Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-19104 State: PUBLISHED Published: 2020-04-22T14:31:55 Last Updated: 2024-08-05T02:09:39.458Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: ABB, Busch-Jaeger Products: TG/S 3.2 Telephone Gateway, 6186/11 Telefon-Gateway Problem Types: CWE-287 Description: The web server in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows access to different endpoints of the application without authenticating by accessing a specific uniform resource locator (URL) , violating the access-control (ACL) rules. This issue allows obtaining sensitive information that may aid in further attacks and privilege escalation. Additional Ana
is issue allows obtaining sensitive information that may aid in further attacks and privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107680A3921&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2019-19105 State: PUBLISHED Published: 2020-04-22T14:35:17 Last Updated: 2024-08-05T02:09:39.293Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ABB, Busch-Jaeger Products: TG/S 3.2 Telephone Gateway, 6186/11 Telefon-Gateway Problem Types: CWE-256 Description: The backup function in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway saves the current settings and configuration of the application, including credentials of existing user accounts and other configuration's credentials in plaintext. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107680A
nalyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107680A3921&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2019-19106 State: PUBLISHED Published: 2020-04-22T14:37:11 Last Updated: 2024-08-05T02:09:39.361Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: ABB, Busch-Jaeger Products: TG/S 3.2 Telephone Gateway, 6186/11 Telefon-Gateway Problem Types: CWE-264 Description: Improper implementation of Access Control in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows an unauthorized user to access data marked as restricted, such as viewing or editing user profiles and application settings. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107680A3921&Lang
tes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107680A3921&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2019-19107 State: PUBLISHED Published: 2020-04-22T14:38:59 Last Updated: 2024-08-05T02:09:39.410Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ABB, Busch-Jaeger Products: TG/S 3.2 Telephone Gateway, 6186/11 Telefon-Gateway Problem Types: CWE-264 Description: The Configuration pages in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway for user profiles and services transfer the password in plaintext (although hidden when displayed). Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107680A3921&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2019-19108 State: PUBLISHED Published: 2020-04-20T21:48:29 Last Updated: 2024-08-05T02:09:39.340Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: B&R Products: Automation Runtime Problem Types: CWE-798 Description: An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP. Additional Analyst Notes: - CVE Program Container: References: - https://www.br-automation.com/en/downloads/012020-automation-runtime-snmp-authentication-weakness/ - https://www.us-cert.gov/ics/advisories/icsa-2
com/en/downloads/012020-automation-runtime-snmp-authentication-weakness/ - https://www.us-cert.gov/ics/advisories/icsa-20-051-01
CVE ID: CVE-2019-19109 State: PUBLISHED Published: 2020-06-15T13:10:44 Last Updated: 2024-08-05T02:09:39.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wpForo plugin 1.6.5 for WordPress allows wp-admin/admin.php?page=wpforo-usergroups CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/Sh0ckFR/status/1257298443527053313
CVE ID: CVE-2019-19110 State: PUBLISHED Published: 2020-06-15T13:10:47 Last Updated: 2024-08-05T02:09:39.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases s parameter. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/Sh0ckFR/status/1257298443527053313
CVE ID: CVE-2019-19111 State: PUBLISHED Published: 2020-06-15T13:10:49 Last Updated: 2024-08-05T02:09:39.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases langid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/Sh0ckFR/status/1257298443527053313
CVE ID: CVE-2019-19112 State: PUBLISHED Published: 2020-06-15T13:10:41 Last Updated: 2024-08-05T02:09:39.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wpForo plugin 1.6.5 for WordPress allows XSS involving the wpf-dw-td-value class of dashboard.php. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/Sh0ckFR/status/1257298443527053313
CVE ID: CVE-2019-19113 State: PUBLISHED Published: 2019-11-18T16:56:58 Last Updated: 2024-08-05T02:09:39.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: main/resources/mapper/NewBeeMallGoodsMapper.xml in newbee-mall (aka New Bee) before 2019-10-23 allows search?goodsCategoryId=&keyword= SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/newbee-ltd/newbee-mall/issues/1
CVE ID: CVE-2019-19115 State: PUBLISHED Published: 2020-10-08T21:33:05 Last Updated: 2024-08-05T02:09:39.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: An escalation of privilege vulnerability in Nahimic APO Software Component Driver 1.4.2, 1.5.0, 1.5.1, 1.6.1 and 1.6.2 allows an attacker to execute code with SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - https://safebreach.com/Post/Nahimic-APO-Software-Component-Driver-Deployed-with-MSI-Computers-DLL-Search-Order-Hijacking-and-Potential-Abuses-CVE-2019-19115
CVE ID: CVE-2019-19117 State: PUBLISHED Published: 2019-11-18T21:03:51 Last Updated: 2024-08-05T02:09:39.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: /usr/lib/lua/luci/controller/admin/autoupgrade.lua on PHICOMM K2(PSG1218) V22.5.9.163 devices allows remote authenticated users to execute any command via shell metacharacters in the cgi-bin/luci autoUpTime parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/decentL/IoT/blob/master/Phicomm/remote-code-execution.md
CVE ID: CVE-2019-19118 State: PUBLISHED Published: 2019-12-02T13:16:34 Last Updated: 2024-08-05T02:09:39.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Django 2.1 before 2.1.15 and 2.2 before 2.2.8 allows unintended model editing. A Django model admin displaying inline related models, where the user has view-only permissions to a parent model but edit permissions to the inline model, would be presented with an editing UI, allowing POST requests, for updating the inline model. Directly editing the view-only parent model was not possible, but the parent model's save() method was called, triggering potential side effects, and causing pre and post-save signal handlers to be invo
's save() method was called, triggering potential side effects, and causing pre and post-save signal handlers to be invoked. (To resolve this, the Django admin is adjusted to require edit permissions on the parent model in order for inline models to be editable.) Additional Analyst Notes: - CVE Program Container: References: - https://docs.djangoproject.com/en/dev/releases/security/ - http://www.openwall.com/lists/oss-security/2019/12/02/1 - https://groups.google.com/forum/#%21topic/django-announce/GjGqDvtNmWQ - https://www.djangoproject.com/weblog/2019/dec/02/security-releases/ - https://security.netapp.com/advisory/ntap-20191217-0003/ - https://lists.fedoraproject.org/archives/list/package
ases/ - https://security.netapp.com/advisory/ntap-20191217-0003/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6R4HD22PVEVQ45H2JA2NXH443AYJOPL5/ - https://security.gentoo.org/glsa/202004-17
CVE ID: CVE-2019-19119 State: PUBLISHED Published: 2020-02-03T14:55:06 Last Updated: 2024-08-05T02:09:39.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PRTG 7.x through 19.4.53. Due to insufficient access control on local registry keys for the Core Server Service, a non-administrative user on the local machine is able to access administrative credentials. Additional Analyst Notes: - CVE Program Container: References: - https://blog.paessler.com - https://blog.paessler.com/prtg-release-19.4.54-includes-2-brand-new-sensors-for-disk-and-storage - https://www.paessler.com/prtg/history/preview - https://www.ptsecurity.com/ww-en/about/news/positive-techn
and-storage - https://www.paessler.com/prtg/history/preview - https://www.ptsecurity.com/ww-en/about/news/positive-technologies-helps-in-eliminating-vulnerability-in-software-for-monitoring-visualizing-and-controlling-conditions-of-it-infrastructure/
CVE ID: CVE-2019-19120 State: REJECTED Published: 2020-08-21T16:32:10 Last Updated: 2020-08-21T16:32:10 Description: No description available.
CVE ID: CVE-2019-19121 State: REJECTED Published: 2020-08-21T16:33:01 Last Updated: 2020-08-21T16:33:01 Description: No description available.
CVE ID: CVE-2019-19123 State: REJECTED Published: 2020-08-21T16:34:03 Last Updated: 2020-08-21T16:34:03 Description: No description available.
CVE ID: CVE-2019-19126 State: PUBLISHED Published: 2019-11-19T00:00:00 Last Updated: 2024-08-05T02:09:39.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for a setuid program. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=25204 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org
ugzilla/show_bug.cgi?id=25204 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZFJ5E7NWOL6ROE5QVICHKIOUGCPFJVUH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4FQ5LC6JOYSOYFPRUZ4S45KL6IP3RPPZ/ - https://usn.ubuntu.com/4416-1/ - https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html
CVE ID: CVE-2019-19127 State: PUBLISHED Published: 2020-03-25T14:18:38 Last Updated: 2024-08-05T02:09:39.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication bypass vulnerability is present in the standalone SITS:Vision 9.7.0 component of Tribal SITS in its default configuration, related to unencrypted communications sent by the client each time it is launched. This occurs because the Uniface TLS Driver is not enabled by default. This vulnerability allows attackers to gain access to credentials or execute arbitrary SQL queries on the SITS backend as long as they have access to the client executable or can intercept traffic from a user who does. Additional Analyst
d as long as they have access to the client executable or can intercept traffic from a user who does. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2020/Mar/26 - http://seclists.org/fulldisclosure/2020/Mar/26 - http://packetstormsecurity.com/files/156903/SITS-Vision-9.7.0-Authentication-Bypass.html
CVE ID: CVE-2019-19129 State: PUBLISHED Published: 2019-11-26T15:25:11 Last Updated: 2024-08-05T02:09:39.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Afterlogic WebMail Pro 8.3.11, and WebMail in Afterlogic Aurora 8.3.11, allows Remote Stored XSS via an attachment name. Additional Analyst Notes: - CVE Program Container: References: - https://afterlogic.com - https://auroramail.wordpress.com/2019/11/25/vulnerability-closed-in-webmail-and-aurora-remote-stored-xss-in-attachments-name/
CVE ID: CVE-2019-19133 State: PUBLISHED Published: 2019-12-04T18:55:14 Last Updated: 2024-08-05T02:09:39.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CSS Hero plugin through 4.0.3 for WordPress is prone to reflected XSS via the URI in a csshero_action=edit_page request because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary JavaScript in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookies or launch other attacks. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/Dec/6 - http://seclists.o
Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/Dec/6 - http://seclists.org/fulldisclosure/2019/Dec/6 - https://wpvulndb.com/vulnerabilities/9966 - http://packetstormsecurity.com/files/155558/WordPress-CSS-Hero-4.0.3-Cross-Site-Scripting.html
CVE ID: CVE-2019-19134 State: PUBLISHED Published: 2020-02-26T14:51:33 Last Updated: 2024-08-05T02:09:39.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Hero Maps Premium plugin 2.2.1 and prior for WordPress is prone to unauthenticated XSS via the views/dashboard/index.php p parameter because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to inject HTML or arbitrary JavaScript within the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based tokens or to launch other attacks. Additional Analyst Notes: - CVE Program Container: References: - https://heroplugins.com/pr
or to launch other attacks. Additional Analyst Notes: - CVE Program Container: References: - https://heroplugins.com/product/maps/ - https://www.hooperlabs.xyz/disclosures/cve-2019-19134.php - https://heroplugins.com/changelogs/hmaps/changelog.txt - https://wpvulndb.com/vulnerabilities/10095
CVE ID: CVE-2019-19135 State: PUBLISHED Published: 2020-03-16T15:47:24 Last Updated: 2024-08-05T02:09:39.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OPC Foundation OPC UA .NET Standard codebase 1.4.357.28, servers do not create sufficiently random numbers in OPCFoundation.NetStandard.Opc.Ua before 1.4.359.31, which allows man in the middle attackers to reuse encrypted user credentials sent over the network. Additional Analyst Notes: - CVE Program Container: References: - https://opcfoundation.org/security-bulletins/ - https://opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2019-19135.pdf
CVE ID: CVE-2019-19138 State: PUBLISHED Published: 2021-12-15T07:07:47 Last Updated: 2024-08-05T02:09:39.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ivanti Workspace Control before 10.4.50.0 allows attackers to degrade integrity. Additional Analyst Notes: - CVE Program Container: References: - https://forums.ivanti.com/s/article/Security-Alert-Ivanti-RES-Workspace-Manager-November-2019 - https://forums.ivanti.com/s/article/Enhanced-Security-Update-IWC-components
CVE ID: CVE-2019-19141 State: PUBLISHED Published: 2019-12-19T22:28:46 Last Updated: 2024-08-05T02:09:39.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Camera Upload functionality in Plex Media Server through 1.18.2.2029 allows remote authenticated users to write files anywhere the user account running the Plex Media Server has permissions. This allows remote code execution via a variety of methods, such as (on a default Ubuntu installation) creating a .ssh folder in the plex user's home directory via directory traversal, uploading an SSH authorized_keys file there, and logging into the host as the Plex user via SSH. Additional Analyst Notes: - CVE Program Container: Ref
s file there, and logging into the host as the Plex user via SSH. Additional Analyst Notes: - CVE Program Container: References: - https://forums.plex.tv/t/security-camera-upload/507289
CVE ID: CVE-2019-19142 State: PUBLISHED Published: 2020-01-17T01:29:49 Last Updated: 2024-08-05T02:09:39.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmware.cfg URI. Additional Analyst Notes: - CVE Program Container: References: - https://fireshellsecurity.team/hack-n-routers/ - http://packetstormsecurity.com/files/156589/Intelbras-Wireless-N-150Mbps-WRN240-Authentication-Bypass.html
CVE ID: CVE-2019-19143 State: PUBLISHED Published: 2020-01-27T18:17:00 Last Updated: 2024-08-05T02:09:39.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-LINK TL-WR849N 0.9.1 4.16 devices do not require authentication to replace the firmware via a POST request to the cgi/softup URI. Additional Analyst Notes: - CVE Program Container: References: - https://fireshellsecurity.team/hack-n-routers/ - http://packetstormsecurity.com/files/156586/TP-Link-TL-WR849N-0.9.1-4.16-Authentication-Bypass.html
CVE ID: CVE-2019-19144 State: PUBLISHED Published: 2025-08-01T00:00:00.000Z Last Updated: 2025-08-04T16:54:44.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML External Entity Injection vulnerability in Quantum DXi6702 2.3.0.3 (11449-53631 Build304) devices via rest/Users?action=authenticate. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.quantum.com/products/disk-basedbackup/dxi6700/index.aspx - https://github.com/atredispartners/advisories/blob/master/ATREDIS-2019-0004.md
CVE ID: CVE-2019-19145 State: PUBLISHED Published: 2025-08-01T00:00:00.000Z Last Updated: 2025-08-01T13:31:24.547Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: Quantum Products: SuperLoader Problem Types: CWE-521 Description: Quantum SuperLoader 3 V94.0 005E.0h devices allow attackers to access the hardcoded fa account because there are only 65536 possible passwords. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.quantum.com/en/products/tape-storage/superloader-3/ - https://github.com/atredispartners/advisories/blob/master/ATREDIS-2019-0005.md - https://www.dell.com/community/PowerVault/PowerVault-124T-Username-Password/td-p/
ies/blob/master/ATREDIS-2019-0005.md - https://www.dell.com/community/PowerVault/PowerVault-124T-Username-Password/td-p/3004075
CVE ID: CVE-2019-19148 State: PUBLISHED Published: 2020-03-20T17:17:12 Last Updated: 2024-08-05T02:09:39.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tellabs Optical Line Terminal (OLT) 1150 devices allow Remote Command Execution via the -l option to TELNET or SSH. Tellabs has addressed this issue in the SR30.1 and SR31.1 release on February 18, 2020. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ellwoodthewood/tellabs_rce - https://docs.tellabs.com/articles/#%21vulnerability-response/cve-2019-19148
CVE ID: CVE-2019-19150 State: PUBLISHED Published: 2019-12-23T17:35:53 Last Updated: 2024-08-05T02:09:39.374Z Vendors: F5 Products: BIG-IP APM Problem Types: Information disclosure Description: On versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, the BIG-IP APM system logs the client-session-id when a per-session policy is attached to the virtual server with debug logging enabled. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K37890841
CVE ID: CVE-2019-19151 State: PUBLISHED Published: 2019-12-23T18:03:02 Last Updated: 2024-08-05T02:09:39.287Z Vendors: F5 Products: BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager Problem Types: Privilege Escalation Description: On BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IQ versions 7.0.0, 6.0.0-6.1.0, and 5.0.0-5.4.0, iWorkflow version 2.3.0, and Enterprise Manager version 3.1.1, authenticated users granted TMOS Shell (tmsh) privileges are able access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to access objects on the file system whi
d by tmsh restrictions. This allows for authenticated, low privileged attackers to access objects on the file system which would not normally be allowed. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K21711352
CVE ID: CVE-2019-19152 State: REJECTED Published: 2022-07-07T19:44:27 Last Updated: 2022-07-07T19:44:27 Description: No description available.
CVE ID: CVE-2019-19153 State: REJECTED Published: 2022-07-07T19:44:30 Last Updated: 2022-07-07T19:44:30 Description: No description available.
CVE ID: CVE-2019-19154 State: REJECTED Published: 2022-07-07T19:44:33 Last Updated: 2022-07-07T19:44:33 Description: No description available.
CVE ID: CVE-2019-19155 State: REJECTED Published: 2022-07-07T19:44:36 Last Updated: 2022-07-07T19:44:36 Description: No description available.
CVE ID: CVE-2019-19156 State: REJECTED Published: 2022-07-07T19:44:38 Last Updated: 2022-07-07T19:44:38 Description: No description available.
CVE ID: CVE-2019-19157 State: REJECTED Published: 2022-07-07T19:44:42 Last Updated: 2022-07-07T19:44:42 Description: No description available.
CVE ID: CVE-2019-19158 State: REJECTED Published: 2022-07-07T19:44:45 Last Updated: 2022-07-07T19:44:45 Description: No description available.
CVE ID: CVE-2019-19159 State: REJECTED Published: 2022-07-07T19:44:50 Last Updated: 2022-07-07T19:44:50 Description: No description available.
CVE ID: CVE-2019-19160 State: PUBLISHED Published: 2020-06-29T13:32:06 Last Updated: 2024-08-05T02:09:39.386Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: Cabsoftware Products: Reportexpress ProPlus Problem Types: CWE-353 Description: Reportexpress ProPlus contains a vulnerability that could allow an arbitrary code execution by inserted VBscript into the configure file(rxp). Additional Analyst Notes: - CVE Program Container: References: - http://www.cabsoftware.com:8080/HomePage2015A/html/ - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35474
CVE ID: CVE-2019-19161 State: PUBLISHED Published: 2020-06-30T13:34:40 Last Updated: 2024-08-05T02:09:39.343Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: TOBESOFT.CO.LTD Products: MIPLATFORM Problem Types: Missing support for integrity check Description: CyMiInstaller322 ActiveX which runs MIPLATFORM downloads files required to run applications. A vulnerability in downloading files by CyMiInstaller322 ActiveX caused by an attacker to download randomly generated DLL files and MIPLATFORM to load those DLLs due to insufficient verification. Additional Analyst Notes: - CVE Program Container: References: - https://www.tobesoft.com/Index.do - https://www.boho.or
Additional Analyst Notes: - CVE Program Container: References: - https://www.tobesoft.com/Index.do - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35479