deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-13993
Published: 2019-05-07
Description: The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is prone to CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/106737; https://ics-cert.us-cert.gov/advisories/ICSA-19-024-02; http://www.securityfocus.com/bid/106737
CVE: CVE-2018-13994
Published: 2019-05-07
Description: The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a denial-of-service attack by making more than 120 connections.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/106737; https://ics-cert.us-cert.gov/advisories/ICSA-19-024-02; http://www.securityfocus.com/bid/106737
CVE: CVE-2018-14478
Published: 2019-05-07
Description: ecard.php in Coppermine Photo Gallery (CPG) 1.5.46 has XSS via the sender_name, recipient_email, greetings, or recipient_name parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://forum.coppermine-gallery.net/index.php/board%2C58.0.html; http://packetstormsecurity.com/files/151306/Coppermine-1.5.46-Cross-Site-Scripting.html; http://forum.coppermine-gallery.net/index.php/board%2C58.0.html
CVE: CVE-2018-14485
Published: 2019-05-07
Description: BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://packetstormsecurity.com/files/151063/BlogEngine-3.3-XML-External-Entity-Injection.html; https://github.com/rxtur/BlogEngine.NET/commits/master; https://www.exploit-db.com/exploits/46106/
CVE: CVE-2019-10869
Published: 2019-05-07
Description: Path Traversal and Unrestricted File Upload exists in the Ninja Forms plugin before 3.0.23 for WordPress (when the Uploads add-on is activated). This allows an attacker to traverse the file system to access files and execute code via the includes/fields/upload.php (aka upload/submit page) name and tmp_name parameters.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22, CWE-434
References: https://wpvulndb.com/vulnerabilities/9272; https://www.onvio.nl/nieuws/ninjaforms-vulnerability; https://wpvulndb.com/vulnerabilities/9272
CVE: CVE-2019-11629
Published: 2019-05-07
Description: Sonatype Nexus Repository Manager 2.x before 2.14.13 allows XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]33-CVE-2019-11629-Nexus-Repository-Manager-2-Cross-Site-Scripting-XSS-2019-05-02; https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]33-CVE-2019-11629-Nexus-Repository-Manager-2-Cross-Site-Scripting-XSS-2019-05-02
CVE: CVE-2018-19456
Published: 2019-05-07
Description: The WP Backup+ (aka WPbackupplus) plugin through 2018-11-22 for WordPress allows remote attackers to obtain sensitive information from server folders and files, as demonstrated by download.sql.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2019-01/msg00006.html; https://www.easyhack.in/2018/11/21/wordpress-plugin-database-backup-information-disclosure-vulnerability/; http://lists.opensuse.org/opensuse-security-announce/2019-01/msg00006.html
CVE: CVE-2018-2001
Published: 2019-05-07
Description: IBM Cram Social Program Management 6.1.1, 6.2.0, 7.0.4, and 7.0.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 154891.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/154891; https://www.ibm.com/support/docview.wss?uid=ibm10883184; https://exchange.xforce.ibmcloud.com/vulnerabilities/154891
CVE: CVE-2018-2008
Published: 2019-05-07
Description: IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 could disclose sensitive information to an authenticated user that could aid in further attacks against the system. IBM X-Force ID: 155146.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ibm10879463; http://www.securityfocus.com/bid/108843; https://exchange.xforce.ibmcloud.com/vulnerabilities/155146
CVE: CVE-2018-20503
Published: 2019-05-07
Description: Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151327/SirsiDynix-e-Library-3.5.x-Cross-Site-Scripting.html; https://pentest.com.tr/exploits/Allied-Telesis-8100L-8-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/46237/
CVE: CVE-2019-10742
Published: 2019-05-07
Description: Axios up to and including 0.18.0 allows attackers to cause a denial of service (application crash) by continuing to accepting content after maxContentLength is exceeded.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755
References: https://app.snyk.io/vuln/SNYK-JS-AXIOS-174505; https://github.com/axios/axios/issues/1098; https://github.com/axios/axios/pull/1485
CVE: CVE-2019-4207
Published: 2019-05-07
Description: IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 may disclose sensitive information only available to a local user that could be used in further attacks against the system. IBM X-Force ID: 159148.
CVSS Score: 3.3 (LOW)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/159128; https://www.ibm.com/support/docview.wss?uid=ibm10880261; https://exchange.xforce.ibmcloud.com/vulnerabilities/159128
CVE: CVE-2019-4208
Published: 2019-05-07
Description: IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 159129.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: http://www.ibm.com/support/docview.wss?uid=ibm10880263; https://exchange.xforce.ibmcloud.com/vulnerabilities/159129; http://www.ibm.com/support/docview.wss?uid=ibm10880263
CVE: CVE-2019-7426
Published: 2019-05-07
Description: XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the groupDesc, groupName, groupID, or task parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151585/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-XSS.html; http://seclists.org/fulldisclosure/2019/Feb/29; http://packetstormsecurity.com/files/151585/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-XSS.html
CVE: CVE-2019-7427
Published: 2019-05-07
Description: XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the autorefTime or graphTypes parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151585/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-XSS.html; http://seclists.org/fulldisclosure/2019/Feb/29; http://packetstormsecurity.com/files/151585/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-XSS.html
CVE: CVE-2019-7443
Published: 2019-05-07
Description: KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp. Certain types can cause crashes, and trigger the decoding of arbitrary images with dynamically loaded plugins. In other words, KAuth unintentionally causes this plugin code to run as root, which increases the severity of any possible exploitation of a plugin vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00060.html; http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00065.html; https://bugzilla.suse.com/show_bug.cgi?id=1124863
CVE: CVE-2019-7541
Published: 2019-05-07
Description: Rukovoditel through 2.4.1 allows XSS via a URL that lacks a module=users%2flogin substring.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151657/Rukovoditel-Project-Management-CRM-2.4.1-Cross-Site-Scripting.html; https://blog.rukovoditel.net/releases/; https://www.exploit-db.com/exploits/46366/
CVE: CVE-2019-7564
Published: 2019-05-07
Description: An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password reset functionality of the Wireless SSID doesn't require any type of authentication. By making a POST request to the regx/wireless/wl_security_2G.asp URI, the attacker can change the password of the Wi-FI network.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: http://packetstormsecurity.com/files/151595/Coship-Wireless-Router-4.0.0.x-5.0.0.x-Authentication-Bypass.html; http://packetstormsecurity.com/files/151595/Coship-Wireless-Router-4.0.0.x-5.0.0.x-Authentication-Bypass.html
CVE: CVE-2019-7687
Published: 2019-05-07
Description: cgi-bin/qcmap_web_cgi on JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices has POST based reflected XSS via the Page parameter. No sanitization is performed for user input data.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151654/Jiofi-4-JMR-1140-Cross-Site-Scripting.html; https://drive.google.com/file/d/1EhW-XfjuQfy2scjKWW_heo-7nzKWffW6/view?usp=sharing; https://drive.google.com/file/d/1GlDF8RCRepNLHrgfelTMsjsYUSZvXkhw/view?usp=sharing
CVE: CVE-2019-7745
Published: 2019-05-07
Description: JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain the Wi-Fi password by making a cgi-bin/qcmap_web_cgi Page=GetWiFi_Setting request and then reading the wpa_security_key field.
CVSS Score: 9.8 (CRITICAL)
References: http://packetstormsecurity.com/files/151655/Jiofi-4-JMR-1140-WiFi-Password-Cross-Site-Request-Forgery.html; https://jiosecuritybugs.blogspot.com/2019/02/cve-2019-7745-jiofi-4-jmr1140.html; https://www.exploit-db.com/exploits/46364/
CVE: CVE-2019-7746
Published: 2019-05-07
Description: JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain an admin token by making a /cgi-bin/qcmap_auth type=getuser request and then reading the token field. This token value can then be used to change the Wi-Fi password or perform a factory reset.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/151656/Jiofi-4-JMR-1140-Admin-Token-Disclosure-Cross-Site-Request-Forgery.html; https://www.exploit-db.com/exploits/46365/; http://packetstormsecurity.com/files/151656/Jiofi-4-JMR-1140-Admin-Token-Disclosure-Cross-Site-Request-Forgery.html
CVE: CVE-2018-6243
Published: 2019-05-07
Description: NVIDIA Tegra TLK Widevine Trust Application contains a vulnerability in which missing the input parameter checking of video metadata count may lead to Arbitrary Code Execution, Denial of Service or Escalation of Privileges. Android ID: A-72315075. Severity Rating: High. Version: N/A.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/108287; https://source.android.com/security/bulletin/2019-05-01; http://www.securityfocus.com/bid/108287
CVE: CVE-2018-6634
Published: 2019-05-07
Description: A vulnerability in Parsec Windows 142-0 and Parsec 'Linux Ubuntu 16.04 LTS Desktop' Build 142-1 allows unauthorized users to maintain access to an account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-613
References: https://twitter.com/VixusFoxy/status/[PII_REDACTED]98583553; https://twitter.com/VixusFoxy/status/[PII_REDACTED]98583553
CVE: CVE-2019-10712
Published: 2019-05-07
Description: The Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889) and Series 750-87x (750-830, 750-849, 750-871, 750-872, 750-873) devices has undocumented service access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://www.securityfocus.com/bid/108482; https://cert.vde.com/de-de/advisories/vde-2019-008; https://lists.apache.org/thread.html/r0066c1e862613de402fee04e81cbe00bcd64b64a2711beb9a13c3b25%40%3Ccommits.cassandra.apache.org%3E
CVE: CVE-2019-11812
Published: 2019-05-08
Description: A persistent XSS issue was discovered in app/View/Helper/CommandHelper.php in MISP before 2.4.107. JavaScript can be included in the discussion interface, and can be triggered by clicking on the link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/3a085a6ceea00b3ab674a984dd56c1846ef775ff; https://github.com/MISP/MISP/commit/3a085a6ceea00b3ab674a984dd56c1846ef775ff
CVE: CVE-2019-11813
Published: 2019-05-08
Description: An issue was discovered in app/View/Elements/Events/View/value_field.ctp in MISP before 2.4.107. There is persistent XSS via link type attributes with javascript:// links.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/6f6fb678ca07c80cb7d2bdfe5cb0313bb71bd487; https://github.com/MISP/MISP/commit/6f6fb678ca07c80cb7d2bdfe5cb0313bb71bd487
CVE: CVE-2019-11814
Published: 2019-05-08
Description: An issue was discovered in app/webroot/js/misp.js in MISP before 2.4.107. There is persistent XSS via image names in titles, as demonstrated by a screenshot.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/62f15433e42fb92e45bd57dd6fc0c0bf53deb6fc; https://github.com/MISP/MISP/commit/62f15433e42fb92e45bd57dd6fc0c0bf53deb6fc
CVE: CVE-2019-11815
Published: 2019-05-08
Description: An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362, CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00037.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html
CVE: CVE-2019-8349
Published: 2019-05-08
Description: Multiple cross-site scripting (XSS) vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the (1) destination parameter to delete feature; the (2) destination parameter to edit feature; (3) content parameter in the profile feature.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151733/HTMLy-2.7.4-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Feb/40; https://www.netsparker.com/web-applications-advisories/
CVE: CVE-2019-8387
Published: 2019-05-08
Description: MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component.
CVSS Score: 9.8 (CRITICAL)
References: http://packetstormsecurity.com/files/151725/Master-IP-CAM-01-3.3.4.2103-Remote-Command-Execution.html; https://syrion.me/blog/; https://www.exploit-db.com/exploits/46400/
CVE: CVE-2018-5408
Published: 2019-05-08
Description: The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not validate, or incorrectly validates, the PrinterLogic management portal's SSL certificate. When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295, CWE-295
References: http://www.securityfocus.com/bid/108285; https://kb.cert.org/vuls/id/169249/; http://www.securityfocus.com/bid/108285
CVE: CVE-2018-5409
Published: 2019-05-08
Description: The PrinterLogic Print Management software, versions up to and including 18.3.1.96, updates and executes the code without sufficiently verifying the origin and integrity of the code. An attacker can execute malicious code by compromising the host server, performing DNS spoofing, or modifying the code in transit.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-494, CWE-346
References: http://www.securityfocus.com/bid/108285; https://kb.cert.org/vuls/id/169249/; http://www.securityfocus.com/bid/108285
CVE: CVE-2019-9505
Published: 2019-05-08
Description: The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not sanitize special characters allowing for remote unauthorized changes to configuration files. An unauthenticated attacker may be able to remotely execute arbitrary code with SYSTEM privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-159
References: http://www.securityfocus.com/bid/108285; https://kb.cert.org/vuls/id/169249/; http://www.securityfocus.com/bid/108285
CVE: CVE-2019-11561
Published: 2019-05-08
Description: The Chuango 433 MHz burglar-alarm product line is vulnerable to a Denial of Service attack. When the condition is triggered, the OV2 base station is unable to process sensor states and effectively prevents the alarm from setting off, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm System.
CVSS Score: 5.9 (MEDIUM)
References: https://github.com/RiieCco/write-ups/tree/master/CVE-2019-11561; https://github.com/RiieCco/write-ups/tree/master/CVE-2019-11561
CVE: CVE-2019-11564
Published: 2019-05-08
Description: A cross-site scripting (XSS) vulnerability in HumHub 1.3.12 allows remote attackers to inject arbitrary web script or HTML via a /protected/vendor/codeception/codeception/tests/data/app/view/index.php POST request.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://humhub.org/en/news; https://www.exploit-db.com/exploits/46771/; https://humhub.org/en/news
CVE: CVE-2019-11642
Published: 2019-05-08
Description: A log poisoning vulnerability has been discovered in the OneShield Policy (Dragon Core) framework before 5.1.10. Authenticated remote adversaries can poison log files by entering malicious payloads in either headers or form elements. These payloads are then executed via a client side debugging console. This is predicated on the debugging console and Java Bean being made available to the deployed application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://seclists.org/fulldisclosure/2019/May/1; https://oneshield.com/business-solutions/oneshield-pc-solutions/oneshield-policy/; http://seclists.org/fulldisclosure/2019/May/1
CVE: CVE-2019-11643
Published: 2019-05-08
Description: Persistent XSS has been found in the OneShield Policy (Dragon Core) framework before 5.1.10. Remote adversaries can inject malicious JavaScript into textboxes decorated with type string, which is subsequently stored to the applicable data store. This can be exploited remotely by both authenticated and unauthenticated users.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2019/May/2; https://oneshield.com/business-solutions/oneshield-pc-solutions/oneshield-policy/; http://seclists.org/fulldisclosure/2019/May/2
CVE: CVE-2019-11818
Published: 2019-05-08
Description: Alkacon OpenCMS v10.5.4 and before is affected by stored cross site scripting (XSS) in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp). This allows an attacker to insert arbitrary JavaScript as user input (First Name or Last Name), which will be executed whenever the affected snippet is loaded.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/alkacon/opencms-core/issues/635; https://www.openwall.com/lists/oss-security/2019/04/30/3; https://github.com/alkacon/opencms-core/issues/635
CVE: CVE-2019-11819
Published: 2019-05-08
Description: Alkacon OpenCMS v10.5.4 and before is affected by CSV (aka Excel Macro) Injection in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp) via the First Name or Last Name.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1236
References: https://github.com/alkacon/opencms-core/issues/636; https://www.openwall.com/lists/oss-security/2019/05/05/2; https://github.com/alkacon/opencms-core/issues/636
CVE: CVE-2019-11499
Published: 2019-05-08
Description: In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if AUTH PLAIN is attempted over a TLS secured channel with an unacceptable authentication message.
CVSS Score: 7.5 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00024.html; http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00026.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4XLI55NGRDTGMVOPYFCPPFNPA5VKYSSY/
CVE: CVE-2019-11507
Published: 2019-05-08
Description: In Pulse Secure Pulse Connect Secure (PCS) 8.3.x before 8.3R7.1 and 9.0.x before 9.0R3, an XSS issue has been found on the Application Launcher page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/108073; https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/; https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf
CVE: CVE-2019-11508
Published: 2019-05-08
Description: In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an authenticated attacker (via the admin web interface) can exploit Directory Traversal to execute arbitrary code on the appliance.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/108073; https://devco.re/blog/2019/09/02/attacking-ssl-vpn-part-3-the-golden-Pulse-Secure-ssl-vpn-rce-chain-with-Twitter-as-case-study/; https://i.blackhat.com/USA-19/Wednesday/us-19-Tsai-Infiltrating-Corporate-Intranet-Like-NSA.pdf
CVE: CVE-2019-11510
Published: 2019-05-08
Description: In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability .
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-22, CWE-22
References: http://packetstormsecurity.com/files/154176/Pulse-Secure-SSL-VPN-8.1R15.1-8.2-8.3-9.0-Arbitrary-File-Disclosure.html; http://packetstormsecurity.com/files/154231/Pulse-Secure-SSL-VPN-File-Disclosure-NSE.html; http://www.securityfocus.com/bid/108073
CVE: CVE-2019-11550
Published: 2019-05-08
Description: Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper Certificate Validation.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://support.citrix.com/article/CTX247735; https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin; https://support.citrix.com/article/CTX247735
CVE: CVE-2019-2043
Published: 2019-05-08
Description: In SmsDefaultDialog.onStart of SmsDefaultDialog.java, there is a possible escalation of privilege due to an overlay attack. This could lead to local escalation of privilege, granting privileges to a local app without the user's informed consent, with no additional privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 Android ID: A-120484087
CVSS Score: 7.3 (HIGH)
CWE: CWE-1188
References: http://www.securityfocus.com/bid/108240; https://source.android.com/security/bulletin/2019-05-01; http://www.securityfocus.com/bid/108240
CVE: CVE-2019-2044
Published: 2019-05-08
Description: In MakeMP>G4VideoCodecSpecificData of APacketSource.cpp, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution in the media server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 Android ID: A-123701862
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-05-01; https://source.android.com/security/bulletin/2019-05-01