deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-10286
Published: 2019-04-04
Description: Jenkins DeployHub Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-959
CVE: CVE-2019-10287
Published: 2019-04-04
Description: Jenkins youtrack-plugin Plugin 0.7.1 and older stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-963
CVE: CVE-2019-10288
Published: 2019-04-04
Description: Jenkins Jabber Server Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1031
CVE: CVE-2019-10289
Published: 2019-04-04
Description: A cross-site request forgery vulnerability in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the NCScanBuilder.DescriptorImpl#doValidateAPI form validation method allowed attackers to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1032
CVE: CVE-2019-10290
Published: 2019-04-04
Description: A missing permission check in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the NCScanBuilder.DescriptorImpl#doValidateAPI form validation method allowed attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1032
CVE: CVE-2019-10291
Published: 2019-04-04
Description: Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1040
CVE: CVE-2019-10292
Published: 2019-04-04
Description: A cross-site request forgery vulnerability in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation methods allows attackers to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1055
CVE: CVE-2019-10293
Published: 2019-04-04
Description: A missing permission check in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation methods allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1055
CVE: CVE-2019-10294
Published: 2019-04-04
Description: Jenkins Kmap Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1056
CVE: CVE-2019-10295
Published: 2019-04-04
Description: Jenkins crittercism-dsym Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1063
CVE: CVE-2019-10296
Published: 2019-04-04
Description: Jenkins Serena SRA Deploy Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1066
CVE: CVE-2019-10297
Published: 2019-04-04
Description: Jenkins Sametime Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1090
CVE: CVE-2019-10298
Published: 2019-04-04
Description: Jenkins Koji Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1092
CVE: CVE-2019-10299
Published: 2019-04-04
Description: Jenkins CloudCoreo DeployTime Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/12/2; http://www.securityfocus.com/bid/107790; https://jenkins.io/security/advisory/2019-04-03/#SECURITY-960
CVE: CVE-2019-10856
Published: 2019-04-04
Description: In Jupyter Notebook before 5.7.8, an open redirect can occur via an empty netloc. This issue exists because of an incomplete fix for CVE-2019-10255.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://blog.jupyter.org/open-redirect-vulnerability-in-jupyter-jupyterhub-adf43583f1e4; https://github.com/jupyter/notebook/compare/16cf97c...b8e30ea; https://blog.jupyter.org/open-redirect-vulnerability-in-jupyter-jupyterhub-adf43583f1e4
CVE: CVE-2019-1827
Published: 2019-04-04
Description: A vulnerability in the Online Help web service of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the service. The vulnerability exists because the Online Help web service of an affected device insufficiently validates user-supplied input. An attacker could exploit this vulnerability by persuading a user of the service to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected service or access sensitive browser-based information.This vulnerability affects Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers running firmware releases prior to 1.4.2.22.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/107776; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190404-rv-xss; http://www.securityfocus.com/bid/107776
CVE: CVE-2019-1828
Published: 2019-04-04
Description: A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to access administrative credentials. The vulnerability exists because affected devices use weak encryption algorithms for user credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack and decrypting intercepted credentials. A successful exploit could allow the attacker to gain access to an affected device with administrator privileges. This vulnerability affects Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers running firmware releases prior to 1.4.2.22.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327, CWE-327
References: http://www.securityfocus.com/bid/107774; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190404-rv-weak-encrypt; http://www.securityfocus.com/bid/107774
CVE: CVE-2019-3886
Published: 2019-04-04
Description: An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862, CWE-862
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00105.html; http://www.securityfocus.com/bid/107777; https://access.redhat.com/errata/RHBA-2019:3723
CVE: CVE-2019-7001
Published: 2019-04-04
Description: A SQL injection vulnerability in the WebUI component of IP Office Contact Center could allow an authenticated attacker to retrieve or alter sensitive data related to other users on the system. Affected versions of IP Office Contact Center include all 9.x and 10.x versions prior to 10.1.2.2.2-11201.1908. Unsupported versions not listed here were not evaluated.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://downloads.avaya.com/css/P8/documents/101056762; https://downloads.avaya.com/css/P8/documents/101056762
CVE: CVE-2018-20229
Published: 2019-04-04
Description: GitLab Community and Enterprise Edition before 11.3.14, 11.4.x before 11.4.12, and 11.5.x before 11.5.5 allows Directory Traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://about.gitlab.com/2018/12/20/critical-security-release-gitlab-11-dot-5-dot-5-released/; https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/2018/12/20/critical-security-release-gitlab-11-dot-5-dot-5-released/
CVE: CVE-2019-10863
Published: 2019-04-04
Description: A command injection vulnerability exists in TeemIp versions before 2.4.0. The new_config parameter of exec.php allows one to create a new PHP file with the exception of config information. The malicious PHP code sent is executed instantaneously and is not saved on the server.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://pentest.com.tr/exploits/TeemIp-IPAM-2-4-0-new-config-Command-Injection-Metasploit.html; https://www.exploit-db.com/exploits/46641; https://www.exploit-db.com/exploits/46641/
CVE: CVE-2019-10867
Published: 2019-04-04
Description: An issue was discovered in Pimcore before 5.7.1. An attacker with classes permission can send a POST request to /admin/class/bulk-commit, which will make it possible to exploit the unserialize function when passing untrusted values in the data parameter to bundles/AdminBundle/Controller/Admin/DataObject/ClassController.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: http://packetstormsecurity.com/files/152667/Pimcore-Unserialize-Remote-Code-Execution.html; http://www.rapid7.com/db/modules/exploit/multi/http/pimcore_unserialize_rce; https://blog.certimetergroup.com/it/articolo/security/polyglot_phar_deserialization_to_rce
CVE: CVE-2019-6553
Published: 2019-04-04
Description: A vulnerability was found in Rockwell Automation RSLinx Classic versions 4.10.00 and prior. An input validation issue in a .dll file of RSLinx Classic where the data in a Forward Open service request is passed to a fixed size buffer, allowing an attacker to exploit a stack-based buffer overflow condition.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://ics-cert.us-cert.gov/advisories/ICSA-19-064-01; https://ics-cert.us-cert.gov/advisories/ICSA-19-064-01
CVE: CVE-2018-18068
Published: 2019-04-04
Description: The ARM-based hardware debugging feature on Raspberry Pi 3 module B+ and possibly other devices allows non-secure EL1 code to read/write any EL3 (the highest privilege level in ARMv8) memory/register via inter-processor debugging. With a debug host processor A running in non-secure EL1 and a debug target processor B running in any privilege level, the debugging feature allows A to halt B and promote B to any privilege level. As a debug host, A has full control of B even if B owns a higher privilege level than A. Accordingly, A can read/write any EL3 memory/register via B. Also, with this memory access, A can execute arbitrary code in EL3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-668
References: http://www.cs.wayne.edu/fengwei/paper/nailgun-sp19.pdf; https://www.computer.org/csdl/proceedings-article/sp/2019/666000b157/17D45WHONhv; http://www.cs.wayne.edu/fengwei/paper/nailgun-sp19.pdf
CVE: CVE-2018-19282
Published: 2019-04-04
Description: Rockwell Automation PowerFlex 525 AC Drives 5.001 and earlier allow remote attackers to cause a denial of service by crashing the Common Industrial Protocol (CIP) network stack. The vulnerability allows the attacker to crash the CIP in a way that it does not accept new connections, but keeps the current connections active, which can prevent legitimate users from recovering control.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-400
References: https://applied-risk.com/application/files/4215/5385/2294/Advisory_AR2019004_Rockwell_Powerflex_525_Denial_of_Service.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-19-087-01; https://applied-risk.com/application/files/4215/5385/2294/Advisory_AR2019004_Rockwell_Powerflex_525_Denial_of_Service.pdf
CVE: CVE-2019-10868
Published: 2019-04-05
Description: In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field for which he has no access right. This may allow the user to guess values.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://discuss.tryton.org/t/security-release-for-issue8189/1262; https://hg.tryton.org/trytond/rev/f58bbfe0aefb; https://seclists.org/bugtraq/2019/Apr/14
CVE: CVE-2019-10871
Published: 2019-04-05
Description: An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/107862; https://access.redhat.com/errata/RHSA-2019:2713; https://gitlab.freedesktop.org/poppler/poppler/issues/751
CVE: CVE-2019-10872
Published: 2019-04-05
Description: An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/107862; https://gitlab.freedesktop.org/poppler/poppler/issues/750; https://lists.debian.org/debian-lts-announce/2019/06/msg00002.html
CVE: CVE-2019-10873
Published: 2019-04-05
Description: An issue was discovered in Poppler 0.74.0. There is a NULL pointer dereference in the function SplashClip::clipAALine at splash/SplashClip.cc.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/107862; https://gitlab.freedesktop.org/poppler/poppler/issues/748; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MAWV24KRXTFODLVT46RXI27XIQFX2QR/
CVE: CVE-2019-10874
Published: 2019-04-05
Description: Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the file/edit/config/config.yml configuration file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/152429/Bolt-CMS-3.6.6-Cross-Site-Request-Forgery-Code-Execution.html; https://fgsec.net/from-csrf-to-rce-bolt-cms/; https://github.com/bolt/bolt/pull/7768/commits/91187aef36363a870d60b0a3c1bf8507af34c9e4
CVE: CVE-2019-10876
Published: 2019-04-05
Description: An issue was discovered in OpenStack Neutron 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By creating two security groups with separate/overlapping port ranges, an authenticated user may prevent Neutron from being able to configure networks on any compute nodes where those security groups are present, because of an Open vSwitch (OVS) firewall KeyError. All Neutron deployments utilizing neutron-openvswitch-agent are affected.
CVSS Score: 6.5 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2019/04/09/2; https://access.redhat.com/errata/RHSA-2019:0879; https://access.redhat.com/errata/RHSA-2019:0935
CVE: CVE-2019-10878
Published: 2019-04-05
Description: In Teeworlds 0.7.2, there is a failed bounds check in CDataFileReader::GetData() and CDataFileReader::ReplaceData() and related functions in engine/shared/datafile.cpp that can lead to an arbitrary free and out-of-bounds pointer write, possibly resulting in remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00046.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00077.html; https://github.com/teeworlds/teeworlds/issues/2073
CVE: CVE-2019-10879
Published: 2019-04-05
Description: In Teeworlds 0.7.2, there is an integer overflow in CDataFileReader::Open() in engine/shared/datafile.cpp that can lead to a buffer overflow and possibly remote code execution, because size-related multiplications are mishandled.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00046.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00077.html; https://github.com/teeworlds/teeworlds/issues/2070
CVE: CVE-2019-10877
Published: 2019-04-05
Description: In Teeworlds 0.7.2, there is an integer overflow in CMap::Load() in engine/shared/map.cpp that can lead to a buffer overflow, because multiplication of width and height is mishandled.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00046.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00077.html; https://github.com/teeworlds/teeworlds/issues/2071
CVE: CVE-2019-10875
Published: 2019-04-05
Description: A URL spoofing vulnerability was found in all international versions of Xiaomi Mi browser 10.5.6-g (aka the MIUI native browser) and Mint Browser 1.5.3 due to the way they handle the "q" query parameter. The portion of an https URL before the ?q= substring is not shown to the user.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290
References: http://packetstormsecurity.com/files/152497/Xiaomi-Mi-Browser-Mint-Browser-URL-Spoofing.html; https://sec.xiaomi.com/bug/5bedef67a31ec71e; https://thehackernews.com/2019/04/xiaomi-browser-vulnerability.html
CVE: CVE-2018-20816
Published: 2019-04-05
Description: An XSS combined with CSRF vulnerability discovered in SalesAgility SuiteCRM 7.x before 7.8.24 and 7.10.x before 7.10.11 leads to cookie stealing, aka session hijacking. This issue affects the "add dashboard pages" feature where users can receive a malicious attack through a phished URL, with script executed.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-352
References: https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_11; https://docs.suitecrm.com/admin/releases/7.8.x/#_7_8_24; https://github.com/salesagility/SuiteDocs/pull/198/files
CVE: CVE-2019-10884
Published: 2019-04-05
Description: Uniqkey Password Manager 1.14 contains a vulnerability because it fails to recognize the difference between domains and sub-domains. The vulnerability means that passwords saved for example.com will be recommended for usersite.example.com. This could lead to successful phishing campaigns and create a sense of false security.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://vuldb.com/?id.133069; https://vuldb.com/?id.133069
CVE: CVE-2019-10885
Published: 2019-04-05
Description: An issue was discovered in Ivanti Workspace Control before 10.3.90.0. Local authenticated users with low privileges in a Workspace Control managed session can bypass Workspace Control security features configured for this session by resetting the session context.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.com/files/156792/Ivanti-Workspace-Manager-Security-Bypass.html; https://community.ivanti.com/docs/DOC-74552; http://packetstormsecurity.com/files/156792/Ivanti-Workspace-Manager-Security-Bypass.html
CVE: CVE-2019-10887
Published: 2019-04-05
Description: A reflected HTML injection vulnerability on Salicru SLC-20-cube3(5) devices running firmware version cs121-SNMP v4.54.82.130611 allows remote attackers to inject arbitrary HTML elements via a /DataLog.csv?log= or /AlarmLog.csv?log= or /waitlog.cgi?name= or /chart.shtml?data= or /createlog.cgi?name= request.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/152435/SaLICru-SLC-20-cube3-5-HTML-Injection.html; https://github.com/Ramikan/Vulnerabilities/blob/master/Salicru-%20UPS-Reflected%20HTML%20Injection; https://www.exploit-db.com/exploits/46667/
CVE: CVE-2019-10888
Published: 2019-04-05
Description: A CSRF Issue that can add an admin user was discovered in UKcms v1.1.10 via admin.php/admin/role/add.html.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/yxcmf/ukcms/issues/4; https://github.com/yxcmf/ukcms/issues/4
CVE: CVE-2019-10478
Published: 2019-04-05
Description: An issue was discovered on Glory RBW-100 devices with firmware ISP-K05-02 7.0.0. An unrestricted file upload vulnerability in the Front Circle Controller glytoolcgi/settingfile_upload.cgi allows attackers to upload supplied data. This can be used to place attacker controlled code on the filesystem that can be executed and can lead to a reverse root shell.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/warringaa/CVEs#glory-systems-rbw-100; https://github.com/warringaa/CVEs#glory-systems-rbw-100
CVE: CVE-2019-10479
Published: 2019-04-05
Description: An issue was discovered on Glory RBW-100 devices with firmware ISP-K05-02 7.0.0. A hard-coded username and password were identified that allow a remote attacker to gain admin access to the Front Circle Controller web interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://github.com/warringaa/CVEs#glory-systems-rbw-100; https://github.com/warringaa/CVEs#glory-systems-rbw-100
CVE: CVE-2019-6550
Published: 2019-04-05
Description: Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple stack-based buffer overflow vulnerabilities, caused by a lack of proper validation of the length of user-supplied data, may allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://ics-cert.us-cert.gov/advisories/ICSA-19-092-01; https://www.zerodayinitiative.com/advisories/ZDI-19-585/; https://ics-cert.us-cert.gov/advisories/ICSA-19-092-01
CVE: CVE-2019-6552
Published: 2019-04-05
Description: Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple command injection vulnerabilities, caused by a lack of proper validation of user-supplied data, may allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-78
References: https://ics-cert.us-cert.gov/advisories/ICSA-19-092-01; https://ics-cert.us-cert.gov/advisories/ICSA-19-092-01