deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-11206
Published: 2019-05-14
Description: The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains vulnerabilities that theoretically allow a malicious user to undermine the integrity of comments and bookmarks. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 10.2.0, and TIBCO Spotfire Server: versions up to and including 7.11.2; 7.12.0; 7.13.0; 7.14.0; 10.0.0; 10.0.1; 10.1.0; and 10.2.0.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/108405; http://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2019/05/tibco-security-advisory-may-14-2019-tibco-spotfire-server-2019-11206
CVE: CVE-2019-3568
Published: 2019-05-14
Description: A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp for iOS prior to v2.19.51, WhatsApp Business for iOS prior to v2.19.51, WhatsApp for Windows Phone prior to v2.18.348, and WhatsApp for Tizen prior to v2.18.15.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: http://www.securityfocus.com/bid/108329; https://www.facebook.com/security/advisories/cve-2019-3568; http://www.securityfocus.com/bid/108329
CVE: CVE-2019-6572
Published: 2019-05-14
Description: A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15.1 Update 1), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F (All versions < V15.1 Update 1), SIMATIC WinCC Runtime Advanced (All versions < V15.1 Update 1), SIMATIC WinCC Runtime Professional (All versions < V15.1 Update 1), SIMATIC WinCC (TIA Portal) (All versions < V15.1 Update 1), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) (All versions). The affected device offered SNMP read and write capacities with a publicly know hardcoded community string. The security vulnerability could be exploited by an attacker with network access to the affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality and integrity of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-200, CWE-798
References: http://www.securityfocus.com/bid/108412; https://cert-portal.siemens.com/productcert/pdf/ssa-804486.pdf; https://www.us-cert.gov/ics/advisories/ICSA-19-134-09
CVE: CVE-2019-6574
Published: 2019-05-14
Description: A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- (All Versions with option G21, G22, G23, G26, G28, G31, G32, G38, G43 or G46), SINAMICS PERFECT HARMONY GH180 with NXG II control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- (All Versions with option G21, G22, G23, G26, G28, G31, G32, G38, G43 or G46). An improperly configured Parameter Read/Write execution via Field bus network may cause the controller to restart. The vulnerability could be exploited by an attacker with network access to the device. Successful exploitation requires no privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://cert-portal.siemens.com/productcert/pdf/ssa-865156.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-865156.pdf
CVE: CVE-2019-6576
Published: 2019-05-14
Description: A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15.1 Update 1), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F (All versions < V15.1 Update 1), SIMATIC WinCC Runtime Advanced (All versions < V15.1 Update 1), SIMATIC WinCC Runtime Professional (All versions < V15.1 Update 1), SIMATIC WinCC (TIA Portal) (All versions < V15.1 Update 1), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) (All versions). An attacker with network access to affected devices could potentially obtain a TLS session key. If the attacker is able to observe TLS traffic between a legitimate user and the device, then the attacker could decrypt the TLS traffic. The security vulnerability could be exploited by an attacker who has network access to the web interface of the device and who is able to observe TLS traffic between legitimate users and the web interface of the affected device. The vulnerability could impact the confidentiality of the communication between the affected device and a legitimate user. At the time of advisory publication no public exploitation of the security vulnerability was known.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310, CWE-310
References: http://www.securityfocus.com/bid/108412; https://cert-portal.siemens.com/productcert/pdf/ssa-804486.pdf; https://www.us-cert.gov/ics/advisories/ICSA-19-134-09
CVE: CVE-2019-6577
Published: 2019-05-14
Description: A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15.1 Update 1), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F (All versions < V15.1 Update 1), SIMATIC WinCC Runtime Advanced (All versions < V15.1 Update 1), SIMATIC WinCC Runtime Professional (All versions < V15.1 Update 1), SIMATIC WinCC (TIA Portal) (All versions < V15.1 Update 1), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) (All versions). The integrated web server could allow Cross-Site Scripting (XSS) attacks if an attacker is able to modify particular parts of the device configuration via SNMP. The security vulnerability could be exploited by an attacker with network access to the affected system. Successful exploitation requires system privileges and user interaction. An attacker could use the vulnerability to compromise confidentiality and the integrity of the affected system. At the stage of publishing this security advisory no public exploitation is known.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-80, CWE-79
References: http://www.securityfocus.com/bid/108412; https://cert-portal.siemens.com/productcert/pdf/ssa-804486.pdf; https://www.us-cert.gov/ics/advisories/ICSA-19-134-09
CVE: CVE-2019-6578
Published: 2019-05-14
Description: A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- (All Versions with option G28), SINAMICS PERFECT HARMONY GH180 with NXG II control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- (All Versions with option G28). A denial of service vulnerability exists in the affected products. The vulnerability could be exploited by an attacker with network access to the device. Successful exploitation requires no privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://cert-portal.siemens.com/productcert/pdf/ssa-606525.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-19-134-05; https://cert-portal.siemens.com/productcert/pdf/ssa-606525.pdf
CVE: CVE-2018-14839
Published: 2019-05-14
Description: LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://medium.com/%400x616163/lg-n1a1-unauthenticated-remote-command-injection-cve-2018-14839-9d2cf760e247; https://medium.com/%400x616163/lg-n1a1-unauthenticated-remote-command-injection-cve-2018-14839-9d2cf760e247; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-14839
CVE: CVE-2019-0280
Published: 2019-05-14
Description: SAP Treasury and Risk Management (EA-FINSERV 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18 and 8.0; S4CORE 1.01, 1.02 and 1.03), does not perform necessary authorization checks for authorization objects T_DEAL_DP and T_DEAL_PD , resulting in escalation of privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://launchpad.support.sap.com/#/notes/2744937; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032; https://launchpad.support.sap.com/#/notes/2744937
CVE: CVE-2019-0287
Published: 2019-05-14
Description: Under certain conditions SAP BusinessObjects Business Intelligence platform (Central Management Server), versions 4.2 and 4.3, allows an attacker to access information which would otherwise be restricted.
CVSS Score: 7.6 (HIGH)
References: http://www.securityfocus.com/bid/108316; https://launchpad.support.sap.com/#/notes/2737278; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032
CVE: CVE-2019-0289
Published: 2019-05-14
Description: Under certain conditions SAP BusinessObjects Business Intelligence platform (Analysis for OLAP), versions 4.2 and 4.3, allows an attacker to access information which would otherwise be restricted.
CVSS Score: 7.1 (HIGH)
References: https://launchpad.support.sap.com/#/notes/2738796; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032; https://launchpad.support.sap.com/#/notes/2738796
CVE: CVE-2019-0291
Published: 2019-05-14
Description: Under certain conditions Solution Manager, version 7.2, allows an attacker to access information which would otherwise be restricted.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/108313; https://launchpad.support.sap.com/#/notes/2748699; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032
CVE: CVE-2019-0293
Published: 2019-05-14
Description: Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system (ST-PI, before versions 2008_1_700, 2008_1_710, and 740).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.securityfocus.com/bid/108324; https://launchpad.support.sap.com/#/notes/2756625; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032
CVE: CVE-2019-0298
Published: 2019-05-14
Description: SAP E-Commerce (Business-to-Consumer) application does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. Fixed in the following components SAP-CRMJAV SAP-CRMWEB SAP-SHRWEB SAP-SHRJAV SAP-CRMAPP SAP-SHRAPP, versions 7.30, 7.31, 7.32, 7.33, 7.54.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/108314; https://launchpad.support.sap.com/#/notes/2773086; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032
CVE: CVE-2019-0301
Published: 2019-05-14
Description: Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST Interface Version 2, which would otherwise be restricted only for viewing.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://launchpad.support.sap.com/#/notes/2784307; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032; https://launchpad.support.sap.com/#/notes/2784307
CVE: CVE-2019-11328
Published: 2019-05-14
Description: An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system (e.g. ssh) could exploit this vulnerability due to insecure permissions allowing a user to edit files within `/run/singularity/instances/sing/<user>/<instance>`. The manipulation of those files can change the behavior of the starter-suid program when instances are joined resulting in potential privilege escalation on the host.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00028.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.html; http://www.openwall.com/lists/oss-security/2019/05/16/1
CVE: CVE-2019-11397
Published: 2019-05-14
Description: GetFile.aspx in Rapid4 RapidFlows Enterprise Application Builder 4.5M.23 (when used with .NET Framework 4.5) allows Local File Inclusion via the FileDesc parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://rapidflows.com/; https://medium.com/%40javarmutt/rapid4-local-file-inclusion-0day-151c830ac74a; http://rapidflows.com/
CVE: CVE-2019-12099
Published: 2019-05-14
Description: In PHP-Fusion 9.03.00, edit_profile.php allows remote authenticated users to execute arbitrary code because includes/dynamics/includes/form_fileinput.php and includes/classes/PHPFusion/Installer/Lib/Core.settings.inc mishandle executable files during avatar upload.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/php-fusion/PHP-Fusion/commit/943432028b9e674433bb3f2a128b[PII_REDACTED]e6; https://www.exploit-db.com/exploits/46839; https://www.pentest.com.tr/exploits/PHP-Fusion-9-03-00-Edit-Profile-Remote-Code-Execution.html
CVE: CVE-2019-12101
Published: 2019-05-15
Description: coap_decode_option in coap.c in LibNyoci 0.07.00rc1 mishandles certain packets with "Uri-Path: (null)" and consequently allows remote attackers to cause a denial of service (segmentation fault).
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/darconeous/libnyoci/issues/21; https://github.com/darconeous/libnyoci/issues/21
CVE: CVE-2019-11833
Published: 2019-05-15
Description: fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html
CVE: CVE-2014-9917
Published: 2019-05-15
Description: An issue was discovered in Bilboplanet 2.0. There is a stored XSS vulnerability when adding a tag via the user/?page=tribes tags parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/34089/; https://www.exploit-db.com/exploits/34089/
CVE: CVE-2014-9918
Published: 2019-05-15
Description: An issue was discovered in Bilboplanet 2.0. Stored XSS exists in the user_id parameter to signup.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/34089/; https://www.exploit-db.com/exploits/34089/
CVE: CVE-2014-9919
Published: 2019-05-15
Description: An issue was discovered in Bilboplanet 2.0. Stored XSS exists in the fullname parameter to signup.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/34089/; https://www.exploit-db.com/exploits/34089/
CVE: CVE-2016-10719
Published: 2019-05-15
Description: TP-Link Archer CR-700 1.0.6 devices have an XSS vulnerability that can be introduced into the admin account through a DHCP request, allowing the attacker to steal the cookie information, which contains the base64 encoded username and password.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/138881/TP-Link-Archer-CR-700-Cross-Site-Scripting.html; https://packetstormsecurity.com/files/138881/TP-Link-Archer-CR-700-Cross-Site-Scripting.html
CVE: CVE-2016-7151
Published: 2019-05-15
Description: Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/aquynh/capstone/commit/87a25bb543c8e4c09b48d4b4a6c7db31ce58df06; https://github.com/aquynh/capstone/pull/725; https://github.com/aquynh/capstone/commit/87a25bb543c8e4c09b48d4b4a6c7db31ce58df06
CVE: CVE-2016-7043
Published: 2019-05-15
Description: It has been reported that KIE server and Busitess Central before version 7.21.0.Final contain username and password as plaintext Java properties. Any app deployed on the same server would have access to these properties, thus granting access to ther services.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-260, CWE-255
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7043; https://github.com/kiegroup/droolsjbpm-integration/pull/1273; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7043
CVE: CVE-2019-3586
Published: 2019-05-15
Description: Protection Mechanism Failure in the Firewall in McAfee Endpoint Security (ENS) 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circumvent ENS protection where GTI flagged IP addresses are not blocked by the ENS Firewall via specially crafted malicious sites where the GTI reputation is carefully manipulated and does not correctly trigger the ENS Firewall to block the connection.
CVSS Score: 7.5 (HIGH)
CWE: CWE-693
References: http://www.securityfocus.com/bid/108416; https://kc.mcafee.com/corporate/index?page=content&id=SB10280; http://www.securityfocus.com/bid/108416
CVE: CVE-2019-3602
Published: 2019-05-15
Description: Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) Prior to 9.1 Update 5 allows an authenticated administrator to embed an XSS in the administrator interface via a specially crafted custom rule containing HTML.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/108400; https://kc.mcafee.com/corporate/index?page=content&id=SB10281; http://www.securityfocus.com/bid/108400
CVE: CVE-2019-3724
Published: 2019-05-15
Description: RSA Netwitness Platform versions prior to 11.2.1.1 is vulnerable to an Authorization Bypass vulnerability. A remote low privileged attacker could potentially exploit this vulnerability to gain access to administrative information including credentials.
CVSS Score: 6.5 (MEDIUM)
References: https://community.rsa.com/docs/DOC-104202; https://community.rsa.com/docs/DOC-104202
CVE: CVE-2019-3725
Published: 2019-05-15
Description: RSA Netwitness Platform versions prior to 11.2.1.1 and RSA Security Analytics versions prior to 10.6.6.1 are vulnerable to a Command Injection vulnerability due to missing input validation in the product. A remote unauthenticated malicious user could exploit this vulnerability to execute arbitrary commands on the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.securityfocus.com/bid/108355; https://community.rsa.com/docs/DOC-104202; http://www.securityfocus.com/bid/108355
CVE: CVE-2019-3727
Published: 2019-05-15
Description: Dell EMC RecoverPoint versions prior to 5.1.3 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an OS command injection vulnerability in the installation feature of Boxmgmt CLI. A malicious boxmgmt user may potentially be able to execute arbitrary commands as root.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-78
References: http://www.securityfocus.com/bid/108411; https://www.dell.com/support/security/us/en/04/details/533842/DSA-2019-078-Dell-EMC-RecoverPoint-OS-Command-Injection-Vulnerability; http://www.securityfocus.com/bid/108411
CVE: CVE-2019-5526
Published: 2019-05-15
Description: VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where Workstation is installed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: http://packetstormsecurity.com/files/152946/VMware-Workstation-DLL-Hijacking.html; http://www.securityfocus.com/bid/108333; https://www.vmware.com/security/advisories/VMSA-2019-0007.html
CVE: CVE-2019-5597
Published: 2019-05-15
Description: In FreeBSD 11.3-PRERELEASE and 12.0-STABLE before r347591, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a bug in the pf IPv6 fragment reassembly logic incorrectly uses the last extension header offset from the last received packet instead of the first packet allowing maliciously crafted IPv6 packets to cause a crash or potentially bypass the packet filter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: http://packetstormsecurity.com/files/152933/FreeBSD-Security-Advisory-FreeBSD-SA-19-05.pf.html; http://www.securityfocus.com/bid/108395; https://security.FreeBSD.org/advisories/FreeBSD-SA-19:05.pf.asc
CVE: CVE-2019-5598
Published: 2019-05-15
Description: In FreeBSD 11.3-PRERELEASE before r345378, 12.0-STABLE before r345377, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a bug in pf does not check if the outer ICMP or ICMP6 packet has the same destination IP as the source IP of the inner protocol packet allowing a maliciously crafted ICMP/ICMP6 packet could bypass the packet filter rules and be passed to a host that would otherwise be unavailable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/152934/FreeBSD-Security-Advisory-FreeBSD-SA-19-06.pf.html; http://www.securityfocus.com/bid/108395; https://security.FreeBSD.org/advisories/FreeBSD-SA-19:06.pf.asc
CVE: CVE-2019-8936
Published: 2019-05-15
Description: NTP through 4.2.8p12 has a NULL Pointer Dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://bugs.ntp.org/show_bug.cgi?id=3565; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00032.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00036.html
CVE: CVE-2013-7285
Published: 2019-05-15
Description: Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://blog.diniscruz.com/2013/12/xstream-remote-code-execution-exploit.html; http://seclists.org/oss-sec/2014/q1/69; http://web.archive.org/web/[PII_REDACTED]3306/http://blog.diniscruz.com/2013/12/xstream-remote-code-execution-exploit.html
CVE: CVE-2019-1717
Published: 2019-05-15
Description: A vulnerability in the web-based management interface of Cisco Video Surveillance Manager could allow an unauthenticated, remote attacker to access sensitive information. The vulnerability is due to improper validation of parameters handled by the web-based management interface. An attacker could exploit this vulnerability by sending malicious requests to an affected component. A successful exploit could allow the attacker to download arbitrary files from the affected device, which could contain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: http://www.securityfocus.com/bid/108336; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-cvsm; http://www.securityfocus.com/bid/108336
CVE: CVE-2019-1726
Published: 2019-05-15
Description: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to access internal services that should be restricted on an affected device, such as the NX-API. The vulnerability is due to insufficient validation of arguments passed to a certain CLI command. An attacker could exploit this vulnerability by including malicious input as the argument to the affected command. A successful exploit could allow the attacker to bypass intended restrictions and access internal services of the device. An attacker would need valid device credentials to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-78
References: http://www.securityfocus.com/bid/108409; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-nxos-cli-bypass; http://www.securityfocus.com/bid/108409