Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-7410 State: PUBLISHED Published: 2020-08-14T13:35:14 Last Updated: 2024-08-04T20:46:46.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is stored cross site scripting (XSS) in Galileo CMS v0.042. Remote authenticated users could inject arbitrary web script or HTML via $page_title in /lib/Galileo/files/templates/page/show.html.ep (aka the PAGE TITLE Field). Additional Analyst Notes: - CVE Program Container: References: - https://metamorfosec.com/Files/Advisories/METS-2020-002-A_Stored_XSS_Vulnerability_in_Galileo_CMS_v0.042.txt - https://metamorfosec.com/Files/Commits/METC-2020-002-Escape_banner_in_Galileo_CMS_v0.042.txt - https://github.com/jberger/Galil
/metamorfosec.com/Files/Commits/METC-2020-002-Escape_banner_in_Galileo_CMS_v0.042.txt - https://github.com/jberger/Galileo/pull/55/files - https://metacpan.org/changes/distribution/Galileo
CVE ID: CVE-2019-7411 State: PUBLISHED Published: 2019-05-13T13:48:19 Last Updated: 2024-08-04T20:46:46.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stored cross-site scripting (XSS) in the MyThemeShop Launcher plugin 1.0.8 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via fields as follows: (1) Title, (2) Favicon, (3) Meta Description, (4) Subscribe Form (Name field label, Last name field label, Email field label), (5) Contact Form (Name field label and Email field label), and (6) Social Links (Facebook Page URL, Twitter Page URL, Instagram Page URL, YouTube Page URL, Linkedin Page URL, Google+ Page URL, RSS URL). Additiona
ge URL, Twitter Page URL, Instagram Page URL, YouTube Page URL, Linkedin Page URL, Google+ Page URL, RSS URL). Additional Analyst Notes: - CVE Program Container: References: - https://metamorfosec.com/Files/Advisories/METS-2019-002-Multiple_Stored_XSS_Vulnerabilities_in_the_MyThemeShop_Launcher_plugin_v1.0.8_for_WordPress.txt - https://wpvulndb.com/vulnerabilities/9275
CVE ID: CVE-2019-7412 State: PUBLISHED Published: 2019-02-05T18:00:00 Last Updated: 2024-08-04T20:46:46.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PS PHPCaptcha WP plugin before v1.2.0 for WordPress mishandles sanitization of input values. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ps-phpcaptcha/#developers - https://metamorfosec.com/Files/Advisories/METS-2019-003-Denial_of_Service_in_PS_PHPCaptcha_WP_before_v1.2.0.txt
CVE ID: CVE-2019-7413 State: PUBLISHED Published: 2019-02-05T18:00:00 Last Updated: 2024-08-04T20:46:46.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Parallax Scroll (aka adamrob-parallax-scroll) plugin before 2.1 for WordPress, includes/adamrob-parralax-shortcode.php allows XSS via the title text. ("parallax" has a spelling change within the PHP filename.) Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset/2024194/ - https://metamorfosec.com/Files/Advisories/METS-2019-004-A_XSS_Vulnerability_in_Parallax_Scroll_plugin_before_v2.1_for_WordPress.txt
CVE ID: CVE-2019-7416 State: PUBLISHED Published: 2019-03-17T19:36:54 Last Updated: 2024-08-04T20:46:46.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS and/or a Client Side URL Redirect exists in OpenText Documentum Webtop 5.3 SP2. The parameter startat in "/webtop/help/en/default.htm" is vulnerable. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151582/OpenText-Documentum-Webtop-5.3-SP2-Open-Redirect.html - https://www.opentext.com/products-and-solutions/products/opentext-product-offerings-catalog/rebranded-products/documentum - http://seclists.org/fulldisclosure/2019/Feb/26
CVE ID: CVE-2019-7417 State: PUBLISHED Published: 2019-03-17T19:41:15 Last Updated: 2024-08-04T20:46:46.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in Ericsson Active Library Explorer (ALEX) 14.3 in multiple parameters in the "/cgi-bin/alexserv" servlet, as demonstrated by the DB, FN, fn, or id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151583/Ericsson-Active-Library-Explorer-ALEX-14.3-Cross-Site-Scripting.html - http://www.ericsson.com - http://seclists.org/fulldisclosure/2019/Feb/27
CVE ID: CVE-2019-7418 State: PUBLISHED Published: 2019-03-17T19:43:06 Last Updated: 2024-08-04T20:46:46.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html - http://www.samsungprinter.com/ - http://www.samsung.com/Support/ProductSupport/download/index.aspx - http://seclists.org/fulldisclosure/2019/Feb/28
CVE ID: CVE-2019-7419 State: PUBLISHED Published: 2019-03-17T19:53:18 Last Updated: 2024-08-04T20:46:46.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFw_id, ruiFw_pid, ruiFw_title. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html - http://www.samsungprinter.com/ - http://www.samsung.com/Support/ProductSupport/download/index.aspx - http://seclists.org/fulldisclosure/2019/Feb/28
CVE ID: CVE-2019-7420 State: PUBLISHED Published: 2019-03-17T19:57:26 Last Updated: 2024-08-04T20:46:46.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html - http://www.samsungprinter.com/ - http://www.samsung.com/Support/ProductSupport/download/index.aspx - http://seclists.org/fulldisclosure/2019/Feb/28
CVE ID: CVE-2019-7421 State: PUBLISHED Published: 2019-03-17T19:59:07 Last Updated: 2024-08-04T20:46:46.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html - http://www.samsungprinter.com/ - http://www.samsung.com/Support/ProductSupport/download/index.aspx - http://seclists.org/fulldisclosure/2019/Feb/28
CVE ID: CVE-2019-7422 State: PUBLISHED Published: 2019-03-17T20:00:59 Last Updated: 2024-08-04T20:46:46.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/addMailSettings.jsp" file in the gF parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151585/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-XSS.html - https://www.manageengine.com/products/netflow/?doc - http://seclists.org/fulldisclosure/2019/Feb/29
CVE ID: CVE-2019-7423 State: PUBLISHED Published: 2019-03-17T20:02:54 Last Updated: 2024-08-04T20:46:46.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/editProfile.jsp" file in the userName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151585/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-XSS.html - https://www.manageengine.com/products/netflow/?doc - http://seclists.org/fulldisclosure/2019/Feb/29
CVE ID: CVE-2019-7424 State: PUBLISHED Published: 2019-03-17T20:06:07 Last Updated: 2024-08-04T20:46:46.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/index.jsp" file in the view GET parameter or any of these POST parameters: autorefTime, section, snapshot, viewOpt, viewAll, view, or groupSelName. The latter is related to CVE-2009-3903. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151585/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-XSS.html - https://www.manageengine.com/products/netflow/?doc - h
oho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-XSS.html - https://www.manageengine.com/products/netflow/?doc - http://seclists.org/fulldisclosure/2019/Feb/29
CVE ID: CVE-2019-7425 State: PUBLISHED Published: 2019-03-17T20:10:05 Last Updated: 2024-08-04T20:46:46.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the task parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151585/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-XSS.html - https://www.manageengine.com/products/netflow/?doc - http://seclists.org/fulldisclosure/2019/Feb/29
CVE ID: CVE-2019-7426 State: PUBLISHED Published: 2019-05-07T18:27:38 Last Updated: 2024-08-04T20:46:46.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the groupDesc, groupName, groupID, or task parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151585/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-XSS.html - http://seclists.org/fulldisclosure/2019/Feb/29
CVE ID: CVE-2019-7427 State: PUBLISHED Published: 2019-05-07T18:31:25 Last Updated: 2024-08-04T20:46:46.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the autorefTime or graphTypes parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151585/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-XSS.html - http://seclists.org/fulldisclosure/2019/Feb/29
CVE ID: CVE-2019-7429 State: PUBLISHED Published: 2019-03-20T19:29:10 Last Updated: 2024-08-04T20:46:46.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Property Rental Software 2.1.4 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2016/08 directory. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2019-7429-vikas-chaudhary/
CVE ID: CVE-2019-7430 State: PUBLISHED Published: 2019-03-20T19:35:23 Last Updated: 2024-08-04T20:46:46.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2019-7430-vikas-chaudhary/
CVE ID: CVE-2019-7431 State: PUBLISHED Published: 2019-03-20T19:39:31 Last Updated: 2024-08-04T20:46:46.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a listing of an uploads directory. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2019-7431-vikas-chaudhary/
CVE ID: CVE-2019-7432 State: PUBLISHED Published: 2019-03-20T19:42:17 Last Updated: 2024-08-04T20:46:46.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2019-7432-vikas-chaudhary/
CVE ID: CVE-2019-7433 State: PUBLISHED Published: 2019-03-20T19:45:22 Last Updated: 2024-08-04T20:46:46.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2019-7433-vikas-chaudhary/
CVE ID: CVE-2019-7434 State: PUBLISHED Published: 2019-03-20T19:48:06 Last Updated: 2024-08-04T20:46:46.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Rental Bike Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2019-7434-vikas-chaudhary/
CVE ID: CVE-2019-7435 State: PUBLISHED Published: 2019-03-20T19:51:32 Last Updated: 2024-08-04T20:46:46.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2019-7435-vikas-chaudhary/
CVE ID: CVE-2019-7436 State: PUBLISHED Published: 2019-03-20T19:53:45 Last Updated: 2024-08-04T20:46:46.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct request for a listing of an uploads directory. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2019-7436-vikas-chaudhary/
CVE ID: CVE-2019-7437 State: PUBLISHED Published: 2019-03-20T19:56:30 Last Updated: 2024-08-04T20:46:46.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting (XSS) via the Search field. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2019-7437-vikas-chaudhary/
CVE ID: CVE-2019-7438 State: PUBLISHED Published: 2019-03-20T20:03:19 Last Updated: 2024-08-04T20:46:46.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2019-7438-xss-vikas-chaudhary/ - https://gkaim.com/cve-2019-7438-html-vikas-chaudhary/ - https://www.exploit-db.com/exploits/46751/ - http://packetstormsecurity.com/files/152625/JioFi-4G-M2S-1.0.2-Cross-Site-Scripting.html
CVE ID: CVE-2019-7439 State: PUBLISHED Published: 2019-03-20T20:05:20 Last Updated: 2024-08-04T20:46:46.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices allows a DoS (Hang) via the mask POST parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2019-7439-vikas-chaudhary/ - https://www.exploit-db.com/exploits/46752/ - http://packetstormsecurity.com/files/152626/JioFi-4G-M2S-1.0.2-Denial-Of-Service.html
CVE ID: CVE-2019-7440 State: PUBLISHED Published: 2019-03-20T20:07:57 Last Updated: 2024-08-04T20:46:46.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi Settings (aka a SetWiFi_Setting request to cgi-bin/qcmap_web_cgi). Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2019-7440-vikas-chaudhary/ - https://www.exploit-db.com/exploits/46633/ - http://packetstormsecurity.com/files/152361/JioFi-4G-M2S-1.0.2-Cross-Site-Request-Forgery.html
CVE ID: CVE-2019-7441 State: PUBLISHED Published: 2019-03-20T20:10:37 Last Updated: 2024-08-04T20:46:46.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.8 for WordPress allows Parameter Tampering in an amount parameter (such as amount_1), as demonstrated by purchasing an item for lower than the intended price. NOTE: The plugin author states it is true that the amount can be manipulated in the PayPal payment flow. However, the amount is validated against the WooCommerce order total before completing the order, and if it doesn’t match then the order will be left in an “On Hold” state Additiona
r total before completing the order, and if it doesn’t match then the order will be left in an “On Hold” state Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2019-7441-vikas-chaudhary/ - https://www.exploit-db.com/exploits/46632/ - http://packetstormsecurity.com/files/152362/WordPress-PayPal-Checkout-Payment-Gateway-1.6.8-Parameter-Tampering.html - https://wordpress.org/support/topic/vulnerabilty-in-plugin/#post-11899173
CVE ID: CVE-2019-7442 State: PUBLISHED Published: 2019-05-08T20:54:48 Last Updated: 2024-08-04T20:46:46.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XML external entity (XXE) vulnerability in the Password Vault Web Access (PVWA) of CyberArk Enterprise Password Vault <=10.7 allows remote attackers to read arbitrary files or potentially bypass authentication via a crafted DTD in the SAML authentication system. Additional Analyst Notes: - CVE Program Container: References: - https://www.octority.com/2019/05/07/cyberark-enterprise-password-vault-xml-external-entity-xxe-injection/ - http://packetstormsecurity.com/files/152801/CyberArk-Enterprise-Password-Vault-10.7-XML-Exter
al-entity-xxe-injection/ - http://packetstormsecurity.com/files/152801/CyberArk-Enterprise-Password-Vault-10.7-XML-External-Entity-Injection.html
CVE ID: CVE-2019-7443 State: PUBLISHED Published: 2019-05-07T18:41:37 Last Updated: 2024-08-04T20:46:46.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp. Certain types can cause crashes, and trigger the decoding of arbitrary images with dynamically loaded plugins. In other words, KAuth unintentionally causes this plugin code to run as root, which increases the severity of any possible exploitation of a plugin vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/20
Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00060.html - http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00065.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAWLQKTUQJOAPXOFWJQAQCA4LVM2P45F/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PXVUJNXB6QKGPT6YJPJSG3U2BIR5XK5Y/ - https://cgit.kde.org/kauth.git/commit/?id=fc70fb0161c1b9144d26389434d34dd135cd3f4a - https://bugzilla.suse.com/show_bug.cgi?id=1124863
CVE ID: CVE-2019-7474 State: PUBLISHED Published: 2019-04-02T17:20:39 Last Updated: 2024-08-04T20:46:46.349Z Vendors: SonicWall Products: SonicOS, SonicOSv Problem Types: CWE-248 Description: A vulnerability in SonicWall SonicOS and SonicOSv, allow authenticated read-only admin to leave the firewall in an unstable state by downloading certificate with specific extension. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V). Additional Analyst Notes: - C
.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V). Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0001
CVE ID: CVE-2019-7475 State: PUBLISHED Published: 2019-04-02T17:20:39 Last Updated: 2024-08-04T20:46:46.311Z Vendors: SonicWall Products: SonicOS, SonicOSv Problem Types: CWE-284 Description: A vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific configuration allow unprivileged user to access advanced routing services. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V). Additional Analyst Notes: - CVE Program Con
ZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V). Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0002
CVE ID: CVE-2019-7476 State: PUBLISHED Published: 2019-04-26T20:25:46 Last Updated: 2024-08-04T20:46:46.406Z Vendors: SonicWall Products: Global Management System (GMS) Problem Types: CWE-284 Description: A vulnerability in SonicWall Global Management System (GMS), allow a remote user to gain access to the appliance using existing SSH key. This vulnerability affects GMS versions 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0004
CVE ID: CVE-2019-7477 State: PUBLISHED Published: 2019-04-02T17:20:39 Last Updated: 2024-08-04T20:54:27.020Z Vendors: SonicWall Products: SonicOS, SonicOSv Problem Types: CWE-327 Description: A vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain sensitive plaintext data when CBC cipher suites are enabled. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V). Additional Analyst Notes: - CVE Program Container: R
nicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V). Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0003
CVE ID: CVE-2019-7478 State: PUBLISHED Published: 2019-12-30T23:50:10 Last Updated: 2024-08-04T20:54:27.031Z Vendors: SonicWall Products: GMS Problem Types: CWE-89 Description: A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This vulnerability affected GMS versions GMS 8.4, 8.5, 8.6, 8.7, 9.0 and 9.1. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0011
CVE ID: CVE-2019-7479 State: PUBLISHED Published: 2019-12-31T01:30:14 Last Updated: 2024-08-04T20:54:26.999Z Vendors: SonicWall Products: SonicOS, SonicOSv Problem Types: CWE-285 Description: A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode. This vulnerability affected SonicOS Gen 5 version 5.9.1.12-4o and earlier, Gen 6 version 6.2.7.4-32n, 6.5.1.4-4n, 6.5.2.3-4n, 6.5.3.3-3n, 6.2.7.10-3n, 6.4.1.0-3n, 6.5.3.3-3n, 6.5.1.9-4n and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V). Additional Analyst Notes: - CVE Program Container: References: - https://psi
(AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V). Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0012