Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-10777 State: PUBLISHED Published: 2020-01-08T16:13:33 Last Updated: 2024-08-04T22:32:01.597Z Vendors: n/a Products: aws-lambda Problem Types: Command Injection Description: In aws-lambda versions prior to version 1.0.5, the "config.FunctioName" is used to construct the argument used within the "exec" function without any sanitization. It is possible for a user to inject arbitrary commands to the "zipCmd" used within "config.FunctionName". Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-AWSLAMBDA-540839
CVE ID: CVE-2019-10778 State: PUBLISHED Published: 2020-01-08T15:03:24 Last Updated: 2024-08-04T22:32:01.938Z Vendors: n/a Products: devcert-sanscache Problem Types: Command Injection Description: devcert-sanscache before 0.4.7 allows remote attackers to execute arbitrary code or cause a Command Injection via the exec function. The variable `commonName` controlled by user input is used as part of the `exec` function without any sanitization. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-DEVCERTSANSCACHE-540926
CVE ID: CVE-2019-10779 State: PUBLISHED Published: 2020-01-28T00:17:32 Last Updated: 2024-08-04T22:32:01.943Z Vendors: n/a Products: stroom:stroom-app Problem Types: Cross-site Scripting Description: All versions of stroom:stroom-app before 5.5.12 and all versions of the 6.0.0 branch before 6.0.25 are affected by Cross-site Scripting. An attacker website is able to load the Stroom UI into a hidden iframe. Using that iframe, the attacker site can issue commands to the Stroom UI via an XSS vulnerability to take full control of the Stroom UI on behalf of the logged-in user. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JAVA-STROOM-541182
CVE ID: CVE-2019-10780 State: PUBLISHED Published: 2020-01-22T13:30:47 Last Updated: 2024-08-04T22:32:01.682Z Vendors: n/a Products: BibTeX-ruby Problem Types: Command Injection Description: BibTeX-ruby before 5.1.0 allows shell command injection due to unsanitized user input being passed directly to the built-in Ruby Kernel.open method through BibTeX.open. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-RUBY-BIBTEXRUBY-542602
CVE ID: CVE-2019-10781 State: PUBLISHED Published: 2020-01-22T13:40:56 Last Updated: 2024-08-04T22:32:01.588Z Vendors: Snyk Products: schema-inspector Problem Types: Internal Property Tampering Description: In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate()` function used within schema-inspector. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-SCHEMAINSPECTOR-536970 - https://github.com/Atinux/schema-inspector/commit/345a7b2eed11bb6128421150d65f4f83fdbb737d
CVE ID: CVE-2019-10782 State: PUBLISHED Published: 2020-01-30T22:16:00 Last Updated: 2024-08-04T22:32:01.605Z Vendors: n/a Products: com.puppycrawl.tools:checkstyle Problem Types: XML External Entity (XXE) Injection Description: All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JAVA-COMPUPPYCRAWLTOOLS-543266 - https://lists.debian.org/debian-lts-announce/2020/02/msg00008.html - https://lists.apache.org/thread.html/r8aaf4ee16bbaf6204731d4770d96ebb34b258cd79b491f9cdd7f2540%40%3Ccommits.nifi.apache.
https://lists.apache.org/thread.html/r8aaf4ee16bbaf6204731d4770d96ebb34b258cd79b491f9cdd7f2540%40%3Ccommits.nifi.apache.org%3E
CVE ID: CVE-2019-10783 State: PUBLISHED Published: 2020-01-29T21:07:28 Last Updated: 2024-08-04T22:32:02.059Z Vendors: n/a Products: lsof Problem Types: Command Injection Description: All versions including 0.0.4 of lsof npm module are vulnerable to Command Injection. Every exported method used by the package uses the exec function to parse user input. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-LSOF-543632
CVE ID: CVE-2019-10784 State: PUBLISHED Published: 2020-02-04T18:58:27 Last Updated: 2024-08-04T22:32:01.594Z Vendors: n/a Products: phppgadmin Problem Types: Cross-site Request Forgery (CSRF) Description: phppgadmin through 7.12.1 allows sensitive actions to be performed without validating that the request originated from the application. One such area, "database.php" does not verify the source of an HTTP request. This can be leveraged by a remote attacker to trick a logged-in administrator to visit a malicious page with a CSRF exploit and execute arbitrary system commands on the server. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-PHP-PHPPGADMI
on the server. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-PHP-PHPPGADMINPHPPGADMIN-543885
CVE ID: CVE-2019-10785 State: PUBLISHED Published: 2020-02-13T16:02:46 Last Updated: 2024-08-04T22:32:01.603Z Vendors: n/a Products: dojox Problem Types: Cross-site Scripting Description: dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-DOJOX-548257%2C - https://github.com/dojo/dojox/security/advisories/GHSA-pg97-ww7h-5mjr - https://lists.debian.org/debian-lts-announce/2020/02/msg00033.html
CVE ID: CVE-2019-10786 State: PUBLISHED Published: 2020-02-04T20:19:19 Last Updated: 2024-08-04T22:32:01.573Z Vendors: n/a Products: network-manager Problem Types: Command Injection Description: network-manager through 1.0.2 allows remote attackers to execute arbitrary commands via the "execSync()" argument. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-NETWORKMANAGER-544035
CVE ID: CVE-2019-10787 State: PUBLISHED Published: 2020-02-04T20:11:12 Last Updated: 2024-08-04T22:32:02.034Z Vendors: n/a Products: im-resize Problem Types: Command Injection Description: im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument. The cmd argument used within index.js, can be controlled by user without any sanitization. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-IMRESIZE-544183 - https://github.com/Turistforeningen/node-im-resize/commit/de624dacf6a50e39fe3472af1414d44937ce1f03
CVE ID: CVE-2019-10788 State: PUBLISHED Published: 2020-02-04T20:06:21 Last Updated: 2024-08-04T22:32:02.072Z Vendors: n/a Products: im-metadata Problem Types: Command Injection Description: im-metadata through 3.0.1 allows remote attackers to execute arbitrary commands via the "exec" argument. It is possible to inject arbitrary commands as part of the metadata options which is given to the "exec" function. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-IMMETADATA-544184 - https://github.com/Turistforeningen/node-im-metadata/commit/ea15dddbe0f65694bfde36b78dd488e90f246639
CVE ID: CVE-2019-10789 State: PUBLISHED Published: 2020-02-06T15:58:53 Last Updated: 2024-08-04T22:32:01.494Z Vendors: n/a Products: curling.js Problem Types: Command Injection Description: All versions of curling.js are vulnerable to Command Injection via the run function. The command argument can be controlled by users without any sanitization. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-CURLING-546484 - https://github.com/hgarcia/curling/blob/e861d625c074679a2931bcf4ce8da0afa8162c53/lib/curl-transport.js#L56
CVE ID: CVE-2019-10790 State: PUBLISHED Published: 2020-02-17T00:00:00 Last Updated: 2024-08-04T22:32:01.575Z Vendors: n/a Products: taffy npm module Problem Types: Authorization Bypass Through User-Controlled Key Description: taffydb npm module, vulnerable in all versions up to and including 2.7.3, allows attackers to forge adding additional properties into user-input processed by taffy which can allow access to any data items in the DB. taffy sets an internal index for each data item in its DB. However, it is found that the internal index can be forged by adding additional properties into user-input. If index is found in the query, taffyDB will ignore other query conditions and directly re
l properties into user-input. If index is found in the query, taffyDB will ignore other query conditions and directly return the indexed data item. Moreover, the internal index is in an easily-guessable format (e.g., T000002R000001). As such, attackers can use this vulnerability to access any data items in the DB. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-TAFFY-546521 - https://security.snyk.io/vuln/SNYK-JS-TAFFYDB-2992450
CVE ID: CVE-2019-10791 State: PUBLISHED Published: 2020-02-18T16:01:20 Last Updated: 2024-08-04T22:32:02.100Z Vendors: Snyk Products: promise-probe Problem Types: Arbitrary Code Execution Description: promise-probe before 0.10.0 allows remote attackers to perform a command injection attack. The file, outputFile and options functions can be controlled by users without any sanitization. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dottgonzo/node-promise-probe/commit/0d9affb67fc1ad985903536d35372cf55efe5a45%2C - https://snyk.io/vuln/SNYK-JS-PROMISEPROBE-546816
CVE ID: CVE-2019-10792 State: PUBLISHED Published: 2020-02-18T15:49:47 Last Updated: 2024-08-04T22:32:01.668Z Vendors: Snyk Products: bodymen Problem Types: Prototype Pollution Description: bodymen before 1.1.1 is vulnerable to Prototype Pollution. The handler function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/diegohaz/bodymen/commit/5d52e8cf360410ee697afd90937e6042c3a8653b - https://snyk.io/vuln/SNYK-JS-BODYMEN-548897
CVE ID: CVE-2019-10793 State: PUBLISHED Published: 2020-02-18T15:57:37 Last Updated: 2024-08-04T22:32:02.167Z Vendors: Snyk Products: dot-object Problem Types: Prototype Pollution Description: dot-object before 2.1.3 is vulnerable to Prototype Pollution. The set function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rhalff/dot-object/commit/f76cff5fe6d01d30ce110d8f454db2e5bd28a7de - https://snyk.io/vuln/SNYK-JS-DOTOBJECT-548905
CVE ID: CVE-2019-10794 State: PUBLISHED Published: 2020-02-18T15:32:54 Last Updated: 2024-08-04T22:32:01.927Z Vendors: Snyk Products: component-flatten Problem Types: Prototype Pollution Description: All versions of component-flatten are vulnerable to Prototype Pollution. The a function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-COMPONENTFLATTEN-548907
CVE ID: CVE-2019-10795 State: PUBLISHED Published: 2020-02-18T15:43:13 Last Updated: 2024-08-04T22:32:02.035Z Vendors: Snyk Products: undefsafe Problem Types: Prototype Pollution Description: undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-UNDEFSAFE-548940 - https://github.com/remy/undefsafe/commit/f272681b3a50e2c4cbb6a8533795e1453382c822
CVE ID: CVE-2019-10796 State: PUBLISHED Published: 2020-02-24T17:40:06 Last Updated: 2024-08-04T22:32:02.037Z Vendors: n/a Products: rpi Problem Types: Command Injection Description: rpi through 0.0.3 allows execution of arbritary commands. The variable pinNumbver in function GPIO within src/lib/gpio.js is used as part of the arguement of exec function without any sanitization. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xseignard/rpi/blob/master/src/lib/gpio.js#L47 - https://snyk.io/vuln/SNYK-JS-RPI-548942
CVE ID: CVE-2019-10797 State: PUBLISHED Published: 2020-02-19T18:14:55 Last Updated: 2024-08-04T22:32:02.164Z Vendors: Snyk Products: WSO2 transport-http Problem Types: HTTP Response Splitting Description: Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JAVA-ORGWSO2TRANSPORTHTTP-548944
CVE ID: CVE-2019-10798 State: PUBLISHED Published: 2020-02-24T17:37:46 Last Updated: 2024-08-04T22:32:02.019Z Vendors: n/a Products: rdf-graph-array Problem Types: Prototype Pollution Description: rdf-graph-array through 0.3.0-rc6 manipulation of JavaScript objects resutling in Prototype Pollution. The rdf.Graph.prototype.add method could be tricked into adding or modifying properties of Object.prototype. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rdf-ext-archive/rdf-graph-array/blob/master/index.js#L211 - https://snyk.io/vuln/SNYK-JS-RDFGRAPHARRAY-551803
CVE ID: CVE-2019-10799 State: PUBLISHED Published: 2020-02-24T17:42:03 Last Updated: 2024-08-04T22:32:02.020Z Vendors: n/a Products: compile-sass Problem Types: Command Injection Description: compile-sass prior to 1.0.5 allows execution of arbritary commands. The function "setupCleanupOnExit(cssPath)" within "dist/index.js" is executed as part of the "rm" command without any sanitization. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eiskalteschatten/compile-sass/commit/d9ada7797ff93875b6466dea7a78768e90a0f8d2 - https://snyk.io/vuln/SNYK-JS-COMPILESASS-551804
CVE ID: CVE-2019-10800 State: PUBLISHED Published: 2022-07-13T11:50:10.842866Z Last Updated: 2024-09-16T22:08:55.286Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: n/a Products: codecov Problem Types: Command Injection Description: This affects the package codecov before 2.0.16. The vulnerability occurs due to not sanitizing gcov arguments before being being provided to the popen method. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-PYTHON-CODECOV-552149 - https://github.com/codecov/codecov-python/commit/2a80aa434f74feb31242b6f213b75ce63ae97902
CVE ID: CVE-2019-10801 State: PUBLISHED Published: 2020-02-28T20:45:42 Last Updated: 2024-08-04T22:32:02.181Z Vendors: n/a Products: enpeem Problem Types: Command Injection Description: enpeem through 2.2.0 allows execution of arbitrary commands. The "options.dir" argument is provided to the "exec" function without any sanitization. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/balderdashy/enpeem/blob/master/index.js#L114 - https://snyk.io/vuln/SNYK-JS-ENPEEM-559007
CVE ID: CVE-2019-10802 State: PUBLISHED Published: 2020-02-28T20:42:09 Last Updated: 2024-08-04T22:32:01.688Z Vendors: n/a Products: giting Problem Types: Command Injection Description: giting version prior to 0.0.8 allows execution of arbritary commands. The first argument "repo" of function "pull()" is executed by the package without any validation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MangoRaft/git/commit/9be41081f547d3dcef25e7d7c957bc2a3be2dfe0 - https://snyk.io/vuln/SNYK-JS-GITING-559008
CVE ID: CVE-2019-10803 State: PUBLISHED Published: 2020-02-28T20:35:28 Last Updated: 2024-08-04T22:32:02.167Z Vendors: n/a Products: push-dir Problem Types: Command Injection Description: push-dir through 0.4.1 allows execution of arbritary commands. Arguments provided as part of the variable "opt.branch" is not validated before being provided to the "git" command within "index.js#L139". This could be abused by an attacker to inject arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/L33T-KR3W/push-dir/blob/master/index.js#L139 - https://snyk.io/vuln/SNYK-JS-PUSHDIR-559009
CVE ID: CVE-2019-10804 State: PUBLISHED Published: 2020-02-28T20:31:41 Last Updated: 2024-08-04T22:32:02.057Z Vendors: n/a Products: serial-number Problem Types: Command Injection Description: serial-number through 1.3.0 allows execution of arbritary commands. The "cmdPrefix" argument in serialNumber function is used by the "exec" function without any validation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/es128/serial-number/blob/master/index.js#L106 - https://snyk.io/vuln/SNYK-JS-SERIALNUMBER-559010
CVE ID: CVE-2019-10805 State: PUBLISHED Published: 2020-02-28T20:23:49 Last Updated: 2024-08-04T22:32:02.056Z Vendors: n/a Products: valib Problem Types: Internal Property Tampering Description: valib through 2.0.0 allows Internal Property Tampering. A maliciously crafted JavaScript object can bypass several inspection functions provided by valib. Valib uses a built-in function (hasOwnProperty) from the unsafe user-input to examine an object. It is possible for a crafted payload to overwrite this function to manipulate the inspection results to bypass security checks. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-VALIB-559015 - https://www.npmj
ional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-VALIB-559015 - https://www.npmjs.com/package/valib
CVE ID: CVE-2019-10806 State: PUBLISHED Published: 2020-03-09T16:00:54 Last Updated: 2024-08-04T22:32:02.154Z Vendors: n/a Products: vega-util Problem Types: Prototype Pollution Description: vega-util prior to 1.13.1 allows manipulation of object prototype. The 'vega.mergeConfig' method within vega-util could be tricked into adding or modifying properties of the Object.prototype. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-VEGAUTIL-559223 - https://github.com/vega/vega/commit/8f33a0b5170d7de4f12fc248ec0901234342367b
CVE ID: CVE-2019-10807 State: PUBLISHED Published: 2020-03-10T23:24:29 Last Updated: 2024-08-04T22:32:02.180Z Vendors: n/a Products: blamer Problem Types: Command Injection Description: Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kucherenko/blamer/commit/5fada8c9b6986ecd28942b724fa682e77ce1e11c%2C - https://snyk.io/vuln/SNYK-JS-BLAMER-559541
CVE ID: CVE-2019-10808 State: PUBLISHED Published: 2020-03-11T22:05:07 Last Updated: 2024-08-04T22:32:02.096Z Vendors: n/a Products: utilitify Problem Types: Prototype Pollution Description: utilitify prior to 1.0.3 allows modification of object properties. The merge method could be tricked into adding or modifying properties of the Object.prototype. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xcritical-software/utilitify/commit/88d6e27009823338bf319ffb768fe6b08e8ad2d1%2C - https://snyk.io/vuln/SNYK-JS-UTILITIFY-559497
CVE ID: CVE-2019-10842 State: PUBLISHED Published: 2019-04-04T03:46:37 Last Updated: 2024-08-04T22:32:02.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker can craft the ___cfduid cookie value with base64 arbitrary code to be executed via eval(), which can be leveraged to execute arbitrary code on the target system. Note that there are three underscore characters in the cookie name. This is unrelated to the __cfduid cookie that is legitimately used by Cloudflare. Additional Analyst Notes: - CVE Program Container: References: - http
id cookie that is legitimately used by Cloudflare. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/twbs/bootstrap-sass/issues/1195 - https://snyk.io/blog/malicious-remote-code-execution-backdoor-discovered-in-the-popular-bootstrap-sass-ruby-gem/ - https://snyk.io/vuln/SNYK-RUBY-BOOTSTRAPSASS-174093 - http://dgb.github.io/2019/04/05/bootstrap-sass-backdoor.html
CVE ID: CVE-2019-10843 State: REJECTED Published: 2019-04-10T14:39:12 Last Updated: 2019-04-10T14:39:12 Description: No description available.
CVE ID: CVE-2019-10844 State: PUBLISHED Published: 2019-04-04T04:19:49 Last Updated: 2024-08-04T22:32:02.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) through v1.0.14 relies on the HOME environment variable, which might be untrusted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sony/nnabla/issues/209
CVE ID: CVE-2019-10845 State: PUBLISHED Published: 2019-04-08T17:57:14 Last Updated: 2024-08-04T22:32:02.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Uniqkey Password Manager 1.14. When entering new credentials to a site that isn't registered within this product, a pop-up window will appear asking the user if they want to save these new credentials. The code of the pop-up window can be read and, to some extent, manipulated by remote servers. This pop-up window will stay on any page the user visits within the browser until a decision is made. A malicious web server can forcefully manipulate the pop-up and cause it not to appear, stopping users fro
sion is made. A malicious web server can forcefully manipulate the pop-up and cause it not to appear, stopping users from securing their credentials. This vulnerability is related to id="uniqkey-password-popup" and password-popup/popup.html, but is a different vulnerability than CVE-2019-10676. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/Apr/8 - https://vuldb.com/?id.132960 - http://packetstormsecurity.com/files/152452/Uniqkey-Password-Manager-1.14-Denial-Of-Service.html
CVE ID: CVE-2019-10846 State: PUBLISHED Published: 2019-05-23T19:14:06 Last Updated: 2024-08-04T22:32:02.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in the login page and password reset page via the username GET parameter. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://applied-risk.com/index.php/download_file/view/196/165 - http://packetstormsecurity.com/files/155257/Computrols-CBAS-Web-19.0.0-Cross-Site-Scripting.html
CVE ID: CVE-2019-10847 State: PUBLISHED Published: 2019-05-24T16:33:39 Last Updated: 2024-08-04T22:32:02.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Computrols CBAS 18.0.0 allows Cross-Site Request Forgery. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://applied-risk.com/index.php/download_file/view/196/165 - http://packetstormsecurity.com/files/155247/Computrols-CBAS-Web-19.0.0-Cross-Site-Request-Forgery.html
CVE ID: CVE-2019-10848 State: PUBLISHED Published: 2019-05-24T16:29:08 Last Updated: 2024-08-04T22:32:02.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Computrols CBAS 18.0.0 allows Username Enumeration. Additional Analyst Notes: - CVE Program Container: References: - https://applied-risk.com/labs/advisories - https://applied-risk.com/index.php/download_file/view/196/165 - http://packetstormsecurity.com/files/155266/Computrols-CBAS-Web-19.0.0-Username-Enumeration.html