Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-18980 State: PUBLISHED Published: 2019-11-14T21:03:01 Last Updated: 2024-08-05T02:02:39.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb 9290022656 devices, an unprotected API lets remote users control the bulb's operation. Anyone can turn the bulb on or off, or change its color or brightness remotely. There is no authentication or encryption to use the control API. The only requirement is that the attacker have network access to the bulb. Additional Analyst Notes: - CVE Program Container: References: - https://blog.dammitly.net/2019/10/cheap-hackable-wifi-light-bulbs-or-iot.html
CVE ID: CVE-2019-18981 State: PUBLISHED Published: 2019-11-15T04:22:51 Last Updated: 2024-08-05T02:02:39.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pimcore before 6.2.2 lacks an Access Denied outcome for a certain scenario of an incorrect recipient ID of a notification. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pimcore/pimcore/commit/0a5d80b2593b2ebe35d19756b730ba33aa049106 - https://github.com/pimcore/pimcore/compare/v6.2.1...v6.2.2
CVE ID: CVE-2019-18982 State: PUBLISHED Published: 2019-11-15T04:22:34 Last Updated: 2024-08-05T02:02:39.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: bundles/AdminBundle/Controller/Admin/EmailController.php in Pimcore before 6.3.0 allows script execution in the Email Log preview window because of the lack of a Content-Security-Policy header. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pimcore/pimcore/commit/e0b48faf7d29ce43a98825a0b230e88350ebcf78 - https://github.com/pimcore/pimcore/compare/v6.2.3...v6.3.0
CVE ID: CVE-2019-18985 State: PUBLISHED Published: 2019-11-15T04:21:57 Last Updated: 2024-08-05T02:02:39.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pimcore before 6.2.2 lacks brute force protection for the 2FA token. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pimcore/pimcore/compare/v6.2.1...v6.2.2 - https://github.com/pimcore/pimcore/commit/9f2d075243a8392c114d9a8028858b9faf041e2d
CVE ID: CVE-2019-18986 State: PUBLISHED Published: 2019-11-15T04:21:43 Last Updated: 2024-08-05T02:02:39.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pimcore before 6.2.2 allow attackers to brute-force (guess) valid usernames by using the 'forgot password' functionality as it returns distinct messages for invalid password and non-existing users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pimcore/pimcore/compare/v6.2.1...v6.2.2 - https://github.com/pimcore/pimcore/commit/4a7bba5c3f818852cbbd29fa124f7fb09a207185
CVE ID: CVE-2019-18987 State: PUBLISHED Published: 2019-11-15T05:08:00 Last Updated: 2024-08-05T02:02:39.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki. Once a specific abuse filter has (accidentally or otherwise) been made public, its previous versions can be exposed, thus potentially disclosing private or sensitive information within the filter's definition. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T237887 - https://gerrit.wikimedia.org/r/q/Ic12790bd33982473f77551bde9599ed083a3e1f1 - https://www.mediawiki.org/wiki/Extension:AbuseFilter
CVE ID: CVE-2019-18988 State: PUBLISHED Published: 2020-02-07T15:09:36.000Z Last Updated: 2025-10-21T23:35:52.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers' installations. It used a shared AES key for all installations since at least as far back as v7.0.43148, and used it for at least OptionsPasswordAES in the current version of the product. If an attacker were to know this key, they could decrypt protect information stored in the registry or configuration files of TeamViewer. With versions before v9.x , this allowed for attackers to decry
ed in the registry or configuration files of TeamViewer. With versions before v9.x , this allowed for attackers to decrypt the Unattended Access password to the system (which allows for remote login to the system as well as headless file browsing). The latest version still uses the same key for OptionPasswordAES but appears to have changed how the Unattended Access password is stored. While in most cases an attacker requires an existing session on a system, if the registry/configuration keys were stored off of the machine (such as in a file share or online), an attacker could then decrypt the required password to login to the system. Additional Analyst Notes: - CVE Program Container: - CISA
ld then decrypt the required password to login to the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.teamviewer.com/t5/Knowledge-Base/tkb-p/Knowledgebase?threadtype=label&labels=Security - https://whynotsecurity.com/blog/teamviewer/ - https://twitter.com/Blurbdust/status/1224212682594770946?s=20 - https://community.teamviewer.com/t5/Announcements/Specification-on-CVE-2019-18988/td-p/82264
CVE ID: CVE-2019-18989 State: PUBLISHED Published: 2020-09-30T17:22:54 Last Updated: 2024-08-05T02:02:39.892Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AC:L/AV:A/A:N/C:L/I:L/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A partial authentication bypass vulnerability exists on Mediatek MT7620N 1.06 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an encrypted frame, which would allow an attacker to discern information or potentially modify data. Additional Analyst Notes: - CVE Program Container: References: - https://www.synopsys.com
on or potentially modify data. Additional Analyst Notes: - CVE Program Container: References: - https://www.synopsys.com/blogs/software-security/cyrc-advisory-sept2020/
CVE ID: CVE-2019-18990 State: PUBLISHED Published: 2020-09-30T17:26:28 Last Updated: 2024-08-05T02:02:39.909Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AC:L/AV:A/A:N/C:L/I:L/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A partial authentication bypass vulnerability exists on Realtek RTL8812AR 1.21WW, RTL8196D 1.0.0, RTL8192ER 2.10, and RTL8881AN 1.09 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an encrypted frame, which would allow an attacker to discern information or potentially modify data. Additional Analyst Notes: - CVE Pr
ame, which would allow an attacker to discern information or potentially modify data. Additional Analyst Notes: - CVE Program Container: References: - https://www.synopsys.com/blogs/software-security/cyrc-advisory-sept2020/
CVE ID: CVE-2019-18991 State: PUBLISHED Published: 2020-09-30T17:30:29 Last Updated: 2024-08-05T02:02:39.983Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AC:L/AV:A/A:N/C:L/I:L/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A partial authentication bypass vulnerability exists on Atheros AR9132 3.60(AMX.8), AR9283 1.85, and AR9285 1.0.0.12NA devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an encrypted frame, which would allow an attacker to discern information or potentially modify data. Additional Analyst Notes: - CVE Program Containe
ld allow an attacker to discern information or potentially modify data. Additional Analyst Notes: - CVE Program Container: References: - https://www.synopsys.com/blogs/software-security/cyrc-advisory-sept2020/
CVE ID: CVE-2019-18992 State: PUBLISHED Published: 2019-12-03T19:32:09 Last Updated: 2024-08-05T02:02:39.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenWrt 18.06.4 allows XSS via these Name fields to the cgi-bin/luci/admin/network/firewall/rules URI: "Open ports on router" and "New forward rule" and "New Source NAT" (this can occur, for example, on a TP-Link Archer C7 device). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openwrt/luci/commit/3961268597abba4c2b231790cb4aa7936e73cdf8
CVE ID: CVE-2019-18993 State: PUBLISHED Published: 2019-12-03T19:29:01 Last Updated: 2024-08-05T02:02:39.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenWrt 18.06.4 allows XSS via the "New port forward" Name field to the cgi-bin/luci/admin/network/firewall/forwards URI (this can occur, for example, on a TP-Link Archer C7 device). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openwrt/luci/commit/c048f23bad54b0a79449652380b317819e0ea978
CVE ID: CVE-2019-18994 State: PUBLISHED Published: 2019-12-18T20:20:57 Last Updated: 2024-08-05T02:02:39.901Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L) Vendors: ABB Products: ABB PB610 Panel Builder 600 Problem Types: CWE-20 Description: Due to a lack of file length check, the HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier crashes when trying to load an empty *.JPR application file. An attacker with access to the file system might be able to cause application malfunction such as denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://search.abb.com/library/Download.aspx?DocumentID=3ADR010466&Lan
lyst Notes: - CVE Program Container: References: - http://search.abb.com/library/Download.aspx?DocumentID=3ADR010466&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2019-18995 State: PUBLISHED Published: 2019-12-18T20:19:34 Last Updated: 2024-08-05T02:02:40.045Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: ABB Products: PB610 Panel Builder 600 Problem Types: CWE-20 Description: The HMISimulator component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier fails to validate the content-length field for HTTP requests, exposing HMISimulator to denial of service via crafted HTTP requests manipulating the content-length setting. Additional Analyst Notes: - CVE Program Container: References: - http://search.abb.com/library/Download.aspx?DocumentID=3ADR010466&LanguageCode=en&DocumentPartId=&Action=Laun
erences: - http://search.abb.com/library/Download.aspx?DocumentID=3ADR010466&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2019-18996 State: PUBLISHED Published: 2019-12-18T20:24:44 Last Updated: 2024-08-05T02:02:39.897Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L) Vendors: ABB Products: PB610 Panel Builder 600 Problem Types: CWE-424 Description: Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside of the program directory, potentially allowing an attacker with access to the local file system the execution of code in the application’s context. Additional Analyst Notes: - CVE Program Container: References: - http://search.abb.com/library/Download.aspx?DocumentID=3ADR010466&LanguageCode=en&DocumentPartId=&Action
: References: - http://search.abb.com/library/Download.aspx?DocumentID=3ADR010466&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2019-18997 State: PUBLISHED Published: 2019-12-18T20:22:47 Last Updated: 2024-08-05T02:02:39.800Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: ABB Products: PB610 Panel Builder 600 Problem Types: CWE-424 Description: The HMISimulator component of ABB PB610 Panel Builder 600 uses the readFile/writeFile interface to manipulate the work file. Path configuration in PB610 HMISimulator versions 2.8.0.424 and earlier potentially allows access to files outside of the working directory, thus potentially supporting unauthorized file access. Additional Analyst Notes: - CVE Program Container: References: - http://search.abb.com/library/Download.aspx?Docum
cess. Additional Analyst Notes: - CVE Program Container: References: - http://search.abb.com/library/Download.aspx?DocumentID=3ADR010466&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2019-18998 State: PUBLISHED Published: 2020-02-17T18:40:38 Last Updated: 2024-08-05T02:02:39.895Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: ABB Products: Asset Suite Problem Types: CWE-284 Description: Insufficient access control in the web interface of ABB Asset Suite versions 9.0 to 9.3, 9.4 prior to 9.4.2.6, 9.5 prior to 9.5.3.2 and 9.6.0 enables full access to directly referenced objects. An attacker with knowledge of a resource's URL can access the resource directly. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9962&LanguageCode=en&DocumentPartId=&Acti
ferences: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9962&LanguageCode=en&DocumentPartId=&Action=Launch - https://www.us-cert.gov/ics/advisories/icsa-20-072-02
CVE ID: CVE-2019-19000 State: PUBLISHED Published: 2020-04-02T19:49:35 Last Updated: 2024-08-05T02:02:39.758Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: ABB Products: eSOMS Problem Types: CWE-16, CWE-202 Description: For ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP header(s) have not been properly configured within the application response. This can potentially allow browsers and proxies to cache sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2019-19001 State: PUBLISHED Published: 2020-04-02T19:49:55 Last Updated: 2024-08-05T02:02:39.815Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: ABB Products: eSOMS Problem Types: CWE-16 Description: For ABB eSOMS versions 4.0 to 6.0.2, the X-Frame-Options header is not configured in HTTP response. This can potentially allow 'ClickJacking' attacks where an attacker can frame parts of the application on a malicious web site, revealing sensitive user information such as authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en
Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2019-19002 State: PUBLISHED Published: 2020-04-02T19:50:02 Last Updated: 2024-08-05T02:02:39.918Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N) Vendors: ABB Products: eSOMS Problem Types: CWE-16, CWE-79 Description: For ABB eSOMS versions 4.0 to 6.0.2, the X-XSS-Protection HTTP response header is not set in responses from the web server. For older web browser not supporting Content Security Policy, this might increase the risk of Cross Site Scripting. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2019-19003 State: PUBLISHED Published: 2020-04-02T19:46:29 Last Updated: 2024-08-05T02:02:39.846Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: ABB Products: eSOMS Problem Types: CWE-16, CWE-79 Description: For ABB eSOMS versions 4.0 to 6.0.2, the HTTPOnly flag is not set. This can allow Javascript to access the cookie contents, which in turn might enable Cross Site Scripting. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2019-19004 State: PUBLISHED Published: 2021-02-11T20:08:15 Last Updated: 2024-08-05T02:02:39.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an unexpected input value to malloc via a malformed bitmap image. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/autotrace/autotrace/commits/master - https://github.com/autotrace/autotrace/commits/master/src/input-bmp.c - https://github.com/autotrace/autotrace/pull/40 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NC6MUH2RLVEA634LHBNZ2KO7MQK
s://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NC6MUH2RLVEA634LHBNZ2KO7MQKI2RDZ/
CVE ID: CVE-2019-19005 State: PUBLISHED Published: 2021-02-11T20:08:30 Last Updated: 2024-08-05T02:02:40.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitmap image. This may occur after the use-after-free in CVE-2017-9182. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/autotrace/autotrace/commits/master - https://github.com/autotrace/autotrace/pull/40 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NC6MUH2RLVEA634LHBNZ2KO7MQKI2RDZ/
CVE ID: CVE-2019-19006 State: PUBLISHED Published: 2019-11-21T17:51:14 Last Updated: 2024-08-05T02:02:40.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://www.freepbx.org/category/blog/ - https://wiki.freepbx.org/display/FOP/2019-11-20+Remote+Admin+Authentication+Bypass - https://community.freepbx.org/t/freepbx-security-vulnerability-sec-2019-001/62772 - https://pastebin.com/2CdsQMKW
CVE ID: CVE-2019-19007 State: PUBLISHED Published: 2019-12-05T15:28:42 Last Updated: 2024-08-05T02:02:39.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intelbras IWR 3000N 1.8.7 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled, a related issue to CVE-2019-17600. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40rsantos_14778/1500b407dccc
CVE ID: CVE-2019-19008 State: REJECTED Published: 2019-12-05T15:10:53 Last Updated: 2019-12-05T15:10:53 Description: No description available.
CVE ID: CVE-2019-19010 State: PUBLISHED Published: 2019-11-16T00:52:06 Last Updated: 2024-08-05T02:02:40.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection in the Math plugin of Limnoria (before 2019.11.09) and Supybot (through 2018-05-09) allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ProgVal/Limnoria/wiki/math-eval-vulnerability - https://github.com/ProgVal/Limnoria/commit/3848ae78de45b35c029cc333963d436b9d2f0a35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fed
it/3848ae78de45b35c029cc333963d436b9d2f0a35 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/54CQM2TEXRADLE77VOMCPHL5PBHR3ZWJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DRNOUHFEN75QAIKT4Y3HDN3TT5LSIWN2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5P2AGND54UIJV3WHOYO2YINIXSDGAAPO/
CVE ID: CVE-2019-19011 State: PUBLISHED Published: 2019-11-16T15:01:56 Last Updated: 2024-08-05T02:02:39.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: MiniUPnP ngiflib 0.4 has a NULL pointer dereference in GifIndexToTrueColor in ngiflib.c via a file that lacks a palette. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/miniupnp/ngiflib/issues/16
CVE ID: CVE-2019-19012 State: PUBLISHED Published: 2019-11-16T15:30:47 Last Updated: 2024-08-05T02:02:39.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. (This only affects the 32-bit compiled version). Remote attackers can cause a denial-of-service or information disclosure, or possibly have unspecified other impact, via a crafted regular expression. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kkos/oniguruma/issues/164 - https://github.com
Analyst Notes: - CVE Program Container: References: - https://github.com/kkos/oniguruma/issues/164 - https://github.com/kkos/oniguruma/releases/tag/v6.9.4_rc2 - https://github.com/tarantula-team/CVE-2019-19012 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NO267PLHGYZSWX3XTRPKYBKD4J3YOU5V/ - https://lists.debian.org/debian-lts-announce/2019/12/msg00002.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3MBNW6Z4DOXSCNWGBLQ7OA3OGUJ44WL/ - https://usn.ubuntu.com/4460-1/
CVE ID: CVE-2019-19013 State: PUBLISHED Published: 2019-11-22T15:55:19 Last Updated: 2024-08-05T02:02:39.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF vulnerability in Pagekit 1.0.17 allows an attacker to upload an arbitrary file by removing the CSRF token from a request. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/155426/Pagekit-CMS-1.0.17-Cross-Site-Request-Forgery.html
CVE ID: CVE-2019-19014 State: PUBLISHED Published: 2019-12-02T16:46:21 Last Updated: 2024-08-05T02:02:39.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TitanHQ WebTitan before 5.18. It has a sudoers file that enables low-privilege users to execute a vast number of commands as root, including mv, chown, and chmod. This can be trivially exploited to gain root privileges by an attacker with access. Additional Analyst Notes: - CVE Program Container: References: - https://write-up.github.io/webtitan/ - https://www.webtitan.com/resources/product-updates/
CVE ID: CVE-2019-19015 State: PUBLISHED Published: 2019-12-02T16:47:28 Last Updated: 2024-08-05T02:02:39.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TitanHQ WebTitan before 5.18. The proxy service (which is typically exposed to all users) allows connections to the internal PostgreSQL database of the appliance. By connecting to the database through the proxy (without password authentication), an attacker is able to fully control the appliance database. Through this, several different paths exist to gain further access, or execute code. Additional Analyst Notes: - CVE Program Container: References: - https://write-up.github.io/webtitan/ - https://
e code. Additional Analyst Notes: - CVE Program Container: References: - https://write-up.github.io/webtitan/ - https://www.webtitan.com/resources/product-updates/
CVE ID: CVE-2019-19016 State: PUBLISHED Published: 2019-12-02T16:48:44 Last Updated: 2024-08-05T02:02:39.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TitanHQ WebTitan before 5.18. Some functions, such as /history-x.php, of the administration interface are vulnerable to SQL Injection through the results parameter. This could be used by an attacker to extract sensitive information from the appliance database. Additional Analyst Notes: - CVE Program Container: References: - https://write-up.github.io/webtitan/ - https://www.webtitan.com/resources/product-updates/