deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-1777
Published: 2019-04-18
Description: A vulnerability in the web-based interface of the Cisco Registered Envelope Service could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against another user of the service. The vulnerability is due to insufficient validation of user-supplied input by the web-based interface of the affected software. An attacker could exploit this vulnerability by sending an email with a malicious payload to another user. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. This vulnerability affects software versions 5.3.4.x.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/108015; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-res-xss; http://www.securityfocus.com/bid/108015
CVE: CVE-2019-1792
Published: 2019-04-18
Description: A vulnerability in the URL block page of Cisco Umbrella could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user in a network protected by Umbrella. The vulnerability is due to insufficient validation of input parameters passed to that page. An attacker could exploit this vulnerability by persuading a user of the interface to click a maliciously crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive browser-based information. This vulnerability has been fixed in the current version of Cisco Umbrella. Cisco Umbrella is a cloud service.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/108014; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-umbrella-xss; http://www.securityfocus.com/bid/108014
CVE: CVE-2019-1794
Published: 2019-04-18
Description: A vulnerability in the search path processing of Cisco Directory Connector could allow an authenticated, local attacker to load a binary of their choosing. The vulnerability is due to uncontrolled search path elements. An attacker could exploit this vulnerability by placing a binary of their choosing earlier in the search path utilized by Cisco Directory Connector to locate and load required resources.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-427, CWE-427
References: http://www.securityfocus.com/bid/108032; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-cdc-hijack; http://www.securityfocus.com/bid/108032
CVE: CVE-2019-1796
Published: 2019-04-18
Description: A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability exist because the software improperly validates input on fields within IAPP messages. An attacker could exploit the vulnerability by sending malicious IAPP messages to an affected device. A successful exploit could allow the attacker to cause the Cisco WLC Software to reload, resulting in a DoS condition. Software versions prior to 8.2.170.0, 8.5.150.0, and 8.8.100.0 are affected.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399, CWE-20
References: http://www.securityfocus.com/bid/108008; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-wlc-iapp; http://www.securityfocus.com/bid/108008
CVE: CVE-2019-1797
Published: 2019-04-18
Description: A vulnerability in the web-based management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on the device with the privileges of the user, including modifying the device configuration. The vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an interface user to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on the device with the privileges of the user. Software versions prior to 8.3.150.0, 8.5.135.0, and 8.8.100.0 are affected.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: http://www.securityfocus.com/bid/107998; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-wlc-csrf; http://www.securityfocus.com/bid/107998
CVE: CVE-2019-1799
Published: 2019-04-18
Description: A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability exist because the software improperly validates input on fields within IAPP messages. An attacker could exploit the vulnerability by sending malicious IAPP messages to an affected device. A successful exploit could allow the attacker to cause the Cisco WLC Software to reload, resulting in a DoS condition. Software versions prior to 8.2.170.0, 8.5.150.0, and 8.8.100.0 are affected.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399, CWE-20
References: http://www.securityfocus.com/bid/108008; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-wlc-iapp; http://www.securityfocus.com/bid/108008
CVE: CVE-2019-1800
Published: 2019-04-18
Description: A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability exist because the software improperly validates input on fields within IAPP messages. An attacker could exploit the vulnerability by sending malicious IAPP messages to an affected device. A successful exploit could allow the attacker to cause the Cisco WLC Software to reload, resulting in a DoS condition. Software versions prior to 8.2.170.0, 8.5.150.0, and 8.8.100.0 are affected.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399, CWE-20
References: http://www.securityfocus.com/bid/108008; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-wlc-iapp; http://www.securityfocus.com/bid/108008
CVE: CVE-2019-1802
Published: 2019-04-18
Description: A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient validation of user-supplied input in the web-based management interface of the affected system. An attacker could exploit this vulnerability by persuading a user to access a report containing malicious content. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Versions 6.2.3, 6.3.0, and 6.4.0 are affected.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/107995; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-cfmc-xss; http://www.securityfocus.com/bid/107995
CVE: CVE-2019-1805
Published: 2019-04-18
Description: A vulnerability in certain access control mechanisms for the Secure Shell (SSH) server implementation for Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to access a CLI instance on an affected device. The vulnerability is due to a lack of proper input- and validation-checking mechanisms for inbound SSH connections on an affected device. An attacker could exploit this vulnerability by attempting to establish an SSH connection to an affected controller. An exploit could allow the attacker to access an affected device's CLI to potentially cause further attacks. This vulnerability has been fixed in version 8.5(140.0).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284, CWE-20
References: http://www.securityfocus.com/bid/108003; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-wlc-ssh; http://www.securityfocus.com/bid/108003
CVE: CVE-2019-1826
Published: 2019-04-18
Description: A vulnerability in the quality of service (QoS) feature of Cisco Aironet Series Access Points (APs) could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation on QoS fields within Wi-Fi frames by the affected device. An attacker could exploit this vulnerability by sending malformed Wi-Fi frames to an affected device. A successful exploit could allow the attacker to cause the affected device to crash, resulting in a DoS condition.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/107988; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-aap-dos; http://www.securityfocus.com/bid/107988
CVE: CVE-2019-1829
Published: 2019-04-18
Description: A vulnerability in the CLI of Cisco Aironet Series Access Points (APs) could allow an authenticated, local attacker to gain access to the underlying Linux operating system (OS) without the proper authentication. The attacker would need valid administrator device credentials. The vulnerability is due to improper validation of user-supplied input for certain CLI commands. An attacker could exploit this vulnerability by authenticating to an affected device and submitting crafted input for a CLI command. A successful exploit could allow the attacker to obtain access to the underlying Linux OS without proper authentication.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-16, CWE-78
References: http://www.securityfocus.com/bid/107990; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-air-ap-cmdinj; http://www.securityfocus.com/bid/107990
CVE: CVE-2019-1830
Published: 2019-04-18
Description: A vulnerability in Locally Significant Certificate (LSC) management for the Cisco Wireless LAN Controller (WLC) could allow an authenticated, remote attacker to cause the device to unexpectedly restart, which causes a denial of service (DoS) condition. The attacker would need to have valid administrator credentials. The vulnerability is due to incorrect input validation of the HTTP URL used to establish a connection to the LSC Certificate Authority (CA). An attacker could exploit this vulnerability by authenticating to the targeted device and configuring a LSC certificate. An exploit could allow the attacker to cause a DoS condition due to an unexpected restart of the device.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/108028; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-wlc-cert-dos; http://www.securityfocus.com/bid/108028
CVE: CVE-2019-1831
Published: 2019-04-18
Description: A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper input validation of the email body. An attacker could exploit this vulnerability by inserting specific character strings in the message. A successful exploit could allow the attacker to bypass configured content filters that would normally drop the email.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/108021; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-esa-filter-bypass; http://www.securityfocus.com/bid/108021
CVE: CVE-2019-1834
Published: 2019-04-18
Description: A vulnerability in the internal packet processing of Cisco Aironet Series Access Points (APs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected AP if the switch interface where the AP is connected has port security configured. The vulnerability exists because the AP forwards some malformed wireless client packets outside of the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel. An attacker could exploit this vulnerability by sending crafted wireless packets to an affected AP. A successful exploit could allow the attacker to trigger a security violation on the adjacent switch port, which could result in a DoS condition. Note: Though the Common Vulnerability Scoring System (CVSS) score corresponds to a High Security Impact Rating (SIR), this vulnerability is considered Medium because a workaround is available and exploitation requires a specific switch configuration. There are workarounds that address this vulnerability.
CVSS Score: 7.4 (HIGH)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/108000; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-air-ap-dos; http://www.securityfocus.com/bid/108000
CVE: CVE-2019-1835
Published: 2019-04-18
Description: A vulnerability in the CLI of Cisco Aironet Access Points (APs) could allow an authenticated, local attacker to access sensitive information stored in an AP. The vulnerability is due to improper sanitization of user-supplied input in specific CLI commands. An attacker could exploit this vulnerability by accessing the CLI of an affected AP with administrator privileges and issuing crafted commands that result in directory traversal. A successful exploit could allow the attacker to view system files on the affected device, which could contain sensitive information. Software versions 8.8 and 8.9 are affected.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-22, CWE-22
References: http://www.securityfocus.com/bid/108001; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-air-ap-traversal; http://www.securityfocus.com/bid/108001
CVE: CVE-2019-1837
Published: 2019-04-18
Description: A vulnerability in the User Data Services (UDS) API of Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the management GUI. The vulnerability is due to improper validation of input parameters in the UDS API requests. An attacker could exploit this vulnerability by sending a crafted request to the UDS API of an affected device. A successful exploit could allow the attacker to make the A Cisco DB service quit unexpectedly, preventing admin access to the Unified CM management GUI. Manual intervention may be required to restore normal operation. Software versions 10.5, 11.5, 12.0, 12.5 are affected.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-129, CWE-20
References: http://www.securityfocus.com/bid/108019; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-ucm-dos; http://www.securityfocus.com/bid/108019
CVE: CVE-2019-1840
Published: 2019-04-18
Description: A vulnerability in the DHCPv6 input packet processor of Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to restart the server and cause a denial of service (DoS) condition on the affected system. The vulnerability is due to incomplete user-supplied input validation when a custom extension attempts to change a DHCPv6 packet received by the application. An attacker could exploit this vulnerability by sending malformed DHCPv6 packets to the application. An exploit could allow the attacker to trigger a restart of the service which, if exploited repeatedly, might lead to a DoS condition. This vulnerability can only be exploited if the administrator of the server has previously installed custom extensions that attempt to modify the packet details before the packet has been processed. Note: Although the CVSS score matches a High SIR, this has been lowered to Medium because this condition will only affect an application that has customer-developed extensions that will attempt to modify packet parameters before the packet has been completely sanitized. If packet modification in a custom extension happens after the packet has been sanitized, the application will not be affected by this vulnerability. Software versions prior to 8.3(7) and 9.1(2) are affected.
CVSS Score: 8.6 (HIGH)
CWE: CWE-665, CWE-665
References: http://www.securityfocus.com/bid/108033; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-pnr-dos; http://www.securityfocus.com/bid/108033
CVE: CVE-2019-1841
Published: 2019-04-18
Description: A vulnerability in the Software Image Management feature of Cisco DNA Center could allow an authenticated, remote attacker to access to internal services without additional authentication. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending arbitrary HTTP requests to internal services. An exploit could allow the attacker to bypass any firewall or other protections to access unauthorized internal services. DNAC versions prior to 1.2.5 are affected.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-441, CWE-20
References: http://www.securityfocus.com/bid/108084; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-swim-proxy; http://www.securityfocus.com/bid/108084
CVE: CVE-2016-10746
Published: 2019-04-18
Description: libvirt-domain.c in libvirt before 1.3.1 supports virDomainGetTime API calls by guest agents with an RO connection, even though an RW connection was supposed to be required, a different vulnerability than CVE-2019-3886.
CVSS Score: 7.5 (HIGH)
CWE: CWE-254
References: https://github.com/libvirt/libvirt/commit/506e9d6c2d4baaf580d489fff0690c0ff2ff588f; https://github.com/libvirt/libvirt/compare/11288f5...8fd6867; https://lists.debian.org/debian-lts-announce/2019/04/msg00032.html
CVE: CVE-2018-17168
Published: 2019-04-18
Description: PrinterOn Enterprise 4.1.4 contains multiple Cross Site Request Forgery (CSRF) vulnerabilities in the Administration page. For example, an administrator, by following a link, can be tricked into making unwanted changes to a printer (Disable, Approve, etc).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17168-CSRF-PrinterON; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17168-CSRF-PrinterON
CVE: CVE-2019-10300
Published: 2019-04-18
Description: A cross-site request forgery vulnerability in Jenkins GitLab Plugin 1.5.11 and earlier in the GitLabConnectionConfig#doTestConnection form validation method allowed attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/108045; https://jenkins.io/security/advisory/2019-04-17/#SECURITY-1357; https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0788
CVE: CVE-2019-10301
Published: 2019-04-18
Description: A missing permission check in Jenkins GitLab Plugin 1.5.11 and earlier in the GitLabConnectionConfig#doTestConnection form validation method allowed attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: http://www.securityfocus.com/bid/108045; https://jenkins.io/security/advisory/2019-04-17/#SECURITY-1357; http://www.securityfocus.com/bid/108045
CVE: CVE-2019-10302
Published: 2019-04-18
Description: Jenkins jira-ext Plugin 0.8 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.securityfocus.com/bid/108045; https://jenkins.io/security/advisory/2019-04-17/#SECURITY-836; http://www.securityfocus.com/bid/108045
CVE: CVE-2019-10303
Published: 2019-04-18
Description: Jenkins Azure PublisherSettings Credentials Plugin 1.2 and earlier stored credentials unencrypted in the credentials.xml file on the Jenkins master where they could be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.securityfocus.com/bid/108045; https://jenkins.io/security/advisory/2019-04-17/#SECURITY-844; http://www.securityfocus.com/bid/108045
CVE: CVE-2019-10304
Published: 2019-04-18
Description: A cross-site request forgery vulnerability in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form validation method allows attackers to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/bid/108045; https://jenkins.io/security/advisory/2019-04-17/#SECURITY-983; http://www.securityfocus.com/bid/108045
CVE: CVE-2019-10305
Published: 2019-04-18
Description: A missing permission check in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.securityfocus.com/bid/108045; https://jenkins.io/security/advisory/2019-04-17/#SECURITY-983; http://www.securityfocus.com/bid/108045
CVE: CVE-2019-10306
Published: 2019-04-18
Description: A sandbox bypass vulnerability in Jenkins ontrack Plugin 3.4 and earlier allowed attackers with control over ontrack DSL definitions to execute arbitrary code on the Jenkins master JVM.
CVSS Score: 9.9 (CRITICAL)
References: http://www.securityfocus.com/bid/108045; https://jenkins.io/security/advisory/2019-04-17/#SECURITY-1341; http://www.securityfocus.com/bid/108045
CVE: CVE-2019-11034
Published: 2019-04-18
Description: When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html
CVE: CVE-2019-11035
Published: 2019-04-18
Description: When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information disclosure or crash.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html
CVE: CVE-2019-11319
Published: 2019-04-18
Description: An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function downloadFirmware in hnap, which leads to remote code execution via shell metacharacters in a JSON value.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/TeamSeri0us/pocs/blob/master/iot/motorola.pdf; https://github.com/TeamSeri0us/pocs/blob/master/iot/motorola.pdf
CVE: CVE-2019-11320
Published: 2019-04-18
Description: In Motorola CX2 1.01 and M2 1.01, users can access the router's /priv_mgt.html web page to launch telnetd, as demonstrated by the 192.168.51.1 address.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/TeamSeri0us/pocs/blob/master/iot/motorola.pdf; https://github.com/TeamSeri0us/pocs/blob/master/iot/motorola.pdf