deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-2037
Published: 2019-04-19
Description: In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out-of-bound read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-119870451.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2019-04-01; https://source.android.com/security/bulletin/2019-04-01
CVE: CVE-2019-2038
Published: 2019-04-19
Description: In rw_i93_process_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-121259048.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2019-04-01; https://source.android.com/security/bulletin/2019-04-01
CVE: CVE-2019-2039
Published: 2019-04-19
Description: In rw_i93_sm_detect_ndef of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-121260197.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2019-04-01; https://source.android.com/security/bulletin/2019-04-01
CVE: CVE-2019-2040
Published: 2019-04-19
Description: In rw_i93_process_ext_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-122316913.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2019-04-01; https://source.android.com/security/bulletin/2019-04-01
CVE: CVE-2019-2041
Published: 2019-04-19
Description: In the configuration of NFC modules on certain devices, there is a possible failure to distinguish individual devices due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-8.1 Android-9. Android ID: A-122034690.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1188
References: https://source.android.com/security/bulletin/2019-04-01; https://source.android.com/security/bulletin/2019-04-01
CVE: CVE-2019-11350
Published: 2019-04-19
Description: CloudBees Jenkins Operations Center 2.150.2.3, when an expired trial license exists, allows Cleartext Password Storage and Retrieval via the proxy configuration page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://github.com/binary1985/VulnerabilityDisclosure/blob/master/CloudBees%20Jenkins%20Operations%20Center%20Password%20Disclosure; https://raw.githubusercontent.com/binary1985/VulnerabilityDisclosure/master/CloudBees%20Jenkins%20Operations%20Center%20Password%20Disclosure; https://release-notes.cloudbees.com/release/21/8.18
CVE: CVE-2019-11351
Published: 2019-04-19
Description: TeamSpeak 3 Client before 3.2.5 allows remote code execution in the Qt framework.
CVSS Score: 8.8 (HIGH)
CWE: CWE-426
References: https://forum.teamspeak.com/threads/139546-Release-TeamSpeak-3-Client-3-2-5; https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-004.md; https://forum.teamspeak.com/threads/139546-Release-TeamSpeak-3-Client-3-2-5
CVE: CVE-2019-11354
Published: 2019-04-19
Description: The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler. This can be used to escape the underlying AngularJS sandbox and achieve remote code execution via an origin2://game/launch URL for QtApplication QDesktopServices communication.
CVSS Score: 7.8 (HIGH)
CWE: CWE-74
References: http://gamasutra.com/view/news/340907/A_nowfixed_Origin_vulnerability_potentially_opened_the_client_to_hackers.php; http://packetstormsecurity.com/files/153375/dotProject-2.1.9-SQL-Injection.html; http://packetstormsecurity.com/files/153485/EA-Origin-Template-Injection-Remote-Code-Execution.html
CVE: CVE-2018-20817
Published: 2019-04-19
Description: SV_SteamAuthClient in various Activision Infinity Ward Call of Duty games before 2015-08-11 is missing a size check when reading authBlob data into a buffer, which allows one to execute code on the remote target machine when sending a steam authentication request. This affects Call of Duty: Modern Warfare 2, Call of Duty: Modern Warfare 3, Call of Duty: Ghosts, Call of Duty: Advanced Warfare, Call of Duty: Black Ops 1, and Call of Duty: Black Ops 2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/RektInator/cod-steamauth-rce; https://github.com/momo5502/cod-exploits/tree/master/steam-auth; https://github.com/RektInator/cod-steamauth-rce
CVE: CVE-2019-11358
Published: 2019-04-20
Description: jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-1321
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html; http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html
CVE: CVE-2019-11359
Published: 2019-04-20
Description: Cross-site scripting (XSS) vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrary web script or HTML via the project parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/mkucej/i-librarian/issues/138; https://github.com/mkucej/i-librarian/issues/138
CVE: CVE-2019-11362
Published: 2019-04-20
Description: app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, as demonstrated by the /do/reward/3 URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/rocboss/ROCBOSS/issues/12; https://github.com/rocboss/ROCBOSS/issues/12
CVE: CVE-2019-11365
Published: 2019-04-20
Description: An issue was discovered in atftpd in atftp 0.7.1. A remote attacker may send a crafted packet triggering a stack-based buffer overflow due to an insecurely implemented strncpy call. The vulnerability is triggered by sending an error packet of 3 bytes or fewer. There are multiple instances of this vulnerable strncpy pattern within the code base, specifically within tftpd_file.c, tftp_file.c, tftpd_mtftp.c, and tftp_mtftp.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://lists.debian.org/debian-lts-announce/2019/05/msg00012.html; https://pulsesecurity.co.nz/advisories/atftpd-multiple-vulnerabilities; https://seclists.org/bugtraq/2019/May/16
CVE: CVE-2019-11366
Published: 2019-04-20
Description: An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If thread_data is NULL when assigned to current, and modified by another thread before a certain tftpd_list.c check, there is a crash when dereferencing current->next.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476
References: https://lists.debian.org/debian-lts-announce/2019/05/msg00012.html; https://pulsesecurity.co.nz/advisories/atftpd-multiple-vulnerabilities; https://seclists.org/bugtraq/2019/May/16
CVE: CVE-2019-11372
Published: 2019-04-20
Description: An out-of-bounds read in MediaInfoLib::File__Tags_Helper::Synched_Test in Tag/File__Tags.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00069.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00083.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00028.html
CVE: CVE-2019-11373
Published: 2019-04-20
Description: An out-of-bounds read in File__Analyze::Get_L8 in File__Analyze_Buffer.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00069.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00083.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00028.html
CVE: CVE-2019-11374
Published: 2019-04-20
Description: 74CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin&c=admin&a=add URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/152603/74CMS-5.0.1-Cross-Site-Request-Forgery.html; http://www.iwantacve.cn/index.php/archives/203/; https://www.exploit-db.com/exploits/46738/
CVE: CVE-2019-11375
Published: 2019-04-20
Description: Msvod v10 has a CSRF vulnerability to change user information via the admin/member/edit.html URI.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/152604/Msvod-10-Cross-Site-Request-Forgery.html; http://www.iwantacve.cn/index.php/archives/198/; https://www.exploit-db.com/exploits/46739/
CVE: CVE-2019-11376
Published: 2019-04-20
Description: SOY CMS v3.0.2 allows remote attackers to execute arbitrary PHP code via a <?php substring in the second text box. NOTE: the vendor indicates that there was an assumption that the content is "made editable on its own.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: http://www.iwantacve.cn/index.php/archives/212/; https://github.com/inunosinsi/soycms/issues/5; http://www.iwantacve.cn/index.php/archives/212/
CVE: CVE-2019-11377
Published: 2019-04-20
Description: wcms/wex/finder/action.php in WCMS v0.3.2 has a Arbitrary File Upload Vulnerability via developer/finder because .php is a valid extension according to the fm_get_text_exts function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://www.iwantacve.cn/index.php/archives/208/; https://github.com/vedees/wcms/issues/2; http://www.iwantacve.cn/index.php/archives/208/
CVE: CVE-2019-11378
Published: 2019-04-20
Description: An issue was discovered in ProjectSend r1053. upload-process-form.php allows finished_files[]=../ directory traversal. It is possible for users to read arbitrary files and (potentially) access the supporting database, delete arbitrary files, access user passwords, or run arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/108069; https://github.com/projectsend/projectsend/issues/700; http://www.securityfocus.com/bid/108069
CVE: CVE-2019-11371
Published: 2019-04-20
Description: BWA (aka Burrow-Wheeler Aligner) 0.7.17 r1198 has a Buffer Overflow via a long prefix that is mishandled in bns_fasta2bntseq and bns_dump at btnseq.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/lh3/bwa/issues/239; https://github.com/lh3/bwa/issues/239
CVE: CVE-2019-11387
Published: 2019-04-21
Description: An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf allows remote attackers to cause a denial of service (ReDOS) by entering a specially crafted string with nested repetition operators.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://coreruleset.org/20190627/announcement-owasp-modsecurity-core-rule-set-version-3-1-1/; https://github.com/SpiderLabs/owasp-modsecurity-crs/blob/v3.1/dev/CHANGES; https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1359
CVE: CVE-2019-11388
Published: 2019-04-21
Description: An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf allows remote attackers to cause a denial of service (ReDOS) by entering a specially crafted string with nested repetition operators. NOTE: the software maintainer disputes that this is a vulnerability because the issue cannot be exploited via ModSecurity
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1354; https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1372; https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1354
CVE: CVE-2019-11389
Published: 2019-04-21
Description: An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause a denial of service (ReDOS) by entering a specially crafted string with next# at the beginning and nested repetition operators. NOTE: the software maintainer disputes that this is a vulnerability because the issue cannot be exploited via ModSecurity
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1356; https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1372; https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1356
CVE: CVE-2019-11390
Published: 2019-04-21
Description: An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause a denial of service (ReDOS) by entering a specially crafted string with set_error_handler# at the beginning and nested repetition operators. NOTE: the software maintainer disputes that this is a vulnerability because the issue cannot be exploited via ModSecurity
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1358; https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1372; https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1358
CVE: CVE-2019-11391
Published: 2019-04-21
Description: An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause a denial of service (ReDOS) by entering a specially crafted string with $a# at the beginning and nested repetition operators. NOTE: the software maintainer disputes that this is a vulnerability because the issue cannot be exploited via ModSecurity
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1357; https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1372; https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1357
CVE: CVE-2018-20818
Published: 2019-04-22
Description: A buffer overflow vulnerability was discovered in the OpenPLC controller, in the OpenPLC_v2 and OpenPLC_v3 versions. It occurs in the modbus.cpp mapUnusedIO() function, which can cause a runtime crash of the PLC or possibly have unspecified other impact.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://arxiv.org/pdf/1809.07477; https://arxiv.org/pdf/1809.07477
CVE: CVE-2019-11234
Published: 2019-04-22
Description: FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2019-9497.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html
CVE: CVE-2019-11235
Published: 2019-04-22
Description: FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve being used" protection mechanism, aka a "Dragonblood" issue, a similar issue to CVE-2019-9498 and CVE-2019-9499.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-345
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html
CVE: CVE-2019-11393
Published: 2019-04-22
Description: An issue was discovered in /admin/users/update in M/Monit before 3.7.3. It allows unprivileged users to escalate their privileges to an administrator by requesting a password change and specifying the admin parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640
References: https://mmonit.com/wiki/MMonit/Release3-7-3; https://www.exploit-db.com/exploits/46404; https://mmonit.com/wiki/MMonit/Release3-7-3
CVE: CVE-2019-11395
Published: 2019-04-22
Description: A buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long string, as demonstrated by SMTP RCPT TO, POP3 USER, POP3 LIST, POP3 TOP, or POP3 RETR.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://packetstormsecurity.com/files/152502/MailCarrier-2.51-RCPT-TO-Buffer-Overflow.html; http://packetstormsecurity.com/files/152504/MailCarrier-2.51-USER-Buffer-Overflow.html; http://packetstormsecurity.com/files/152505/MailCarrier-2.51-LIST-Buffer-Overflow.html
CVE: CVE-2019-11401
Published: 2019-04-22
Description: A issue was discovered in SiteServer CMS 6.9.0. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extension .aassp, which is converted to .asp because the "as" substring is deleted.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/siteserver/cms/issues/1858; https://github.com/siteserver/cms/issues/1858
CVE: CVE-2019-11402
Published: 2019-04-22
Description: In Gradle Enterprise before 2018.5.3, Build Cache Nodes did not store the credentials at rest in an encrypted format.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://gradle.com/enterprise/releases/2018.5/#changes-3; https://security.gradle.com/advisory/CVE-2019-11402; https://gradle.com/enterprise/releases/2018.5/#changes-3
CVE: CVE-2019-11403
Published: 2019-04-22
Description: In Gradle Enterprise before 2018.5.2, Build Cache Nodes would reflect the configured password back when viewing the HTML page source of the settings page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://gradle.com/enterprise/releases/2018.5/#changes-2; https://security.gradle.com/advisory/CVE-2019-11403; https://gradle.com/enterprise/releases/2018.5/#changes-2
CVE: CVE-2019-11404
Published: 2019-04-22
Description: arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts (for compiling and building the published JARs) over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by an MITM attack.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311
References: https://github.com/arrow-kt/ank/issues/35; https://github.com/arrow-kt/ank/pull/36; https://github.com/arrow-kt/arrow/commit/74198dab522393487d5344f194dc21208ab71ae8
CVE: CVE-2019-11405
Published: 2019-04-22
Description: OpenAPI Tools OpenAPI Generator before 4.0.0-20[PII_REDACTED]12-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311
References: https://github.com/OpenAPITools/openapi-generator/issues/2253; https://github.com/OpenAPITools/openapi-generator/pull/2248; https://github.com/OpenAPITools/openapi-generator/pull/2697
CVE: CVE-2019-11411
Published: 2019-04-22
Description: An issue was discovered in Artifex MuJS 1.0.5. The Number#toFixed() and numtostr implementations in jsnumber.c have a stack-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.ghostscript.com/cgi-bin/findgit.cgi?da632ca08f240590d2dec786722ed08486ce1be6; http://www.securityfocus.com/bid/108093; https://bugs.ghostscript.com/show_bug.cgi?id=700938
CVE: CVE-2019-11412
Published: 2019-04-22
Description: An issue was discovered in Artifex MuJS 1.0.5. jscompile.c can cause a denial of service (invalid stack-frame jump) because it lacks an ENDTRY opcode call.
CVSS Score: 7.5 (HIGH)
CWE: CWE-670
References: http://www.ghostscript.com/cgi-bin/findgit.cgi?1e5479084bc9852854feb1ba9bf68b52cd127e02; http://www.securityfocus.com/bid/108093; https://bugs.ghostscript.com/show_bug.cgi?id=700947
CVE: CVE-2019-11413
Published: 2019-04-22
Description: An issue was discovered in Artifex MuJS 1.0.5. It has unlimited recursion because the match function in regexp.c lacks a depth check.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: http://www.ghostscript.com/cgi-bin/findgit.cgi?00d4606c3baf813b7b1c176823b2729bf51002a2; http://www.securityfocus.com/bid/108093; https://bugs.ghostscript.com/show_bug.cgi?id=700937
CVE: CVE-2019-11414
Published: 2019-04-22
Description: An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. When the administrator password is changed from a certain client IP address, administrative authorization remains available to any client at that IP address, leading to complete control of the router.
CVSS Score: 8.8 (HIGH)
CWE: CWE-640
References: http://1.337.zone/2019/04/07/intelbras-iwr-3000n-1-5-0-unproper-de-authorization/; http://1.337.zone/2019/04/07/intelbras-iwr-3000n-1-5-0-unproper-de-authorization/
CVE: CVE-2019-11415
Published: 2019-04-22
Description: An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. A malformed login request allows remote attackers to cause a denial of service (reboot), as demonstrated by JSON misparsing of the \""} string to v1/system/login.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/152680/Intelbras-IWR-3000N-Denial-Of-Service.html; https://1.337.zone/2019/04/08/intelbras-iwr-3000n-any-version-dos-on-malformed-login-request/; https://www.exploit-db.com/exploits/46768/
CVE: CVE-2019-11416
Published: 2019-04-22
Description: A CSRF issue was discovered on Intelbras IWR 3000N 1.5.0 devices, leading to complete control of the router, as demonstrated by v1/system/user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/152682/Intelbras-IWR-3000N-1.5.0-Cross-Site-Request-Forgery.html; https://1.337.zone/2019/04/08/intelbras-iwr-3000n-1-5-0-csrf-lead-to-router-takeover/; https://www.exploit-db.com/exploits/46770/
CVE: CVE-2019-11417
Published: 2019-04-22
Description: system.cgi on TRENDnet TV-IP110WN cameras has a buffer overflow caused by an inadequate source-length check before a strcpy operation in the respondAsp function. Attackers can exploit the vulnerability by using the languse parameter with a long string. This affects 1.2.2 build 28, 64, 65, and 68.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-787
References: https://github.com/zyw-200/IOTFuzzer/blob/master/Trendnet_response.png; https://github.com/zyw-200/IOTFuzzer/blob/master/Trendnet_response.png
CVE: CVE-2019-11418
Published: 2019-04-22
Description: apply.cgi on the TRENDnet TEW-632BRP 1.010B32 router has a buffer overflow via long strings to the SOAPACTION:HNAP1 interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/zyw-200/IOTFuzzer/blob/master/Trendnet_response.png; https://github.com/zyw-200/IOTFuzzer/blob/master/Trendnet_response.png
CVE: CVE-2019-11426
Published: 2019-04-22
Description: An XSS issue was discovered in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/idreamsoft/iCMS/issues/64; https://github.com/idreamsoft/iCMS/issues/64
CVE: CVE-2019-11427
Published: 2019-04-22
Description: An XSS issue was discovered in app/search/search.app.php in idreamsoft iCMS 7.0.14 via the public/api.php?app=search q parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/idreamsoft/iCMS/issues/64; https://github.com/idreamsoft/iCMS/issues/64