deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-7971
Published: 2019-03-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-7972
Published: 2019-03-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-7973
Published: 2019-03-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-7974
Published: 2019-03-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-7975
Published: 2019-03-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-7978
Published: 2019-03-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-7979
Published: 2019-03-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-7980
Published: 2019-03-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-7981
Published: 2019-03-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-7982
Published: 2019-03-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-7983
Published: 2019-03-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-7984
Published: 2019-03-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-7985
Published: 2019-03-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-7986
Published: 2019-03-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2019-6518
Published: 2019-03-05
Description: Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-256, CWE-311
References: http://www.securityfocus.com/bid/107178; https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01; http://www.securityfocus.com/bid/107178
CVE: CVE-2019-6520
Published: 2019-03-05
Description: Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/107178; https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01; http://www.securityfocus.com/bid/107178
CVE: CVE-2019-6522
Published: 2019-03-05
Description: Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary addresses, and may allow an attacker to retrieve sensitive data or cause device reboot.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-125
References: http://www.securityfocus.com/bid/107178; https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01; http://www.securityfocus.com/bid/107178
CVE: CVE-2019-6524
Published: 2019-03-05
Description: Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover passwords via brute force attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307, CWE-307
References: http://www.securityfocus.com/bid/107178; https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01; http://www.securityfocus.com/bid/107178
CVE: CVE-2019-6528
Published: 2019-03-05
Description: PSI GridConnect GmbH Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy versions Telecontrol Gateway 3G Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and prior, and Telecontrol Gateway XS-MU Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and prior, and Telecontrol Gateway VM Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and prior, and Smart Telecontrol Unit TCG Versions 5.0.27, 5.1.19, 6.0.16 and prior, and IEC104 Security Proxy Version 2.2.10 and prior The web application browser interprets input as active HTML, JavaScript, or VBScript, which could allow an attacker to execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/107201; https://ics-cert.us-cert.gov/advisories/ICSA-19-059-01; http://www.securityfocus.com/bid/107201
CVE: CVE-2019-6557
Published: 2019-03-05
Description: Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: http://www.securityfocus.com/bid/107178; https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01; http://www.securityfocus.com/bid/107178
CVE: CVE-2019-6559
Published: 2019-03-05
Description: Moxa IKS and EDS allow remote authenticated users to cause a denial of service via a specially crafted packet, which may cause the switch to crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: http://www.securityfocus.com/bid/107178; https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01; http://www.securityfocus.com/bid/107178
CVE: CVE-2019-6561
Published: 2019-03-05
Description: Cross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the execution of unauthorized actions on the device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: http://www.securityfocus.com/bid/107178; https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01; http://www.securityfocus.com/bid/107178
CVE: CVE-2019-6563
Published: 2019-03-05
Description: Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-341, CWE-916
References: http://www.securityfocus.com/bid/107178; https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01; http://www.securityfocus.com/bid/107178
CVE: CVE-2019-6565
Published: 2019-03-05
Description: Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a malicious script.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/107178; https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01; http://www.securityfocus.com/bid/107178
CVE: CVE-2018-11793
Published: 2019-03-05
Description: When parsing a JSON payload with deeply nested JSON structures, the parser in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.1, 1.6.0 to 1.6.1, and 1.7.0 might overflow the stack due to unbounded recursion. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/107281; https://lists.apache.org/thread.html/9be975c53e5ad612c7e0af39f5b88837fbfbc32108e587d3d8499844%40%3Cdev.mesos.apache.org%3E; http://www.securityfocus.com/bid/107281
CVE: CVE-2019-3917
Published: 2019-03-05
Description: The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 allows a remote, unauthenticated attacker to enable telnetd on the router via a crafted HTTP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306, CWE-425
References: https://www.tenable.com/security/research/tra-2019-09; https://www.tenable.com/security/research/tra-2019-09
CVE: CVE-2019-3918
Published: 2019-03-05
Description: The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 contains multiple hard coded credentials for the Telnet and SSH interfaces.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://www.tenable.com/security/research/tra-2019-09; https://www.tenable.com/security/research/tra-2019-09
CVE: CVE-2019-3919
Published: 2019-03-05
Description: The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/usb_restore_Form?script/.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-77
References: https://www.tenable.com/security/research/tra-2019-09; https://www.tenable.com/security/research/tra-2019-09
CVE: CVE-2019-3920
Published: 2019-03-05
Description: The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to authenticated command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/device_Form?script/.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-77
References: https://www.tenable.com/security/research/tra-2019-09; https://www.tenable.com/security/research/tra-2019-09
CVE: CVE-2019-3921
Published: 2019-03-05
Description: The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, authenticated attacker to /GponForm/usb_Form?script/. An attacker can leverage this vulnerability to potentially execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://www.exploit-db.com/exploits/46469/; https://www.tenable.com/security/research/tra-2019-09; https://www.exploit-db.com/exploits/46469/
CVE: CVE-2019-3922
Published: 2019-03-05
Description: The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, unauthenticated attacker to /GponForm/fsetup_Form. An attacker can leverage this vulnerability to potentially execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://www.tenable.com/security/research/tra-2019-09; https://www.tenable.com/security/research/tra-2019-09
CVE: CVE-2019-9573
Published: 2019-03-05
Description: The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications.
CVSS Score: 7.5 (HIGH)
CWE: CWE-19
References: http://www.openwall.com/lists/oss-security/2019/03/17/1; http://www.securityfocus.com/bid/107464; https://wordpress.org/plugins/hrm/#developers
CVE: CVE-2019-9574
Published: 2019-03-05
Description: The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/03/17/1; http://www.securityfocus.com/bid/107464; https://wordpress.org/plugins/hrm/#developers
CVE: CVE-2019-9575
Published: 2019-03-05
Description: The Quiz And Survey Master plugin 6.0.4 for WordPress allows wp-admin/admin.php?page=mlw_quiz_results quiz_id XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/QuizandSurveyMaster/quiz_master_next/blob/master/CHANGELOG.md; https://lists.openwall.net/full-disclosure/2019/02/05/5; https://security-consulting.icu/blog/2019/02/wordpress-quiz-and-survey-master-xss/
CVE: CVE-2019-9576
Published: 2019-03-05
Description: The Blog2Social plugin before 5.0.3 for WordPress allows wp-admin/admin.php?page=blog2social-ship XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://lists.openwall.net/full-disclosure/2019/02/05/6; https://security-consulting.icu/blog/2019/02/wordpress-blog2social-xss/; https://wordpress.org/plugins/blog2social/#developers
CVE: CVE-2019-9213
Published: 2019-03-05
Description: In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0a1d52994d440e21def1c[PII_REDACTED]b4f2a98a1; http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00045.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00052.html
CVE: CVE-2019-0540
Published: 2019-03-05
Description: A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-601
References: http://www.securityfocus.com/bid/106863; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0540; http://www.securityfocus.com/bid/106863
CVE: CVE-2019-0590
Published: 2019-03-05
Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106934; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0590; http://www.securityfocus.com/bid/106934
CVE: CVE-2019-0591
Published: 2019-03-05
Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106935; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0591; http://www.securityfocus.com/bid/106935
CVE: CVE-2019-0593
Published: 2019-03-05
Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106936; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0593; http://www.securityfocus.com/bid/106936
CVE: CVE-2019-0594
Published: 2019-03-05
Description: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0604.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/106866; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0594; http://www.securityfocus.com/bid/106866
CVE: CVE-2019-0595
Published: 2019-03-05
Description: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0599, CVE-2019-0625.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/106921; https://kc.mcafee.com/corporate/index?page=content&id=SB10289; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0595
CVE: CVE-2019-0596
Published: 2019-03-05
Description: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0597, CVE-2019-0598, CVE-2019-0599, CVE-2019-0625.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/106922; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0596; http://www.securityfocus.com/bid/106922
CVE: CVE-2019-0597
Published: 2019-03-05
Description: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0598, CVE-2019-0599, CVE-2019-0625.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/106923; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0597; http://www.securityfocus.com/bid/106923
CVE: CVE-2019-0598
Published: 2019-03-05
Description: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0599, CVE-2019-0625.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/106924; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0598; http://www.securityfocus.com/bid/106924
CVE: CVE-2019-0599
Published: 2019-03-05
Description: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0625.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/106925; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0599; http://www.securityfocus.com/bid/106925
CVE: CVE-2019-0600
Published: 2019-03-05
Description: An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0601.
CVSS Score: 4.7 (MEDIUM)
References: http://www.securityfocus.com/bid/106868; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0600; http://www.securityfocus.com/bid/106868
CVE: CVE-2019-0601
Published: 2019-03-05
Description: An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0600.
CVSS Score: 4.7 (MEDIUM)
References: http://www.securityfocus.com/bid/106883; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0601; http://www.securityfocus.com/bid/106883
CVE: CVE-2019-0602
Published: 2019-03-05
Description: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0615, CVE-2019-0616, CVE-2019-0619, CVE-2019-0660, CVE-2019-0664.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/106858; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0602; http://www.securityfocus.com/bid/106858
CVE: CVE-2019-0604
Published: 2019-03-05
Description: A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/106914; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604; http://www.securityfocus.com/bid/106914
CVE: CVE-2019-0605
Published: 2019-03-05
Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106905; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0605; http://www.securityfocus.com/bid/106905
CVE: CVE-2019-0606
Published: 2019-03-05
Description: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106859; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0606; http://www.securityfocus.com/bid/106859
CVE: CVE-2019-0607
Published: 2019-03-05
Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106907; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0607; http://www.securityfocus.com/bid/106907
CVE: CVE-2019-0610
Published: 2019-03-05
Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106908; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0610; http://www.securityfocus.com/bid/106908
CVE: CVE-2019-0613
Published: 2019-03-05
Description: A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework and Visual Studio Remote Code Execution Vulnerability'.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/106872; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0613; http://www.securityfocus.com/bid/106872