deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-20815
Published: 2019-05-31
Description: In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://access.redhat.com/errata/RHSA-2019:1667; https://access.redhat.com/errata/RHSA-2019:1723; https://access.redhat.com/errata/RHSA-2019:1743
CVE: CVE-2019-10038
Published: 2019-05-31
Description: Evernote 7.9 on macOS allows attackers to execute arbitrary programs by embedding a reference to a local executable file such as the /Applications/Calculator.app/Contents/MacOS/Calculator file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://drive.google.com/file/d/1cmWixK1vAh7oZ2y3Y3ZtVeSoTRp8c1Ts/view?usp=sharing; https://evernote.com/security/updates; https://www.inputzero.io/2019/04/evernote-cve-2019-10038.html
CVE: CVE-2019-10045
Published: 2019-05-31
Description: The "action" get_sess_id in the web application of Pydio through 8.2.2 discloses the session cookie value in the response body, enabling scripts to get access to its value. This identifier can be reused by an attacker to impersonate a user and perform actions on behalf of him/her (if the session is still active).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-384
References: https://www.secureauth.com/labs/advisories; https://www.secureauth.com/labs/advisories
CVE: CVE-2019-10046
Published: 2019-05-31
Description: An unauthenticated attacker can obtain information about the Pydio 8.2.2 configuration including session timeout, libraries, and license information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://www.secureauth.com/labs/advisories; https://www.secureauth.com/labs/advisories
CVE: CVE-2019-10047
Published: 2019-05-31
Description: A stored XSS vulnerability exists in the web application of Pydio through 8.2.2 that can be exploited by levering the file upload and file preview features of the application. An authenticated attacker can upload an HTML file containing JavaScript code and afterwards a file preview URL can be used to access the uploaded file. If a malicious user shares an uploaded HTML file containing JavaScript code with another user of the application, and tricks an authenticated victim into accessing a URL that results in the HTML code being interpreted by the web browser, then the included JavaScript code is executed under the context of the victim user session.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.secureauth.com/labs/advisories; https://www.secureauth.com/labs/advisories
CVE: CVE-2019-10048
Published: 2019-05-31
Description: The ImageMagick plugin that is installed by default in Pydio through 8.2.2 does not perform the appropriate validation and sanitization of user supplied input in the plugin's configuration options, allowing arbitrary shell commands to be entered that result in command execution on the underlying operating system, with the privileges of the local user running the web server. The attacker must be authenticated into the application with an administrator user account in order to be able to edit the affected plugin configuration.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://www.secureauth.com/labs/advisories; https://www.secureauth.com/labs/advisories
CVE: CVE-2019-10049
Published: 2019-05-31
Description: It is possible for an attacker with regular user access to the web application of Pydio through 8.2.2 to trick an administrator user into opening a link shared through the application, that in turn opens a shared file that contains JavaScript code (that is executed in the context of the victim user to obtain sensitive information such as session identifiers and perform actions on behalf of him/her).
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: https://www.secureauth.com/labs/advisories; https://www.secureauth.com/labs/advisories
CVE: CVE-2019-10069
Published: 2019-05-31
Description: In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied correctly.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/godotengine/godot/pull/27398; https://godotengine.org/news; https://github.com/godotengine/godot/pull/27398
CVE: CVE-2019-10123
Published: 2019-05-31
Description: SQL Injection in Advanced InfoData Systems (AIS) ESEL-Server 67 (which is the backend for the AIS logistics mobile app) allows an anonymous attacker to execute arbitrary code in the context of the user of the MSSQL database. The default user for the database is the 'sa' user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/rapid7/metasploit-framework/pull/11641/; https://www.ais.de; https://github.com/rapid7/metasploit-framework/pull/11641/
CVE: CVE-2019-5678
Published: 2019-05-31
Description: NVIDIA GeForce Experience versions prior to 3.19 contains a vulnerability in the Web Helper component, in which an attacker with local system access can craft input that may not be properly validated. Such an attack may lead to code execution, denial of service or information disclosure.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://nvidia.custhelp.com/app/answers/detail/a_id/4806; https://support.lenovo.com/us/en/product_security/LEN-27815; https://nvidia.custhelp.com/app/answers/detail/a_id/4806
CVE: CVE-2019-6725
Published: 2019-05-31
Description: The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 (2.00(AAKK.3)) devices. After accessing the page, the admin user's password can be obtained by viewing the HTML source code, and the interface of the modem can be accessed as admin.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://seclists.org/bugtraq/2019/May/78; https://seclists.org/bugtraq/2019/May/78
CVE: CVE-2019-9105
Published: 2019-05-31
Description: The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to make several types of API calls without authentication, as demonstrated by retrieving password hashes via an inc/utils/REST_API.php?command=CallAPI&customurl=alladminusers call.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://members.backbox.org/saet-tebe-small-supervisor-multiple-vulnerabilities/; https://www.saet.org/wp-content/uploads/2017/04/Depliant_TEBE-TEBE_Small.pdf; https://members.backbox.org/saet-tebe-small-supervisor-multiple-vulnerabilities/
CVE: CVE-2019-9106
Published: 2019-05-31
Description: The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to execute or include local .php files, as demonstrated by menu=php://filter/convert.base64-encode/resource=index.php to read index.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://members.backbox.org/saet-tebe-small-supervisor-multiple-vulnerabilities/; https://www.saet.org/wp-content/uploads/2017/04/Depliant_TEBE-TEBE_Small.pdf; https://members.backbox.org/saet-tebe-small-supervisor-multiple-vulnerabilities/
CVE: CVE-2019-9653
Published: 2019-05-31
Description: NUUO Network Video Recorder Firmware 1.7.x through 3.3.x allows unauthenticated attackers to execute arbitrary commands via shell metacharacters to handle_load_config.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/grayoneday/CVE-2019-9653; https://www.nccst.nat.gov.tw/NewsRSS?lang=en&RSSType=mssecurity; https://www.nuuo.com/DownloadMainpage.php
CVE: CVE-2019-12515
Published: 2019-06-02
Description: There is an out-of-bounds read vulnerability in the function FlateStream::getChar() located at Stream.cc in Xpdf 4.01.01. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure or a denial of service.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://github.com/PanguL4b/pocs/tree/master/xpdf/out-of-bounds-read-in-FlateStream__getChar; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJJD7X3ES7ZHJUY2R3DAVCJPV23R64VK/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FWEWFUVITPA3Y6F4A5SJSROKYT7PRH7Q/
CVE: CVE-2019-12530
Published: 2019-06-02
Description: Incorrect access control was discovered in the stdonato Dashboard plugin through 0.9.7 for GLPI, affecting df.php, issue.php, load.php, mem.php, traf.php, and uptime.php in front/sh.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/stdonato/glpi-dashboard/commit/3a89f0085a221d7ad76d1104df6df6c634bd7f14; https://github.com/stdonato/glpi-dashboard/commit/3a89f0085a221d7ad76d1104df6df6c634bd7f14
CVE: CVE-2017-18376
Published: 2019-06-02
Description: An improper authorization check in the User API in TheHive before 2.13.4 and 3.x before 3.3.1 allows users with read-only or read/write access to escalate their privileges to the administrator's privileges. This affects app/controllers/UserCtrl.scala.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: https://gist.github.com/RaJiska/c1b4521aefd77ed43b06045ca05e2591; https://github.com/TheHive-Project/TheHive/issues/408; https://github.com/TheHive-Project/TheHive/releases/tag/3.3.1
CVE: CVE-2019-12564
Published: 2019-06-03
Description: In DouCo DouPHP v1.5 Release 20190516, remote attackers can view the database backup file via a brute-force guessing approach for data/backup/DyyyymmddThhmmss.sql filenames.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/srsec/-srsec-/issues/1; https://github.com/srsec/-srsec-/issues/1
CVE: CVE-2019-12566
Published: 2019-06-03
Description: The WP Statistics plugin through 12.6.5 for Wordpress has stored XSS in includes/class-wp-statistics-pages.php. This is related to an account with the Editor role creating a post with a title that contains JavaScript, to attack an admin user.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/wp-statistics/wp-statistics/commit/aec[PII_REDACTED]f75385ae1ec257575d8131d6ec2; https://github.com/wp-statistics/wp-statistics/issues/271; https://wordpress.org/plugins/wp-statistics/#developers
CVE: CVE-2019-12569
Published: 2019-06-03
Description: A vulnerability in Viber before 10.7.0 for Desktop (Windows) could allow an attacker to execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI. An attacker could exploit this vulnerability by convincing a targeted user to follow a malicious link. Successful exploitation could cause the application to load libraries from the directory targeted by the URI link. The attacker could use this behavior to execute arbitrary commands on the system with the privileges of the targeted user, if the attacker can place a crafted library in a directory that is accessible to the vulnerable system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-006.md; https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-006.md
CVE: CVE-2019-12584
Published: 2019-06-03
Description: Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an XSS issue in apcupsd_status.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://ctrsec.io/index.php/2019/05/28/cve-2019-12584-12585-command-injection-vulnerability-on-pfsense-2-4-4-release-p3/; https://github.com/pfsense/FreeBSD-ports/commit/b492c0ea47aba8dde2f14183e71498ba207594e3; https://redmine.pfsense.org/issues/9556
CVE: CVE-2019-12585
Published: 2019-06-03
Description: Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an Arbitrary Command Execution issue in apcupsd_status.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://ctrsec.io/index.php/2019/05/28/cve-2019-12584-12585-command-injection-vulnerability-on-pfsense-2-4-4-release-p3/; https://github.com/pfsense/FreeBSD-ports/commit/b492c0ea47aba8dde2f14183e71498ba207594e3; https://redmine.pfsense.org/issues/9556
CVE: CVE-2019-12589
Published: 2019-06-03
Description: In Firejail before 0.9.60, seccomp filters are writable inside the jail, leading to a lack of intended seccomp restrictions for a process that is joined to the jail after a filter has been modified by an attacker.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://github.com/netblue30/firejail/commit/eecf35c2f8249489a1d3e512bb07f0d427183134; https://github.com/netblue30/firejail/issues/2718; https://github.com/netblue30/firejail/releases/tag/0.9.60
CVE: CVE-2019-12582
Published: 2019-06-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-12583. Reason: This candidate is a reservation duplicate of CVE-2019-12583. Notes: All CVE users should reference CVE-2019-12583 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2019-12591
Published: 2019-06-03
Description: NETGEAR Insight Cloud with firmware before Insight 5.6 allows remote authenticated users to achieve command injection.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-77
References: https://kb.netgear.com/000060977/Security-Advisory-for-Post-Authentication-Command-Injection-on-Insight-Cloud-PSV-2018-0366; https://kb.netgear.com/000060977/Security-Advisory-for-Post-Authentication-Command-Injection-on-Insight-Cloud-PSV-2018-0366
CVE: CVE-2019-11580
Published: 2019-06-03
Description: Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attackers who can send unauthenticated or authenticated requests to a Crowd or Crowd Data Center instance can exploit this vulnerability to install arbitrary plugins, which permits remote code execution on systems running a vulnerable version of Crowd or Crowd Data Center. All versions of Crowd from version 2.1.0 before 3.0.5 (the fixed version for 3.0.x), from version 3.1.0 before 3.1.6 (the fixed version for 3.1.x), from version 3.2.0 before 3.2.8 (the fixed version for 3.2.x), from version 3.3.0 before 3.3.5 (the fixed version for 3.3.x), and from version 3.4.0 before 3.4.4 (the fixed version for 3.4.x) are affected by this vulnerability.
CVSS Score: 9.8 (CRITICAL)
References: http://packetstormsecurity.com/files/163810/Atlassian-Crowd-pdkinstall-Remote-Code-Execution.html; http://www.securityfocus.com/bid/108637; https://jira.atlassian.com/browse/CWD-5388
CVE: CVE-2019-3397
Published: 2019-06-03
Description: Atlassian Bitbucket Data Center licensed instances starting with version 5.13.0 before 5.13.6 (the fixed version for 5.13.x), from 5.14.0 before 5.14.4 (fixed version for 5.14.x), from 5.15.0 before 5.15.3 (fixed version for 5.15.x), from 5.16.0 before 5.16.3 (fixed version for 5.16.x), from 6.0.0 before 6.0.3 (fixed version for 6.0.x), and from 6.1.0 before 6.1.2 (the fixed version for 6.1.x) allow remote attackers who have admin permissions to achieve remote code execution on a Bitbucket server instance via path traversal through the Data Center migration tool.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://jira.atlassian.com/browse/BSERV-11706; https://jira.atlassian.com/browse/BSERV-11706
CVE: CVE-2019-3802
Published: 2019-06-03
Description: This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more results than anticipated when a maliciously crafted example value is supplied.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-155
References: https://pivotal.io/security/cve-2019-3802; https://pivotal.io/security/cve-2019-3802
CVE: CVE-2019-11646
Published: 2019-06-03
Description: Remote unauthorized command execution and unauthorized disclosure of information in Micro Focus Service Manager, versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61. This vulnerability could allow Remote unauthorized command execution and unauthorized disclosure of information.
CVSS Score: 8.8 (HIGH)
References: https://softwaresupport.softwaregrp.com/doc/KM03452977; https://softwaresupport.softwaregrp.com/doc/KM03452977
CVE: CVE-2019-12308
Published: 2019-06-03
Description: An issue was discovered in Django 1.11 before 1.11.21, 2.1 before 2.1.9, and 2.2 before 2.2.2. The clickable Current URL value displayed by the AdminURLFieldWidget displays the provided value without validating it as a safe URL. Thus, an unvalidated value stored in the database, or a value provided as a URL query parameter payload, could result in an clickable JavaScript link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html; http://www.openwall.com/lists/oss-security/2019/06/03/2
CVE: CVE-2019-12593
Published: 2019-06-03
Description: IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c directory traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/153161/IceWarp-10.4.4-Local-File-Inclusion.html; https://github.com/JameelNabbo/exploits/blob/master/IceWarp%20%3C%3D10.4.4%20local%20file%20include.txt; http://packetstormsecurity.com/files/153161/IceWarp-10.4.4-Local-File-Inclusion.html
CVE: CVE-2019-6736
Published: 2019-06-03
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of tiscript. When processing the System.Exec method the application does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7234.
CVSS Score: 8.8 (HIGH)
CWE: CWE-356, CWE-78
References: https://www.bitdefender.com/support/security-advisories/bitdefender-safepay-exec-command-injection-remote-code-execution-vulnerability/; https://www.zerodayinitiative.com/advisories/ZDI-19-157/; https://www.bitdefender.com/support/security-advisories/bitdefender-safepay-exec-command-injection-remote-code-execution-vulnerability/
CVE: CVE-2019-6737
Published: 2019-06-03
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of TIScript. The issue lies in the handling of the openFile method, which allows for an arbitrary file write with attacker controlled data. An attacker can leverage this vulnerability execute code in the context of the current process. Was ZDI-CAN-7247.
CVSS Score: 8.8 (HIGH)
CWE: CWE-356
References: https://www.bitdefender.com/support/security-advisories/bitdefender-safepay-openfile-arbitrary-file-write-remote-code-execution-vulnerability/; https://www.zerodayinitiative.com/advisories/ZDI-19-158/; https://www.bitdefender.com/support/security-advisories/bitdefender-safepay-openfile-arbitrary-file-write-remote-code-execution-vulnerability/
CVE: CVE-2019-6738
Published: 2019-06-03
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of TIScript. When processing the launch method the application does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability execute code in the context of the current process. Was ZDI-CAN-7250.
CVSS Score: 8.8 (HIGH)
CWE: CWE-356, CWE-78
References: https://www.bitdefender.com/support/security-advisories/bitdefender-safepay-launch-remote-code-execution-vulnerability/; https://www.zerodayinitiative.com/advisories/ZDI-19-159/; https://www.bitdefender.com/support/security-advisories/bitdefender-safepay-launch-remote-code-execution-vulnerability/
CVE: CVE-2019-6739
Published: 2019-06-03
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Malwarebytes Antimalware 3.6.1.2711. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. There is an issue with the way the product handles URIs within certain schemes. The product does not warn the user that a dangerous navigation is about to take place. Because special characters in the URI are not sanitized, this could lead to the execution of arbitrary commands. An attacker can leverage this vulnerability to execute code in the context of the current user at medium integrity. Was ZDI-CAN-7162.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-77
References: https://www.zerodayinitiative.com/advisories/ZDI-19-223/; https://www.zerodayinitiative.com/advisories/ZDI-19-223/
CVE: CVE-2019-9882
Published: 2019-06-03
Description: Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to add malicious email sources into whitelist via user/save_list.php?ACSION=&type=email&category=white&locate=big5&cmd=add&new=hacker@socialengineering.com&new_memo=&add=%E6%96%B0%E5%A2%9E without any authorizes.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: http://surl.twcert.org.tw/MtWeJ; https://tvn.twcert.org.tw/taiwanvn/TVN-201904002; http://surl.twcert.org.tw/MtWeJ
CVE: CVE-2019-9883
Published: 2019-06-03
Description: Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account via useradmin/cf_new.cgi?chief=&wk_group=full&cf_name=test&cf_account=test&cf_email=&cf_acl=Management&apply_lang=&dn= without any authorizes.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: http://surl.twcert.org.tw/mChNi; https://tvn.twcert.org.tw/taiwanvn/TVN-201904003; http://surl.twcert.org.tw/mChNi
CVE: CVE-2017-14728
Published: 2019-06-03
Description: An authentication bypass was found in an unknown area of the SiteOmat source code. All SiteOmat BOS versions are affected, prior to the submission of this exploit. Also, the SiteOmat does not force administrators to switch passwords, leaving SSH and HTTP remote authentication open to public.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://www.orpak.com/allproducts/siteomat-station-controller-sw/; http://www.securityfocus.com/bid/108167; https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01
CVE: CVE-2017-14850
Published: 2019-06-03
Description: All known versions of the Orpak SiteOmat web management console is vulnerable to multiple instances of Stored Cross-site Scripting due to improper external user-input validation. An attacker with access to the web interface is able to hijack sessions or navigate victims outside of SiteOmat, to a malicious server owned by him.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/108167; https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01; https://www.orpak.com
CVE: CVE-2017-14851
Published: 2019-06-03
Description: A SQL injection vulnerability exists in all Orpak SiteOmat versions prior to 2017-09-25. The vulnerability is in the login page, where the authentication validation process contains an insecure SELECT query. The attack allows for authentication bypass.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/108167; https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01; https://www.orpak.com