deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-1055
Published: 2019-06-12
Description: A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit the vulnerability through a Microsoft browser and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the browser rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.
The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1055; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1055
CVE: CVE-2019-1064
Published: 2019-06-12
Description: An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete data.
To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.
The security update addresses the vulnerability by correcting how Windows AppX Deployment Service handles hard links.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59, CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1064; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1064; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1064
CVE: CVE-2019-1065
Published: 2019-06-12
Description: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application to take control of an affected system.
The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-367
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1065; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1065; https://www.zerodayinitiative.com/advisories/ZDI-19-571/
CVE: CVE-2019-1069
Published: 2019-06-12
Description: An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system.
To exploit the vulnerability, an attacker would require unprivileged code execution on a victim system.
The security update addresses the vulnerability by correctly validating file operations.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59, CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1069; https://blog.0patch.com/2019/06/another-task-scheduler-0day-another.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1069
CVE: CVE-2019-1080
Published: 2019-06-12
Description: A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit the vulnerability through a Microsoft browser and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the browser rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.
The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1080; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1080
CVE: CVE-2019-1081
Published: 2019-06-12
Description: An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.
To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.
The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1081; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1081
CVE: CVE-2019-10925
Published: 2019-06-12
Description: A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). An authenticated attacker could escalate privileges by sending specially crafted requests to the integrated webserver. The security vulnerability can be exploited by an attacker with network access to the device. Valid user credentials, but no user interaction are required. Successful exploitation compromises integrity and availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 7.1 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/108725; https://cert-portal.siemens.com/productcert/pdf/ssa-816980.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-19-162-02
CVE: CVE-2019-10926
Published: 2019-06-12
Description: A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). Communication with the device is not encrypted. Data transmitted between the device and the user can be obtained by an attacker in a privileged network position. The security vulnerability can be exploited by an attacker in a privileged network position which allows eavesdropping the communication between the affected device and the user. The user must invoke a session. Successful exploitation of the vulnerability compromises confidentiality of the data transmitted.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-319, CWE-310
References: http://www.securityfocus.com/bid/108725; https://cert-portal.siemens.com/productcert/pdf/ssa-816980.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-19-162-02
CVE: CVE-2019-3872
Published: 2019-06-12
Description: It was found that a SAMLRequest containing a script could be processed by Picketlink versions shipped in Jboss Application Platform 7.2.x and 7.1.x. An attacker could use this to send a malicious script to achieve cross-site scripting and obtain unauthorized information or conduct further attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/108732; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3872; http://www.securityfocus.com/bid/108732
CVE: CVE-2019-3873
Published: 2019-06-12
Description: It was found that Picketlink as shipped with Jboss Enterprise Application Platform 7.2 would accept an xinclude parameter in SAMLresponse XML. An attacker could use this flaw to send a URL to achieve cross-site scripting or possibly conduct further attacks.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/108739; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3873; http://www.securityfocus.com/bid/108739
CVE: CVE-2019-3875
Published: 2019-06-12
Description: A vulnerability was found in keycloak before 6.0.2. The X.509 authenticator supports the verification of client certificates through the CRL, where the CRL list can be obtained from the URL provided in the certificate itself (CDP) or through the separately configured path. The CRL are often available over the network through unsecured protocols ('http' or 'ldap') and hence the caller should verify the signature and possibly the certification path. Keycloak currently doesn't validate signatures on CRL, which can result in a possibility of various attacks like man-in-the-middle.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295, CWE-345, CWE-295
References: http://www.securityfocus.com/bid/108748; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3875; http://www.securityfocus.com/bid/108748
CVE: CVE-2019-3888
Published: 2019-06-12
Description: A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUEST_LOGGER.undertowRequestFailed(t, exchange)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-532, CWE-532
References: http://www.securityfocus.com/bid/108739; https://access.redhat.com/errata/RHSA-2019:2439; https://access.redhat.com/errata/RHSA-2019:2998
CVE: CVE-2019-6567
Published: 2019-06-12
Description: A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All Versions < V5.2.4), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3), SCALANCE X-414-3E (All versions). The affected devices store passwords in a recoverable format. An attacker may extract and recover device passwords from the device configuration. Successful exploitation requires access to a device configuration backup and impacts confidentiality of the stored passwords.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-257, CWE-522
References: https://cert-portal.siemens.com/productcert/pdf/ssa-646841.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-646841.pdf
CVE: CVE-2019-6571
Published: 2019-06-12
Description: A vulnerability has been identified in SIEMENS LOGO!8 (6ED1052-xyyxx-0BA8 FS:01 to FS:06 / Firmware version V1.80.xx and V1.81.xx), SIEMENS LOGO!8 (6ED1052-xyy08-0BA0 FS:01 / Firmware version < V1.82.02). An attacker with network access to port 10005/tcp of the LOGO! device could cause a Denial-of-Service condition by sending specially crafted packets. The security vulnerability could be exploited by an unauthenticated attacker with network access to the affected service. No user interaction is required to exploit this security vulnerability. Successful exploitation of the security vulnerability compromises availability of the targeted system. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://cert-portal.siemens.com/productcert/pdf/ssa-774850.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-774850.pdf
CVE: CVE-2019-6580
Published: 2019-06-12
Description: A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a), Siveillance VMS 2018 R2 (All versions < V12.2a), Siveillance VMS 2018 R3 (All versions < V12.3a), Siveillance VMS 2019 R1 (All versions < V13.1a). An attacker with network access to port 80/TCP could change device properties without authorization. No user interaction is required to exploit this security vulnerability. Successful exploitation compromises confidentiality, integrity and availability of the targeted system. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862, CWE-862
References: https://cert-portal.siemens.com/productcert/pdf/ssa-212009.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-19-162-01; https://cert-portal.siemens.com/productcert/pdf/ssa-212009.pdf
CVE: CVE-2019-6581
Published: 2019-06-12
Description: A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a), Siveillance VMS 2018 R2 (All versions < V12.2a), Siveillance VMS 2018 R3 (All versions < V12.3a), Siveillance VMS 2019 R1 (All versions < V13.1a). An attacker with network access to port 80/TCP could change user roles without proper authorization. The security vulnerability could be exploited by an authenticated attacker with network access to the affected service. No user interaction is required to exploit this security vulnerability. Successful exploitation compromises confidentiality, integrity and availability of the targeted system. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://cert-portal.siemens.com/productcert/pdf/ssa-212009.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-19-162-01; https://cert-portal.siemens.com/productcert/pdf/ssa-212009.pdf
CVE: CVE-2019-6582
Published: 2019-06-12
Description: A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a), Siveillance VMS 2018 R2 (All versions < V12.2a), Siveillance VMS 2018 R3 (All versions < V12.3a), Siveillance VMS 2019 R1 (All versions < V13.1a). An attacker with network access to port 80/TCP can change user-defined event properties without proper authorization. The security vulnerability could be exploited by an authenticated attacker with network access to the affected service. No user interaction is required to exploit this security vulnerability. Successful exploitation compromises integrity of the user-defined event properties and the availability of corresponding functionality. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 7.1 (HIGH)
CWE: CWE-285, CWE-863
References: https://cert-portal.siemens.com/productcert/pdf/ssa-212009.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-19-162-01; https://cert-portal.siemens.com/productcert/pdf/ssa-212009.pdf
CVE: CVE-2019-6584
Published: 2019-06-12
Description: A vulnerability has been identified in SIEMENS LOGO!8 (6ED1052-xyyxx-0BA8 FS:01 to FS:06 / Firmware version V1.80.xx and V1.81.xx), SIEMENS LOGO!8 (6ED1052-xyy08-0BA0 FS:01 / Firmware version < V1.82.02). The integrated webserver does not invalidate the Session ID upon user logout. An attacker that successfully extracted a valid Session ID is able to use it even after the user logs out. The security vulnerability could be exploited by an attacker in a privileged network position who is able to read the communication between the affected device and the user or by an attacker who is able to obtain valid Session IDs through other means. The user must invoke a session to the affected device. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 8.8 (HIGH)
CWE: CWE-384, CWE-613
References: https://cert-portal.siemens.com/productcert/pdf/ssa-774850.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-774850.pdf
CVE: CVE-2019-0304
Published: 2019-06-12
Description: FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, allows an attacker to inject code or specifically manipulated command that can be executed by the application. An attacker could thereby control the behaviour of the application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://launchpad.support.sap.com/#/notes/2719530; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242; https://launchpad.support.sap.com/#/notes/2719530
CVE: CVE-2019-0305
Published: 2019-06-12
Description: Java Server Pages (JSPs) provided by the SAP NetWeaver Process Integration (SAP_XIESR and SAP_XITOOL: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50) do not restrict or incorrectly restrict frame objects or UI layers that belong to another application or domain, resulting in Clickjacking vulnerability. Successful exploitation of this vulnerability leads to unwanted modification of user's data.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1021
References: https://launchpad.support.sap.com/#/notes/2755502; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242; https://launchpad.support.sap.com/#/notes/2755502
CVE: CVE-2019-0306
Published: 2019-06-12
Description: SAP HANA Extended Application Services (advanced model), version 1, allows authenticated low privileged XS Advanced Platform users such as SpaceAuditors to execute requests to obtain a complete list of SAP HANA user IDs and names.
CVSS Score: 4.3 (MEDIUM)
References: https://launchpad.support.sap.com/#/notes/2771128; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242; https://launchpad.support.sap.com/#/notes/2771128
CVE: CVE-2019-0307
Published: 2019-06-12
Description: Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communication in the SAP Secure Storage file which is not encrypted by default. By decoding these credentials, an attacker with admin privileges could gain access to the entire configuration, but no system sensitive information can be gained.
CVSS Score: 2.4 (LOW)
CWE: CWE-311
References: https://launchpad.support.sap.com/#/notes/2772266; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242; https://launchpad.support.sap.com/#/notes/2772266
CVE: CVE-2019-0308
Published: 2019-06-12
Description: An authenticated attacker in SAP E-Commerce (Business-to-Consumer application), versions 7.3, 7.31, 7.32, 7.33, 7.54, can change the price of the product to zero and also checkout, by injecting an HTML code in the application that will be executed whenever the victim logs in to the application even on a different machine, leading to Code Injection.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2773493; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242; https://launchpad.support.sap.com/#/notes/2773493
CVE: CVE-2019-11269
Published: 2019-06-12
Description: Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18, as well as older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user or attacker can craft a request to the authorization endpoint using the authorization code grant type, and specify a manipulated redirection URI via the redirect_uri parameter. This can cause the authorization server to redirect the resource owner user-agent to a URI under the control of the attacker with the leaked authorization code.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601, CWE-601
References: http://packetstormsecurity.com/files/153299/Spring-Security-OAuth-2.3-Open-Redirection.html; https://pivotal.io/security/cve-2019-11269; https://www.oracle.com/security-alerts/cpujan2021.html
CVE: CVE-2019-3946
Published: 2019-06-12
Description: Fuji Electric V-Server before 6.0.33.0 is vulnerable to denial of service via a crafted UDP message sent to port 8005. An unauthenticated, remote attacker can crash vserver.exe due to an integer overflow in the UDP message handling logic.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/108740; https://www.tenable.com/security/research/tra-2019-27; http://www.securityfocus.com/bid/108740
CVE: CVE-2019-3947
Published: 2019-06-12
Description: Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An attacker that can gain access to the project file can recover the database credentials and gain access to the database server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: http://www.securityfocus.com/bid/108740; https://www.tenable.com/security/research/tra-2019-27; http://www.securityfocus.com/bid/108740
CVE: CVE-2019-9676
Published: 2019-06-12
Description: Buffer overflow vulnerability found in some Dahua IP Camera devices IPC-HFW1XXX,IPC-HDW1XXX,IPC-HFW2XXX Build before 2018/11. The vulnerability exits in the function of redirection display for serial port printing information, which can not be used by product basic functions. After an attacker logs in locally, this vulnerability can be exploited to cause device restart or arbitrary code execution. Dahua has identified the corresponding security problems in the static code auditing process, so it has gradually deleted this function, which is no longer available in the newer devices and softwares. Dahua has released versions of the affected products to fix the vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://www.dahuasecurity.com/support/cybersecurity/details/617; https://www.dahuasecurity.com/support/cybersecurity/details/617
CVE: CVE-2019-10971
Published: 2019-06-12
Description: The application (Network Configurator for DeviceNet Safety 3.41 and prior) searches for resources by means of an untrusted search path that could execute a malicious .dll file not under the application's direct control and outside the intended directories.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426, CWE-426
References: https://ics-cert.us-cert.gov/advisories/ICSA-19-134-01; https://ics-cert.us-cert.gov/advisories/ICSA-19-134-01
CVE: CVE-2019-5442
Published: 2019-06-12
Description: XML Entity Expansion (Billion Laughs Attack) on Pippo 1.12.0 results in Denial of Service.Entities are created recursively and large amounts of heap memory is taken. Eventually, the JVM process will run out of memory. Otherwise, if the OS does not bound the memory on that process, memory will continue to be exhausted and will affect other processes on the system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-776, CWE-776
References: https://hackerone.com/reports/506791; https://hackerone.com/reports/506791