Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ANCE X224, SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE
SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XB-200 family, SCALANCE XC-200, SCALANCE XF-200BA, SCALANCE XF201-3P IRT, SCALANCE XF202-2P IRT, SCALANCE XF204, SCALANCE XF204-2, SCALANCE XF204-2BA IRT, SCALANCE XF204IRT, SCALANCE XF206-1, SCALANCE XF208, SCALANCE XM-400 family, SCALANCE XP-200, SCALANCE XR-300WG family, SCALANCE XR-500 family, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front),
E XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V,
CALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIMATIC CP 1616 and CP 1604, SIMATIC CP 343-1, SIMATIC CP 343-1 Advanced, SIMATIC CP 343-1 ERPC, SIMATIC CP 343-1 Lean, SIMATIC CP 443-1, SIMATIC CP 443-1 Advanced, SIMATIC CP 443-1 OPC UA, SIMATIC ET 200AL IM 157-1 PN, SIMATIC ET 200M IM 153-4 PN IO HF (incl. SIPLUS variants), SIMATIC ET 200M IM 153-4 PN IO ST (incl. SIPLUS variants), SIMATIC ET 200MP IM 155-5 PN HF, SIMATIC ET 200MP IM 155-5 PN ST, SIMATIC ET 200pro IM 1
IO ST (incl. SIPLUS variants), SIMATIC ET 200MP IM 155-5 PN HF, SIMATIC ET 200MP IM 155-5 PN ST, SIMATIC ET 200pro IM 154-3 PN HF, SIMATIC ET 200pro IM 154-4 PN HF, SIMATIC ET 200SP IM 155-6 PN BA, SIMATIC ET 200SP IM 155-6 PN HF, SIMATIC ET 200SP IM 155-6 PN ST, SIMATIC ET 200SP IM 155-6 PN ST BA, SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN, 4AO U/I 4xM12, SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12, SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12, SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 8DO, DC
RTD/TC 8xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12, SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12, SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN: IO-Link Master, SIMATIC ET200S (incl. SIPLUS variants), SIMATIC IPC Support, Package for VxWorks, SIMATIC MV420 SR-B, SIMATIC MV420 SR-B Body, SIMATIC MV420 SR-P, SIMATIC MV420 SR-P Body, SIMATIC MV440 HR, SIMATIC MV440 SR, SIMATIC MV440 UR, SIMATIC PN/PN Coupler (incl. SIPLUS NET variants), SIMATIC RF180C, SIMATIC RF182C, SIMATIC RF600R family, SIMOTION C, SIMOTION D, SIMOTION P, SINAMICS DCP, SIPLUS ET 200MP IM 155-5 PN HF, SIPLUS ET 200MP IM 155-5
600R family, SIMOTION C, SIMOTION D, SIMOTION P, SINAMICS DCP, SIPLUS ET 200MP IM 155-5 PN HF, SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL, SIPLUS ET 200MP IM 155-5 PN ST, SIPLUS ET 200MP IM 155-5 PN ST TX RAIL, SIPLUS ET 200SP IM 155-6 PN HF, SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL, SIPLUS ET 200SP IM 155-6 PN ST, SIPLUS ET 200SP IM 155-6 PN ST BA, SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL, SIPLUS ET 200SP IM 155-6 PN ST TX RAIL, SIPLUS NET CP 343-1, SIPLUS NET CP 343-1 Advanced, SIPLUS NET CP 343-1 Lean, SIPLUS NET CP 443-1, SIPLUS NET CP 443-1 Advanced, SIPLUS NET SCALANCE X308-2, SOFTNET-IE PNIO Problem Types: CWE-400 Description: Profinet-IO (PNIO) stack versions prior V06.00 do not properly
8-2, SOFTNET-IE PNIO Problem Types: CWE-400 Description: Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could lead to a denial of service condition due to lack of memory for devices that include a vulnerable version of the stack. The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE
he vulnerability to compromise the availability of the device. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-780073.pdf - https://cert-portal.siemens.com/productcert/html/ssa-780073.html
CVE ID: CVE-2019-13947 State: PUBLISHED Published: 2019-12-12T19:08:46 Last Updated: 2024-08-05T00:05:43.988Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:F/RL:U/RC:C) Vendors: Siemens Products: Control Center Server (CCS) Problem Types: CWE-317 Description: A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The user configuration menu in the web interface of the Control Center Server (CCS) transfers user passwords in clear to the client (browser). An attacker with administrative privileges for the web interface could be able to read (and not only reset) passwords of other CCS users. Additional Analyst Notes: - CVE Program
terface could be able to read (and not only reset) passwords of other CCS users. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf
CVE ID: CVE-2019-13948 State: PUBLISHED Published: 2019-07-18T15:56:39 Last Updated: 2024-08-05T00:05:44.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: SyGuestBook A5 Version 1.2 allows stored XSS because the isValidData function in include/functions.php does not properly block XSS payloads, as demonstrated by a crafted use of the onerror attribute of an IMG element. Additional Analyst Notes: - CVE Program Container: References: - https://fragrant10.github.io/2019/02/22/SyGuestBookA5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.html - https://github.com/fragrant10/fragrant10.github.io/blob/master/_posts/2019-02-22-SyGuestBookA5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md
CVE ID: CVE-2019-13949 State: PUBLISHED Published: 2019-07-18T15:56:52 Last Updated: 2024-08-05T00:05:44.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index.php?c=Administrator&a=update admin password change. Additional Analyst Notes: - CVE Program Container: References: - https://fragrant10.github.io/2019/02/22/SyGuestBookA5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.html - https://github.com/fragrant10/fragrant10.github.io/blob/master/_posts/2019-02-22-SyGuestBookA5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md
CVE ID: CVE-2019-13950 State: PUBLISHED Published: 2019-07-18T15:57:04 Last Updated: 2024-08-05T00:05:43.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php?c=admin&a=index in SyGuestBook A5 Version 1.2 has stored XSS via a reply to a comment. Additional Analyst Notes: - CVE Program Container: References: - https://fragrant10.github.io/2019/02/22/SyGuestBookA5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.html - https://github.com/fragrant10/fragrant10.github.io/blob/master/_posts/2019-02-22-SyGuestBookA5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md
CVE ID: CVE-2019-13951 State: PUBLISHED Published: 2019-07-18T16:14:03 Last Updated: 2024-08-05T00:05:43.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: The set_ipv4() function in zscan_rfc1035.rl in gdnsd 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv4 address in zone data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gdnsd/gdnsd/issues/185
CVE ID: CVE-2019-13952 State: PUBLISHED Published: 2019-07-18T16:14:15 Last Updated: 2024-08-05T00:05:43.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: The set_ipv6() function in zscan_rfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gdnsd/gdnsd/issues/185
CVE ID: CVE-2019-13953 State: PUBLISHED Published: 2019-09-06T15:50:46 Last Updated: 2024-08-05T00:05:44.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy (BLE) authentication module of YI M1 Mirrorless Camera V3.2-cn. An attacker can send a set of BLE commands to trigger this vulnerability, resulting in sensitive data leakage (e.g., personal photos). An attacker can also control the camera to record or take a picture after bypassing authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.cnvd.org.cn/flaw/show/CNVD-2019-23494
CVE ID: CVE-2019-13954 State: PUBLISHED Published: 2019-07-26T12:15:12 Last Updated: 2024-08-05T00:05:44.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to memory exhaustion. By sending a crafted HTTP request, an authenticated remote attacker can crash the HTTP server and in some circumstances reboot the system. Malicious code cannot be injected. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2019/Jul/20 - http://packetstormsecurity.com/files/153733/Mikrotik-RouterOS-Resource-Stack-Exhaustion.html
CVE ID: CVE-2019-13955 State: PUBLISHED Published: 2019-07-26T12:13:50 Last Updated: 2024-08-05T00:05:43.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to stack exhaustion. By sending a crafted HTTP request, an authenticated remote attacker can crash the HTTP server via recursive parsing of JSON. Malicious code cannot be injected. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2019/Jul/20 - http://packetstormsecurity.com/files/153733/Mikrotik-RouterOS-Resource-Stack-Exhaustion.html
CVE ID: CVE-2019-13956 State: PUBLISHED Published: 2019-07-18T17:23:11 Last Updated: 2024-08-05T00:05:44.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH4_0df5_language=en to 4gH4_0df5_language=en'.phpinfo().'; (if the random prefix 4gH4_0df5_ were used). Additional Analyst Notes: - CVE Program Container: References: - http://esoln.net/esoln/blog/2019/06/14/discuzml-v-3-x-code-injection-vulnerability/
CVE ID: CVE-2019-13957 State: PUBLISHED Published: 2019-10-02T18:46:07 Last Updated: 2024-08-05T00:05:44.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Umbraco 7.3.8, there is SQL Injection in the backoffice/PageWApprove/PageWApproveApi/GetInpectSearch method via the nodeName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://our.umbraco.com/download/releases/738/ - https://gist.github.com/shiham101/d1de44d1dcf2c33d401ef2f8cbb04f9f
CVE ID: CVE-2019-13959 State: PUBLISHED Published: 2019-07-18T18:51:44 Last Updated: 2024-08-05T00:05:44.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Bento4 1.5.1-627, AP4_DataBuffer::SetDataSize does not handle reallocation failures, leading to a memory copy into a NULL pointer. This is different from CVE-2018-20186. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/394
CVE ID: CVE-2019-13960 State: PUBLISHED Published: 2019-07-18T18:52:29 Last Updated: 2024-08-05T00:05:44.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's expectation, for use cases in which this memory usage would be a denial of service, is that the application should interpret libjpeg warnings as fatal errors (aborting decompression) and/or set limits on resource consumption or image sizes Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libjpe
ce consumption or image sizes Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libjpeg-turbo/libjpeg-turbo/issues/337 - https://libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
CVE ID: CVE-2019-13961 State: PUBLISHED Published: 2019-07-18T19:16:02 Last Updated: 2024-08-05T00:05:44.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF vulnerability was found in flatCore before 1.5, leading to the upload of arbitrary .php files via acp/core/files.upload-script.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatCore/flatCore-CMS/issues/39 - https://github.com/flatCore/flatCore-CMS/compare/35fee64...de90af3
CVE ID: CVE-2019-13962 State: PUBLISHED Published: 2019-07-18T19:58:30 Last Updated: 2024-08-05T00:05:43.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=vlc/vlc-3.0.git%3Ba=commit%3Bh=2b4f9d0b0e0861f262c90e9b9b94e7d53b864509 - https://trac.videolan.org/vlc/ticket/22240 - http://www.securityfocus.com/bid/109306 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html - http://lists.o
curityfocus.com/bid/109306 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html - https://www.debian.org/security/2019/dsa-4504 - https://seclists.org/bugtraq/2019/Aug/36 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00081.html - https://security.gentoo.org/glsa/201909-02 - https://usn.ubuntu.com/4131-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html
CVE ID: CVE-2019-13965 State: PUBLISHED Published: 2020-02-14T21:01:42 Last Updated: 2024-08-05T00:05:44.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Because of a lack of sanitization around error messages, multiple Reflective XSS issues exist in iTop through 2.6.0 via the param_file parameter to webservices/export.php, webservices/cron.php, or env-production/itop-backup/backup.php. By default, any XSS sent to the administrator can be transformed to remote command execution because of CVE-2018-10642 (still working through 2.6.0) The Reflective XSS can also become a stored XSS within the same account because of another vulnerability. Additional Analyst Notes: - CVE Program
o become a stored XSS within the same account because of another vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.itophub.io/wiki/page?id=latest%3Arelease%3Achange_log - https://0day.love/itop_vulnerabilities_disclosure.pdf
CVE ID: CVE-2019-13966 State: PUBLISHED Published: 2020-02-14T21:02:47 Last Updated: 2024-08-05T00:05:44.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: In iTop through 2.6.0, an XSS payload can be delivered in certain fields (such as icon) of the XML file used to build the dashboard. This is similar to CVE-2015-6544 (which is only about the dashboard title). Additional Analyst Notes: - CVE Program Container: References: - https://www.itophub.io/wiki/page?id=latest%3Arelease%3Achange_log - https://0day.love/itop_vulnerabilities_disclosure.pdf
CVE ID: CVE-2019-13967 State: PUBLISHED Published: 2020-02-14T21:03:45 Last Updated: 2024-08-05T00:05:44.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: iTop 2.2.0 through 2.6.0 allows remote attackers to cause a denial of service (application outage) via many requests to launch a compile operation. The requests use the pages/exec.php?exec_env=production&exec_module=itop-hub-connector&exec_page=ajax.php&operation=compile URI. This only affects the community version. Additional Analyst Notes: - CVE Program Container: References: - https://www.itophub.io/wiki/page?id=latest%3Arelease%3Achange_log - https://0day.love/itop_vulnerabilities_disclosure.pdf
CVE ID: CVE-2019-13969 State: PUBLISHED Published: 2019-07-19T05:32:00 Last Updated: 2024-08-05T00:05:44.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Metinfo 6.x allows SQL Injection via the id parameter in an admin/index.php?n=ui_set&m=admin&c=index&a=doget_text_content&table=lang&field=1 request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhuxianjin/vuln_repo/blob/master/Metinfo%206.x%20Background%20SQL%20injection.md
CVE ID: CVE-2019-13970 State: PUBLISHED Published: 2019-07-19T05:45:06 Last Updated: 2024-08-05T00:05:43.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AntSwordProject/antSword/issues/151 - https://github.com/AntSwordProject/antSword/commit/4b932e81447b4b0475f4fce45525547395c249d3 - https://github.com/AntSwordProject/antSword/compare/ed01dea...834063a
CVE ID: CVE-2019-13971 State: PUBLISHED Published: 2019-07-19T06:07:41 Last Updated: 2024-08-05T00:05:44.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: OTCMS 3.81 allows XSS via the mode parameter in an apiRun.php?mudi=autoRun request. Additional Analyst Notes: - CVE Program Container: References: - https://cisk123456.blogspot.com/2019/05/otcms-xss.html
CVE ID: CVE-2019-13972 State: PUBLISHED Published: 2019-07-19T06:07:55 Last Updated: 2024-08-05T00:05:44.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: LayerBB 1.1.3 allows XSS via the application/commands/new.php pm_title variable, a related issue to CVE-2019-17997. Additional Analyst Notes: - CVE Program Container: References: - http://blog.topsec.com.cn/%E5%A4%A9%E8%9E%8D%E4%BF%A1%E5%85%B3%E4%BA%8Elayerbb-1-1-3-xss%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/
CVE ID: CVE-2019-13973 State: PUBLISHED Published: 2019-07-19T06:08:05 Last Updated: 2024-08-05T00:05:44.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: LayerBB 1.1.3 allows admin/general.php arbitrary file upload because the custom_logo filename suffix is not restricted, and .php may be used. Additional Analyst Notes: - CVE Program Container: References: - http://blog.topsec.com.cn/%E5%A4%A9%E8%9E%8D%E4%BF%A1%E5%85%B3%E4%BA%8Elayerbb-1-1-3-xss%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/
CVE ID: CVE-2019-13974 State: PUBLISHED Published: 2019-07-19T06:08:13 Last Updated: 2024-08-05T00:05:44.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: LayerBB 1.1.3 allows conversations.php/cmd/new CSRF. Additional Analyst Notes: - CVE Program Container: References: - http://blog.topsec.com.cn/%E5%A4%A9%E8%9E%8D%E4%BF%A1%E5%85%B3%E4%BA%8Elayerbb-1-1-3-xss%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/
CVE ID: CVE-2019-13975 State: PUBLISHED Published: 2019-09-04T15:24:28 Last Updated: 2024-08-05T00:05:44.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: eGain Chat 15.0.3 allows HTML Injection. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40dr.spitfire/html-injection-cve-2019-13975-a33aa8ad4d11
CVE ID: CVE-2019-13976 State: PUBLISHED Published: 2019-09-04T15:26:25 Last Updated: 2024-08-05T00:05:44.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: eGain Chat 15.0.3 allows unrestricted file upload. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40dr.spitfire/bypass-file-upload-restrictions-cve-2019-13976-35682bd1fdd3
CVE ID: CVE-2019-13977 State: PUBLISHED Published: 2019-07-19T06:50:41 Last Updated: 2024-08-05T00:05:44.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Ovidentia 8.4.3 has XSS via tg=groups, tg=maildoms&idx=create&userid=0&bgrp=y, tg=delegat, tg=site&idx=create, tg=site&item=4, tg=admdir&idx=mdb&id=1, tg=notes&idx=Create, tg=admfaqs&idx=Add, or tg=admoc&idx=addoc&item=. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Kitsun3Sec/exploits/blob/master/cms/ovidentia/exploitXSSOvidentia.txt - http://packetstormsecurity.com/files/153737/Ovidentia-8.4.3-Cross-Site-Scripting.html
CVE ID: CVE-2019-13978 State: PUBLISHED Published: 2019-07-19T06:50:52 Last Updated: 2024-08-05T00:05:44.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ovidentia 8.4.3 has SQL Injection via the id parameter in an index.php?tg=delegat&idx=mem request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Kitsun3Sec/exploits/blob/master/cms/ovidentia/exploitSQLIOvidentia.txt - http://packetstormsecurity.com/files/153738/Ovidentia-8.4.3-SQL-Injection.html
CVE ID: CVE-2019-13979 State: PUBLISHED Published: 2019-07-19T14:18:16 Last Updated: 2024-08-05T00:05:44.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Directus 7 API before 2.2.1, uploading of PHP files is not blocked, leading to uploads/_/originals remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/directus/api/issues/979 - https://github.com/directus/api/projects/42
CVE ID: CVE-2019-13980 State: PUBLISHED Published: 2019-07-19T14:18:08 Last Updated: 2024-08-05T00:05:44.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Directus 7 API through 2.3.0, uploading of PHP files is blocked only when the Apache HTTP Server is used, leading to uploads/_/originals remote code execution with nginx. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/directus/api/issues/979
CVE ID: CVE-2019-13981 State: PUBLISHED Published: 2019-07-19T14:17:58 Last Updated: 2024-08-05T00:05:44.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Directus 7 API through 2.3.0, remote attackers can read image files via a direct request for a filename under the uploads/_/originals/ directory. This is related to a configuration option in which the file collection can be non-public, but this option does not apply to the thumbnailer. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/directus/api/issues/987 - https://github.com/directus/api/issues/986