deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-9974
Published: 2019-04-11
Description: diag_tool.cgi on DASAN H660RM GPON routers with firmware 1.03-0022 lacks any authorization check, which allows remote attackers to run a ping command via a GET request to enumerate LAN devices or crash the router with a DoS attack.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-306, CWE-862
References: http://packetstormsecurity.com/files/152232/DASAN-H660RM-Information-Disclosure-Hardcoded-Key.html; https://blog.burghardt.pl/2019/03/diag_tool-cgi-on-dasan-h660rm-devices-with-firmware-1-03-0022-allows-spawning-ping-processes-without-any-authorization-leading-to-information-disclosure-and-dos-attacks/; https://seclists.org/bugtraq/2019/Mar/41
CVE: CVE-2019-9975
Published: 2019-04-11
Description: DASAN H660RM devices with firmware 1.03-0022 use a hard-coded key for logs encryption. Data stored using this key can be decrypted by anyone able to access this key.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: http://packetstormsecurity.com/files/152232/DASAN-H660RM-Information-Disclosure-Hardcoded-Key.html; https://blog.burghardt.pl/2019/03/syslog_tool-cgi-on-dasan-h660rm-devices-with-firmware-1-03-0022-uses-a-hard-coded-key-for-logs-encryption/; https://seclists.org/bugtraq/2019/Mar/41
CVE: CVE-2019-9976
Published: 2019-04-11
Description: The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the /tmp/boa-temp file, which allows logged-in users to read the credentials of administration web interface users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-532
References: https://blog.burghardt.pl/2019/03/boa-webserver-on-dasan-h660rm-devices-with-firmware-1-03-0022-saves-post-data-including-credentials-to-tmp-boa-temp/; https://blog.burghardt.pl/2019/03/boa-webserver-on-dasan-h660rm-devices-with-firmware-1-03-0022-saves-post-data-including-credentials-to-tmp-boa-temp/
CVE: CVE-2018-19202
Published: 2019-04-11
Description: A reflected XSS vulnerability in index.php in MyBB 1.8.x through 1.8.19 allows remote attackers to inject JavaScript via the 'upsetting[bburl]' parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.mybb.com/; https://mybb.com/versions/1.8.20/; https://blog.mybb.com/
CVE: CVE-2019-6493
Published: 2019-04-11
Description: SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401CC0 is called. This kernel pointer can be leaked if the kernel pool becomes a "big" pool.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://downwithup.github.io/CVEPosts.html; https://www.iobit.com/en/iobitsmartdefrag.php; https://downwithup.github.io/CVEPosts.html
CVE: CVE-2019-6796
Published: 2019-04-11
Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows XSS (issue 2 of 2). The user status field contains a lack of input validation and output encoding that results in a persistent XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/; https://about.gitlab.com/2019/02/05/critical-security-release-gitlab-11-dot-7-dot-4-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/55320
CVE: CVE-2019-7644
Published: 2019-04-11
Description: Auth0 Auth0-WCF-Service-JWT before 1.0.4 leaks the expected JWT signature in an error message when it cannot successfully validate the JWT signature. If this error message is presented to an attacker, they can forge an arbitrary JWT token that will be accepted by the vulnerable application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-209
References: https://auth0.com/docs/security/bulletins/cve-2019-7644; https://auth0.com/docs/security/bulletins/cve-2019-7644
CVE: CVE-2019-9056
Published: 2019-04-11
Description: An issue was discovered in CMS Made Simple 2.2.8. In the module FrontEndUsers (in the file class.FrontEndUsersManipulate.php or class.FrontEndUsersManipulator.php), it is possible to reach an unserialize call with an untrusted __FEU__ cookie, and achieve authenticated object injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://newsletter.cmsmadesimple.org/w/89247Qog4jCRCuRinvhsofwg; https://www.cmsmadesimple.org/2019/03/Announcing-CMS-Made-Simple-v2.2.10-Spuzzum; https://newsletter.cmsmadesimple.org/w/89247Qog4jCRCuRinvhsofwg
CVE: CVE-2019-9628
Published: 2019-04-11
Description: The XMLTooling library all versions prior to V3.0.4, provided with the OpenSAML and Shibboleth Service Provider software, contains an XML parsing class. Invalid data in the XML declaration causes an exception of a type that was not handled properly in the parser class and propagates an unexpected exception type.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00079.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00095.html; https://bugs.launchpad.net/ubuntu/+source/xmltooling/+bug/1819912
CVE: CVE-2018-20487
Published: 2019-04-11
Description: An issue was discovered in the firewall3 component in Inteno IOPSYS 1.0 through 3.16. The attacker must make a JSON-RPC method call to add a firewall rule as an "include" and point the "path" argument to a malicious script or binary. This gets executed as root when the firewall changes are committed.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://public.inteno.se/?p=feed-inteno-openwrt.git%3Ba=commit%3Bh=e6159ca928d7f0c143be213afc6bf810c0329fe2; https://neonsea.uk/blog/2018/12/26/firewall-includes.html; http://public.inteno.se/?p=feed-inteno-openwrt.git%3Ba=commit%3Bh=e6159ca928d7f0c143be213afc6bf810c0329fe2
CVE: CVE-2019-6525
Published: 2019-04-11
Description: AVEVA Wonderware System Platform 2017 Update 2 and prior uses an ArchestrA network user account for authentication of system processes and inter-node communications. A user with low privileges could make use of an API to obtain the credentials for this account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522, CWE-269
References: https://ics-cert.us-cert.gov/advisories/ICSA-19-029-03; https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec135.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-19-029-03
CVE: CVE-2019-6534
Published: 2019-04-11
Description: The uncontrolled search path element vulnerability in Gemalto Sentinel UltraPro Client Library ux32w.dll Versions 1.3.0, 1.3.1, and 1.3.2 enables an attacker to load and execute a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://ics-cert.us-cert.gov/advisories/ICSA-19-073-02; https://ics-cert.us-cert.gov/advisories/ICSA-19-078-01; https://supportportal.gemalto.com/csm?id=kb_article_view&sysparm_article=KB0017694
CVE: CVE-2019-11190
Published: 2019-04-12
Description: The Linux kernel before 4.8 allows local users to bypass ASLR on setuid programs (such as /bin/su) because install_exec_creds() is called too late in load_elf_binary() in fs/binfmt_elf.c, and thus the ptrace_may_access() check has a race condition when reading /proc/pid/stat.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html; http://www.openwall.com/lists/oss-security/2019/04/15/1; http://www.securityfocus.com/bid/107890
CVE: CVE-2019-11191
Published: 2019-04-12
Description: The Linux kernel through 5.0.7, when CONFIG_IA32_AOUT is enabled and ia32_aout is loaded, allows local users to bypass ASLR on setuid a.out programs (if any exist) because install_exec_creds() is called too late in load_aout_binary() in fs/binfmt_aout.c, and thus the ptrace_may_access() check has a race condition when reading /proc/pid/stat. NOTE: the software maintainer disputes that this is a vulnerability because ASLR for a.out format executables has never been supported
CVSS Score: 2.5 (LOW)
CWE: CWE-362
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html; http://www.openwall.com/lists/oss-security/2019/04/18/5; http://www.openwall.com/lists/oss-security/2019/05/22/7
CVE: CVE-2019-11196
Published: 2019-04-12
Description: An authentication bypass vulnerability in all versions of ValuePLUS Integrated University Management System (IUMS) allows unauthenticated, remote attackers to gain administrator privileges via the Teachers Web Panel (TWP) User ID or Password field. If exploited, the attackers could perform any actions with administrator privileges (e.g., enumerate/delete all the students' personal information or modify various settings).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://blog.ziaurrashid.com/sql-injection-auth-bypass-on-iums/; https://blog.ziaurrashid.com/sql-injection-auth-bypass-on-iums/
CVE: CVE-2019-11213
Published: 2019-04-12
Description: In Pulse Secure Pulse Desktop Client and Network Connect, an attacker could access session tokens to replay and spoof sessions, and as a result, gain unauthorized access as an end user, a related issue to CVE-2019-1573. (The endpoint would need to be already compromised for exploitation to succeed.) This affects Pulse Desktop Client 5.x before Secure Desktop 5.3R7 and Pulse Desktop Client 9.x before Secure Desktop 9.0R3. It also affects (for Network Connect customers) Pulse Connect Secure 8.1 before 8.1R14, 8.3 before 8.3R7, and 9.0 before 9.0R3.
CVSS Score: 8.1 (HIGH)
CWE: CWE-384
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44114; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44114/; https://www.kb.cert.org/vuls/id/192371
CVE: CVE-2017-14199
Published: 2019-04-12
Description: A buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0 and 1.10.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/zephyrproject-rtos/zephyr/pull/6158; https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-12; https://github.com/zephyrproject-rtos/zephyr/pull/6158
CVE: CVE-2018-6239
Published: 2019-04-12
Description: NVIDIA Jetson TX2 contains a vulnerability by means of speculative execution where local and unprivileged code may access the contents of cached information in an unauthorized manner, which may lead to information disclosure. The updates apply to all versions prior to R28.3.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://nvidia.custhelp.com/app/answers/detail/a_id/4787; https://nvidia.custhelp.com/app/answers/detail/a_id/4787
CVE: CVE-2018-6269
Published: 2019-04-12
Description: NVIDIA Jetson TX2 contains a vulnerability in the kernel driver where input/output control (IOCTL) handling for user mode requests could create a non-trusted pointer dereference, which may lead to information disclosure, denial of service, escalation of privileges, or code execution. The updates apply to all versions prior to R28.3.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://nvidia.custhelp.com/app/answers/detail/a_id/4787; https://nvidia.custhelp.com/app/answers/detail/a_id/4804; https://nvidia.custhelp.com/app/answers/detail/a_id/4787
CVE: CVE-2019-1574
Published: 2019-04-12
Description: Cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition Migration tool 1.1.12 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the Devices View.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/107900; https://security.paloaltonetworks.com/CVE-2019-1574; http://www.securityfocus.com/bid/107900
CVE: CVE-2017-7772
Published: 2019-04-12
Description: Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/; https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/
CVE: CVE-2018-13137
Published: 2019-04-12
Description: The Events Manager plugin 5.9.4 for WordPress has XSS via the dbem_event_reapproved_email_body parameter to the wp-admin/edit.php?post_type=event&page=events-manager-options URI.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://ansawaf.blogspot.com/2019/04/cve-2018-13137-xss-in-events-manager.html; https://gist.github.com/ansarisec/12737c207c0851d52865ed60c08891b7; https://wordpress.org/plugins/events-manager/#developers
CVE: CVE-2018-16254
Published: 2019-04-12
Description: There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=options. NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in administrator
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://ansawaf.blogspot.com/2019/04/xss-in-import-any-xml-or-csv-file-for.html; https://docs.google.com/document/d/1Lfk0YQMIhlMCOOvVRX8HkU6C50s9QSW7C-9gnNmzsHY/edit?usp=sharing; https://ansawaf.blogspot.com/2019/04/xss-in-import-any-xml-or-csv-file-for.html
CVE: CVE-2018-16255
Published: 2019-04-12
Description: There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=evaluate. NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in administrator
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://ansawaf.blogspot.com/2019/04/xss-in-import-any-xml-or-csv-file-for.html; https://docs.google.com/document/d/1Lfk0YQMIhlMCOOvVRX8HkU6C50s9QSW7C-9gnNmzsHY/edit?usp=sharing; https://ansawaf.blogspot.com/2019/04/xss-in-import-any-xml-or-csv-file-for.html
CVE: CVE-2018-16256
Published: 2019-04-12
Description: There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via Add Filtering Options(Add Rule). NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in administrator
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://ansawaf.blogspot.com/2019/04/xss-in-import-any-xml-or-csv-file-for.html; https://docs.google.com/document/d/1Lfk0YQMIhlMCOOvVRX8HkU6C50s9QSW7C-9gnNmzsHY/edit?usp=sharing; https://ansawaf.blogspot.com/2019/04/xss-in-import-any-xml-or-csv-file-for.html
CVE: CVE-2019-10880
Published: 2019-04-12
Description: Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" user through a crafted "HTTP" request (OS Command Injection vulnerability in the HTTP interface). Depending upon configuration authentication may not be necessary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://airbus-seclab.github.io/; https://securitydocs.business.xerox.com/wp-content/uploads/2019/04/cert_Security_Mini_Bulletin_XRX19C_for_CQ8700_CQ8900_CQ93xx.pdf; https://airbus-seclab.github.io/
CVE: CVE-2018-16257
Published: 2019-04-12
Description: There are multiple XSS vulnerabilities in WP All Import plugin 3.4.9 for WordPress via action=template. NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in administrator
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://ansawaf.blogspot.com/2019/04/xss-in-import-any-xml-or-csv-file-for.html; https://docs.google.com/document/d/1Lfk0YQMIhlMCOOvVRX8HkU6C50s9QSW7C-9gnNmzsHY/edit?usp=sharing; https://ansawaf.blogspot.com/2019/04/xss-in-import-any-xml-or-csv-file-for.html
CVE: CVE-2018-16258
Published: 2019-04-12
Description: There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-import custom_type. NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in administrator
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://ansawaf.blogspot.com/2019/04/xss-in-import-any-xml-or-csv-file-for.html; https://docs.google.com/document/d/1Lfk0YQMIhlMCOOvVRX8HkU6C50s9QSW7C-9gnNmzsHY/edit?usp=sharing; https://ansawaf.blogspot.com/2019/04/xss-in-import-any-xml-or-csv-file-for.html
CVE: CVE-2018-16259
Published: 2019-04-12
Description: There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-settings large_feed_limit. NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in administrator
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://ansawaf.blogspot.com/2019/04/xss-in-import-any-xml-or-csv-file-for.html; https://docs.google.com/document/d/1Lfk0YQMIhlMCOOvVRX8HkU6C50s9QSW7C-9gnNmzsHY/edit?usp=sharing; https://ansawaf.blogspot.com/2019/04/xss-in-import-any-xml-or-csv-file-for.html
CVE: CVE-2017-7775
Published: 2019-04-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2017-18366
Published: 2019-04-15
Description: Subrion CMS 4.1.5 has CSRF in blog/delete/.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/intelliants/subrion/issues/477; https://github.com/intelliants/subrion/issues/477
CVE: CVE-2017-7771
Published: 2019-04-15
Description: Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/; https://bugzilla.redhat.com/show_bug.cgi?id=1472212; https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/
CVE: CVE-2017-7773
Published: 2019-04-15
Description: Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/; https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/
CVE: CVE-2017-7774
Published: 2019-04-15
Description: Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/; https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/
CVE: CVE-2017-7776
Published: 2019-04-15
Description: Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/; https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/
CVE: CVE-2017-7777
Published: 2019-04-15
Description: Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/; https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/
CVE: CVE-2018-18261
Published: 2019-04-15
Description: In waimai Super Cms 20150505, there is an XSS vulnerability via the /admin.php/Foodcat/addsave fcname parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/caokang/waimai/issues/7; https://github.com/caokang/waimai/issues/7
CVE: CVE-2019-11221
Published: 2019-04-15
Description: GPAC 0.7.1 has a buffer overflow issue in gf_import_message() in media_import.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/gpac/gpac/issues/1203; https://lists.debian.org/debian-lts-announce/2019/04/msg00025.html; https://github.com/gpac/gpac/issues/1203
CVE: CVE-2019-11222
Published: 2019-04-15
Description: gf_bin128_parse in utils/os_divers.c in GPAC 0.7.1 has a buffer overflow issue for the crypt feature when encountering a crafted_drm_file.xml file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/gpac/gpac/commit/f3698bb1bce62402805c3fda96551a23101a32f9; https://github.com/gpac/gpac/issues/1204; https://github.com/gpac/gpac/issues/1205
CVE: CVE-2019-11228
Published: 2019-04-15
Description: repo/setting.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 does not validate the form.MirrorAddress before calling SaveAddress.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/go-gitea/gitea/releases/tag/v1.7.6; https://github.com/go-gitea/gitea/releases/tag/v1.8.0-rc3; https://github.com/go-gitea/gitea/releases/tag/v1.7.6
CVE: CVE-2019-11229
Published: 2019-04-15
Description: models/repo_mirror.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 mishandles mirror repo URL settings, leading to remote code execution.
CVSS Score: 8.8 (HIGH)
References: http://packetstormsecurity.com/files/160833/Gitea-1.7.5-Remote-Code-Execution.html; https://github.com/go-gitea/gitea/releases/tag/v1.7.6; https://github.com/go-gitea/gitea/releases/tag/v1.8.0-rc3
CVE: CVE-2019-3891
Published: 2019-04-15
Description: It was discovered that a world-readable log file belonging to Candlepin component of Red Hat Satellite 6.4 leaked the credentials of the Candlepin database. A malicious user with local access to a Satellite host can use those credentials to modify the database and prevent Satellite from fetching package updates, thus preventing all Satellite hosts from accessing those updates.
CVSS Score: 7.8 (HIGH)
CWE: CWE-532, CWE-532
References: https://access.redhat.com/errata/RHSA-2019:1222; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3891; https://access.redhat.com/errata/RHSA-2019:1222
CVE: CVE-2019-6526
Published: 2019-04-15
Description: Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A series Version 3.8 and prior use plaintext transmission of sensitive data, which may allow an attacker to capture sensitive data such as an administrative password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-311, CWE-319
References: https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01; https://ics-cert.us-cert.gov/advisories/ICSA-19-057-01
CVE: CVE-2018-1925
Published: 2019-04-15
Description: IBM WebShere MQ 9.1.0.0, 9.1.0.1, 9.1.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 152925.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-326
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/152925; https://www.ibm.com/support/docview.wss?uid=ibm10744713; https://exchange.xforce.ibmcloud.com/vulnerabilities/152925
CVE: CVE-2019-0232
Published: 2019-04-15
Description: When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windows. The CGI Servlet is disabled by default. The CGI option enableCmdLineArguments is disable by default in Tomcat 9.0.x (and will be disabled by default in all versions in response to this vulnerability). For a detailed explanation of the JRE behaviour, see Markus Wulftange's blog (https://codewhitesec.blogspot.com/2016/02/java-and-command-line-injections-in-windows.html) and this archived MSDN blog (https://web.archive.org/web/[PII_REDACTED]4344/https://blogs.msdn.microsoft.com/twistylittlepassagesallalike/2011/04/23/everyone-quotes-command-line-arguments-the-wrong-way/).
CVSS Score: 8.1 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/153506/Apache-Tomcat-CGIServlet-enableCmdLineArguments-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2019/May/4; http://www.securityfocus.com/bid/107906
CVE: CVE-2019-11236
Published: 2019-04-15
Description: In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-93
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00039.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00041.html; https://access.redhat.com/errata/RHSA-2019:2272