deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-6838
Published: 2019-09-17
Description: A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to delete a critical file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://www.se.com/ww/en/download/document/SEVD-2019-253-01/; https://www.se.com/ww/en/download/document/SEVD-2019-253-01/
CVE: CVE-2019-6839
Published: 2019-09-17
Description: A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to upload a rogue file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://www.se.com/ww/en/download/document/SEVD-2019-253-01/; https://www.se.com/ww/en/download/document/SEVD-2019-253-01/
CVE: CVE-2019-6840
Published: 2019-09-17
Description: A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to send a crafted message to the target server, thereby causing arbitrary commands to be executed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-134, CWE-134
References: https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-253-01; https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-253-01
CVE: CVE-2019-16199
Published: 2019-09-17
Description: eQ-3 Homematic CCU2 before 2.47.18 and CCU3 before 3.47.18 allow Remote Code Execution by unauthenticated attackers with access to the web interface via an HTTP POST request to certain URLs related to the ReGa core process.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://psytester.github.io/CVE-2019-16199/; https://psytester.github.io/CVE-2019-16199/
CVE: CVE-2019-16391
Published: 2019-09-17
Description: SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiser_action.php.
CVSS Score: 6.5 (MEDIUM)
References: https://blog.spip.net/Mise-a-jour-CRITIQUE-de-securite-Sortie-de-SPIP-3-2-5-et-SPIP-3-1-11.html; https://blog.spip.net/Mise-a-jour-CRITIQUE-de-securite-Sortie-de-SPIP-3-2-5-et-SPIP-3-1-11.html?lang=fr; https://git.spip.net/SPIP/spip/commit/187952ce85e73b52c2753f2d54fc2c44807b8f79
CVE: CVE-2019-16392
Published: 2019-09-17
Description: SPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.spip.net/Mise-a-jour-CRITIQUE-de-securite-Sortie-de-SPIP-3-2-5-et-SPIP-3-1-11.html; https://git.spip.net/SPIP/spip/commit/3c12a82c7d9d4afd09e708748fa82e[PII_REDACTED]; https://lists.debian.org/debian-lts-announce/2019/10/msg00038.html
CVE: CVE-2019-16393
Published: 2019-09-17
Description: SPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a %0D, %0A, or %20 character.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://blog.spip.net/Mise-a-jour-CRITIQUE-de-securite-Sortie-de-SPIP-3-2-5-et-SPIP-3-1-11.html; https://core.spip.net/issues/4362; https://git.spip.net/SPIP/spip/commit/0b832408b0aabd5b94a81e261e9413c0f31a19f1
CVE: CVE-2019-16394
Published: 2019-09-17
Description: SPIP before 3.1.11 and 3.2 before 3.2.5 provides different error messages from the password-reminder page depending on whether an e-mail address exists, which might help attackers to enumerate subscribers.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://blog.spip.net/Mise-a-jour-CRITIQUE-de-securite-Sortie-de-SPIP-3-2-5-et-SPIP-3-1-11.html; https://core.spip.net/issues/4171; https://lists.debian.org/debian-lts-announce/2019/10/msg00038.html
CVE: CVE-2019-16395
Published: 2019-09-17
Description: GnuCOBOL 2.2 has a stack-based buffer overflow in the cb_name() function in cobc/tree.c via crafted COBOL source code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://sourceforge.net/p/open-cobol/bugs/586/; https://sourceforge.net/p/open-cobol/bugs/586/
CVE: CVE-2019-16396
Published: 2019-09-17
Description: GnuCOBOL 2.2 has a use-after-free in the end_scope_of_program_name() function in cobc/parser.y via crafted COBOL source code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://sourceforge.net/p/open-cobol/bugs/587/; https://sourceforge.net/p/open-cobol/bugs/587/
CVE: CVE-2016-10994
Published: 2019-09-18
Description: The Truemag theme 2016 Q2 for WordPress has XSS via the s parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpvulndb.com/vulnerabilities/8478; https://www.vulnerability-lab.com/get_content.php?id=1839; https://wpvulndb.com/vulnerabilities/8478
CVE: CVE-2016-10995
Published: 2019-09-18
Description: The Tevolution plugin before 2.3.0 for WordPress has arbitrary file upload via single_upload.php or single-upload.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://wpvulndb.com/vulnerabilities/8482; https://wpvulndb.com/vulnerabilities/8482
CVE: CVE-2019-16215
Published: 2019-09-18
Description: The Markdown parser in Zulip server before 2.0.5 used a regular expression vulnerable to exponential backtracking. A user who is logged into the server could send a crafted message causing the server to spend an effectively arbitrary amount of CPU time and stall the processing of future messages.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1333
References: https://blog.zulip.org/2019/09/11/zulip-server-2-0-5-security-release/; https://github.com/zulip/zulip/commit/5797f013b3be450c146a4141514bda525f2f1b51; https://blog.zulip.org/2019/09/11/zulip-server-2-0-5-security-release/
CVE: CVE-2019-16216
Published: 2019-09-18
Description: Zulip server before 2.0.5 incompletely validated the MIME types of uploaded files. A user who is logged into the server could upload files of certain types to mount a stored cross-site scripting attack on other logged-in users. On a Zulip server using the default local uploads backend, the attack is only effective against browsers lacking support for Content-Security-Policy such as Internet Explorer 11. On a Zulip server using the S3 uploads backend, the attack is confined to the origin of the configured S3 uploads hostname and cannot reach the Zulip server itself.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://blog.zulip.org/2019/09/11/zulip-server-2-0-5-security-release/; https://github.com/zulip/zulip/commit/1195841dfb9aa26b3b0dabc6f05d72e4af25be3e; https://blog.zulip.org/2019/09/11/zulip-server-2-0-5-security-release/
CVE: CVE-2019-16403
Published: 2019-09-18
Description: In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values (such as address, review, orders, etc.) can also be manipulated by other customers.
CVSS Score: 8.8 (HIGH)
CWE: CWE-639
References: https://github.com/bagisto/bagisto/issues/749; https://github.com/bagisto/bagisto/issues/749
CVE: CVE-2019-16399
Published: 2019-09-18
Description: Western Digital WD My Book World through II 1.02.12 suffers from Broken Authentication, which allows an attacker to access the /admin/ directory without credentials. An attacker can easily enable SSH from /admin/system_advanced.php?lang=en and login with the default root password welc0me.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://packetstormsecurity.com/files/154524/Western-Digital-My-Book-World-II-NAS-1.02.12-Hardcoded-Credential.html; https://gist.github.com/pak0s/22ad6bae26198ebcd137b61adb6fcfe6; http://packetstormsecurity.com/files/154524/Western-Digital-My-Book-World-II-NAS-1.02.12-Hardcoded-Credential.html
CVE: CVE-2018-1847
Published: 2019-09-18
Description: IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) v2.0.0.0 through 2.0.0.5, v2.1.0.0 through 2.1.0.4, v2.1.1.0 through 2.1.1.4, and v3.0.0.0 through 3.0.0.8 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 150946.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/150946; https://www.ibm.com/support/pages/security-bulletin-path-traversal-exposure-saveexport-function-ftm-oac; https://exchange.xforce.ibmcloud.com/vulnerabilities/150946
CVE: CVE-2019-15843
Published: 2019-09-18
Description: A malicious file upload vulnerability was discovered in Xiaomi Millet mobile phones 1-6.3.9.3. A particular condition involving a man-in-the-middle attack may lead to partial data leakage or malicious file writing.
CVSS Score: 7.4 (HIGH)
CWE: CWE-434
References: https://sec.xiaomi.com/post/152; https://sec.xiaomi.com/post/152
CVE: CVE-2019-14252
Published: 2019-09-18
Description: An issue was discovered in the secure portal in Publisure 2.1.2. Once successfully authenticated as an administrator, one is able to inject arbitrary PHP code by using the adminCons.php form. The code is then stored in the E:\PUBLISURE\webservice\webpages\AdminDir\Templates\ folder even if removed from the adminCons.php view (i.e., the rogue PHP file can be hidden).
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/kmkz/exploit/blob/master/PUBLISURE-EXPLOIT-CHAIN-ADVISORY.txt; https://github.com/kmkz/exploit/blob/master/PUBLISURE-EXPLOIT-CHAIN-ADVISORY.txt
CVE: CVE-2019-14253
Published: 2019-09-18
Description: An issue was discovered in servletcontroller in the secure portal in Publisure 2.1.2. One can bypass authentication and perform a query on PHP forms within the /AdminDir folder that should be restricted.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-306
References: https://github.com/kmkz/exploit/blob/master/PUBLISURE-EXPLOIT-CHAIN-ADVISORY.txt; https://github.com/kmkz/exploit/blob/master/PUBLISURE-EXPLOIT-CHAIN-ADVISORY.txt
CVE: CVE-2019-14254
Published: 2019-09-18
Description: An issue was discovered in the secure portal in Publisure 2.1.2. Because SQL queries are not well sanitized, there are multiple SQL injections in userAccFunctions.php functions. Using this, an attacker can access passwords and/or grant access to the user account "user" in order to become "Administrator" (for example).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/kmkz/exploit/blob/master/PUBLISURE-EXPLOIT-CHAIN-ADVISORY.txt; https://github.com/kmkz/exploit/blob/master/PUBLISURE-EXPLOIT-CHAIN-ADVISORY.txt
CVE: CVE-2019-12620
Published: 2019-09-18
Description: A vulnerability in the statistics collection service of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to inject arbitrary values on an affected device. The vulnerability is due to insufficient authentication for the statistics collection service. An attacker could exploit this vulnerability by sending properly formatted data values to the statistics collection service of an affected device. A successful exploit could allow the attacker to cause the web interface statistics view to present invalid data to users.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-345, CWE-345
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190918-hyperflex-valinj; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190918-hyperflex-valinj
CVE: CVE-2019-1975
Published: 2019-09-18
Description: A vulnerability in the web-based interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to execute a cross-frame scripting (XFS) attack on an affected device. This vulnerability is due to insufficient HTML iframe protection. An attacker could exploit this vulnerability by directing a user to an attacker-controlled web page that contains a malicious HTML iframe. A successful exploit could allow the attacker to conduct clickjacking or other clientside browser attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-693, CWE-1021
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190918-hyperflex-xfs; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190918-hyperflex-xfs
CVE: CVE-2019-14458
Published: 2019-09-18
Description: VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header.
CVSS Score: 7.5 (HIGH)
References: http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2019-002-v1.pdf; https://www.vivotek.com/cybersecurity; http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2019-002-v1.pdf
CVE: CVE-2019-9677
Published: 2019-09-18
Description: The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://www.dahuasecurity.com/support/cybersecurity/details/637; https://www.dahuasecurity.com/support/cybersecurity/details/637
CVE: CVE-2019-9678
Published: 2019-09-18
Description: Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crashed by constructing a malicious packet. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.
CVSS Score: 7.5 (HIGH)
References: https://www.dahuasecurity.com/support/cybersecurity/details/637; https://www.dahuasecurity.com/support/cybersecurity/details/637
CVE: CVE-2019-9679
Published: 2019-09-18
Description: Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://www.dahuasecurity.com/support/cybersecurity/details/637; https://www.dahuasecurity.com/support/cybersecurity/details/637
CVE: CVE-2019-9680
Published: 2019-09-18
Description: Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model information of the device by constructing malicious data packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.
CVSS Score: 5.3 (MEDIUM)
References: https://www.dahuasecurity.com/support/cybersecurity/details/637; https://www.dahuasecurity.com/support/cybersecurity/details/637
CVE: CVE-2019-13550
Published: 2019-09-18
Description: In WebAccess, versions 8.4.1 and prior, an improper authorization vulnerability may allow an attacker to disclose sensitive information, cause improper control of generation of code, which may allow remote code execution or cause a system crash.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-285
References: https://www.us-cert.gov/ics/advisories/icsa-19-260-01; https://www.us-cert.gov/ics/advisories/icsa-19-260-01
CVE: CVE-2019-13552
Published: 2019-09-18
Description: In WebAccess versions 8.4.1 and prior, multiple command injection vulnerabilities are caused by a lack of proper validation of user-supplied data and may allow arbitrary file deletion and remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://www.us-cert.gov/ics/advisories/icsa-19-260-01; https://www.us-cert.gov/ics/advisories/icsa-19-260-01
CVE: CVE-2019-15301
Published: 2019-09-18
Description: A SQL injection vulnerability in the method Terrasoft.Core.DB.Column.Const() in Terrasoft Bpm'online CRM-System SDK 7.13 allows attackers to execute arbitrary SQL commands via the value parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://medium.com/%40sorokinpf/bpmonline-sql-injection-607916447e30; https://medium.com/%40sorokinpf/bpmonline-sql-injection-607916447e30
CVE: CVE-2019-5042
Published: 2019-09-18
Description: An exploitable Use-After-Free vulnerability exists in the way FunctionType 0 PDF elements are processed in Aspose.PDF 19.2 for C++. A specially crafted PDF can cause a dangling heap pointer, resulting in a use-after-free. An attacker can send a malicious PDF to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0809; https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0809
CVE: CVE-2019-5066
Published: 2019-09-18
Description: An exploitable use-after-free vulnerability exists in the way LZW-compressed streams are processed in Aspose.PDF 19.2 for C++. A specially crafted PDF can cause a dangling heap pointer, resulting in a use-after-free condition. To trigger this vulnerability, a specifically crafted PDF document needs to be processed by the target application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416, CWE-416
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0855; https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0855
CVE: CVE-2019-5067
Published: 2019-09-18
Description: An uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles invalid parent object pointers. A specially crafted PDF can cause a read and write from uninitialized memory, resulting in memory corruption and possibly arbitrary code execution. To trigger this vulnerability, a specifically crafted PDF document needs to be processed by the target application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416, CWE-908
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0856; https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0856
CVE: CVE-2019-5532
Published: 2019-09-18
Description: VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability due to the logging of credentials in plain-text for virtual machines deployed through OVF. A malicious user with access to the log files containing vCenter OVF-properties of a virtual machine deployed from an OVF may be able to view the credentials used to deploy the OVF (typically the root account of the virtual machine).
CVSS Score: 7.7 (HIGH)
CWE: CWE-532
References: http://packetstormsecurity.com/files/154536/VMware-Security-Advisory-2019-0013.html; https://www.vmware.com/security/advisories/VMSA-2019-0013.html; http://packetstormsecurity.com/files/154536/VMware-Security-Advisory-2019-0013.html
CVE: CVE-2019-5534
Published: 2019-09-18
Description: VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability where Virtual Machines deployed from an OVF could expose login information via the virtual machine's vAppConfig properties. A malicious actor with access to query the vAppConfig properties of a virtual machine deployed from an OVF may be able to view the credentials used to deploy the OVF (typically the root account of the virtual machine).
CVSS Score: 7.7 (HIGH)
CWE: CWE-200, CWE-522
References: http://packetstormsecurity.com/files/154536/VMware-Security-Advisory-2019-0013.html; https://www.vmware.com/security/advisories/VMSA-2019-0013.html; http://packetstormsecurity.com/files/154536/VMware-Security-Advisory-2019-0013.html
CVE: CVE-2019-11661
Published: 2019-09-18
Description: Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. This vulnerability could be exploited to allow unauthorized access and modification of data.
CVSS Score: 8.3 (HIGH)
References: https://softwaresupport.softwaregrp.com/doc/KM03518316; https://softwaresupport.softwaregrp.com/doc/KM03518316
CVE: CVE-2019-11662
Published: 2019-09-18
Description: Class and method names in error message in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. This vulnerability could be exploited in some special cases to allow information exposure through an error message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-209
References: https://softwaresupport.softwaregrp.com/doc/KM03518316; https://softwaresupport.softwaregrp.com/doc/KM03518316
CVE: CVE-2019-11663
Published: 2019-09-18
Description: Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow sensitive data exposure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-311, CWE-522
References: https://softwaresupport.softwaregrp.com/doc/KM03518316; https://softwaresupport.softwaregrp.com/doc/KM03518316
CVE: CVE-2019-11664
Published: 2019-09-18
Description: Clear text password in browser in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow sensitive data exposure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-311, CWE-522
References: https://softwaresupport.softwaregrp.com/doc/KM03518316; https://softwaresupport.softwaregrp.com/doc/KM03518316
CVE: CVE-2019-13556
Published: 2019-09-18
Description: In WebAccess versions 8.4.1 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://www.us-cert.gov/ics/advisories/icsa-19-260-01; https://www.us-cert.gov/ics/advisories/icsa-19-260-01
CVE: CVE-2019-13558
Published: 2019-09-18
Description: In WebAccess versions 8.4.1 and prior, an exploit executed over the network may cause improper control of generation of code, which may allow remote code execution, data exfiltration, or cause a system crash.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://www.us-cert.gov/ics/advisories/icsa-19-260-01; https://www.us-cert.gov/ics/advisories/icsa-19-260-01
CVE: CVE-2019-5531
Published: 2019-09-18
Description: VMware vSphere ESXi (6.7 prior to ESXi[PII_REDACTED]01-SG, 6.5 prior to ESXi[PII_REDACTED]02-SG, and 6.0 prior to ESXi[PII_REDACTED]03-SG) and VMware vCenter Server (6.7 prior to 6.7 U1b, 6.5 prior to 6.5 U2b, and 6.0 prior to 6.0 U3j) contain an information disclosure vulnerability in clients arising from insufficient session expiration. An attacker with physical access or an ability to mimic a websocket connection to a user’s browser may be able to obtain control of a VM Console after the user has logged out or their session has timed out.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-613
References: http://www.vmware.com/security/advisories/VMSA-2019-0013.html; http://www.vmware.com/security/advisories/VMSA-2019-0013.html