Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-18319 State: PUBLISHED Published: 2019-12-12T19:08:48 Last Updated: 2024-08-05T01:54:13.298Z Vendors: Siemens Products: SPPA-T3000 Application Server Problem Types: CWE-287 Description: A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could cause a Denial-of-Service condition by sending specifically crafted objects via RMI. This vulnerability is independent from CVE-2019-18317 and CVE-2019-18318. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no pu
CVE ID: CVE-2019-18320 State: PUBLISHED Published: 2019-12-12T19:08:48 Last Updated: 2024-08-05T01:54:14.044Z Vendors: Siemens Products: SPPA-T3000 Application Server Problem Types: CWE-287 Description: A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program C
y publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
CVE ID: CVE-2019-18321 State: PUBLISHED Published: 2019-12-12T19:08:48 Last Updated: 2024-08-05T01:54:13.332Z Vendors: Siemens Products: SPPA-T3000 MS3000 Migration Server Problem Types: CWE-287 Description: A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could be able to read and write arbitrary files on the local file system by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18322. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public explo
network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
CVE ID: CVE-2019-18322 State: PUBLISHED Published: 2019-12-12T19:08:48 Last Updated: 2024-08-05T01:54:12.859Z Vendors: Siemens Products: SPPA-T3000 MS3000 Migration Server Problem Types: CWE-287 Description: A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could be able to read and write arbitrary files on the local file system by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18321. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public explo
CVE ID: CVE-2019-18323 State: PUBLISHED Published: 2019-12-12T19:08:48 Last Updated: 2024-08-05T01:54:14.271Z Vendors: Siemens Products: SPPA-T3000 MS3000 Migration Server Problem Types: CWE-122 Description: A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability is independent from CVE-2019-18324, CVE-2019-18325, CVE-2019-18326, CVE-2019-18327, CVE-2019-18328, CVE-2019-18329, and CVE-2019-18330. Please note that an attacker needs to have network acces
2019-18327, CVE-2019-18328, CVE-2019-18329, and CVE-2019-18330. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
CVE ID: CVE-2019-18324 State: PUBLISHED Published: 2019-12-12T19:08:48 Last Updated: 2024-08-05T01:54:13.588Z Vendors: Siemens Products: SPPA-T3000 MS3000 Migration Server Problem Types: CWE-122 Description: A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability is independent from CVE-2019-18323, CVE-2019-18325, CVE-2019-18326, CVE-2019-18327, CVE-2019-18328, CVE-2019-18329, and CVE-2019-18330. Please note that an attacker needs to have network access
19-18327, CVE-2019-18328, CVE-2019-18329, and CVE-2019-18330. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
CVE ID: CVE-2019-18325 State: PUBLISHED Published: 2019-12-12T19:08:48 Last Updated: 2024-08-05T01:54:12.854Z Vendors: Siemens Products: SPPA-T3000 MS3000 Migration Server Problem Types: CWE-122 Description: A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability is independent from CVE-2019-18323, CVE-2019-18324, CVE-2019-18326, CVE-2019-18327, CVE-2019-18328, CVE-2019-18329, and CVE-2019-18330. Please note that an attacker needs to have network access
CVE ID: CVE-2019-18326 State: PUBLISHED Published: 2019-12-12T19:08:48 Last Updated: 2024-08-05T01:54:14.095Z Vendors: Siemens Products: SPPA-T3000 MS3000 Migration Server Problem Types: CWE-122 Description: A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability is independent from CVE-2019-18323, CVE-2019-18324, CVE-2019-18325, CVE-2019-18327, CVE-2019-18328, CVE-2019-18329, and CVE-2019-18330. Please note that an attacker needs to have network access
CVE ID: CVE-2019-18327 State: PUBLISHED Published: 2019-12-12T19:08:48 Last Updated: 2024-08-05T01:54:13.389Z Vendors: Siemens Products: SPPA-T3000 MS3000 Migration Server Problem Types: CWE-122 Description: A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability is independent from CVE-2019-18323, CVE-2019-18324, CVE-2019-18325, CVE-2019-18326, CVE-2019-18328, CVE-2019-18329, and CVE-2019-18330. Please note that an attacker needs to have network access
19-18326, CVE-2019-18328, CVE-2019-18329, and CVE-2019-18330. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
CVE ID: CVE-2019-18328 State: PUBLISHED Published: 2019-12-12T19:08:48 Last Updated: 2024-08-05T01:54:13.301Z Vendors: Siemens Products: SPPA-T3000 MS3000 Migration Server Problem Types: CWE-122 Description: A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability is independent from CVE-2019-18323, CVE-2019-18324, CVE-2019-18325, CVE-2019-18326, CVE-2019-18327, CVE-2019-18329, and CVE-2019-18330. Please note that an attacker needs to have network access
19-18326, CVE-2019-18327, CVE-2019-18329, and CVE-2019-18330. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
CVE ID: CVE-2019-18329 State: PUBLISHED Published: 2019-12-12T19:08:48 Last Updated: 2024-08-05T01:54:13.454Z Vendors: Siemens Products: SPPA-T3000 MS3000 Migration Server Problem Types: CWE-122 Description: A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability is independent from CVE-2019-18323, CVE-2019-18324, CVE-2019-18325, CVE-2019-18326, CVE-2019-18327, CVE-2019-18328, and CVE-2019-18330. Please note that an attacker needs to have network access
19-18326, CVE-2019-18327, CVE-2019-18328, and CVE-2019-18330. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
CVE ID: CVE-2019-18330 State: PUBLISHED Published: 2019-12-12T19:08:48 Last Updated: 2024-08-05T01:54:13.278Z Vendors: Siemens Products: SPPA-T3000 MS3000 Migration Server Problem Types: CWE-122 Description: A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability is independent from CVE-2019-18323, CVE-2019-18324, CVE-2019-18325, CVE-2019-18326, CVE-2019-18327, CVE-2019-18328, and CVE-2019-18329. Please note that an attacker needs to have network acces
2019-18326, CVE-2019-18327, CVE-2019-18328, and CVE-2019-18329. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
CVE ID: CVE-2019-18331 State: PUBLISHED Published: 2019-12-12T19:08:48 Last Updated: 2024-08-05T01:54:13.562Z Vendors: Siemens Products: SPPA-T3000 Application Server Problem Types: CWE-200 Description: A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain access to path and filenames on the server by sending specifically crafted packets to 1099/tcp. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known
this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
CVE ID: CVE-2019-18332 State: PUBLISHED Published: 2019-12-12T19:08:49 Last Updated: 2024-08-05T01:54:14.471Z Vendors: Siemens Products: SPPA-T3000 Application Server Problem Types: CWE-200 Description: A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain access to directory listings of the server by sending specifically crafted packets to 80/tcp, 8095/tcp or 8080/tcp. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vul
CVE ID: CVE-2019-18333 State: PUBLISHED Published: 2019-12-12T19:08:49 Last Updated: 2024-08-05T01:54:13.437Z Vendors: Siemens Products: SPPA-T3000 Application Server Problem Types: CWE-200 Description: A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain access to filenames on the server by sending specifically crafted packets to 8090/tcp. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known. Additio
nerability. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
CVE ID: CVE-2019-18334 State: PUBLISHED Published: 2019-12-12T19:08:49 Last Updated: 2024-08-05T01:54:13.301Z Vendors: Siemens Products: SPPA-T3000 Application Server Problem Types: CWE-200 Description: A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to enumerate valid user names by sending specifically crafted packets to 8090/tcp. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known. Addition
erability. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
CVE ID: CVE-2019-18335 State: PUBLISHED Published: 2019-12-12T19:08:49 Last Updated: 2024-08-05T01:54:13.330Z Vendors: Siemens Products: SPPA-T3000 Application Server Problem Types: CWE-200 Description: A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to gain access to logs and configuration files by sending specifically crafted packets to 80/tcp. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was
ploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
CVE ID: CVE-2019-18336 State: PUBLISHED Published: 2020-03-10T19:16:17 Last Updated: 2024-08-05T01:54:14.382Z Vendors: Siemens AG Products: SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants), SIMATIC TDC CP51M1, SIMATIC TDC CPU555, SINUMERIK 840D sl Problem Types: CWE-400 Description: A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V3.X.17), SIMATIC TDC CP51M1 (All versions < V1.1.8), SIMATIC TDC CPU555 (All versions < V1.1.1), SINUMERIK 840D sl (All versions < V4.8.6), SINUMERIK 840D sl (All versions < V4.94). Specially crafted packets sent to port 102/tcp (Profinet) could cause the affecte
UMERIK 840D sl (All versions < V4.94). Specially crafted packets sent to port 102/tcp (Profinet) could cause the affected device to go into defect mode. A restart is required in order to recover the system. Successful exploitation requires an attacker to have network access to port 102/tcp, with no authentication. No user interation is required. At the time of advisory publication no public exploitation of this security vulnerability was known. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-508982.pdf
CVE ID: CVE-2019-18337 State: PUBLISHED Published: 2019-12-12T19:08:49 Last Updated: 2024-10-15T18:35:44.549Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C) Vendors: Siemens Products: Control Center Server (CCS) Problem Types: CWE-287 Description: A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains an authentication bypass vulnerability in its XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp. A remote attacker with network access to the CCS server could exploit this vulnerability to read the CCS users database, including the password
network access to the CCS server could exploit this vulnerability to read the CCS users database, including the passwords of all users in obfuscated cleartext. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf
CVE ID: CVE-2019-18338 State: PUBLISHED Published: 2019-12-12T19:08:49 Last Updated: 2024-11-15T14:50:03.991Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:F/RL:U/RC:C) Vendors: Siemens Products: Control Center Server (CCS) Problem Types: CWE-23 Description: A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains a directory traversal vulnerability in its XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp. An authenticated remote attacker with network access to the CCS server could exploit this vulnerability to list arbitrary directories or read files out
r with network access to the CCS server could exploit this vulnerability to list arbitrary directories or read files outside of the CCS application context. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf
CVE ID: CVE-2019-18339 State: PUBLISHED Published: 2019-12-12T19:08:49 Last Updated: 2024-08-05T01:54:14.297Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C) Vendors: Siemens Products: SiNVR/SiVMS Video Server Problem Types: CWE-306 Description: A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The HTTP service (default port 5401/tcp) of the SiVMS/SiNVR Video Server contains an authentication bypass vulnerability, even when properly configured with enforced authentication. A remote attacker with network access to the Video Server could exploit this vulnerability to read the SiVMS/SiNVR users database, including t
network access to the Video Server could exploit this vulnerability to read the SiVMS/SiNVR users database, including the passwords of all users in obfuscated cleartext. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf
CVE ID: CVE-2019-18340 State: PUBLISHED Published: 2019-12-12T19:08:49 Last Updated: 2024-08-05T01:54:14.118Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:U/RC:C) Vendors: Siemens Products: Control Center Server (CCS), SiNVR/SiVMS Video Server Problem Types: CWE-327 Description: A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), Control Center Server (CCS) (All versions >= V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0), SiNVR/SiVMS Video Server (All versions >= V5.0.0). Both the SiVMS/SiNVR Video Server and the Control Center Server (CCS) store user and device passwords by applying weak cryptography. A loca
R Video Server and the Control Center Server (CCS) store user and device passwords by applying weak cryptography. A local attacker could exploit this vulnerability to extract the passwords from the user database and/or the device configuration files to conduct further attacks. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf
CVE ID: CVE-2019-18341 State: PUBLISHED Published: 2019-12-12T19:08:49 Last Updated: 2024-08-05T01:54:13.535Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:U/RC:C) Vendors: Siemens Products: Control Center Server (CCS) Problem Types: CWE-287 Description: A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default port 22/tcp) of the Control Center Server (CCS) contains an authentication bypass vulnerability. A remote attacker with network access to the CCS server could exploit this vulnerability to read data from the EDIR directory (for example, the list of all configured stations). Additional Analyst
lnerability to read data from the EDIR directory (for example, the list of all configured stations). Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf
CVE ID: CVE-2019-18342 State: PUBLISHED Published: 2019-12-12T19:08:49 Last Updated: 2024-08-05T01:54:13.423Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:F/RL:U/RC:C) Vendors: Siemens Products: Control Center Server (CCS) Problem Types: CWE-749 Description: A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default port 22/tcp) of the Control Center Server (CCS) does not properly limit its capabilities to the specified purpose. In conjunction with CVE-2019-18341, an unauthenticated remote attacker with network access to the CCS server could exploit this vulnerability to read or delete arbitrary files,
mote attacker with network access to the CCS server could exploit this vulnerability to read or delete arbitrary files, or access other resources on the same server. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf
CVE ID: CVE-2019-18344 State: PUBLISHED Published: 2019-10-23T14:36:36 Last Updated: 2024-08-05T01:54:13.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Online Grading System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the student, instructor, department, room, class, or user page (id or classid parameter). Additional Analyst Notes: - CVE Program Container: References: - https://www.sevenlayers.com/index.php/262-online-grading-system-1-0-sqli