deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-4061
Published: 2019-05-06
Description: An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can inject arbitrary commands, resulting in arbitrary command execution. An attacker can send an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/152646/Sierra-Wireless-AirLink-ES450-ACEManager-iplogging.cgi-Command-Injection.html; http://www.securityfocus.com/bid/108147; https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03
CVE: CVE-2018-4068
Published: 2019-05-06
Description: An exploitable information disclosure vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A HTTP request can result in disclosure of the default configuration for the device. An attacker can send an unauthenticated HTTP request to trigger this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0753; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0753
CVE: CVE-2018-4069
Published: 2019-05-06
Description: An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager authentication functionality is done in plaintext XML to the web server. An attacker can listen to network traffic upstream from the device to capitalize on this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://packetstormsecurity.com/files/152654/Sierra-Wireless-AirLink-ES450-ACEManager-Information-Exposure.html; http://www.securityfocus.com/bid/108147; https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03
CVE: CVE-2019-11807
Published: 2019-05-06
Description: The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?action=update_attachment_wccm wccm_default_keys_load parameter because of a nopriv_ registration and a lack of capabilities checks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://wpvulndb.com/vulnerabilities/9262; https://www.wordfence.com/blog/2019/05/unauthenticated-media-deletion-vulnerability-patched-in-woocommerce-checkout-manager-plugin/; https://wpvulndb.com/vulnerabilities/9262
CVE: CVE-2018-13983
Published: 2019-05-06
Description: ImpressCMS 1.3.10 has XSS via the PATH_INFO to htdocs/install/index.php, htdocs/install/page_langselect.php, or htdocs/install/page_modcheck.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/150990/ImpressCMS-1.3.10-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Jan/8; https://www.netsparker.com/web-applications-advisories/ns-18-033-cross-site-scripting-in-impresscms/
CVE: CVE-2018-13990
Published: 2019-05-06
Description: The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, because of Improper Restriction of Excessive Authentication Attempts.
CVSS Score: 8.6 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/106737; https://ics-cert.us-cert.gov/advisories/ICSA-19-024-02; http://www.securityfocus.com/bid/106737
CVE: CVE-2018-4062
Published: 2019-05-06
Description: A hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless AirLink ES450 FW 4.9.3. Activating snmpd outside of the WebUI can cause the activation of the hard-coded credentials, resulting in the exposure of a privileged user. An attacker can activate snmpd without any configuration changes to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-798
References: http://packetstormsecurity.com/files/152647/Sierra-Wireless-AirLink-ES450-SNMPD-Hard-Coded-Credentials.html; http://www.securityfocus.com/bid/108147; https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03
CVE: CVE-2018-4063
Published: 2019-05-06
Description: An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can upload a file, resulting in executable code being uploaded, and routable, to the webserver. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: http://packetstormsecurity.com/files/152648/Sierra-Wireless-AirLink-ES450-ACEManager-upload.cgi-Remote-Code-Execution.html; http://www.securityfocus.com/bid/108147; https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03
CVE: CVE-2018-4065
Published: 2019-05-06
Description: An exploitable cross-site scripting vulnerability exists in the ACEManager ping_result.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP ping request can cause reflected javascript code execution, resulting in the execution of javascript code running on the victim's browser. An attacker can get a victim to click a link, or embedded URL, that redirects to the reflected cross-site scripting vulnerability to trigger this vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/152650/Sierra-Wireless-AirLink-ES450-ACEManager-ping_result.cgi-Cross-Site-Scripting.html; http://www.securityfocus.com/bid/108147; https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03
CVE: CVE-2018-4066
Published: 2019-05-06
Description: An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause an authenticated user to perform privileged requests unknowingly, resulting in unauthenticated requests being requested through an authenticated user. An attacker can get an authenticated user to request authenticated pages on the attacker's behalf to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: http://packetstormsecurity.com/files/152651/Sierra-Wireless-AirLink-ES450-ACEManager-Cross-Site-Request-Forgery.html; http://www.securityfocus.com/bid/108147; https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03
CVE: CVE-2018-4067
Published: 2019-05-06
Description: An exploitable information disclosure vulnerability exists in the ACEManager template_load.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a information leak, resulting in the disclosure of internal paths and files. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/152652/Sierra-Wireless-AirLink-ES450-ACEManager-template_load.cgi-Information-Disclosure.html; http://www.securityfocus.com/bid/108147; https://ics-cert.us-cert.gov/advisories/ICSA-19-122-03
CVE: CVE-2018-4070
Published: 2019-05-06
Description: An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. This binary does not have any restricted configuration settings, so once the MSCIID is discovered, any authenticated user can send configuration changes using the /cgi-bin/Embedded_Ace_Get_Task.cgi endpoint.
CVSS Score: 8.8 (HIGH)
CWE: CWE-200
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0755; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0755
CVE: CVE-2018-4071
Published: 2019-05-06
Description: An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The EmbeddedAceTLGet_Task.cgi executable is used to retrieve MSCII configuration values within the configuration manager of the AirLink ES450. This binary does not have any restricted configuration settings, so once the MSCIID is discovered, any authenticated user can send configuration changes using the /cgi-bin/Embedded_Ace_TLGet_Task.cgi endpoint.
CVSS Score: 8.8 (HIGH)
CWE: CWE-200
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0755; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0755
CVE: CVE-2018-4072
Published: 2019-05-06
Description: An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The EmbeddedAceSet_Task.cgi executable is used to change MSCII configuration values within the configuration manager of the AirLink ES450. This binary does not have any restricted configuration settings, so once the MSCIID is discovered, any authenticated user can send configuration changes using the /cgi-bin/Embedded_Ace_Set_Task.cgi endpoint.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0756; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0756
CVE: CVE-2018-4073
Published: 2019-05-06
Description: An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The the binary the endpoint /cgi-bin/Embeded_Ace_TLSet_Task.cgi is a very similar endpoint that is designed for use with setting table values that can cause an arbitrary setting writes, resulting in the unverified changes to any system setting. An attacker can make an authenticated HTTP request, or run the binary as any user, to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0756; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0756
CVE: CVE-2018-18975
Published: 2019-05-06
Description: An issue was discovered in the Ascensia Contour NEXT ONE app for iOS before 2019-01-15. An attacker may proxy communications between the app and Ascensia backend servers because of a weak certificate-pinning implementation, leading to disclosure of medical information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://depthsecurity.com/blog/medical-exploitation-you-are-now-diabetic; https://depthsecurity.com/blog/medical-exploitation-you-are-now-diabetic
CVE: CVE-2018-18976
Published: 2019-05-06
Description: An issue was discovered in the Ascensia Contour NEXT ONE application for iOS and Android before 2019-01-15. An attacker may retrieve encrypted medical information of any user of the Ascensia cloud platform by performing Direct Object References with a series of user ID values. (This information can be decrypted through a different vulnerability.)
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639
References: https://depthsecurity.com/blog/medical-exploitation-you-are-now-diabetic; https://depthsecurity.com/blog/medical-exploitation-you-are-now-diabetic
CVE: CVE-2018-18977
Published: 2019-05-06
Description: An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. An attacker may reverse engineer the codebase to extract sensitive data that contributes to the disclosure of medical information of patients utilizing the Ascensia platform. This occurs because of weak obfuscation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://depthsecurity.com/blog/medical-exploitation-you-are-now-diabetic; https://depthsecurity.com/blog/medical-exploitation-you-are-now-diabetic
CVE: CVE-2018-18978
Published: 2019-05-06
Description: An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. It has a statically coded encryption key. Extraction of the encryption key is necessary for deciphering communications between this application and the backend server. This, in combination with retrieving any user's encrypted data from the Ascensia cloud through another vulnerability, allows an attacker to obtain and modify any patient's medical information.
CVSS Score: 7.4 (HIGH)
CWE: CWE-798
References: https://depthsecurity.com/blog/medical-exploitation-you-are-now-diabetic; https://depthsecurity.com/blog/medical-exploitation-you-are-now-diabetic
CVE: CVE-2018-18979
Published: 2019-05-06
Description: An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. It has a statically coded initialization vector. Extraction of the initialization vector is necessary for deciphering communications between this application and the backend server. This, in combination with retrieving any user's encrypted data from the Ascensia cloud through another vulnerability, allows an attacker to obtain and modify any patient's medical information.
CVSS Score: 7.4 (HIGH)
CWE: CWE-798
References: https://depthsecurity.com/blog/medical-exploitation-you-are-now-diabetic; https://depthsecurity.com/blog/medical-exploitation-you-are-now-diabetic
CVE: CVE-2019-10999
Published: 2019-05-06
Description: The D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd, the camera's web server. The overflow allows a remotely authenticated attacker to execute arbitrary code by providing a long string in the WEPEncryption parameter when requesting wireless.htm. Vulnerable devices include DCS-5009L (1.08.11 and below), DCS-5010L (1.14.09 and below), DCS-5020L (1.15.12 and below), DCS-5025L (1.03.07 and below), DCS-5030L (1.04.10 and below), DCS-930L (2.16.01 and below), DCS-931L (1.14.11 and below), DCS-932L (2.17.01 and below), DCS-933L (1.14.11 and below), and DCS-934L (1.05.04 and below).
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/fuzzywalls/CVE-2019-10999; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10131; https://github.com/fuzzywalls/CVE-2019-10999
CVE: CVE-2019-11569
Published: 2019-05-06
Description: Veeam ONE Reporter 9.5.0.3201 allows CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.exploit-db.com/exploits/46765; https://www.exploit-db.com/exploits/46765
CVE: CVE-2017-15841
Published: 2019-05-06
Description: When HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in Snapdragon Mobile in version SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, Snapdragon_High_Med_2016.
CVSS Score: 5.5 (MEDIUM)
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2017-18131
Published: 2019-05-06
Description: In QTEE, an incorrect fuse value can be blown in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 820, SD 820A, SD 835, SD 845, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2017-18156
Published: 2019-05-06
Description: While processing camera buffers in camera driver, a use after free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 625, SD 820, SD 820A, SD 835, SDX20.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2017-18157
Published: 2019-05-06
Description: A Use After Free Condition can occur in Thermal Engine in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDX20.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2017-18173
Published: 2019-05-06
Description: In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2017-18274
Published: 2019-05-06
Description: While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incorrect number of models that is greater than the size of the array, a buffer overflow occurs in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2017-18275
Published: 2019-05-06
Description: A new account can be inserted into simContacts service using Android command line tool in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845.
CVSS Score: 5.5 (MEDIUM)
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2017-18276
Published: 2019-05-06
Description: Secure camera logic allows display/secure camera controllers to access HLOS memory during secure display or camera session in Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850
CVSS Score: 7.8 (HIGH)
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2017-18278
Published: 2019-05-06
Description: An integer underflow may occur due to lack of check when received data length from font_mgr_qsee_request_service is bigger than the minimal value of the segment header, which may result in a buffer overflow, in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2017-18279
Published: 2019-05-06
Description: Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FSM9955, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA9531, QCA9558, QCA9563, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2019-11808
Published: 2019-05-07
Description: Ratpack versions before 1.6.1 generate a session ID using a cryptographically weak PRNG in the JDK's ThreadLocalRandom. This means that if an attacker can determine a small window for the server start time and obtain a session ID value, they can theoretically determine the sequence of session IDs.
CVSS Score: 3.7 (LOW)
CWE: CWE-338
References: https://github.com/ratpack/ratpack/commit/f2b63eb82dd71194319fd3945f5edf29b8f3a42d; https://github.com/ratpack/ratpack/issues/1448; https://github.com/ratpack/ratpack/releases/tag/v1.6.1
CVE: CVE-2018-20836
Published: 2019-05-07
Description: An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362, CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html; http://www.securityfocus.com/bid/108196
CVE: CVE-2019-11810
Published: 2019-05-07
Description: An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This causes a Denial of Service, related to a use-after-free.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00055.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00056.html; http://www.securityfocus.com/bid/108286
CVE: CVE-2019-11811
Published: 2019-05-07
Description: An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc/ioports after the ipmi_si module is removed, related to drivers/char/ipmi/ipmi_si_intf.c, drivers/char/ipmi/ipmi_si_mem_io.c, and drivers/char/ipmi/ipmi_si_port_io.c.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html; http://www.securityfocus.com/bid/108410; https://access.redhat.com/errata/RHSA-2019:1873
CVE: CVE-2019-9709
Published: 2019-05-07
Description: An issue was discovered in Mahara 17.10 before 17.10.8, 18.04 before 18.04.4, and 18.10 before 18.10.1. The collection title is vulnerable to Cross Site Scripting (XSS) due to not escaping it when viewing the collection's SmartEvidence overview page (if that feature is turned on). This can be exploited by any logged-in user.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://bugs.launchpad.net/bugs/1819547; https://mahara.org/interaction/forum/topic.php?id=8446; https://bugs.launchpad.net/bugs/1819547
CVE: CVE-2019-11560
Published: 2019-05-07
Description: A buffer overflow vulnerability in the streaming server provided by hisilicon in HI3516 models allows an unauthenticated attacker to remotely run arbitrary code by sending a special RTSP over HTTP packet. The vulnerability was found in many cameras using hisilicon's hardware and software, as demonstrated by TENVIS cameras 1.3.3.3, 1.2.7.2, 1.2.1.4, 7.1.20.1.2, and 13.1.1.1.7.2; FDT FD7902 11.3.14.1.3 and 10.3.14.1.3; FOSCAM cameras 3.2.1.1.1_0815 and 3.2.2.2.1_0815; and Dericam cameras V11.3.8.1.12.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://gist.github.com/vulnfan1337/e95c2dba75ad93a1a325c6ace950eba9; https://gist.github.com/vulnfan1337/e95c2dba75ad93a1a325c6ace950eba9
CVE: CVE-2019-9708
Published: 2019-05-07
Description: An issue was discovered in Mahara 17.10 before 17.10.8, 18.04 before 18.04.4, and 18.10 before 18.10.1. A site administrator can suspend the system user (root), causing all users to be locked out from the system.
CVSS Score: 4.9 (MEDIUM)
References: https://bugs.launchpad.net/mahara/+bug/1817221; https://mahara.org/interaction/forum/topic.php?id=8445; https://bugs.launchpad.net/mahara/+bug/1817221
CVE: CVE-2018-13991
Published: 2019-05-07
Description: The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 leaks private information in firmware images.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/106737; https://ics-cert.us-cert.gov/advisories/ICSA-19-024-02; http://www.securityfocus.com/bid/106737
CVE: CVE-2018-13992
Published: 2019-05-07
Description: The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission (HTTP) of user credentials by default.
CVSS Score: 8.2 (HIGH)
CWE: CWE-311
References: http://www.securityfocus.com/bid/106737; https://ics-cert.us-cert.gov/advisories/ICSA-19-024-02; http://www.securityfocus.com/bid/106737