deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-2806
Published: 2019-03-26
Description: Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it calculates an incorrect value for the “End of Current Record” field. By sending a datagram to the service over Port 4444/UDP with the “Record Data Size” field modified to a specifically oversized value, the service will calculate an undersized value for the “Total Record Size.” Then the service will calculate an incorrect value for the “End of Current Record” field causing access violations that lead to a service crash. The service can be recovered with a manual reboot. The patches and details pertaining to these vulnerabilities can be found at the following Rockwell Automation security advisory link (login is required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-190
References: https://ics-cert.us-cert.gov/advisories/ICSA-13-095-02; https://ics-cert.us-cert.gov/advisories/ICSA-13-095-02
CVE: CVE-2013-2807
Published: 2019-03-26
Description: Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it calculates an incorrect value for the “Total Record Size” field. By sending a datagram to the service over Port 4444/UDP with the “Record Data Size” field modified to a specifically oversized value, the service will calculate an undersized value for the “Total Record Size” that will cause an out-of-bounds read access violation that leads to a service crash. The service can be recovered with a manual reboot. The patches and details pertaining to these vulnerabilities can be found at the following Rockwell Automation Security Advisory link (login is required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-125
References: https://ics-cert.us-cert.gov/advisories/ICSA-13-095-02; https://ics-cert.us-cert.gov/advisories/ICSA-13-095-02
CVE: CVE-2014-5401
Published: 2019-03-26
Description: Hospira MedNet software version 5.8 and prior uses vulnerable versions of the JBoss Enterprise Application Platform software that may allow unauthenticated users to execute arbitrary code on the target system. Hospira has developed a new version of the MedNet software, MedNet 6.1. Existing versions of MedNet can be upgraded to MedNet 6.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-090-03.json; https://www.cisa.gov/news-events/ics-advisories/icsa-15-090-03; https://ics-cert.us-cert.gov/advisories/ICSA-15-090-03
CVE: CVE-2019-9053
Published: 2019-03-26
Description: An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1_idlist parameter.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/152356/CMS-Made-Simple-SQL-Injection.html; https://github.com/Perseus99999/CVE-2019-9053-working-/blob/main/exploit.py; https://newsletter.cmsmadesimple.org/w/89247Qog4jCRCuRinvhsofwg
CVE: CVE-2019-9055
Published: 2019-03-26
Description: An issue was discovered in CMS Made Simple 2.2.8. In the module DesignManager (in the files action.admin_bulk_css.php and action.admin_bulk_template.php), with an unprivileged user with Designer permission, it is possible reach an unserialize call with a crafted value in the m1_allparms parameter, and achieve object injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: http://packetstormsecurity.com/files/155322/CMS-Made-Simple-2.2.8-Remote-Code-Execution.html; https://blog.certimetergroup.com/it/articolo/security/CMS_Made_Simple_deserialization_attack_%28CVE-2019-9055%29; https://newsletter.cmsmadesimple.org/w/89247Qog4jCRCuRinvhsofwg
CVE: CVE-2019-9057
Published: 2019-03-26
Description: An issue was discovered in CMS Made Simple 2.2.8. In the module FilePicker, it is possible to reach an unserialize call with an untrusted parameter, and achieve authenticated object injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-915
References: https://newsletter.cmsmadesimple.org/w/89247Qog4jCRCuRinvhsofwg; https://www.cmsmadesimple.org/2019/03/Announcing-CMS-Made-Simple-v2.2.10-Spuzzum; https://newsletter.cmsmadesimple.org/w/89247Qog4jCRCuRinvhsofwg
CVE: CVE-2019-9058
Published: 2019-03-26
Description: An issue was discovered in CMS Made Simple 2.2.8. In the administrator page admin/changegroupperm.php, it is possible to send a crafted value in the sel_groups parameter that leads to authenticated object injection.
CVSS Score: 7.2 (HIGH)
CWE: CWE-1321
References: https://newsletter.cmsmadesimple.org/w/89247Qog4jCRCuRinvhsofwg; https://www.cmsmadesimple.org/2019/03/Announcing-CMS-Made-Simple-v2.2.10-Spuzzum; https://newsletter.cmsmadesimple.org/w/89247Qog4jCRCuRinvhsofwg
CVE: CVE-2019-9059
Published: 2019-03-26
Description: An issue was discovered in CMS Made Simple 2.2.8. It is possible, with an administrator account, to achieve command injection by modifying the path of the e-mail executable in Mail Settings, setting "sendmail" in the "Mailer" option, and launching the "Forgot your password" feature.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://newsletter.cmsmadesimple.org/w/89247Qog4jCRCuRinvhsofwg; https://www.cmsmadesimple.org/2019/03/Announcing-CMS-Made-Simple-v2.2.10-Spuzzum; https://newsletter.cmsmadesimple.org/w/89247Qog4jCRCuRinvhsofwg
CVE: CVE-2019-9061
Published: 2019-03-26
Description: An issue was discovered in CMS Made Simple 2.2.8. In the module ModuleManager (in the file action.installmodule.php), it is possible to reach an unserialize call with untrusted input and achieve authenticated object injection by using the "install module" feature.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-1321
References: https://newsletter.cmsmadesimple.org/w/89247Qog4jCRCuRinvhsofwg; https://www.cmsmadesimple.org/2019/03/Announcing-CMS-Made-Simple-v2.2.10-Spuzzum; https://newsletter.cmsmadesimple.org/w/89247Qog4jCRCuRinvhsofwg
CVE: CVE-2017-2660
Published: 2019-03-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: this candidate is not about any specific product, protocol, or design, that falls into the scope of the assigning CNA. Notes: None
CVE: CVE-2010-5305
Published: 2019-03-26
Description: The potential exists for exposure of the product's password used to restrict unauthorized access to Rockwell PLC5/SLC5/0x/RSLogix 1785-Lx and 1747-L5x controllers. The potential exists for an unauthorized programming and configuration client to gain access to the product and allow changes to the product’s configuration or program. When applicable, upgrade product firmware to a version that includes enhanced security functionality compatible with Rockwell Automation's FactoryTalk Security services.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255, CWE-284
References: http://rockwellautomation.custhelp.com/app/answers/detail/a_id/66684/kw/vulnerability/r_id/115100; https://www.cisa.gov/news-events/ics-advisories/icsa-10-070-02; https://ics-cert.us-cert.gov/advisories/ICSA-10-070-02
CVE: CVE-2013-2805
Published: 2019-03-26
Description: Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it receives a datagram with an incorrect value in the “Record Data Size” field. By sending a datagram to the service over Port 4444/UDP with the “Record Data Size” field modified to an oversized value, an attacker could cause an out-of-bounds read access violation that leads to a service crash. The service can be recovered with a manual reboot. The patches and details pertaining to this vulnerability can be found at the following Rockwell Automation Security Advisory link (login is required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://ics-cert.us-cert.gov/advisories/ICSA-13-095-02; https://ics-cert.us-cert.gov/advisories/ICSA-13-095-02
CVE: CVE-2018-16856
Published: 2019-03-26
Description: In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and openstack-octavia-3.0.1-0[PII_REDACTED]5732 creates log files that are readable by all users. Sensitive information such as private keys can appear in these log files allowing for information exposure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16856; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16856
CVE: CVE-2019-10068
Published: 2019-03-26
Description: An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x versions. Due to a failure to validate security headers, it was possible for a specially crafted request to the staging service to bypass the initial authentication and proceed to deserialize user-controlled .NET object input. This deserialization then led to unauthenticated remote code execution on the server where the Kentico instance was hosted.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: http://packetstormsecurity.com/files/157588/Kentico-CMS-12.0.14-Remote-Command-Execution.html; https://devnet.kentico.com/download/hotfixes#securityBugs-v12; http://packetstormsecurity.com/files/157588/Kentico-CMS-12.0.14-Remote-Command-Execution.html
CVE: CVE-2019-3597
Published: 2019-03-26
Description: Authentication Bypass vulnerability in McAfee Network Security Manager (NSM) 9.1 < 9.1.7.75.2 and 9.2 < 9.2.7.31 (9.2 Update 2) allows unauthenticated users to gain administrator rights via incorrect handling of expired GUI sessions.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/107609; https://kc.mcafee.com/corporate/index?page=content&id=SB10275; http://www.securityfocus.com/bid/107609
CVE: CVE-2019-3606
Published: 2019-03-26
Description: Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Management (NSM) 9.1 < 9.1.7.75 (Update 4) and 9.2 < 9.2.7.31 Update2 allows administrators to view configuration information in plain text format via the GUI or GUI terminal commands.
CVSS Score: 7.7 (HIGH)
CWE: CWE-312
References: http://www.securityfocus.com/bid/107613; https://kc.mcafee.com/corporate/index?page=content&id=SB10274; http://www.securityfocus.com/bid/107613
CVE: CVE-2019-3804
Published: 2019-03-26
Description: It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-909, CWE-909
References: https://access.redhat.com/errata/RHSA-2019:1569; https://access.redhat.com/errata/RHSA-2019:1571; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3804
CVE: CVE-2019-3826
Published: 2019-03-26
Description: A stored, DOM based, cross-site scripting (XSS) flaw was found in Prometheus before version 2.7.1. An attacker could exploit this by convincing an authenticated user to visit a crafted URL on a Prometheus server, allowing for the execution and persistent storage of arbitrary scripts.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://access.redhat.com/errata/RHBA-2019:0327; https://advisory.checkmarx.net/advisory/CX-2019-4297; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3826
CVE: CVE-2019-3830
Published: 2019-03-26
Description: A vulnerability was found in ceilometer before version 12.0.0.0rc1. An Information Exposure in ceilometer-agent prints sensitive configuration data to log files without DEBUG logging being activated.
CVSS Score: 7.8 (HIGH)
CWE: CWE-532, CWE-532
References: https://access.redhat.com/errata/RHSA-2019:0919; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3830; https://access.redhat.com/errata/RHSA-2019:0919
CVE: CVE-2019-3848
Published: 2019-03-26
Description: A vulnerability was found in moodle before versions 3.6.3, 3.5.5 and 3.4.8. Permissions were not correctly checked before loading event information into the calendar's edit event modal popup, so logged in non-guest users could view unauthorised calendar events. (Note: It was read-only access, users could not edit the events.)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3848; https://moodle.org/mod/forum/discuss.php?d=384011#p1547743; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3848
CVE: CVE-2019-3849
Published: 2019-03-26
Description: A vulnerability was found in moodle before versions 3.6.3, 3.5.5 and 3.4.8. Users could assign themselves an escalated role within courses or content accessed via LTI, by modifying the request to the LTI publisher site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285, CWE-269
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3849; https://moodle.org/mod/forum/discuss.php?d=384012#p1547744; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3849
CVE: CVE-2019-3850
Published: 2019-03-26
Description: A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Links within assignment submission comments would open directly (in the same window). Although links themselves may be valid, opening within the same window and without the no-referrer header policy made them more susceptible to exploits.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-601
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3850; https://moodle.org/mod/forum/discuss.php?d=384013#p1547745; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3850
CVE: CVE-2019-3851
Published: 2019-03-26
Description: A vulnerability was found in moodle before versions 3.6.3 and 3.5.5. There was a link to site home within the the Boost theme's secure layout, meaning students could navigate out of the page.
CVSS Score: 4.3 (MEDIUM)
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3851; https://moodle.org/mod/forum/discuss.php?d=384014#p1547746; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3851
CVE: CVE-2019-3852
Published: 2019-03-26
Description: A vulnerability was found in moodle before version 3.6.3. The get_with_capability_join and get_users_by_capability functions were not taking context freezing into account when checking user capabilities
CVSS Score: 4.3 (MEDIUM)
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3852; https://moodle.org/mod/forum/discuss.php?d=384015#p1547748; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3852
CVE: CVE-2019-3878
Published: 2019-03-26
Description: A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse proxy and mod_auth_mellon is configured to only let through authenticated users (with the require valid-user directive), adding special HTTP headers that are normally used to start the special SAML ECP (non-browser based) can be used to bypass authentication.
CVSS Score: 8.1 (HIGH)
CWE: CWE-305, CWE-287
References: https://access.redhat.com/errata/RHBA-2019:0959; https://access.redhat.com/errata/RHSA-2019:0746; https://access.redhat.com/errata/RHSA-2019:0766
CVE: CVE-2019-6341
Published: 2019-03-26
Description: In Drupal 7 versions prior to 7.65; Drupal 8.6 versions prior to 8.6.13;Drupal 8.5 versions prior to 8.5.14. Under certain circumstances the File module/subsystem allows a malicious user to upload a file that can trigger a cross-site scripting (XSS) vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://lists.debian.org/debian-lts-announce/2019/04/msg00003.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWHF4LALNBZCXMITWWVWKY3PNVYTM3N7/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P4KTET2PTSIS3ZZ4SGBRQEN6CCLV5SYX/
CVE: CVE-2019-6540
Published: 2019-03-26
Description: The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement encryption. An attacker with adjacent short-range access to a target product can listen to communications, including the transmission of sensitive data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-319, CWE-319
References: http://www.securityfocus.com/bid/107544; https://ics-cert.us-cert.gov/advisories/ICSMA-19-080-01; http://www.securityfocus.com/bid/107544
CVE: CVE-2019-8987
Published: 2019-03-26
Description: The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a persistent cross-site scripting vulnerability that theoretically allows an authenticated user to gain access to all the capabilities of the web interface available to more privileged users. Affected releases are TIBCO Software Inc.'s TIBCO Data Science for AWS: versions up to and including 6.4.0, and TIBCO Spotfire Data Science: versions up to and including 6.4.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/107595; http://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2019/03/tibco-security-advisory-march-26-2019-tibco-spotfire-data-science-2019-8987
CVE: CVE-2019-8988
Published: 2019-03-26
Description: The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a persistent cross-site contains a vulnerability that theoretically allows a user to escalate their privileges on the affected system, in a way that may allow for data modifications and deletions that should be denied. Affected releases are TIBCO Software Inc.'s TIBCO Data Science for AWS: versions up to and including 6.4.0, and TIBCO Spotfire Data Science: versions up to and including 6.4.0.
CVSS Score: 8.1 (HIGH)
References: http://www.securityfocus.com/bid/107593; http://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2019/03/tibco-security-advisory-march-26-2019-tibco-spotfire-data-science-2019-8988
CVE: CVE-2019-8989
Published: 2019-03-26
Description: The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a vulnerability that theoretically enables a user to spoof their account to look like a different user in the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Data Science for AWS: versions up to and including 6.4.0, and TIBCO Spotfire Data Science: versions up to and including 6.4.0.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/107608; http://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2019/03/tibco-security-advisory-march-26-2019-tibco-spotfire-data-science-2019-8989
CVE: CVE-2019-9961
Published: 2019-03-26
Description: A cross-site scripting (XSS) vulnerability in ressource view in core/modules/resource/RESOURCEVIEW.php in Wikindx prior to version 5.7.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sourceforge.net/p/wikindx/code/2624/; https://sourceforge.net/p/wikindx/code/2656/; https://sourceforge.net/p/wikindx/code/2624/
CVE: CVE-2018-15813
Published: 2019-03-26
Description: FastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x[PII_REDACTED]0e1237 via a crafted image file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://0x00crashes.blogspot.com/2018/08/faststone-image-viewer-65-few-crashes.html; https://0x00crashes.blogspot.com/2018/08/faststone-image-viewer-65-few-crashes.html
CVE: CVE-2018-15814
Published: 2019-03-26
Description: FastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x[PII_REDACTED]1cb509 via a crafted image file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://0x00crashes.blogspot.com/2018/08/faststone-image-viewer-65-few-crashes.html; https://0x00crashes.blogspot.com/2018/08/faststone-image-viewer-65-few-crashes.html
CVE: CVE-2018-15815
Published: 2019-03-26
Description: FastStone Image Viewer 6.5 has an Exception Handler Chain Corrupted issue starting at image00400000+0x[PII_REDACTED]3ef68a via a crafted image file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-754
References: https://0x00crashes.blogspot.com/2018/08/faststone-image-viewer-65-few-crashes.html; https://0x00crashes.blogspot.com/2018/08/faststone-image-viewer-65-few-crashes.html
CVE: CVE-2018-15816
Published: 2019-03-26
Description: FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x[PII_REDACTED]002d7d via a crafted image file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://0x00crashes.blogspot.com/2018/08/faststone-image-viewer-65-few-crashes.html; https://0x00crashes.blogspot.com/2018/08/faststone-image-viewer-65-few-crashes.html
CVE: CVE-2018-15817
Published: 2019-03-26
Description: FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x[PII_REDACTED]002d63 via a crafted image file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://0x00crashes.blogspot.com/2018/08/faststone-image-viewer-65-few-crashes.html; https://0x00crashes.blogspot.com/2018/08/faststone-image-viewer-65-few-crashes.html
CVE: CVE-2019-9743
Published: 2019-03-26
Description: An issue was discovered on PHOENIX CONTACT RAD-80211-XD and RAD-80211-XD/HP-BUS devices. Command injection can occur in the WebHMI component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://www.securityfocus.com/bid/107596; https://cert.vde.com/de-de/advisories/vde-2019-007; http://www.securityfocus.com/bid/107596
CVE: CVE-2019-9744
Published: 2019-03-26
Description: An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attackers arriving from the same source IP address as an authenticated user, because this IP address is used as a session identifier.
CVSS Score: 8.8 (HIGH)
CWE: CWE-384
References: http://www.securityfocus.com/bid/108576; https://cert.vde.com/de-de/advisories/vde-2019-006; https://ics-cert.us-cert.gov/advisories/ICSA-19-155-02
CVE: CVE-2019-10105
Published: 2019-03-26
Description: CMS Made Simple 2.2.10 has a Self-XSS vulnerability via the Layout Design Manager "Name" field, which is reachable via a "Create a new Template" action to the Design Manager.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://dev.cmsmadesimple.org/bug/view/12002; http://dev.cmsmadesimple.org/bug/view/12002
CVE: CVE-2019-10106
Published: 2019-03-26
Description: CMS Made Simple 2.2.10 has XSS via the 'moduleinterface.php' Name field, which is reachable via an "Add Category" action to the "Site Admin Settings - News module" section.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://dev.cmsmadesimple.org/bug/view/12004; http://dev.cmsmadesimple.org/bug/view/12004
CVE: CVE-2019-10107
Published: 2019-03-26
Description: CMS Made Simple 2.2.10 has XSS via the myaccount.php "Email Address" field, which is reachable via the "My Preferences -> My Account" section.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://dev.cmsmadesimple.org/bug/view/12003; http://dev.cmsmadesimple.org/bug/view/12003