Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-5174 State: PUBLISHED Published: 2020-03-11T22:25:04 Last Updated: 2024-08-04T19:47:56.791Z Vendors: Wago Products: WAGO PFC200 Firmware Problem Types: command injection Description: An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted packet to trigger the parsing of this cache file.At 0x1e9fc the extracted subnetmask value from the xml file is used as an argument to /etc/config-tools/config_interfaces interface=X1 state=enabled subne
k value from the xml file is used as an argument to /etc/config-tools/config_interfaces interface=X1 state=enabled subnet-mask=<contents of subnetmask node> using sprintf(). This command is later executed via a call to system(). Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0962
CVE ID: CVE-2019-5175 State: PUBLISHED Published: 2020-03-11T22:25:02 Last Updated: 2024-08-04T19:47:56.623Z Vendors: Wago Products: WAGO PFC200 Problem Types: command injection Description: An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted packet to trigger the parsing of this cache file.At 0x1ea28 the extracted type value from the xml file is used as an argument to /etc/config-tools/config_interfaces interface=X1 state=enabled config-type
e from the xml file is used as an argument to /etc/config-tools/config_interfaces interface=X1 state=enabled config-type=<contents of type node> using sprintf(). This command is later executed via a call to system(). Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0962
CVE ID: CVE-2019-5176 State: PUBLISHED Published: 2020-03-11T23:24:58 Last Updated: 2024-08-04T19:47:56.814Z Vendors: Wago Products: WAGO PFC200 Problem Types: stack buffer overflow Description: An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file.The destination buffer sp+0x40 is overflowed with the call to sprintf() for any gateway values that are greater than 512-len(‘/etc/config-tools/config_default_gateway number=0 state=enabled value=‘) in length. A gateway value of length 0x7e2 will
/etc/config-tools/config_default_gateway number=0 state=enabled value=‘) in length. A gateway value of length 0x7e2 will cause the service to crash. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0963
CVE ID: CVE-2019-5177 State: PUBLISHED Published: 2020-03-11T23:25:07 Last Updated: 2024-08-04T19:47:56.623Z Vendors: Wago Products: WAGO PFC200 Problem Types: stack buffer overflow Description: An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). The destination buffer sp+0x440 is overflowed with the call to sprintf() for any domainname values that are greater than 1024-len(‘/etc/config-tools/edit_dns_server domain-name=‘) in length. A domainname value of length 0x3fa will cause the service to crash. Additional Analyst Notes: - CVE Program Container: References: - https://talo
gth 0x3fa will cause the service to crash. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0963
CVE ID: CVE-2019-5178 State: PUBLISHED Published: 2020-03-11T23:25:15 Last Updated: 2024-08-04T19:47:56.734Z Vendors: Wago Products: WAGO PFC200 Problem Types: stack buffer overflow Description: An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any hostname values that are greater than 1024-len(‘/etc/config-tools/change_hostname hostname=‘) in length. A hostname value of length 0x3fd will cause the service to
en(‘/etc/config-tools/change_hostname hostname=‘) in length. A hostname value of length 0x3fd will cause the service to crash. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0963
CVE ID: CVE-2019-5179 State: PUBLISHED Published: 2020-03-11T23:30:26 Last Updated: 2024-08-04T19:47:56.795Z Vendors: Wago Products: WAGO PFC200 Problem Types: stack buffer overflow Description: An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0963
CVE ID: CVE-2019-5180 State: PUBLISHED Published: 2020-03-11T23:30:46 Last Updated: 2024-08-04T19:47:56.691Z Vendors: Wago Products: WAGO PFC200 Problem Types: stack buffer overflow Description: An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any ip values that are greater than 1024-len(‘/etc/config-tools/config_interfaces interface=X1 state=enabled ip-address=‘) in length. A ip value of length 0x3da will ca
tc/config-tools/config_interfaces interface=X1 state=enabled ip-address=‘) in length. A ip value of length 0x3da will cause the service to crash. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0963
CVE ID: CVE-2019-5181 State: PUBLISHED Published: 2020-03-11T23:31:09 Last Updated: 2024-08-04T19:47:56.662Z Vendors: Wago Products: WAGO PFC200 Problem Types: stack buffer overflow Description: An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any subnetmask values th
f this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any subnetmask values that are greater than 1024-len(‘/etc/config-tools/config_interfaces interface=X1 state=enabled subnet-mask=‘) in length. A subnetmask value of length 0x3d9 will cause the service to crash. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0963
CVE ID: CVE-2019-5182 State: PUBLISHED Published: 2020-03-11T22:09:44 Last Updated: 2024-08-04T19:47:56.628Z Vendors: Wago Products: WAGO PFC200 Problem Types: stack buffer overflow Description: An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file.The destination buffer sp+0x440 is overflowed with the call to sprintf() for any type values that are greater than 1024-len(‘/etc/config-tools/config_interfaces interface=X1 state=enabled config-type=‘) in length. A type value of length 0x3d9 wil
etc/config-tools/config_interfaces interface=X1 state=enabled config-type=‘) in length. A type value of length 0x3d9 will cause the service to crash. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0963
CVE ID: CVE-2019-5183 State: PUBLISHED Published: 2020-01-25T17:59:18 Last Updated: 2024-08-04T19:47:56.673Z Vendors: n/a Products: AMD Problem Types: type confusion Description: An exploitable type confusion vulnerability exists in AMD ATIDXX64.DLL driver, versions 26.20.13031.10003, 26.20.13031.15006 and 26.20.13031.18002. A specially crafted pixel shader can cause a type confusion issue, leading to potential code execution. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered from VMware guest, affecting VMware host. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerabi
ng VMware host. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0964
CVE ID: CVE-2019-5184 State: PUBLISHED Published: 2020-03-23T13:22:45 Last Updated: 2024-08-04T19:47:56.819Z Vendors: n/a Products: Wago Problem Types: double-free Description: An exploitable double free vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. A specially crafted XML cache file written to a specific location on the device can cause a heap pointer to be freed twice, resulting in a denial of service and potentially code execution. An attacker can send a specially crafted packet to trigger the parsing of this cache file. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-
al Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0965
CVE ID: CVE-2019-5185 State: PUBLISHED Published: 2020-03-23T13:22:52 Last Updated: 2024-08-04T19:47:56.813Z Vendors: n/a Products: Wago Problem Types: stack buffer overflow Description: An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. An attacker can send a specially crafted packet to trigger the parsing of this cache file. At 0x1ea28 the extracted state value from the xml file is used as an argument to /etc/config-tools/config_interfaces interface=X1 state=<contents of state node> using sprintf(). The destination buffer sp+0x40 is overflowed with the call to sprintf() for any state values that are gre
ing sprintf(). The destination buffer sp+0x40 is overflowed with the call to sprintf() for any state values that are greater than 512-len("/etc/config-tools/config_interfaces interface=X1 state=") in length. Later, at 0x1ea08 strcpy() is used to copy the contents of the stack buffer that was overflowed sp+0x40 into sp+0x440. The buffer sp+0x440 is immediately adjacent to sp+0x40 on the stack. Therefore, there is no NULL termination on the buffer sp+0x40 since it overflowed into sp+0x440. The strcpy() will result in invalid memory access. An state value of length 0x3c9 will cause the service to crash. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.c
cause the service to crash. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0966
CVE ID: CVE-2019-5186 State: PUBLISHED Published: 2020-03-23T13:19:22 Last Updated: 2024-08-04T19:47:56.736Z Vendors: n/a Products: Wago Problem Types: stack buffer Description: An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. An attacker can send a specially crafted packet to trigger the parsing of this cache file.At 0x1eb9c the extracted interface element name from the xml file is used as an argument to /etc/config-tools/config_interfaces interface=<contents of interface element> using sprintf(). The destination buffer sp+0x40 is overflowed with the call to sprintf() for any interface values that are
ng sprintf(). The destination buffer sp+0x40 is overflowed with the call to sprintf() for any interface values that are greater than 512-len("/etc/config-tools/config_interfaces interface=") in length. Later, at 0x1ea08 strcpy() is used to copy the contents of the stack buffer that was overflowed sp+0x40 into sp+0x440. The buffer sp+0x440 is immediately adjacent to sp+0x40 on the stack. Therefore, there is no NULL termination on the buffer sp+0x40 since it overflowed into sp+0x440. The strcpy() will result in invalid memory access. An interface value of length 0x3c4 will cause the service to crash. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com
use the service to crash. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0966
CVE ID: CVE-2019-5187 State: PUBLISHED Published: 2020-02-14T21:22:30 Last Updated: 2024-08-04T19:47:56.655Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Accusoft Problem Types: CWE-787 Description: An exploitable out-of-bounds write vulnerability exists in the TIFreadstripdata function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted TIFF file file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerab
e vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0972
CVE ID: CVE-2019-5188 State: PUBLISHED Published: 2020-01-08T15:45:09.000Z Last Updated: 2025-05-30T19:48:23.229Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: E2fsprogs Problem Types: CWE-787 Description: A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.
ontainer: - CISA ADP Vulnrichment: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2AKETJ6BREDUHRWQTV35SPGG5C6H7KSI/ - https://usn.ubuntu.com/4249-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6DOBCYQKCTTWXBLMUPJ5TX3FY7JNCOKY/ - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00004.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00030.html - https://lists.debian.org/debian-lts-announce/2020/07/msg00021.html - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0973 - https://security.netapp.com/advisory/ntap-20220506-0001/
CVE ID: CVE-2019-5205 State: REJECTED Published: 2020-01-09T21:45:57 Last Updated: 2020-01-09T21:45:57 Description: No description available.
CVE ID: CVE-2019-5206 State: REJECTED Published: 2020-01-09T21:45:57 Last Updated: 2020-01-09T21:45:57 Description: No description available.
CVE ID: CVE-2019-5207 State: REJECTED Published: 2020-01-09T21:45:57 Last Updated: 2020-01-09T21:45:57 Description: No description available.
CVE ID: CVE-2019-5208 State: REJECTED Published: 2020-01-09T21:45:57 Last Updated: 2020-01-09T21:45:57 Description: No description available.
CVE ID: CVE-2019-5209 State: REJECTED Published: 2020-01-09T21:45:57 Last Updated: 2020-01-09T21:45:57 Description: No description available.
CVE ID: CVE-2019-5210 State: PUBLISHED Published: 2019-11-29T19:29:47 Last Updated: 2024-08-04T19:47:56.821Z Vendors: n/a Products: Nova 5i pro, Nova 5 Problem Types: Improper Validation of Array Index Description: Nova 5i pro and Nova 5 smartphones with versions earlier than 9.1.1.190(C00E190R6P2)and Versions earlier than 9.1.1.175(C00E170R3P2) have an improper validation of array index vulnerability. The system does not properly validate the input value before use it as an array index when processing certain image information. The attacker tricks the user into installing a malicious application, successful exploit could cause malicious code execution. Additional Analyst Notes: - CVE Progra
a malicious application, successful exploit could cause malicious code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191120-01-smartphone-en
CVE ID: CVE-2019-5211 State: PUBLISHED Published: 2019-11-29T19:45:47 Last Updated: 2024-08-04T19:47:56.838Z Vendors: n/a Products: P20 Problem Types: Improper File Management Description: The Huawei Share function of P20 phones with versions earlier than Emily-L29C 9.1.0.311 has an improper file management vulnerability. The attacker tricks the victim to perform certain operations on the mobile phone during file transfer. Because the file is not properly processed, successfully exploit may cause some files on the victim's mobile phone are deleted. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191113-02-share-e
- CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191113-02-share-en
CVE ID: CVE-2019-5212 State: PUBLISHED Published: 2019-11-29T19:39:30 Last Updated: 2024-08-04T19:47:56.836Z Vendors: n/a Products: P20 Problem Types: Improper Access Control Description: There is an improper access control vulnerability in Huawei Share. The software does not properly restrict access to certain file from certain application. An attacker tricks the user into installing a malicious application then establishing a connect to the attacker through Huawei Share, successful exploit could cause information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-share-en
CVE ID: CVE-2019-5213 State: PUBLISHED Published: 2019-11-12T22:47:47 Last Updated: 2024-08-04T19:47:56.790Z Vendors: n/a Products: Honor play Problem Types: Insufficient Authentication Description: Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321(C00E320R1P1T8) have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of uncommon operations without unlock the screen lock. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191023-01-smartphone-en
CVE ID: CVE-2019-5214 State: PUBLISHED Published: 2019-06-06T14:18:43 Last Updated: 2024-08-04T19:47:56.745Z Vendors: Huawei Products: Huawei Mate10 Problem Types: Use After Free Description: There is a use after free vulnerability on certain driver component in Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.167(C00E85R2P20T8). An attacker tricks the user into installing a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190109-01-smartphone-en
CVE ID: CVE-2019-5215 State: PUBLISHED Published: 2019-06-04T18:44:57 Last Updated: 2024-08-04T19:47:56.627Z Vendors: Huawei Products: P30,P30 Pro Problem Types: man-in-the-middle Description: There is a man-in-the-middle (MITM) vulnerability on Huawei P30 smartphones versions before ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1), and P30 Pro versions before VOG-AL00 9.1.0.162 (C01E160R1P12/C01E160R2P1). When users establish connection and transfer data through Huawei Share, an attacker could sniff, spoof and do a series of operations to intrude the Huawei Share connection and launch a man-in-the-middle attack to obtain and tamper the data. (Vulnerability ID: HWPSIRT-2019-03109) Additional Ana
d launch a man-in-the-middle attack to obtain and tamper the data. (Vulnerability ID: HWPSIRT-2019-03109) Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190517-01-share-en
CVE ID: CVE-2019-5216 State: PUBLISHED Published: 2019-06-06T14:31:50 Last Updated: 2024-08-04T19:47:56.719Z Vendors: Huawei Products: Honor V10, Honor 10, Honor Play Problem Types: race condition Description: There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156(C00E156R2P14T8), Honor 10 smartphones versions earlier than Columbia-AL10B 9.0.0.156(C00E156R1P20T8) and Honor Play smartphones versions earlier than Cornell-AL00A 9.0.0.156(C00E156R1P13T8). An attacker tricks the user into installing a malicious application, which makes multiple processes to operate the same variate at the same time. Successful exploit could cause exec
cation, which makes multiple processes to operate the same variate at the same time. Successful exploit could cause execution of malicious code. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190116-01-smartphone-en
CVE ID: CVE-2019-5217 State: PUBLISHED Published: 2019-06-04T18:35:39 Last Updated: 2024-08-04T19:47:56.796Z Vendors: Huawei Products: Mate 9 Pro Problem Types: information disclosure Description: There is an information disclosure vulnerability on Mate 9 Pro Huawei smartphones versions earlier than LON-AL00B9.0.1.150 (C00E61R1P8T8). An attacker could view the photos after a series of operations without unlocking the screen lock. Successful exploit could cause an information disclosure condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190417-01-smartphone-en
CVE ID: CVE-2019-5218 State: PUBLISHED Published: 2019-11-29T19:51:01 Last Updated: 2024-08-04T19:47:56.802Z Vendors: n/a Products: Huawei Band 2, Honor Band 3 Problem Types: Insufficient Authentication Description: There is an insufficient authentication vulnerability in Huawei Band 2 and Honor Band 3. The band does not sufficiently authenticate the device try to connect to it in certain scenario. Successful exploit could allow the attacker to spoof then connect to the band. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191106-01-band-en
CVE ID: CVE-2019-5219 State: PUBLISHED Published: 2019-06-06T14:41:52 Last Updated: 2024-08-04T19:47:56.756Z Vendors: Huawei Products: Mate10 Problem Types: double free Description: There is a double free vulnerability on certain drivers of Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.181(C00E87R2P20T8). An attacker tricks the user into installing a malicious application, which makes multiple processes operate the same resource at the same time. Successful exploit could cause a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190130-01-smartphone-en