alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2019-7156 (published 2019-01-29)
In libdoc through 2019-01-28, calcFileBlockOffset in ole.c allows division by zero.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-369
Affected vendors: libdoc_project
Affected products: libdoc
CVE-2019-7158 (published 2019-06-17)
OX App Suite 7.10.0 and earlier has Incorrect Access Control.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: open-xchange
Affected products: open-xchange_appsuite
CVE-2019-7159 (published 2019-06-18)
OX App Suite 7.10.1 and earlier allows Information Exposure.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: open-xchange
Affected products: open-xchange_appsuite
CVE-2019-7160 (published 2019-01-29)
idreamsoft iCMS 7.0.13 allows admincp.php?app=files ../ Directory Traversal via the udir parameter to files.admincp.php, resulting in execution of arbitrary PHP code from a ZIP file via the admincp.php?app=apps zipfile parameter to apps.admincp.php.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: idreamsoft
Affected products: icms
CVE-2019-7161 (published 2019-03-21)
An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-798
Affected vendors: zohocorp
Affected products: manageengine_adselfservice_plus
CVE-2019-7162 (published 2019-12-31)
An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.6 Build 5607. An exposed service allows an unauthenticated person to retrieve internal information from the system and modify the product installation.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Affected vendors: zohocorp
Affected products: manageengine_adselfservice_plus
CVE-2019-7163 (published 2019-08-02)
The web interface of Alcatel LINKZONE MW40-V-V1.0 MW40_LU_02.00_02 devices is vulnerable to an authentication bypass that allows an unauthenticated user to have access to the web interface without knowing the administrator's password.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: tcl
Affected products: alcatel_linkzone, alcatel_linkzone_firmware
CVE-2019-7164 (published 2019-02-20)
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: debian, opensuse, oracle, redhat, sqlalchemy
Affected products: backports_sle, communications_operations_monitor, debian_linux, enterprise_linux, enterprise_linux_eus, enterprise_linux_server_aus, enterprise_linux_server_tus, leap, sqlalchemy
CVE-2019-7165 (published 2019-07-03)
A buffer overflow in DOSBox 0.74-2 allows attackers to execute arbitrary code.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: debian, dosbox, fedoraproject
Affected products: debian_linux, dosbox, fedora
CVE-2019-7167 (published 2019-03-27)
Zcash, before the Sapling network upgrade (2018-10-28), had a counterfeiting vulnerability. A key-generation process, during evaluation of polynomials related to a to-be-proven statement, produced certain bypass elements. Availability of these elements allowed a cheating prover to bypass a consistency check, and consequently transform the proof of one statement into an ostensibly valid proof of a different statement, thereby breaking the soundness of the proof system. This misled the original Sprout zk-SNARK verifier into accepting the correctness of a transaction.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-754
Affected vendors: z.cash
Affected products: zcash
CVE-2019-7168 (published 2019-01-29)
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Blog field to /admin/nodes/nodes/add/blog.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: croogo
Affected products: croogo
CVE-2019-7169 (published 2019-01-29)
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/menus/menus/edit/3.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: croogo
Affected products: croogo
CVE-2019-7170 (published 2019-01-29)
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/taxonomy/vocabularies.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: croogo
Affected products: croogo
CVE-2019-7171 (published 2019-01-29)
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/blocks/blocks/edit/8.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: croogo
Affected products: croogo
CVE-2019-7172 (published 2019-01-29)
A stored-self XSS exists in ATutor through v2.2.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Real Name field to /mods/_core/users/admins/my_edit.php.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: atutor
Affected products: atutor
CVE-2019-7173 (published 2019-01-29)
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/file-manager/attachments/edit/4.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: croogo
Affected products: croogo
CVE-2019-7174 (published 2019-04-09)
Roxy Fileman 1.4.5 allows attackers to execute renamefile.php (aka Rename File), createdir.php (aka Create Directory), fileslist.php (aka Echo File List), and movefile.php (aka Move File) operations.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: roxyfileman
Affected products: roxy_fileman
CVE-2019-7175 (published 2019-03-07)
In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-401
Affected vendors: canonical, debian, imagemagick, opensuse
Affected products: debian_linux, imagemagick, leap, ubuntu_linux
CVE-2019-7176 (published 2019-09-09)
An issue was discovered in GitLab Community and Enterprise Edition 8.x (starting in 8.9), 9.x, 10.x, and 11.x before 11.5.9, 11.6.x before 11.6.7, and 11.7.x before 11.7.2. It has Incorrect Access Control. Guest users are able to add reaction emojis on comments to which they have no visibility.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
Affected vendors: gitlab
Affected products: gitlab
CVE-2019-7177 (published 2020-09-25)
Pexip Infinity before 20.1 allows Code Injection onto nodes via an admin.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-94
Affected vendors: pexip
Affected products: pexip_infinity
CVE-2019-7178 (published 2020-09-25)
Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: pexip
Affected products: pexip_infinity
CVE-2019-7181 (published 2019-05-09)
Buffer Overflow vulnerability in myQNAPcloud Connect 1.3.3.0925 and earlier could allow remote attackers to crash the program.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-119
Affected vendors: qnap
Affected products: myqnapcloud
CVE-2019-7183 (published 2019-12-05)
This improper link resolution vulnerability allows remote attackers to access system files. To fix this vulnerability, QNAP recommend updating QTS to their latest versions.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-59
Affected vendors: qnap
Affected products: qts
CVE-2019-7184 (published 2019-12-05)
This cross-site scripting (XSS) vulnerability in Video Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Video Station to their latest versions.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: qnap
Affected products: qts, video_station
CVE-2019-7185 (published 2019-12-05)
This cross-site scripting (XSS) vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Music Station to their latest versions.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: qnap
Affected products: music_station, qts
CVE-2019-7192 (published 2019-12-05)
This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-863
Affected vendors: qnap
Affected products: photo_station, qts
Added to CISA KEV catalog: 2022-06-08
KEV required action: Apply updates per vendor instructions.
CVE-2019-7193 (published 2019-12-05)
This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: qnap
Affected products: qts
Added to CISA KEV catalog: 2022-06-08
KEV required action: Apply updates per vendor instructions.
CVE-2019-7194 (published 2019-12-05)
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: qnap
Affected products: photo_station, qts
Added to CISA KEV catalog: 2022-06-08
KEV required action: Apply updates per vendor instructions.
CVE-2019-7195 (published 2019-12-05)
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: qnap
Affected products: photo_station, qts
Added to CISA KEV catalog: 2022-06-08
KEV required action: Apply updates per vendor instructions.
CVE-2019-7197 (published 2019-12-04)
A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability may allow an attacker to inject and execute scripts on the administrator console. To fix this vulnerability, QNAP recommend updating QTS to the latest version.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: qnap
Affected products: qts
CVE-2019-7198 (published 2020-12-10)
This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and later QTS 4.4.3.1354 build 20200702 and later
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-77
Affected vendors: qnap
Affected products: qts, quts_hero
CVE-2019-7201 (published 2019-12-04)
An unquoted service path vulnerability is reported to affect the service QVssService in QNAP NetBak Replicator. This vulnerability could allow an authorized but non-privileged local user to execute arbitrary code with elevated system privileges. QNAP have already fixed this issue in QNAP NetBak Replicator 4.5.12.1108.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-428
Affected vendors: qnap
Affected products: netbak_replicator
CVE-2019-7211 (published 2019-04-24)
SmarterTools SmarterMail 16.x before build 6995 has stored XSS. JavaScript code could be executed on the application by opening a malicious email or when viewing a malicious file attachment.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: smartertools
Affected products: smartermail
CVE-2019-7212 (published 2019-04-24)
SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys. An unauthenticated attacker could access other users’ emails and file attachments. It was also possible to interact with mailing lists.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)
Weakness: CWE-798
Affected vendors: smartertools
Affected products: smartermail
CVE-2019-7213 (published 2019-04-24)
SmarterTools SmarterMail 16.x before build 6985 allows directory traversal. An authenticated user could delete arbitrary files or could create files in new folders in arbitrary locations on the mail server. This could lead to command execution on the server for instance by putting files inside the web directories.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-22
Affected vendors: smartertools
Affected products: smartermail
CVE-2019-7214 (published 2019-04-24)
SmarterTools SmarterMail 16.x before build 6985 allows deserialization of untrusted data. An unauthenticated attacker could run commands on the server when port 17001 was remotely accessible. This port is not accessible remotely by default after applying the Build 6985 patch.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: smartertools
Affected products: smartermail
CVE-2019-7215 (published 2019-06-06)
Progress Sitefinity 10.1.6536 does not invalidate session cookies upon logouts. It instead tries to overwrite the cookie in the browser, but it remains valid on the server side. This means the cookie can be reused to maintain access to the account, even if the account credentials and permissions are changed.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Weakness: CWE-613
Affected vendors: progress
Affected products: sitefinity
CVE-2019-7216 (published 2019-01-31)
An issue was discovered in FileChucker 4.99e-free-e02. filechucker.cgi has a filter bypass that allows a malicious user to upload any type of file by using % characters within the extension, e.g., file.%ph%p becomes file.php.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: encodable
Affected products: filechucker
CVE-2019-7217 (published 2019-05-13)
Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-203
Affected vendors: citrix
Affected products: sharefile
CVE-2019-7218 (published 2019-05-13)
Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. An attacker with access to the offline victim's otp physical token or virtual app (like google authenticator) is able to bypass the first authentication phase (username/password mechanism) and log-in using username/otp combination only (phase 2 of 2FA).
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-287
Affected vendors: citrix
Affected products: sharefile
CVE-2019-7219 (published 2019-04-11)
Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and earlier. NOTE: this is a discontinued product. The issue was fixed in later Zarafa Webapp versions; however, some former Zarafa Webapp customers use the related Kopano product instead.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: zarafa
Affected products: webaccess
CVE-2019-7220 (published 2019-06-06)
X-Cart V5 is vulnerable to XSS via the CategoryFilter2 parameter.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: qualiteam
Affected products: x-cart
CVE-2019-7221 (published 2019-03-21)
The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: canonical, debian, fedoraproject, linux, netapp, opensuse, redhat
Affected products: active_iq_performance_analytics_services, debian_linux, element_software_management_node, enterprise_linux, enterprise_linux_desktop, enterprise_linux_server, enterprise_linux_server_aus, enterprise_linux_server_eus, enterprise_linux_server_tus, enterprise_linux_workstation, fedora, leap, linux_kernel, openshift_container_platform, ubuntu_linux
CVE-2019-7222 (published 2019-03-21)
The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: canonical, debian, fedoraproject, linux, netapp, opensuse, redhat
Affected products: active_iq_performance_analytics_services, debian_linux, element_software_management_node, enterprise_linux, enterprise_linux_desktop, enterprise_linux_eus, enterprise_linux_for_real_time, enterprise_linux_for_real_time_for_nfv, enterprise_linux_for_real_time_for_nfv_tus, enterprise_linux_for_real_time_tus, enterprise_linux_server, enterprise_linux_server_aus, enterprise_linux_server_tus, enterprise_linux_workstation, fedora, leap, linux_kernel, ubuntu_linux
CVE-2019-7223 (published 2019-03-21)
InvoicePlane 1.5 has stored XSS via the index.php/invoices/ajax/save invoice_password parameter, aka the "PDF password" field to the "Create Invoice" option. The XSS payload is rendered at an index.php/invoices/view/## URI. NOTE: this is different from CVE-2018-12255.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: invoiceplane
Affected products: invoiceplane
CVE-2019-7225 (published 2019-06-27)
The ABB HMI components implement hidden administrative accounts that are used during the provisioning phase of the HMI interface. These credentials allow the provisioning tool "Panel Builder 600" to flash a new interface and Tags (MODBUS coils) mapping to the HMI. These credentials are the idal123 password for the IdalMaster account, and the exor password for the exor account. These credentials are used over both HTTP(S) and FTP. There is no option to disable or change these undocumented credentials. An attacker can use these credentials to login to ABB HMI to read/write HMI configuration files and also to reset the device. This affects ABB CP635 HMI, CP600 HMIClient, Panel Builder 600, IDAL FTP server, IDAL HTTP server, and multiple other HMI components.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: abb
Affected products: cp620, cp620-web, cp620-web_firmware, cp620_firmware, cp630, cp630-web, cp630-web_firmware, cp630_firmware, cp635, cp635-b, cp635-b_firmware, cp635-web, cp635-web_firmware, cp635_firmware, cp651, cp651-web, cp651-web_firmware, cp651_firmware, cp661, cp661-web, cp661-web_firmware, cp661_firmware, cp665, cp665-web, cp665-web_firmware
CVE-2019-7226 (published 2019-06-27)
The ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated attacker to bypass authentication and gain access to privileged functions. Specifically, /cgi/loginDefaultUser creates a session in an authenticated state and returns the session ID along with what may be the username and cleartext password of the user. An attacker can then supply an IDALToken value in a cookie, which will allow them to perform privileged operations such as restarting the service with /cgi/restart. A GET request to /cgi/loginDefaultUser may result in "1 #S_OK IDALToken=532c8632b86694f0232a68a0897a145c admin admin" or a similar response.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: abb
Affected products: pb610_panel_builder_600, pb610_panel_builder_600_firmware
CVE-2019-7227 (published 2019-06-27)
In the ABB IDAL FTP server, an authenticated attacker can traverse to arbitrary directories on the hard disk with "CWD ../" and then use the FTP server functionality to download and upload files. An unauthenticated attacker can take advantage of the hardcoded or default credential pair exor/exor to become an authenticated attacker.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-22
Affected vendors: abb
Affected products: pb610_panel_builder_600, pb610_panel_builder_600_firmware
CVE-2019-7228 (published 2019-06-27)
The ABB IDAL HTTP server mishandles format strings in a username or cookie during the authentication process. Attempting to authenticate with the username %25s%25p%25x%25n will crash the server. Sending %08x.AAAA.%08x.%08x will log memory content from the stack.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-134
Affected vendors: abb
Affected products: pb610_panel_builder_600, pb610_panel_builder_600_firmware
CVE-2019-7229 (published 2019-06-24)
The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device" and "Remote provisioning process via ABB Panel Builder 600 over FTP." Neither of these transmission methods implements any form of encryption or authenticity checks against the new firmware HMI software binary files.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-494
Affected vendors: abb
Affected products: board_support_package_un31, cp620, cp620-web, cp620-web_firmware, cp620_firmware, cp630, cp630-web, cp630-web_firmware, cp630_firmware, cp635, cp635-b, cp635-b_firmware, cp635-web, cp635-web_firmware, cp635_firmware
CVE-2019-7230 (published 2019-06-24)
The ABB IDAL FTP server mishandles format strings in a username during the authentication process. Attempting to authenticate with the username %s%p%x%d will crash the server. Sending %08x.AAAA.%08x.%08x will log memory content from the stack.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-134
Affected vendors: abb
Affected products: pb610_panel_builder_600, pb610_panel_builder_600_firmware
CVE-2019-7231 (published 2019-06-24)
The ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an authenticated attacker. This overflow is handled, but terminates the process. An authenticated attacker can send a FTP command string of 472 bytes or more to overflow a buffer, causing an exception that terminates the server.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-119
Affected vendors: abb
Affected products: pb610_panel_builder_600, pb610_panel_builder_600_firmware
CVE-2019-7232 (published 2019-06-24)
The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request. The Host header value overflows a buffer and overwrites a Structured Exception Handler (SEH) address. An unauthenticated attacker can submit a Host header value of 2047 bytes or more to overflow the buffer and overwrite the SEH address, which can then be leveraged to execute attacker-controlled code on the server.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: abb
Affected products: pb610_panel_builder_600, pb610_panel_builder_600_firmware
CVE-2019-7233 (published 2019-01-30)
In libdoc through 2019-01-28, doc2text in catdoc.c has a NULL pointer dereference.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-476
Affected vendors: libdoc_project
Affected products: libdoc
CVE-2019-7234 (published 2019-01-30)
An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to begin the process of creating a ZIP archive file with the complete contents of any directory because of an apps.admincp.php error. This ZIP archive file can then be downloaded via an admincp.php?app=apps&do=pack request.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-22
Affected vendors: idreamsoft
Affected products: icms
CVE-2019-7235 (published 2019-01-30)
An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to designate an arbitrary directory because of an apps.admincp.php error. This directory can then be deleted via an admincp.php?app=apps&do=uninstall request.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-22
Affected vendors: idreamsoft
Affected products: icms
CVE-2019-7236 (published 2019-01-30)
An issue was discovered in idreamsoft iCMS 7.0.13. editor/editor.admincp.php allows admincp.php?app=editor&do=fileManager dir=../ Directory Traversal.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: idreamsoft
Affected products: icms
CVE-2019-7237 (published 2019-01-30)
An issue was discovered in idreamsoft iCMS 7.0.13 on Windows. editor/editor.admincp.php allows admincp.php?app=files&do=browse ..\ Directory Traversal.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: idreamsoft, microsoft
Affected products: icms, windows
CVE-2019-7238 (published 2019-03-21)
Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: sonatype
Affected products: nexus_repository_manager
Added to CISA KEV catalog: 2021-12-10
KEV required action: Apply updates per vendor instructions.
CVE-2019-7240 (published 2020-03-25)
An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-665
Affected vendors: moo0
Affected products: system_monitor
CVE-2019-7244 (published 2020-03-25)
An issue was discovered in kerneld.sys in AIDA64 before 5.99. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x80112084 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-665
Affected vendors: aida64
Affected products: aida64
CVE-2019-7245 (published 2020-03-25)
An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruction via an IOCTL and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-665
Affected vendors: techpowerup
Affected products: gpu-z
CVE-2019-7246 (published 2020-05-18)
An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. The vulnerable driver exposes a wrmsr instruction and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: amd
Affected products: atillk64
CVE-2019-7247 (published 2020-05-18)
An issue was discovered in AODDriver2.sys in AMD OverDrive. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x81112ee0 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: amd
Affected products: overdrive
CVE-2019-7249 (published 2019-01-31)
In Keybase before 2.12.6 on macOS, the move RPC to the Helper was susceptible to time-to-check-time-to-use bugs and would also allow one user of the system (who didn't have root access) to tamper with another's installs.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: keybase
Affected products: keybase
CVE-2019-7250 (published 2019-01-31)
An issue was discovered in the Cross Reference Add-on 36 for Google Docs. Stored XSS in the preview boxes in the configuration panel may allow a malicious user to use both label text and references text to inject arbitrary JavaScript code (via SCRIPT elements, event handlers, etc.). Since this code is stored by the plugin, the attacker may be able to target anyone who opens the configuration panel of the plugin.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: cross_reference_project
Affected products: cross_reference
CVE-2019-7251 (published 2019-03-28)
An Integer Signedness issue (for a return code) in the res_pjsip_sdp_rtp module in Digium Asterisk versions 15.7.1 and earlier and 16.1.1 and earlier allows remote authenticated users to crash Asterisk via a specially crafted SDP protocol violation.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-190
Affected vendors: digium
Affected products: asterisk
CVE-2019-7252 (published 2019-07-02)
Linear eMerge E3-Series devices have Default Credentials.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-1188
Affected vendors: nortekcontrol
Affected products: linear_emerge_elite, linear_emerge_elite_firmware, linear_emerge_essential, linear_emerge_essential_firmware
CVE-2019-7253 (published 2019-07-02)
Linear eMerge E3-Series devices allow Directory Traversal.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: nortekcontrol
Affected products: linear_emerge_elite, linear_emerge_elite_firmware, linear_emerge_essential, linear_emerge_essential_firmware
CVE-2019-7254 (published 2019-07-02)
Linear eMerge E3-Series devices allow File Inclusion.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: nortekcontrol
Affected products: linear_emerge_elite, linear_emerge_elite_firmware, linear_emerge_essential, linear_emerge_essential_firmware
CVE-2019-7255 (published 2019-07-02)
Linear eMerge E3-Series devices allow XSS.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: nortekcontrol
Affected products: linear_emerge_elite, linear_emerge_elite_firmware, linear_emerge_essential, linear_emerge_essential_firmware
CVE-2019-7256 (published 2019-07-02)
Linear eMerge E3-Series devices allow Command Injections.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: nortekcontrol
Affected products: linear_emerge_elite, linear_emerge_elite_firmware, linear_emerge_essential, linear_emerge_essential_firmware
Added to CISA KEV catalog: 2024-03-25
KEV required action: Contact the vendor for guidance on remediating firmware, per their advisory.
CVE-2019-7257 (published 2019-07-02)
Linear eMerge E3-Series devices allow Unrestricted File Upload.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: nortekcontrol
Affected products: linear_emerge_elite, linear_emerge_elite_firmware, linear_emerge_essential, linear_emerge_essential_firmware
CVE-2019-7258 (published 2019-07-02)
Linear eMerge E3-Series devices allow Privilege Escalation.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-863
Affected vendors: nortekcontrol
Affected products: linear_emerge_elite, linear_emerge_elite_firmware, linear_emerge_essential, linear_emerge_essential_firmware
CVE-2019-7259 (published 2019-07-02)
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-200
Affected vendors: nortekcontrol
Affected products: linear_emerge_elite, linear_emerge_elite_firmware, linear_emerge_essential, linear_emerge_essential_firmware
CVE-2019-7260 (published 2019-07-02)
Linear eMerge E3-Series devices have Cleartext Credentials in a Database.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-522
Affected vendors: nortekcontrol
Affected products: linear_emerge_elite, linear_emerge_elite_firmware, linear_emerge_essential, linear_emerge_essential_firmware
CVE-2019-7261 (published 2019-07-02)
Linear eMerge E3-Series devices have Hard-coded Credentials.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: nortekcontrol
Affected products: linear_emerge_elite, linear_emerge_elite_firmware, linear_emerge_essential, linear_emerge_essential_firmware
CVE-2019-7262 (published 2019-07-02)
Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: nortekcontrol
Affected products: linear_emerge_elite, linear_emerge_elite_firmware, linear_emerge_essential, linear_emerge_essential_firmware
CVE-2019-7263 (published 2019-07-02)
Linear eMerge E3-Series devices have a Version Control Failure.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-18
Affected vendors: nortekcontrol
Affected products: linear_emerge_elite, linear_emerge_elite_firmware, linear_emerge_essential, linear_emerge_essential_firmware
CVE-2019-7264 (published 2019-07-02)
Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: nortekcontrol
Affected products: linear_emerge_elite, linear_emerge_elite_firmware, linear_emerge_essential, linear_emerge_essential_firmware
CVE-2019-7265 (published 2019-07-02)
Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: nortekcontrol
Affected products: linear_emerge_elite, linear_emerge_elite_firmware, linear_emerge_essential, linear_emerge_essential_firmware
CVE-2019-7266 (published 2019-07-02)
Linear eMerge 50P/5000P devices allow Authentication Bypass.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-565
Affected vendors: nortekcontrol
Affected products: linear_emerge_5000p, linear_emerge_5000p_firmware, linear_emerge_50p, linear_emerge_50p_firmware
CVE-2019-7267 (published 2019-07-02)
Linear eMerge 50P/5000P devices allow Cookie Path Traversal.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: nortekcontrol
Affected products: linear_emerge_5000p, linear_emerge_5000p_firmware, linear_emerge_50p, linear_emerge_50p_firmware
CVE-2019-7268 (published 2019-07-02)
Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: nortekcontrol
Affected products: linear_emerge_5000p, linear_emerge_5000p_firmware, linear_emerge_50p, linear_emerge_50p_firmware
CVE-2019-7269 (published 2019-07-02)
Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: nortekcontrol
Affected products: linear_emerge_5000p, linear_emerge_5000p_firmware, linear_emerge_50p, linear_emerge_50p_firmware
CVE-2019-7270 (published 2019-07-02)
Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: nortekcontrol
Affected products: linear_emerge_5000p, linear_emerge_5000p_firmware, linear_emerge_50p, linear_emerge_50p_firmware
CVE-2019-7271 (published 2019-07-01)
Nortek Linear eMerge 50P/5000P devices have Default Credentials.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-522
Affected vendors: nortekcontrol
Affected products: linear_emerge_5000p, linear_emerge_5000p_firmware, linear_emerge_50p, linear_emerge_50p_firmware
CVE-2019-7272 (published 2019-07-01)
Optergy Proton/Enterprise devices allow Username Disclosure.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-862
Affected vendors: optergy
Affected products: enterprise, proton
CVE-2019-7273 (published 2019-07-01)
Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: optergy
Affected products: enterprise, proton
CVE-2019-7274 (published 2019-07-01)
Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: optergy
Affected products: enterprise, proton
CVE-2019-7275 (published 2019-07-01)
Optergy Proton/Enterprise devices allow Open Redirect.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-601
Affected vendors: optergy
Affected products: enterprise, proton
CVE-2019-7276 (published 2019-07-01)
Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: optergy
Affected products: enterprise, proton
CVE-2019-7277 (published 2019-07-01)
Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: optergy
Affected products: enterprise, proton
CVE-2019-7278 (published 2019-07-01)
Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Weakness: CWE-269
Affected vendors: optergy
Affected products: enterprise, proton
CVE-2019-7279 (published 2019-07-01)
Optergy Proton/Enterprise devices have Hard-coded Credentials.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Weakness: CWE-798
Affected vendors: optergy
Affected products: enterprise, proton
CVE-2019-7280 (published 2019-07-01)
Prima Systems FlexAir, Versions 2.3.38 and prior. The session-ID is of an insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session and bypass authentication.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-613
Affected vendors: primasystems
Affected products: flexair
CVE-2019-7281 (published 2019-07-01)
Prima Systems FlexAir, Versions 2.3.38 and prior. An unauthenticated user can send unverified HTTP requests, which may allow the attacker to perform certain actions with administrative privileges if a logged-in user visits a malicious website.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: primasystems
Affected products: flexair
CVE-2019-7282 (published 2019-01-31)
In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side. This is similar to CVE-2018-20685.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Affected vendors: debian, fedoraproject, netkit
Affected products: debian_linux, fedora, netkit
CVE-2019-7283 (published 2019-01-31)
An issue was discovered in rcp in NetKit through 0.17. For an rcp operation, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned. A malicious rsh server (or Man-in-The-Middle attacker) can overwrite arbitrary files in a directory on the rcp client machine. This is similar to CVE-2019-6111.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H)
Affected vendors: debian, netkit
Affected products: debian_linux, netkit
CVE-2019-7284 (published 2019-12-18)
This issue was addressed with improved checks. This issue is fixed in iOS 12.2. Processing a maliciously crafted mail message may lead to S/MIME signature spoofing.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)
Affected vendors: apple
Affected products: iphone_os
CVE-2019-7285 (published 2019-12-18)
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: apple
Affected products: icloud, iphone_os, itunes, safari, tvos
CVE-2019-7286 (published 2019-12-18)
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: apple
Affected products: iphone_os, mac_os_x
Added to CISA KEV catalog: 2022-05-23
KEV required action: Apply updates per vendor instructions.
CVE-2019-7287 (published 2019-12-18)
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: apple
Affected products: iphone_os
Added to CISA KEV catalog: 2022-05-23
KEV required action: Apply updates per vendor instructions.
CVE-2019-7288 (published 2020-10-27)
The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macOS Mojave 10.14.3 Supplemental Update, iOS 12.1.4. A thorough security audit of the FaceTime service uncovered an issue with Live Photos .
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: apple
Affected products: iphone_os, mac_os_x
CVE-2019-7289 (published 2019-12-18)
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Shortcuts 2.1.3 for iOS. A local user may be able to view senstive user information.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: apple
Affected products: shortcuts
CVE-2019-7290 (published 2019-12-18)
An access issue was addressed with additional sandbox restrictions. This issue is fixed in Shortcuts 2.1.3 for iOS. A sandboxed process may be able to circumvent sandbox restrictions.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-610
Affected vendors: apple
Affected products: shortcuts
CVE-2019-7291 (published 2020-10-27)
A denial of service issue was addressed with improved memory handling. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. An attacker in a privileged position may be able to perform a denial of service attack.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: apple
Affected products: airport_base_station_firmware
CVE-2019-7292 (published 2019-12-18)
A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may result in the disclosure of process memory.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-20
Affected vendors: apple
Affected products: icloud, iphone_os, itunes, safari, tvos, watchos
CVE-2019-7293 (published 2019-12-18)
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A local user may be able to read kernel memory.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-787
Affected vendors: apple
Affected products: iphone_os, mac_os_x, tvos, watchos
CVE-2019-7295 (published 2019-01-31)
typora through 0.9.63 has XSS, with resultant remote command execution, during block rendering of a mathematical formula.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: typora
Affected products: typora
CVE-2019-7296 (published 2019-01-31)
typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering of a mathematical formula.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: typora
Affected products: typora
CVE-2019-7297 (published 2019-01-31)
An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via shell metacharacters in a crafted /HNAP1 request. This occurs when the GetNetworkTomographyResult function calls the system function with an untrusted input parameter named Address. Consequently, an attacker can execute any command remotely when they control this input.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: d-link, dlink
Affected products: dir-823g, dir-823g_firmware
CVE-2019-7298 (published 2019-02-01)
An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body, such as a body of ' /bin/telnetd' for the GetDeviceSettingsset API function. Consequently, an attacker can execute any command remotely when they control this input.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: dlink
Affected products: dir-823g, dir-823g_firmware