deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-5967
Published: 2019-07-05
Description: Cross-site scripting vulnerability in Joruri CMS 2017 Release2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://joruri.org/docs/[PII_REDACTED]058/; https://jvn.jp/en/jp/JVN29188908/index.html; https://joruri.org/docs/[PII_REDACTED]058/
CVE: CVE-2019-5968
Published: 2019-07-05
Description: Cross-site request forgery (CSRF) vulnerability in GROWI v3.4.6 and earlier allows remote attackers to hijack the authentication of administrators via updating user's 'Basic Info'.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN84876282/index.html; https://weseek.co.jp/security/2019/06/04/growi-fix-jvn84876282/; https://jvn.jp/en/jp/JVN84876282/index.html
CVE: CVE-2019-5969
Published: 2019-07-05
Description: Open redirect vulnerability in GROWI v3.4.6 and earlier allows remote attackersto redirect users to arbitrary web sites and conduct phishing attacks via the process of login.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://jvn.jp/en/jp/JVN84876282/index.html; https://weseek.co.jp/security/2019/06/04/growi-fix-jvn84876282/; https://jvn.jp/en/jp/JVN84876282/index.html
CVE: CVE-2019-5970
Published: 2019-07-05
Description: Cross-site scripting vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://attmgr.com/fixed-vulnerability-issue/; https://jvn.jp/en/jp/JVN95685939/index.html; https://wordpress.org/plugins/attendance-manager/#developers
CVE: CVE-2019-5971
Published: 2019-07-05
Description: Cross-site request forgery (CSRF) vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://attmgr.com/fixed-vulnerability-issue/; https://jvn.jp/en/jp/JVN95685939/index.html; https://wordpress.org/plugins/attendance-manager/#developers
CVE: CVE-2019-5972
Published: 2019-07-05
Description: Cross-site scripting vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN96988995/index.html; https://olbsys.com/fixed-vulnerability-issue/; https://wordpress.org/plugins/online-lesson-booking-system/#developers
CVE: CVE-2019-5973
Published: 2019-07-05
Description: Cross-site request forgery (CSRF) vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN96988995/index.html; https://olbsys.com/fixed-vulnerability-issue/; https://wordpress.org/plugins/online-lesson-booking-system/#developers
CVE: CVE-2019-5974
Published: 2019-07-05
Description: Cross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN80925867/index.html; https://wordpress.org/plugins/contest-gallery/; https://wpvulndb.com/vulnerabilities/9436
CVE: CVE-2019-5979
Published: 2019-07-05
Description: Cross-site request forgery (CSRF) vulnerability in Personalized WooCommerce Cart Page 2.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN88804335/index.html; https://wordpress.org/plugins/personalize-woocommerce-cart-page/; https://wpvulndb.com/vulnerabilities/9437
CVE: CVE-2019-5980
Published: 2019-07-05
Description: Cross-site request forgery (CSRF) vulnerability in Related YouTube Videos versions prior to 1.9.9 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN31406910/index.html; https://wordpress.org/plugins/related-youtube-videos/; https://wpvulndb.com/vulnerabilities/9336
CVE: CVE-2019-5981
Published: 2019-07-05
Description: Improper authorization vulnerability in VAIO Update 7.3.0.03150 and earlier allows an attackers to execute arbitrary executable file with administrative privilege via unspecified vectors.
CVSS Score: 7.8 (HIGH)
References: https://jvn.jp/en/jp/JVN13555032/index.html; https://www.sony.com/electronics/support/articles/00228777; https://jvn.jp/en/jp/JVN13555032/index.html
CVE: CVE-2019-5982
Published: 2019-07-05
Description: Improper download file verification vulnerability in VAIO Update 7.3.0.03150 and earlier allows remote attackers to conduct a man-in-the-middle attack via a malicous wireless LAN access point. A successful exploitation may result in a malicious file being downloaded/executed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-494
References: https://jvn.jp/en/jp/JVN13555032/index.html; https://www.sony.com/electronics/support/articles/00228777; https://jvn.jp/en/jp/JVN13555032/index.html
CVE: CVE-2019-5983
Published: 2019-07-05
Description: Cross-site request forgery (CSRF) vulnerability in HTML5 Maps 1.6.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN49575131/index.html; https://wordpress.org/plugins/html5-maps/; https://wpvulndb.com/vulnerabilities/9438
CVE: CVE-2019-5984
Published: 2019-07-05
Description: Cross-site request forgery (CSRF) vulnerability in Custom CSS Pro 1.0.3 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN29933378/index.html; https://wordpress.org/plugins/custom-css-pro/; https://wpvulndb.com/vulnerabilities/9439
CVE: CVE-2019-13339
Published: 2019-07-05
Description: In MiniCMS V1.10, stored XSS was found in mc-admin/page-edit.php (content box), which can be used to get a user's cookie.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/bg5sbk/MiniCMS/issues/32; https://github.com/bg5sbk/MiniCMS/issues/32
CVE: CVE-2019-13340
Published: 2019-07-05
Description: In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the content box. An attacker can use it to get a user's cookie. This is different from CVE-2018-10296, CVE-2018-16233, CVE-2018-20520, and CVE-2019-13186.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/bg5sbk/MiniCMS/issues/32; https://github.com/bg5sbk/MiniCMS/issues/32
CVE: CVE-2019-13341
Published: 2019-07-05
Description: In MiniCMS V1.10, stored XSS was found in mc-admin/conf.php (comment box), which can be used to get a user's cookie.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/bg5sbk/MiniCMS/issues/32; https://github.com/bg5sbk/MiniCMS/issues/32
CVE: CVE-2018-14027
Published: 2019-07-05
Description: Digisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or password parameter to the admin login page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://indiancybersecuritysolutions.com/cve-2018-14027-xss-scripting-brute-force; https://indiancybersecuritysolutions.com/cve-2018-14027-xss-scripting-brute-force
CVE: CVE-2019-13344
Published: 2019-07-05
Description: An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthenticated attackers to change settings. The contains() function in wp_like_button.php did not check if the current request is made by an authorized user, thus allowing any unauthenticated user to successfully update settings, as demonstrated by the wp-admin/admin.php?page=facebook-like-button each_page_url or code_snippet parameter.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: http://packetstormsecurity.com/files/153541/WordPress-Like-Button-1.6.0-Authentication-Bypass.html; https://limbenjamin.com/articles/wp-like-button-auth-bypass.html; https://wordpress.org/plugins/wp-like-button/#developers
CVE: CVE-2019-13345
Published: 2019-07-05
Description: The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00067.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00053.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00056.html
CVE: CVE-2018-12621
Published: 2019-07-05
Description: An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the current_page parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/eventum/eventum/blob/master/CHANGELOG.md; https://github.com/eventum/eventum/releases/tag/v3.5.2; https://github.com/eventum/eventum/blob/master/CHANGELOG.md
CVE: CVE-2018-14528
Published: 2019-07-05
Description: Invoxia NVX220 devices allow TELNET access as admin with a default password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://gitlab.com/r3dlight/CVE-2018-14528; https://gitlab.com/r3dlight/CVE-2018-14528
CVE: CVE-2018-14529
Published: 2019-07-05
Description: Invoxia NVX220 devices allow access to /bin/sh via escape from a restricted CLI, leading to disclosure of password hashes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://gitlab.com/r3dlight/CVE-2018-14529; https://gitlab.com/r3dlight/CVE-2018-14529
CVE: CVE-2018-14733
Published: 2019-07-05
Description: The Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS (regular expression denial of service) under certain circumstances.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/OCA/server-tools/issues/1335; https://github.com/OCA/server-tools/tree/10.0/dbfilter_from_header; https://github.com/OCA/server-tools/tree/11.0/dbfilter_from_header
CVE: CVE-2018-16386
Published: 2019-07-05
Description: An issue was discovered in SWIFT Alliance Web Platform 7.1.23. A log injection (and an arbitrary log filename) can be achieved via the PATH_INFO to swp/login/EJBRemoteService/, related to com.swift.ejbgwt.j2ee.client.EjBlnvocationException error log information containing null@java:comp/env/ error messages.
CVSS Score: 7.5 (HIGH)
CWE: CWE-116
References: https://gist.github.com/shiham101/8763642e768582e0182f92cd41c482ec; https://gist.github.com/shiham101/8763642e768582e0182f92cd41c482ec
CVE: CVE-2019-12971
Published: 2019-07-05
Description: BKS EBK Ethernet-Buskoppler Pro before 3.01 allows Unrestricted Upload of a File with a Dangerous Type.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://seclists.org/bugtraq/2019/Jul/6; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-017.txt; https://seclists.org/bugtraq/2019/Jul/6
CVE: CVE-2019-13351
Published: 2019-07-05
Description: posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 (as distributed with alsa-plugins 1.1.7 and later) has a "double file descriptor close" issue during a failed connection attempt when jackd2 is not running. Exploitation success depends on multithreaded timing of that double close, which can result in unintended information disclosure, crashes, or file corruption due to having the wrong file associated with the file descriptor.
CVSS Score: 8.1 (HIGH)
References: https://github.com/jackaudio/jack2/pull/480; https://github.com/xbmc/xbmc/issues/16258; https://github.com/jackaudio/jack2/pull/480
CVE: CVE-2019-13352
Published: 2019-07-05
Description: WolfVision Cynap before 1.30j uses a static, hard-coded cryptographic secret for generating support PINs for the 'forgot password' feature. By knowing this static secret and the corresponding algorithm for calculating support PINs, an attacker can reset the ADMIN password and thus gain remote access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://packetstormsecurity.com/files/153530/WolfVision-Cynap-1.18g-1.28j-Hardcoded-Credential.html; http://seclists.org/fulldisclosure/2019/Jul/9; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-021.txt
CVE: CVE-2019-13358
Published: 2019-07-05
Description: lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system. The attacker must upload a file in the docx or odt format.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: http://packetstormsecurity.com/files/164253/OpenCats-0.9.4-2-XML-Injection.html; http://www.opencats.org/news/; https://doddsecurity.com/312/xml-external-entity-injection-xxe-in-opencats-applicant-tracking-system/
CVE: CVE-2019-10638
Published: 2019-07-05
Description: In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may be conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-326
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html; http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
CVE: CVE-2019-10639
Published: 2019-07-05
Description: The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. Specifically, it is possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). This key contains enough bits from a kernel address (of a static variable) so when the key is extracted (via enumeration), the offset of the kernel image is exposed. This attack can be carried out remotely, by the attacker forcing the target device to send UDP or ICMP (or certain other) traffic to attacker-controlled IP addresses. Forcing a server to send UDP traffic is trivial if the server is a DNS server. ICMP traffic is trivial if the server answers ICMP Echo requests (ping). For client targets, if the target visits the attacker's web page, then WebRTC or gQUIC can be used to force UDP traffic to attacker-controlled IP addresses. NOTE: this attack against KASLR became viable in 4.1 because IP ID generation was changed to have a dependency on an address associated with a network namespace.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html; https://arxiv.org/pdf/1906.10478.pdf
CVE: CVE-2019-1887
Published: 2019-07-06
Description: A vulnerability in the Session Initiation Protocol (SIP) protocol implementation of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient validation of input SIP traffic. An attacker could exploit this vulnerability by sending a malformed SIP packet to an affected Cisco Unified Communications Manager. A successful exploit could allow the attacker to trigger a new registration process on all connected phones, temporarily disrupting service.
CVSS Score: 8.6 (HIGH)
CWE: CWE-787, CWE-787
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-cucm-dos; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-cucm-dos
CVE: CVE-2019-1891
Published: 2019-07-06
Description: A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper validation of requests sent to the web interface. An attacker could exploit this vulnerability by sending a malicious request to the web interface of an affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a DoS condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-sbss-dos; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-sbss-dos
CVE: CVE-2019-1892
Published: 2019-07-06
Description: A vulnerability in the Secure Sockets Layer (SSL) input packet processor of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a memory corruption on an affected device. The vulnerability is due to improper validation of HTTPS packets. An attacker could exploit this vulnerability by sending a malformed HTTPS packet to the management web interface of the affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a denial of service (DoS) condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-sbss-memcorrupt; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-sbss-memcorrupt
CVE: CVE-2019-1893
Published: 2019-07-06
Description: A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS) of an affected device as root. The vulnerability is due to insufficient input validation of a configuration file that is accessible to a local shell user. An attacker could exploit this vulnerability by including malicious input during the execution of this file. A successful exploit could allow the attacker to execute arbitrary commands on the underlying OS as root.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77, CWE-78
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-nfvis-commandinj; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-nfvis-commandinj
CVE: CVE-2019-1894
Published: 2019-07-06
Description: A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with administrator privileges to overwrite or read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to improper input validation in NFVIS filesystem commands. An attacker could exploit this vulnerability by using crafted variables during the execution of an affected command. A successful exploit could allow the attacker to overwrite or read arbitrary files on the underlying OS.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-nfvis-file-readwrite; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-nfvis-file-readwrite
CVE: CVE-2019-1909
Published: 2019-07-06
Description: A vulnerability in the implementation of Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected system. The vulnerability is due to incorrect processing of certain BGP update messages. An attacker could exploit this vulnerability by sending BGP update messages that include a specific set of attributes to be processed by an affected system. A successful exploit could allow the attacker to cause the BGP process to restart unexpectedly, resulting in a DoS condition. The Cisco implementation of BGP accepts incoming BGP traffic from explicitly defined peers only. To exploit this vulnerability, the malicious BGP update message would need to come from a configured, valid BGP peer or would need to be injected by the attacker into the victim's BGP network on an existing, valid TCP connection to a BGP peer.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-iosxr-bgp-dos; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-iosxr-bgp-dos
CVE: CVE-2019-1911
Published: 2019-07-06
Description: A vulnerability in the CLI of Cisco Unified Communications Domain Manager (Cisco Unified CDM) Software could allow an authenticated, local attacker to escape the restricted shell. The vulnerability is due to insufficient input validation of shell commands. An attacker could exploit this vulnerability by executing crafted commands in the shell. A successful exploit could allow the attacker to escape the restricted shell and access commands in the context of the restricted shell user, which does not have root privileges.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-216, CWE-216
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-cucdm-rsh; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-cucdm-rsh
CVE: CVE-2019-1921
Published: 2019-07-06
Description: A vulnerability in the attachment scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper input validation of the email body. An attacker could exploit this vulnerability by naming a malicious attachment with a specific pattern. A successful exploit could allow the attacker to bypass configured content filters that would normally block the attachment.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-esa-bypass; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-esa-bypass
CVE: CVE-2019-1922
Published: 2019-07-06
Description: A vulnerability in Cisco SIP IP Phone Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected phone. The vulnerability is due to insufficient validation of input Session Initiation Protocol (SIP) packets. An attacker could exploit this vulnerability by altering the SIP replies that are sent to the affected phone during the registration process. A successful exploit could allow the attacker to cause the phone to reboot and not complete the registration process.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-ip-phone-sip-dos; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-ip-phone-sip-dos