Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1999024 State: PUBLISHED Published: 2018-07-23T16:00:00Z Last Updated: 2024-09-16T22:46:40.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: MathJax version prior to version 2.7.4 contains a Cross Site Scripting (XSS) vulnerability in the \unicode{} macro that can result in Potentially untrusted Javascript running within a web browser. This attack appear to be exploitable via The victim must view a page where untrusted content is processed using Mathjax. This vulnerability appears to have been fixed in 2.7.4 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mathjax/MathJax/commit/a55da396c18cafb767a26aa9ad96f6f419985
: - CVE Program Container: References: - https://github.com/mathjax/MathJax/commit/a55da396c18cafb767a26aa9ad96f6f4199852f1 - https://blog.bentkowski.info/2018/06/xss-in-google-colaboratory-csp-bypass.html
CVE ID: CVE-2018-1999025 State: PUBLISHED Published: 2018-08-01T13:00:00Z Last Updated: 2024-09-17T03:59:38.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: A man in the middle vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java, ATXValidator.java that allows attackers to impersonate any service that Jenkins connects to. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-07-30/#SECURITY-932
CVE ID: CVE-2018-1999026 State: PUBLISHED Published: 2018-08-01T13:00:00 Last Updated: 2024-08-05T12:47:57.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: A server-side request forgery vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java that allows attackers to have Jenkins send HTTP requests to an attacker-specified host. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-07-30/#SECURITY-994 - http://www.securityfocus.com/bid/104960
CVE ID: CVE-2018-1999027 State: PUBLISHED Published: 2018-08-01T13:00:00Z Last Updated: 2024-09-17T02:05:44.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exposure of sensitive information vulnerability exists in Jenkins SaltStack Plugin 3.1.6 and earlier in SaltAPIBuilder.java, SaltAPIStep.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1009
CVE ID: CVE-2018-1999028 State: PUBLISHED Published: 2018-08-01T13:00:00Z Last Updated: 2024-09-16T23:42:12.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exposure of sensitive information vulnerability exists in Jenkins Accurev Plugin 0.7.16 and earlier in AccurevSCM.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1021
CVE ID: CVE-2018-1999029 State: PUBLISHED Published: 2018-08-01T13:00:00Z Last Updated: 2024-09-16T20:02:44.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting vulnerability exists in Jenkins Shelve Project Plugin 1.5 and earlier in ShelveProjectAction/index.jelly, ShelvedProjectsAction/index.jelly that allows attackers with Job/Configure permission to define JavaScript that would be executed in another user's browser when that other user performs some UI actions. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1001
CVE ID: CVE-2018-1999030 State: PUBLISHED Published: 2018-08-01T13:00:00Z Last Updated: 2024-09-16T17:07:55.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exposure of sensitive information vulnerability exists in Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.3.1 and earlier in ArtifactoryChoiceListProvider.java, NexusChoiceListProvider.java, Nexus3ChoiceListProvider.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1022
CVE ID: CVE-2018-1999031 State: PUBLISHED Published: 2018-08-01T13:00:00Z Last Updated: 2024-09-17T00:50:33.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exposure of sensitive information vulnerability exists in Jenkins meliora-testlab Plugin 1.14 and earlier in TestlabNotifier.java that allows attackers with file system access to the Jenkins master to obtain the API key stored in this plugin's configuration. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-07-30/#SECURITY-847
CVE ID: CVE-2018-1999032 State: PUBLISHED Published: 2018-08-01T13:00:00Z Last Updated: 2024-09-16T20:41:57.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: A data modification vulnerability exists in Jenkins Agiletestware Pangolin Connector for TestRail Plugin 2.1 and earlier in GlobalConfig.java that allows attackers with Overall/Read permission to override this plugin's configuration by sending crafted HTTP requests to an unprotected endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-07-30/#SECURITY-995
CVE ID: CVE-2018-1999033 State: PUBLISHED Published: 2018-08-01T13:00:00Z Last Updated: 2024-09-17T01:07:10.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exposure of sensitive information vulnerability exists in Jenkins Anchore Container Image Scanner Plugin 10.16 and earlier in AnchoreBuilder.java that allows attackers with Item/ExtendedRead permission or file system access to the Jenkins master to obtain the password stored in this plugin's configuration. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1039
CVE ID: CVE-2018-1999034 State: PUBLISHED Published: 2018-08-01T13:00:00Z Last Updated: 2024-09-16T22:31:06.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: A man in the middle vulnerability exists in Jenkins Inedo ProGet Plugin 0.8 and earlier in ProGetApi.java, ProGetConfig.java, ProGetConfiguration.java that allows attackers to impersonate any service that Jenkins connects to. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-07-30/#SECURITY-933
CVE ID: CVE-2018-1999035 State: PUBLISHED Published: 2018-08-01T13:00:00Z Last Updated: 2024-09-17T02:52:21.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: A man in the middle vulnerability exists in Jenkins Inedo BuildMaster Plugin 1.3 and earlier in BuildMasterConfiguration.java, BuildMasterConfig.java, BuildMasterApi.java that allows attackers to impersonate any service that Jenkins connects to. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-07-30/#SECURITY-935
CVE ID: CVE-2018-1999036 State: PUBLISHED Published: 2018-08-01T13:00:00Z Last Updated: 2024-09-16T18:19:29.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exposure of sensitive information vulnerability exists in Jenkins SSH Agent Plugin 1.15 and earlier in SSHAgentStepExecution.java that exposes the SSH private key password to users with permission to read the build log. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-07-30/#SECURITY-704
CVE ID: CVE-2018-1999037 State: PUBLISHED Published: 2018-08-01T13:00:00Z Last Updated: 2024-09-16T16:33:25.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: A data modification vulnerability exists in Jenkins Resource Disposer Plugin 0.11 and earlier in AsyncResourceDisposer.java that allows attackers to stop tracking a resource. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-07-30/#SECURITY-997
CVE ID: CVE-2018-1999038 State: PUBLISHED Published: 2018-08-01T13:00:00Z Last Updated: 2024-09-17T03:59:44.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: A confused deputy vulnerability exists in Jenkins Publisher Over CIFS Plugin 0.10 and earlier in CifsPublisherPluginDescriptor.java that allows attackers to have Jenkins connect to an attacker specified CIFS server with attacker specified credentials. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-07-30/#SECURITY-975
CVE ID: CVE-2018-1999039 State: PUBLISHED Published: 2018-08-01T13:00:00Z Last Updated: 2024-09-17T00:36:20.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: A server-side request forgery vulnerability exists in Jenkins Confluence Publisher Plugin 2.0.1 and earlier in ConfluenceSite.java that allows attackers to have Jenkins submit login requests to an attacker-specified Confluence server URL with attacker specified credentials. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-07-30/#SECURITY-982
CVE ID: CVE-2018-1999040 State: PUBLISHED Published: 2018-08-01T13:00:00Z Last Updated: 2024-09-17T02:57:06.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.10.1 and earlier in KubernetesCloud.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-07-30/#SECURITY-1016
CVE ID: CVE-2018-1999041 State: PUBLISHED Published: 2018-08-01T13:00:00Z Last Updated: 2024-09-16T22:02:59.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exposure of sensitive information vulnerability exists in Jenkins Tinfoil Security Plugin 1.6.1 and earlier in TinfoilScanRecorder.java that allows attackers with file system access to the Jenkins master to obtain the API secret key stored in this plugin's configuration. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-07-30/#SECURITY-840
CVE ID: CVE-2018-1999042 State: PUBLISHED Published: 2018-08-23T18:00:00Z Last Updated: 2024-09-16T20:07:53.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in XStream2.java that allows attackers to have Jenkins resolve a domain name when deserializing an instance of java.net.URL. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-08-15/#SECURITY-637
CVE ID: CVE-2018-1999043 State: PUBLISHED Published: 2018-08-23T18:00:00Z Last Updated: 2024-09-16T18:03:50.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in BasicAuthenticationFilter.java, BasicHeaderApiTokenAuthenticator.java that allows attackers to create ephemeral in-memory user records by attempting to log in using invalid credentials. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-08-15/#SECURITY-672
CVE ID: CVE-2018-1999044 State: PUBLISHED Published: 2018-08-23T18:00:00Z Last Updated: 2024-09-17T00:16:13.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread enter an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-08-15/#SECURITY-790
CVE ID: CVE-2018-1999045 State: PUBLISHED Published: 2018-08-23T18:00:00Z Last Updated: 2024-09-17T00:56:20.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: A improper authentication vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in SecurityRealm.java, TokenBasedRememberMeServices2.java that allows attackers with a valid cookie to remain logged in even if that feature is disabled. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-08-15/#SECURITY-996
CVE ID: CVE-2018-1999046 State: PUBLISHED Published: 2018-08-23T18:00:00Z Last Updated: 2024-09-17T02:31:20.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: A exposure of sensitive information vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in Computer.java that allows attackers With Overall/Read permission to access the connection log for any agent. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-08-15/#SECURITY-1071
CVE ID: CVE-2018-1999047 State: PUBLISHED Published: 2018-08-23T18:00:00Z Last Updated: 2024-09-16T16:13:36.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: A improper authorization vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in UpdateCenter.java that allows attackers to cancel a Jenkins restart scheduled through the update center. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2018-08-15/#SECURITY-1076
CVE ID: CVE-2018-19000 State: PUBLISHED Published: 2019-02-05T18:00:00Z Last Updated: 2024-09-16T19:57:27.111Z Vendors: ICS-CERT Products: LCDS Laquis SCADA Problem Types: CWE-288 Description: LCDS Laquis SCADA prior to version 4.1.0.4150 allows an authentication bypass, which may allow an attacker access to sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01 - http://www.securityfocus.com/bid/106634
CVE ID: CVE-2018-19001 State: PUBLISHED Published: 2018-12-07T14:00:00 Last Updated: 2024-08-05T11:23:09.039Z Vendors: n/a Products: Philips HealthSuite Health Android App Problem Types: CWE-326 Description: Philips HealthSuite Health Android App, all versions. The software uses simple encryption that is not strong enough for the level of protection required. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-18-340-01 - http://www.securityfocus.com/bid/106126
CVE ID: CVE-2018-19002 State: PUBLISHED Published: 2019-02-05T18:00:00Z Last Updated: 2024-09-16T20:27:21.831Z Vendors: LCDS Products: LCDS Laquis SCADA Problem Types: CWE-94 Description: LCDS Laquis SCADA prior to version 4.1.0.4150 allows improper control of generation of code when opening a specially crafted project file, which may allow remote code execution, data exfiltration, or cause a system crash. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01 - http://www.securityfocus.com/bid/106634
CVE ID: CVE-2018-19003 State: PUBLISHED Published: 2018-12-14T15:00:00 Last Updated: 2024-08-05T11:23:08.535Z Vendors: n/a Products: GE Mark VIe, EX2100e, EX2100e_Reg, and LS2100e Problem Types: CWE-22 Description: GE Mark VIe, EX2100e, EX2100e_Reg, and LS2100e Versions 03.03.28C to 05.02.04C, EX2100e All versions prior to v04.09.00C, EX2100e_Reg All versions prior to v04.09.00C, and LS2100e All versions prior to v04.09.00C The affected versions of the application have a path traversal vulnerability that fails to restrict the ability of an attacker to gain access to restricted information. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisorie
ted information. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-347-04 - http://www.securityfocus.com/bid/106216
CVE ID: CVE-2018-19004 State: PUBLISHED Published: 2019-02-01T18:00:00Z Last Updated: 2024-09-16T18:44:50.704Z Vendors: ICS-CERT Products: LCDS Laquis SCADA Problem Types: CWE-125 Description: LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data exfiltration. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01 - http://www.securityfocus.com/bid/106634
CVE ID: CVE-2018-19005 State: PUBLISHED Published: 2018-12-20T21:00:00 Last Updated: 2024-08-05T11:23:08.492Z Vendors: n/a Products: Cscape Problem Types: CWE-20 Description: Cscape, Version 9.80.75.3 SP3 and prior. An improper input validation vulnerability has been identified that may be exploited by processing specially crafted POC files lacking user input validation. This may allow an attacker to read confidential information and remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106275 - https://ics-cert.us-cert.gov/advisories/ICSA-18-354-01
CVE ID: CVE-2018-19006 State: PUBLISHED Published: 2019-04-08T14:30:39 Last Updated: 2024-08-05T11:23:09.033Z Vendors: OSIsoft Products: PI Vision Problem Types: CWE-79 Description: OSIsoft PI Vision, versions PI Vision 2017, and PI Vision 2017 R2, The application contains a cross-site scripting vulnerability where displays that reference AF elements and attributes containing JavaScript are affected. This vulnerability requires the ability of authorized AF users to store JavaScript in AF elements and attributes. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-043-01
CVE ID: CVE-2018-19007 State: PUBLISHED Published: 2018-12-14T20:00:00 Last Updated: 2024-08-05T11:23:09.034Z Vendors: n/a Products: Geutebr&#195;&#188;ck GmbH E2 Camera Series versions prior to 1.12.0.25 Problem Types: CWE-78 Description: In Geutebrueck GmbH E2 Camera Series versions prior to 1.12.0.25 the DDNS configuration (in the Network Configuration panel) is vulnerable to an OS system command injection as root. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106208 - https://ics-cert.us-cert.gov/advisories/ICSA-18-347-03
CVE ID: CVE-2018-19008 State: PUBLISHED Published: 2019-02-13T21:00:00Z Last Updated: 2024-09-17T03:52:53.725Z Vendors: ICS-CERT Products: ABB CP400 Panel Builder TextEditor 2.0 Problem Types: CWE-20 Description: The TextEditor 2.0 in ABB CP400 Panel Builder versions 2.0.7.05 and earlier contain a vulnerability in the file parser of the Text Editor wherein the application doesn't properly prevent the insertion of specially crafted files which could allow arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106658 - https://ics-cert.us-cert.gov/advisories/ICSA-19-017-02
CVE ID: CVE-2018-19009 State: PUBLISHED Published: 2019-01-25T20:00:00Z Last Updated: 2024-09-16T23:21:02.043Z Vendors: Pilz Products: Pilz PNOZmulti Configurator Problem Types: CWE-312 Description: Pilz PNOZmulti Configurator prior to version 10.9 allows an authenticated attacker with local access to the system containing the PNOZmulti Configurator software to view sensitive credential data in clear-text. This sensitive data is applicable to only the PMI m107 diag HMI device. An attacker with access to this sensitive data and physical access to the PMI m107 diag can modify data on the HMI device. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/a
data on the HMI device. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-010-03 - http://www.securityfocus.com/bid/106529
CVE ID: CVE-2018-19010 State: PUBLISHED Published: 2019-01-28T22:00:00Z Last Updated: 2024-09-16T17:32:40.689Z Vendors: ICS-CERT Products: Dr&#195;&#164;ger Infinity Delta Problem Types: CWE-20 Description: Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. A malformed network packet may cause the monitor to reboot. By repeatedly sending the malformed network packet, an attacker may be able to disrupt patient monitoring by causing the monitor to repeatedly reboot until it falls back to default configuration and loses network connectivity. Additional Analyst Notes: - CVE Program Container: References: - ht
efault configuration and loses network connectivity. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01 - http://www.securityfocus.com/bid/106683
CVE ID: CVE-2018-19011 State: PUBLISHED Published: 2019-01-22T20:00:00Z Last Updated: 2024-09-16T20:57:24.608Z Vendors: ICS-CERT Products: CX-Supervisor Problem Types: CWE-94 Description: CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file. An attacker could exploit this to execute code under the privileges of the application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106654 - https://ics-cert.us-cert.gov/advisories/ICSA-19-017-01
CVE ID: CVE-2018-19012 State: PUBLISHED Published: 2019-01-28T21:00:00Z Last Updated: 2024-09-17T04:08:49.934Z Vendors: ICS-CERT Products: Dr&#195;&#164;ger Infinity Delta Problem Types: CWE-269 Description: Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Via a specific dialog it is possible to break out of the kiosk mode and reach the underlying operating system. By breaking out of the kiosk mode, an attacker is able to take control of the operating system. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01 - http://www.securityfocu
- CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01 - http://www.securityfocus.com/bid/106683
CVE ID: CVE-2018-19013 State: PUBLISHED Published: 2019-01-22T20:00:00Z Last Updated: 2024-09-16T19:40:40.349Z Vendors: ICS-CERT Products: CX-Supervisor Problem Types: CWE-77 Description: An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106654 - https://ics-cert.us-cert.gov/advisories/ICSA-19-017-01
CVE ID: CVE-2018-19014 State: PUBLISHED Published: 2019-01-28T22:00:00Z Last Updated: 2024-09-16T20:31:32.329Z Vendors: ICS-CERT Products: Dr&#195;&#164;ger Infinity Delta Problem Types: CWE-532 Description: Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Log files are accessible over an unauthenticated network connection. By accessing the log files, an attacker is able to gain insights about internals of the patient monitor, the location of the monitor, and wired network configuration. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-19-022
n. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01 - http://www.securityfocus.com/bid/106683
CVE ID: CVE-2018-19015 State: PUBLISHED Published: 2019-01-28T19:00:00Z Last Updated: 2024-09-16T17:03:35.726Z Vendors: ICS-CERT Products: CX-Supervisor Problem Types: CWE-77 Description: An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file. An attacker could exploit this to execute code under the privileges of the application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106654 - https://ics-cert.us-cert.gov/advisories/ICSA-19-017-01