Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-7764 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-17T01:56:09.853Z Vendors: Schneider Electric SE Products: U.Motion Problem Types: Directory Traversal Information Disclosure Description: The vulnerability exists within runscript.php applet in Schneider Electric U.motion Builder software versions prior to v1.3.4. There is a directory traversal vulnerability in the processing of the 's' parameter of the applet. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-095-01/
CVE ID: CVE-2018-7765 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-17T00:22:00.831Z Vendors: Schneider Electric SE Products: U.Motion Problem Types: SQL Injection Remote Code Execution Description: The vulnerability exists within processing of track_import_export.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the object_id input parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-095-01/ - http://seclists.org/fulldisclosure/2019/May/26
CVE ID: CVE-2018-7766 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-16T18:23:57.447Z Vendors: Schneider Electric SE Products: U.Motion Problem Types: SQL Injection Remote Code Execution Description: The vulnerability exists within processing of track_getdata.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the id input parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-095-01/
CVE ID: CVE-2018-7767 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-17T02:42:36.746Z Vendors: Schneider Electric SE Products: U.Motion Problem Types: SQL Injection Remote Code Execution Description: The vulnerability exists within processing of editobject.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the type input parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-095-01/
CVE ID: CVE-2018-7768 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-16T23:01:59.416Z Vendors: Schneider Electric SE Products: U.Motion Problem Types: SQL Injection Remote Code Execution Description: The vulnerability exists within processing of loadtemplate.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the tpl input parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-095-01/
CVE ID: CVE-2018-7769 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-16T17:58:21.297Z Vendors: Schneider Electric SE Products: U.Motion Problem Types: SQL Injection Remote Code Execution Description: The vulnerability exists within processing of xmlserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the id input parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-095-01/
CVE ID: CVE-2018-7770 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-17T03:43:43.992Z Vendors: Schneider Electric SE Products: U.Motion Problem Types: Path Traversal Information Disclosure Description: The vulnerability exists within processing of sendmail.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The applet allows callers to select arbitrary files to send to an arbitrary email address. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-095-01/
CVE ID: CVE-2018-7771 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-16T20:02:13.635Z Vendors: Schneider Electric SE Products: U.Motion Problem Types: Directory Traversal Remote Code Execution Description: The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A directory traversal vulnerability allows a caller with standard user privileges to write arbitrary php files anywhere in the web service directory tree. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-095-01/
CVE ID: CVE-2018-7772 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-16T23:22:06.635Z Vendors: Schneider Electric SE Products: U.Motion Problem Types: SQL Injection Remote Code Execution Description: The vulnerability exists within processing of applets which are exposed on the web service in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query to determine whether a user is logged in is subject to SQL injection on the loginSeed parameter, which can be embedded in the HTTP cookie of the request. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document
Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-095-01/
CVE ID: CVE-2018-7773 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-16T17:18:04.772Z Vendors: Schneider Electric SE Products: U.Motion Problem Types: SQL Injection Remote Code Execution Description: The vulnerability exists within processing of nfcserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the sessionid input parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-095-01/
CVE ID: CVE-2018-7774 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-16T23:26:44.507Z Vendors: Schneider Electric SE Products: U.Motion Problem Types: SQL Injection Remote Code Execution Description: The vulnerability exists within processing of localize.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the username input parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-095-01/
CVE ID: CVE-2018-7775 State: REJECTED Published: 2018-07-03T14:00:00 Last Updated: 2018-07-10T16:57:01 Description: No description available.
CVE ID: CVE-2018-7776 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-16T23:26:56.386Z Vendors: Schneider Electric SE Products: U.Motion Problem Types: Remote Code Execution Description: The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. System information is returned to the attacker that contains sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-095-01/
CVE ID: CVE-2018-7777 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-17T03:23:36.554Z Vendors: Schneider Electric SE Products: U.Motion Problem Types: Samba Remote Code Execution Description: The vulnerability is due to insufficient handling of update_file request parameter on update_module.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A remote, authenticated attacker can exploit this vulnerability by sending a crafted request to the target server. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-095-01/ - http://packetstormsecurity.com/files/156184/Schnei
//www.schneider-electric.com/en/download/document/SEVD-2018-095-01/ - http://packetstormsecurity.com/files/156184/Schneider-Electric-U.Motion-Builder-1.3.4-Command-Injection.html
CVE ID: CVE-2018-7778 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-17T01:07:06.154Z Vendors: Schneider Electric SE Products: Evlink Charging Station Problem Types: Cookie Modification Privilege Escalation Description: In Schneider Electric Evlink Charging Station versions prior to v3.2.0-12_v1, the Web Interface has an issue that may allow a remote attacker to gain administrative privileges without properly authenticating remote users. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-109-01/
CVE ID: CVE-2018-7779 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-16T17:23:51.444Z Vendors: Schneider Electric SE Products: Wiser for KNX Problem Types: Weak and unprotected FTP access Description: In Schneider Electric Wiser for KNX V2.1.0 and prior, homeLYnk V2.0.1 and prior; and spaceLYnk V2.1.0 and prior, weak and unprotected FTP access could allow an attacker unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-109-02/
CVE ID: CVE-2018-7780 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-17T00:21:09.174Z Vendors: Schneider Electric SE Products: Pelco Sarix Professional V1 Problem Types: Buffer Overflow Description: In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, a buffer overflow vulnerability exist in cgi program "set". Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-114-01/
CVE ID: CVE-2018-7781 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-16T19:56:23.773Z Vendors: Schneider Electric SE Products: Pelco Sarix Professional V1 Problem Types: Authenticated password disclosure and privilege escalation Description: In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear text and results in privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-114-01/
CVE ID: CVE-2018-7782 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-16T19:46:56.135Z Vendors: Schneider Electric SE Products: Pelco Sarix Professional V1 Problem Types: Authenticated password disclosure Description: In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, authenticated users can view passwords in clear text. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-114-01/
CVE ID: CVE-2018-7783 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-16T21:02:18.009Z Vendors: Schneider Electric SE Products: SoMachine Basic Problem Types: Out-Of-Band Remote Arbitrary Data Retrieval Description: Schneider Electric SoMachine Basic prior to v1.6 SP1 suffers from an XML External Entity (XXE) vulnerability using the DTD parameter entities technique resulting in disclosure and retrieval of arbitrary data on the affected node via out-of-band (OOB) attack. The vulnerability is triggered when input passed to the xml parser is not sanitized while parsing the xml project/template file. Additional Analyst Notes: - CVE Program Container: References: - https://
d while parsing the xml project/template file. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-142-01/
CVE ID: CVE-2018-7784 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-16T19:35:35.515Z Vendors: Schneider Electric SE Products: U.motion Builder Problem Types: Print Format Vulnerability Description: In Schneider Electric U.motion Builder software versions prior to v1.3.4, this exploit occurs when the submitted data of an input string is evaluated as a command by the application. In this way, the attacker could execute code, read the stack, or cause a segmentation fault in the running application. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-151-01/ - http://www.securityfocus.com/bid/
erences: - https://www.schneider-electric.com/en/download/document/SEVD-2018-151-01/ - http://www.securityfocus.com/bid/104447
CVE ID: CVE-2018-7785 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-16T18:08:37.585Z Vendors: Schneider Electric SE Products: U.motion Builder Problem Types: Remote Command Injection Description: In Schneider Electric U.motion Builder software versions prior to v1.3.4, a remote command injection allows authentication bypass. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-151-01/ - http://www.securityfocus.com/bid/104447
CVE ID: CVE-2018-7786 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-17T02:06:28.904Z Vendors: Schneider Electric SE Products: U.motion Builder Problem Types: Cross Site Scripting Description: In Schneider Electric U.motion Builder software versions prior to v1.3.4, a cross site scripting (XSS) vulnerability exists which could allow injection of malicious scripts. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-151-01/ - http://www.securityfocus.com/bid/104447
CVE ID: CVE-2018-7787 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-17T02:48:14.082Z Vendors: Schneider Electric SE Products: U.motion Builder Problem Types: Improper Input Validation Description: In Schneider Electric U.motion Builder software versions prior to v1.3.4, this vulnerability is due to improper validation of input of context parameter in HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-151-01/ - http://www.securityfocus.com/bid/104447
CVE ID: CVE-2018-7788 State: PUBLISHED Published: 2019-05-22T19:50:21 Last Updated: 2024-08-05T06:37:59.281Z Vendors: n/a Products: Modicon Quantum with firmware versions prior to V2.40. Problem Types: CWE-255 Description: A CWE-255 Credentials Management vulnerability exists in Modicon Quantum with firmware versions prior to V2.40. which could cause a Denial Of Service when using a Telnet connection. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-08/
CVE ID: CVE-2018-7789 State: PUBLISHED Published: 2018-08-29T20:00:00Z Last Updated: 2024-09-16T19:46:43.918Z Vendors: Schneider Electric SE Products: Modicon M221, all references, all versions prior to firmware V1.6.2.0 Problem Types: Improper Check for Unusual or Exceptional Conditions Description: An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to remotely reboot Modicon M221 using crafted programing protocol frames. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advis
ing protocol frames. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-240-02 - https://www.schneider-electric.com/en/download/document/SEVD-2018-233-01/ - http://www.securityfocus.com/bid/105171
CVE ID: CVE-2018-7790 State: PUBLISHED Published: 2018-08-29T21:00:00Z Last Updated: 2024-09-16T19:52:22.431Z Vendors: Schneider Electric SE Products: Modicon M221, all references, all versions prior to firmware V1.6.2.0 Problem Types: Information Management Error Description: An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to replay authentication sequences. If an attacker exploits this vulnerability and connects to a Modicon M221, the attacker can upload the original program from the PLC. Additional Analyst Notes: - CVE Program Container:
con M221, the attacker can upload the original program from the PLC. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105182 - https://www.schneider-electric.com/en/download/document/SEVD-2018-235-01/
CVE ID: CVE-2018-7791 State: PUBLISHED Published: 2018-08-29T21:00:00Z Last Updated: 2024-09-17T04:03:55.597Z Vendors: Schneider Electric SE Products: Modicon M221, all references, all versions prior to firmware V1.6.2.0 Problem Types: Permissions, Privileges, and Access Control Description: A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to overwrite the original password with their password. If an attacker exploits this vulnerability and overwrite the password, the attacker can upload the original program from the PLC. Additi
xploits this vulnerability and overwrite the password, the attacker can upload the original program from the PLC. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105182 - https://www.schneider-electric.com/en/download/document/SEVD-2018-235-01/
CVE ID: CVE-2018-7792 State: PUBLISHED Published: 2018-08-29T21:00:00Z Last Updated: 2024-09-17T01:15:41.433Z Vendors: Schneider Electric SE Products: Modicon M221, all references, all versions prior to firmware V1.6.2.0 Problem Types: Permissions, Privileges, and Access Control Description: A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to decode the password using rainbow table. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105182 - https://www.schneider-electric.com/en/dow
CVE Program Container: References: - http://www.securityfocus.com/bid/105182 - https://www.schneider-electric.com/en/download/document/SEVD-2018-235-01/
CVE ID: CVE-2018-7793 State: PUBLISHED Published: 2018-12-24T16:00:00 Last Updated: 2024-08-05T06:37:59.019Z Vendors: Schneider Electric SE Products: FoxView HMI SCADA (All Foxboro DCS, Foxboro Evo, and IA Series versions prior to Foxboro DCS Control Core Services 9.4 (CCS 9.4) and FoxView 10.5.) Problem Types: Credential Management Description: A Credential Management vulnerability exists in FoxView HMI SCADA (All Foxboro DCS, Foxboro Evo, and IA Series versions prior to Foxboro DCS Control Core Services 9.4 (CCS 9.4) and FoxView 10.5.) which could cause unauthorized disclosure, modification, or disruption in service when the password is modified without permission. Additional Analyst Notes
osure, modification, or disruption in service when the password is modified without permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-353-03/
CVE ID: CVE-2018-7794 State: PUBLISHED Published: 2020-01-06T22:57:09 Last Updated: 2024-08-05T06:37:59.272Z Vendors: Schneider Electric SE Products: Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) Problem Types: CWE-754 Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when reading data with invalid index using Modbus TCP. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEV
bus TCP. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2019-344-01
CVE ID: CVE-2018-7795 State: PUBLISHED Published: 2018-08-29T20:00:00Z Last Updated: 2024-09-16T17:03:52.342Z Vendors: Schneider Electric SE Products: PowerLogic - PM5560 prior to FW version 2.5.4 Problem Types: Cross Protocol Injection Description: A Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic (PM5560 prior to FW version 2.5.4) product. The vulnerability makes the product susceptible to cross site scripting attack on its web browser. User inputs can be manipulated to cause execution of java script code. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-228-01/ - http://www.s
rogram Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-228-01/ - http://www.securityfocus.com/bid/105170 - https://ics-cert.us-cert.gov/advisories/ICSA-18-240-03
CVE ID: CVE-2018-7796 State: PUBLISHED Published: 2018-12-24T16:00:00 Last Updated: 2024-08-05T06:37:59.566Z Vendors: Schneider Electric SE Products: PowerSuite 2, All released versions (VW3A8104 & Patches) Problem Types: Buffer Error Description: A Buffer Error vulnerability exists in PowerSuite 2, all released versions (VW3A8104 & Patches), which could cause an overflow in the memcpy function, leading to corruption of data and program instability. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-351-01/
CVE ID: CVE-2018-7797 State: PUBLISHED Published: 2018-12-17T22:00:00 Last Updated: 2024-08-05T06:37:59.199Z Vendors: Schneider Electric SE Products: Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxure&#xaa; Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxure&#xaa; Energy Expert 1.3 (formerly Power Manager), EcoStruxure&#xaa; Power SCADA Operation (PSO) 8.2 Advanced Reports and Dashboards Module, EcoStruxure&#xaa; Power Monitoring Expert (PME) v9.0, EcoStruxure&#xaa; Energy Expert v2.0, and EcoStruxure&#xaa;Power SCADA Operation (PSO) 9.0 Advanced Reports and Dashboards Module Problem Types: URL redirection Description: A URL redirection vulnerability exi
0 Advanced Reports and Dashboards Module Problem Types: URL redirection Description: A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxure Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxure Energy Expert 1.3 (formerly Power Manager), EcoStruxure Power SCADA Operation (PSO) 8.2 Advanced Reports and Dashboards Module, EcoStruxure Power Monitoring Expert (PME) v9.0, EcoStruxure Energy Expert v2.0, and EcoStruxure Power SCADA Operation (PSO) 9.0 Advanced Reports and Dashboards Module which could cause a phishing attack when redirected to a malicious site. Additional Analyst Notes: - CVE Program Container: References: -
a phishing attack when redirected to a malicious site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106277 - https://www.schneider-electric.com/en/download/document/SEVD-2018-347-01/