deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-11678
Published: 2019-05-02
Description: The "default reports" feature in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123218 is vulnerable to SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.manageengine.com/products/firewall/release-notes.html; https://www.manageengine.com/products/firewall/release-notes.html
CVE: CVE-2018-2015
Published: 2019-05-02
Description: IBM API Connect 2018.1 and 2018.4.1.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 155195.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/108153; https://exchange.xforce.ibmcloud.com/vulnerabilities/155195; https://www.ibm.com/support/docview.wss?uid=ibm10882756
CVE: CVE-2019-11682
Published: 2019-05-02
Description: A buffer overflow in the SMTP response service in MailCarrier 2.51 allows the attacker to execute arbitrary code remotely via a long HELP command, a related issue to CVE-2019-11395.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://packetstormsecurity.com/files/152694/MailCarrier-2.51-HELP-Remote-Buffer-Overflow.html; https://packetstormsecurity.com/files/152694/MailCarrier-2.51-HELP-Remote-Buffer-Overflow.html
CVE: CVE-2017-18368
Published: 2019-05-02
Description: The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the ViewLog.asp page and can be exploited through the remote_host parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: http://www.zyxel.com/support/announcement_unauthenticated.shtml; https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt; https://seclists.org/fulldisclosure/2017/Jan/40
CVE: CVE-2017-18369
Published: 2019-05-02
Description: The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the adv_remotelog.asp page and can be exploited through the syslogServerAddr parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt; https://seclists.org/fulldisclosure/2017/Jan/40; https://ssd-disclosure.com/index.php/archives/2910
CVE: CVE-2017-18370
Published: 2019-05-02
Description: The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is only accessible by an authenticated user. The vulnerability is in the logSet.asp page and can be exploited through the ServerIP parameter. Authentication can be achieved by exploiting CVE-2017-18371.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://www.zyxel.com/support/announcement_unauthenticated.shtml; https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt; https://seclists.org/fulldisclosure/2017/Jan/40
CVE: CVE-2017-18371
Published: 2019-05-02
Description: The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username supervisor and password zyad1234. These accounts can be used to login to the web interface, exploit authenticated command injections, and change router settings for malicious purposes.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://www.zyxel.com/support/announcement_unauthenticated.shtml; https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt; https://seclists.org/fulldisclosure/2017/Jan/40
CVE: CVE-2017-18372
Published: 2019-05-02
Description: The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user. The vulnerability is in the tools_time.asp page and can be exploited through the uiViewSNTPServer parameter. Authentication can be achieved by exploiting CVE-2017-18373.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt; https://seclists.org/fulldisclosure/2017/Jan/40; https://ssd-disclosure.com/index.php/archives/2910
CVE: CVE-2017-18373
Published: 2019-05-02
Description: The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username user3 and and a long password consisting of a repetition of the string[PII_REDACTED]. These accounts can be used to login to the web interface, exploit authenticated command injections, and change router settings for malicious purposes.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt; https://seclists.org/fulldisclosure/2017/Jan/40; https://ssd-disclosure.com/index.php/archives/2910
CVE: CVE-2017-18374
Published: 2019-05-02
Description: The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has two user accounts with default passwords, including a hardcoded service account with the username true and password true. These accounts can be used to login to the web interface, exploit authenticated command injections and change router settings for malicious purposes.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: http://www.zyxel.com/support/announcement_unauthenticated.shtml; https://raw.githubusercontent.com/pedrib/PoC/master/advisories/zyxel_trueonline.txt; https://seclists.org/fulldisclosure/2017/Jan/40
CVE: CVE-2018-12404
Published: 2019-05-02
Description: A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.
CVSS Score: 5.9 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00021.html; http://www.securityfocus.com/bid/107260; https://access.redhat.com/errata/RHSA-2019:2237
CVE: CVE-2019-11683
Published: 2019-05-02
Description: udp_gro_receive_segment in net/ipv4/udp_offload.c in the Linux kernel 5.x before 5.0.13 allows remote attackers to cause a denial of service (slab-out-of-bounds memory corruption) or possibly have unspecified other impact via UDP packets with a 0 payload, because of mishandling of padded packets, aka the "GRO packet of death" issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2019/05/02/1; http://www.openwall.com/lists/oss-security/2019/05/05/4; http://www.securityfocus.com/bid/108142
CVE: CVE-2019-3490
Published: 2019-05-02
Description: A DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise Server (OES) allowing a remote attacker to execute javascript in the victims browser by tricking the victim into clicking on a specially crafted link. This affects OES versions OES2015SP1, OES2018, and OES2018SP1. Older versions may be affected but were not tested as they are out of support.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.microfocus.com/kb/doc.php?id=7023828; https://support.microfocus.com/kb/doc.php?id=7023828
CVE: CVE-2019-9017
Published: 2019-05-02
Description: DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow associated with the size field for the machine name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/152721/SolarWinds-DameWare-Mini-Remote-Control-10.0-Denial-Of-Service.html; http://www.binaryworld.it/guidepoc.asp; https://www.exploit-db.com/exploits/46793/
CVE: CVE-2018-10383
Published: 2019-05-02
Description: Lantronix SecureLinx Spider (SLS) 2.2+ devices have XSS in the auth.asp login page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/grymer/CVE/blob/master/CVE-2018-10383.md; https://github.com/grymer/CVE/blob/master/CVE-2018-10383.md
CVE: CVE-2018-16716
Published: 2019-05-02
Description: A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files (i.e., significant information disclosure) or file deletion via the nph-viewgif.cgi query string.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://github.com/grymer/CVE/blob/master/CVE-2018-16716.md; https://github.com/grymer/CVE/blob/master/CVE-2018-16716.md
CVE: CVE-2018-16717
Published: 2019-05-02
Description: A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/grymer/CVE/blob/master/CVE-2018-16717.md; https://github.com/grymer/CVE/blob/master/CVE-2018-16717.md
CVE: CVE-2018-16718
Published: 2019-05-02
Description: An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/grymer/CVE/blob/master/CVE-2018-16718.md; https://github.com/grymer/CVE/blob/master/CVE-2018-16718.md
CVE: CVE-2018-16960
Published: 2019-05-02
Description: An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/login.php has Reflected XSS via the xd_user_formal_name parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/grymer/CVE/blob/master/CVE-2018-16960.md; https://github.com/grymer/CVE/blob/master/CVE-2018-16960.md
CVE: CVE-2018-16961
Published: 2019-05-02
Description: An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/dl_publication.php allows Path traversal via the file parameter, allowing remote attackers to read PDF files in arbitrary directories.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/grymer/CVE/blob/master/CVE-2018-16961.md; https://github.com/grymer/CVE/blob/master/CVE-2018-16961.md
CVE: CVE-2018-16988
Published: 2019-05-02
Description: An issue was discovered in Open XDMoD through 7.5.0. An authentication bypass (account takeover) exists due to a weak password reset mechanism. A brute-force attack against an MD5 rid value requires only 600 guesses in the plausible situation where the attacker knows that the victim has started a password-reset process (pass_reset.php, password_reset.php, XDUser.php) in the past few minutes.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640
References: https://github.com/grymer/CVE/blob/master/CVE-2018-16988.md; https://github.com/grymer/CVE/blob/master/CVE-2018-16988.md
CVE: CVE-2019-9826
Published: 2019-05-02
Description: The fulltext search component in phpBB before 3.2.6 allows Denial of Service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2019/04/29/3; https://lists.debian.org/debian-lts-announce/2019/05/msg00004.html; https://www.phpbb.com/community/viewtopic.php?f=14&t=2509941
CVE: CVE-2019-11687
Published: 2019-05-02
Description: An issue was discovered in the DICOM Part 10 File Format in the NEMA DICOM Standard 1995 through 2019b and continuing in current implementations. The 128-byte preamble of a DICOM file that complies with this specification can contain arbitrary executable headers for multiple operating systems, including Portable Executable (PE) files for Windows and Executable and Linkable Format (ELF) files for Linux-based systems. This space is left unspecified so that dual-purpose files can be created. For example, dual-purpose TIFF/DICOM files are used in digital whole slide imaging applications in medicine. This design flaw enables system-wide compromise as malicious DICOM files are routinely shared between medical devices and hospital systems and transported via removable media for patient care coordination. To exploit this vulnerability, someone must execute the maliciously crafted file. These files can be executable even with the .dcm file extension. Anti-malware configurations at healthcare facilities often ignore medical imagery. DICOM files exist on systems that process protected health information, and successful exploitation could result in violations of regulatory compliance requirements such as HIPAA and FDA postmarket obligations.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/108730; https://github.com/d00rt/pedicom; https://github.com/d00rt/pedicom/blob/master/doc/Attacking_Digital_Imaging_and_Communication_in_Medicine_%28DICOM%29_file_format_standard_-_Markel_Picado_Ortiz_%28d00rt%29.pdf
CVE: CVE-2019-11690
Published: 2019-05-03
Description: gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIG_RANDOM_UUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-330
References: https://patchwork.ozlabs.org/patch/1092945; https://patchwork.ozlabs.org/patch/1092945
CVE: CVE-2018-15388
Published: 2019-05-03
Description: A vulnerability in the WebVPN login process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause increased CPU utilization on an affected device. The vulnerability is due to excessive processing load for existing WebVPN login operations. An attacker could exploit this vulnerability by sending multiple WebVPN login requests to the device. A successful exploit could allow the attacker to increase CPU load on the device, resulting in a denial of service (DoS) condition.
CVSS Score: 8.6 (HIGH)
CWE: CWE-400, CWE-400
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-sd-cpu-dos; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-sd-cpu-dos
CVE: CVE-2018-15462
Published: 2019-05-03
Description: A vulnerability in the TCP ingress handler for the data interfaces that are configured with management access to Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an increase in CPU and memory usage, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient ingress TCP rate limiting for TCP ports 22 (SSH) and 443 (HTTPS). An attacker could exploit this vulnerability by sending a crafted, steady stream of TCP traffic to port 22 or 443 on the data interfaces that are configured with management access to the affected device.
CVSS Score: 8.6 (HIGH)
CWE: CWE-399, CWE-770
References: http://www.securityfocus.com/bid/108178; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-firepower-dos; http://www.securityfocus.com/bid/108178
CVE: CVE-2019-1586
Published: 2019-05-03
Description: A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, local attacker with physical access to obtain sensitive information from an affected device. The vulnerability is due to insecure removal of cleartext encryption keys stored on local partitions in the hard drive of an affected device. An attacker could exploit this vulnerability by retrieving data from the physical disk on the affected partition(s). A successful exploit could allow the attacker to retrieve encryption keys, possibly allowing the attacker to further decrypt other data and sensitive information on the device, which could lead to the disclosure of confidential information.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-320, CWE-459
References: http://www.securityfocus.com/bid/108158; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-apic-encrypt; http://www.securityfocus.com/bid/108158
CVE: CVE-2019-1587
Published: 2019-05-03
Description: A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated, remote attacker to access sensitive information. The vulnerability occurs because the affected software does not properly validate user-supplied input. An attacker could exploit this vulnerability by issuing certain commands with filtered query results on the device. This action may cause returned messages to display confidential system information. A successful exploit could allow the attacker to read sensitive information on the device.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-aci-filter-query; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-aci-filter-query
CVE: CVE-2019-1589
Published: 2019-05-03
Description: A vulnerability in the Trusted Platform Module (TPM) functionality of software for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, local attacker with physical access to view sensitive information on an affected device. The vulnerability is due to a lack of proper data-protection mechanisms for disk encryption keys that are used within the partitions on an affected device hard drive. An attacker could exploit this vulnerability by obtaining physical access to the affected device to view certain cleartext keys. A successful exploit could allow the attacker to execute a custom boot process or conduct further attacks on an affected device.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200, CWE-311
References: http://www.securityfocus.com/bid/108175; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-aci-unmeasured-boot; http://www.securityfocus.com/bid/108175
CVE: CVE-2019-1590
Published: 2019-05-03
Description: A vulnerability in the Transport Layer Security (TLS) certificate validation functionality of Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated, remote attacker to perform insecure TLS client authentication on an affected device. The vulnerability is due to insufficient TLS client certificate validations for certificates sent between the various components of an ACI fabric. An attacker who has possession of a certificate that is trusted by the Cisco Manufacturing CA and the corresponding private key could exploit this vulnerability by presenting a valid certificate while attempting to connect to the targeted device. An exploit could allow the attacker to gain full control of all other components within the ACI fabric of an affected device.
CVSS Score: 8.1 (HIGH)
CWE: CWE-295, CWE-295
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-aci-insecure-fabric; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-aci-insecure-fabric
CVE: CVE-2019-1592
Published: 2019-05-03
Description: A vulnerability in the background operations functionality of Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an authenticated, local attacker to gain elevated privileges as root on an affected device. The vulnerability is due to insufficient validation of user-supplied files on an affected device. An attacker could exploit this vulnerability by logging in to the CLI of the affected device and creating a crafted file in a specific directory on the filesystem. A successful exploit could allow the attacker to execute arbitrary operating system commands as root on an affected device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-aci-hw-clock-util; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-aci-hw-clock-util
CVE: CVE-2019-1635
Published: 2019-05-03
Description: A vulnerability in the call-handling functionality of Session Initiation Protocol (SIP) Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service (DoS) condition. The vulnerability is due to incomplete error handling when XML data within a SIP packet is parsed. An attacker could exploit this vulnerability by sending a SIP packet that contains a malicious XML payload to an affected phone. A successful exploit could allow the attacker to cause the affected phone to reload unexpectedly, resulting in a temporary DoS condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399, CWE-755
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-phone-sip-xml-dos; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-phone-sip-xml-dos
CVE: CVE-2019-1682
Published: 2019-05-03
Description: A vulnerability in the FUSE filesystem functionality for Cisco Application Policy Infrastructure Controller (APIC) software could allow an authenticated, local attacker to escalate privileges to root on an affected device. The vulnerability is due to insufficient input validation for certain command strings issued on the CLI of the affected device. An attacker with write permissions for files within a readable folder on the device could alter certain definitions in the affected file. A successful exploit could allow an attacker to cause the underlying FUSE driver to execute said crafted commands, elevating the attacker's privileges to root on an affected device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-apic-priv-escalation; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-apic-priv-escalation
CVE: CVE-2019-1687
Published: 2019-05-03
Description: A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to restart unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to an error in TCP-based packet inspection, which could cause the TCP packet to have an invalid Layer 2 (L2)-formatted header. An attacker could exploit this vulnerability by sending a crafted TCP packet sequence to the targeted device. A successful exploit could allow the attacker to cause a DoS condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/108176; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-asa-ftdtcp-dos; http://www.securityfocus.com/bid/108176
CVE: CVE-2019-1692
Published: 2019-05-03
Description: A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, remote attacker to access sensitive system usage information. The vulnerability is due to a lack of proper data protection mechanisms for certain components in the underlying Application Centric Infrastructure (ACI). An attacker could exploit this vulnerability by attempting to observe certain network traffic when accessing the APIC. A successful exploit could allow the attacker to access and collect certain tracking data and usage statistics on an affected device.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-311
References: http://www.securityfocus.com/bid/108155; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-apic-info-disc; http://www.securityfocus.com/bid/108155