated: 2024-08-04T22:01:54.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attackers arriving from the same source IP address as an authenticated user, because this IP address is used as a session identifier. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/de-de/advisories/vde-2019-006 - https://ics-cert.us-cert.gov/advisories/ICSA-19-155-02 - http://www.securityfocus.com/bid/108576
CVE ID: CVE-2019-9745 State: PUBLISHED Published: 2019-10-14T14:19:02 Last Updated: 2024-08-04T22:01:54.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: CloudCTI HIP Integrator Recognition Configuration Tool allows privilege escalation via its EXQUISE integration. This tool communicates with a service (Recognition Update Client Service) via an insecure communication channel (Named Pipe). The data (JSON) sent via this channel is used to import data from CRM software using plugins (.dll files). The plugin to import data from the EXQUISE software (DatasourceExquiseExporter.dll) can be persuaded to start arbitrary programs (including batch files) that are executed using the same p
iseExporter.dll) can be persuaded to start arbitrary programs (including batch files) that are executed using the same privileges as Recognition Update Client Service (NT AUTHORITY\SYSTEM), thus elevating privileges. This occurs because a higher-privileged process executes scripts from a directory writable by a lower-privileged user. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudcti.nl/Site/Security - https://github.com/KPN-CISO/CVE-2019-9745/blob/master/README.md