rainbutterfly/cve_corpus huggingface dataset:
CVE-2015-6379 
The XML parser in the management interface in Cisco Adaptive Security Appliance (ASA) Software 8.4 allows remote authenticated users to cause a denial of service (device crash) via a crafted XML document, aka Bug ID CSCut14223.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-25T02:00:00.000Z
CVE-2015-6380 
An unspecified script in the web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote authenticated users to execute arbitrary OS commands via crafted parameters, aka Bug ID CSCux10622.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-24T02:00:00.000Z
CVE-2015-6382 
Cisco ASR 5000 devices with software 16.0(900) allow remote attackers to cause a denial of service (telnetd process restart) via a TELNET connection, aka Bug ID CSCuv25815.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-26T02:00:00.000Z
CVE-2015-6383 
Cisco IOS XE 15.4(3)S on ASR 1000 devices improperly loads software packages, which allows local users to bypass license restrictions and obtain certain root privileges by using the CLI to enter crafted filenames, aka Bug ID CSCuv93130.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-03T02:00:00.000Z
CVE-2015-6384 
The Cisco WebEx Meetings application before 8.5.1 for Android improperly initializes custom application permissions, which allows attackers to bypass intended access restrictions via a crafted application, aka Bug ID CSCuw86442.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-05T02:00:00.000Z
CVE-2015-6385 
The publish-event event-manager feature in Cisco IOS 15.5(2)S and 15.5(3)S on Cloud Services Router 1000V devices allows local users to execute arbitrary commands with root privileges by leveraging administrative access to enter crafted environment variables, aka Bug ID CSCux14943.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-01T11:00:00.000Z
CVE-2015-6386 
The passthrough FTP feature on Cisco Web Security Appliance (WSA) devices with software 8.0.7-142 and 8.5.1-021 allows remote attackers to cause a denial of service (CPU consumption) via FTP sessions in which the control connection is ended after data transfer, aka Bug ID CSCut94150.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-01T11:00:00.000Z
CVE-2015-6387 
Cross-site scripting (XSS) vulnerability in Cisco Unified Computing System (UCS) Central Software 1.3(0.1) allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCux33573.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-05T02:00:00.000Z
CVE-2015-6388 
Cisco Unified Computing System (UCS) Central software 1.3(0.1) allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted request, aka Bug ID CSCux33575.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-05T02:00:00.000Z
CVE-2015-6389 
Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session and leveraging knowledge of this account's password, aka Bug ID CSCus62707.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-13T02:00:00.000Z
CVE-2015-6390 
Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unity Connection 9.1(1.10) allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCup92741.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-03T02:00:00.000Z
CVE-2015-6391 
Cisco Unified SIP 3905 phones allow remote attackers to cause a denial of service (resource consumption and functionality loss) via a large amount of network traffic, aka Bug ID CSCuh51331.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-05T02:00:00.000Z
CVE-2015-6392 
Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device crash) via crafted IPv4 DHCP packets to the (1) DHCPv4 relay agent or (2) smart relay agent, aka Bug IDs CSCuq24603, CSCur93159, CSCus21693, and CSCut76171.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-06T01:00:00.000Z
CVE-2015-6393 
Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device crash) via malformed IPv4 DHCP packets to the DHCPv4 relay agent, aka Bug IDs CSCuq39250, CSCus21733, CSCus21739, CSCut76171, and CSCux67182.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-06T10:00:00.000Z
CVE-2015-6394 
The kernel in Cisco NX-OS 5.2(9)N1(1) on Nexus 5000 devices allows local users to cause a denial of service (device crash) via crafted USB parameters, aka Bug ID CSCus89408.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-05T02:00:00.000Z
CVE-2015-6395 
Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configuration via a direct request, aka Bug ID CSCuw48188.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-12T11:00:00.000Z
CVE-2015-6396 
The CLI command parser on Cisco RV110W, RV130W, and RV215W devices allows local users to execute arbitrary shell commands as an administrator via crafted parameters, aka Bug IDs CSCuv90134, CSCux58161, and CSCux73567.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-08T00:00:00.000Z
CVE-2015-6397 
Cisco RV110W, RV130W, and RV215W devices have an incorrect RBAC configuration for the default account, which allows remote authenticated users to obtain root access via a login session with that account, aka Bug IDs CSCuv90139, CSCux58175, and CSCux73557.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-08T00:00:00.000Z
CVE-2015-6398 
Cisco Nexus 9000 Application Centric Infrastructure (ACI) Mode switches with software before 11.0(1c) allow remote attackers to cause a denial of service (device reload) via an IPv4 ICMP packet with the IP Record Route option, aka Bug ID CSCuq57512.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-07T11:00:00.000Z
CVE-2015-6399 
The Supervisor 1.0.0.0 and 1.0.0.1 in Cisco Integrated Management Controller (IMC) before 2.0(9) allows remote authenticated users to cause a denial of service (IP interface outage) via crafted parameters in an HTTP request, aka Bug ID CSCuv38286.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-15T02:00:00.000Z
CVE-2015-6400 
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 10.5(1a) allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug ID CSCuv25547.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-13T02:00:00.000Z
CVE-2015-6401 
Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11, and 5.7.1 allow remote attackers to bypass an intended authentication requirement and execute unspecified administrative functions via a crafted HTTP request, aka Bug ID CSCux24941.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-14T02:00:00.000Z
CVE-2015-6402 
Cross-site scripting (XSS) vulnerability in the management interface on Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11, and 5.7.1 allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCux24935.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-14T02:00:00.000Z
CVE-2015-6403 
The TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.5.7 improperly validates firmware-image file integrity, which allows local users to load a Trojan horse image by leveraging shell access, aka Bug ID CSCut67400.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-15T02:00:00.000Z
CVE-2015-6404 
Cisco Hosted Collaboration Mediation Fulfillment 10.6(3) does not use RBAC, which allows remote authenticated users to obtain sensitive credential information by leveraging admin access and making SOAP API requests, aka Bug ID CSCuw84374.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-15T02:00:00.000Z
CVE-2015-6405 
Cross-site request forgery (CSRF) vulnerability in Cisco Emergency Responder 10.5(1) and 10.5(1a) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv26501.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-13T02:00:00.000Z
CVE-2015-6406 
Directory traversal vulnerability in the Tools menu in Cisco Emergency Responder 10.5(1.10000.5) allows remote authenticated users to write to arbitrary files via a crafted filename, aka Bug ID CSCuv21781.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-13T02:00:00.000Z
CVE-2015-6407 
Cisco Emergency Responder 10.5(3.10000.9) allows remote attackers to upload files to arbitrary locations via a crafted parameter, aka Bug ID CSCuv25501.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-13T02:00:00.000Z
CVE-2015-6408 
Cross-site request forgery (CSRF) vulnerability in Cisco Unity Connection 11.5(0.98) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCux24578.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-12T16:00:00.000Z
CVE-2015-6409 
Cisco Jabber 10.6.x, 11.0.x, and 11.1.x on Windows allows man-in-the-middle attackers to conduct STARTTLS downgrade attacks and trigger cleartext XMPP sessions via unspecified vectors, aka Bug ID CSCuw87419.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-26T22:00:00.000Z
CVE-2015-6410 
The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager mishandles edge-device identity validation, which allows remote attackers to bypass intended call-reception and call-setup restrictions by spoofing a user, aka Bug ID CSCuu97283.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-14T02:00:00.000Z
CVE-2015-6411 
Cisco FirePOWER Management Center 5.4.1.3, 6.0.0, and 6.0.1 provides verbose responses to requests for help files, which allows remote attackers to obtain potentially sensitive version information by reading an unspecified field, aka Bug ID CSCux37061.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-15T02:00:00.000Z
CVE-2015-6412 
Cisco Modular Encoding Platform D9036 Software before 02.04.70 has hardcoded (1) root and (2) guest passwords, which makes it easier for remote attackers to obtain access via an SSH session, aka Bug ID CSCut88070.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-22T11:00:00.000Z
CVE-2015-6413 
Cisco TelePresence Video Communication Server (VCS) Expressway X8.6 allows remote authenticated users to bypass intended read-only restrictions and upload Tandberg Linux Package (TLP) files by visiting an administrative page, aka Bug ID CSCuw55651.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-13T02:00:00.000Z
CVE-2015-6414 
Cisco TelePresence Video Communication Server (VCS) X8.6 uses the same encryption key across different customers' installations, which makes it easier for local users to defeat cryptographic protection mechanisms by leveraging knowledge of a key from another installation, aka Bug ID CSCuw64516.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-13T02:00:00.000Z
CVE-2015-6415 
Cisco Unified Computing System (UCS) 2.2(3f)A on Fabric Interconnect 6200 devices allows remote attackers to cause a denial of service (CPU consumption or device outage) via a SYN flood on the SSH port during the booting process, aka Bug ID CSCuu81757.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-12T16:00:00.000Z
CVE-2015-6416 
Cross-site scripting (XSS) vulnerability in Cisco Unified Email Interaction Manager and Unified Web Interaction Manager 11.0(1) allows remote attackers to inject arbitrary web script or HTML a crafted URL, aka Bug ID CSCuw24479.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-14T02:00:00.000Z
CVE-2015-6417 
Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.4.0 and earlier does not always use RBAC for backend database access, which allows remote authenticated users to read or write to database entries via (1) the GUI or (2) a crafted HTTP request, aka Bug ID CSCuv87025.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-12T11:00:00.000Z
CVE-2015-6418 
The random-number generator on Cisco Small Business RV routers 4.x and SA500 security appliances 2.2.07 does not have sufficient entropy, which makes it easier for remote attackers to determine a TLS key pair via unspecified computations upon handshake key-exchange data, aka Bug ID CSCus15224.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-13T02:00:00.000Z
CVE-2015-6419 
Cisco FireSIGHT Management Center with software 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote authenticated users to read arbitrary files via a crafted GET request, aka Bug ID CSCur25410.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-12T16:00:00.000Z
CVE-2015-6420 
Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Service Provider; Unified Computing; Voice and Unified Communications Devices; Video, Streaming, TelePresence, and Transcoding Devices; Wireless; and Cisco Hosted Services products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-15T02:00:00.000Z
CVE-2015-6421 
cifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and Virtual WAAS (vWAAS) devices 5.x before 5.3.5d and 5.4 and 5.5 before 5.5.3 allows remote attackers to cause a denial of service (resource consumption and device reload) via crafted network traffic, aka Bug ID CSCus85330.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-27T22:00:00.000Z
CVE-2015-6422 
The self-service application in Cisco Unified Communications Domain Manager (CUCDM) 10.6(1) allows remote authenticated users to cause a denial of service (subapplication outage) via malformed requests, aka Bug ID CSCuu10981.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-14T02:00:00.000Z
CVE-2015-6423 
The DCERPC Inspection implementation in Cisco Adaptive Security Appliance (ASA) Software 9.4.1 through 9.5.1 allows remote authenticated users to bypass an intended DCERPC-only ACL by sending arbitrary network traffic, aka Bug ID CSCuu67782.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-15T02:00:00.000Z
CVE-2015-6424 
The boot manager in Cisco Application Policy Infrastructure Controller (APIC) 1.1(0.920a) allows local users to bypass intended access restrictions and obtain single-user-mode root access via unspecified vectors, aka Bug ID CSCuu83985.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-18T11:00:00.000Z
CVE-2015-6425 
The WebApplications Identity Management subsystem in Cisco Unified Communications Manager 10.5(0.98000.88) allows remote attackers to cause a denial of service (subsystem outage) via invalid session tokens, aka Bug ID CSCul83786.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-16T15:00:00.000Z
CVE-2015-6426 
Cisco Prime Network Services Controller 3.0 allows local users to bypass intended access restrictions and execute arbitrary commands via additional parameters to an unspecified command, aka Bug ID CSCus99427.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-18T11:00:00.000Z
CVE-2015-6427 
Cisco FireSIGHT Management Center allows remote attackers to bypass the HTTP attack detection feature and avoid triggering Snort IDS rules via an SSL session that is mishandled after decryption, aka Bug ID CSCux53437.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-18T11:00:00.000Z
CVE-2015-6428 
Cisco DPQ3925 devices with EDVA r1 Base allow remote attackers to obtain sensitive information via a crafted HTTP request, aka Bug ID CSCuv03958.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-18T11:00:00.000Z
CVE-2015-6429 
The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service (IPsec connection termination) via a crafted IKEv1 packet to a tunnel endpoint, aka Bug ID CSCuw08236.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-19T11:00:00.000Z
CVE-2015-6431 
Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service (device reload) via a packet with the 00-00-00-00-00-00 source MAC address, aka Bug ID CSCux48405.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-23T02:00:00.000Z
CVE-2015-6432 
Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements (PCEs) for OSPF LSA opaque area updates, which allows remote attackers to cause a denial of service (device reload) via a crafted update, aka Bug ID CSCuw83486.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-05T02:00:00.000Z
CVE-2015-6433 
SQL injection vulnerability in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-08T02:00:00.000Z
CVE-2015-6434 
Cisco Prime Infrastructure does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCux64856.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-08T02:00:00.000Z
CVE-2015-6435 
An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-22T11:00:00.000Z
CVE-2015-6454 
Everest PeakHMI before 8.7.0.2, when the video server is used, allows remote attackers to cause a denial of service (incorrect pointer dereference and daemon crash) via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-25T01:00:00.000Z
CVE-2015-6456 
GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 have hardcoded credentials for a support account, which allows remote attackers to obtain administrative access, and consequently execute arbitrary code, by leveraging knowledge of the password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T22:00:00.000Z
CVE-2015-6457 
Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.
Problem types: cwe_id: CWE-122
description: Heap-based buffer overflow CWE-122
Affected products: vendor: Moxa
product: SoftCMS
Published: 2019-03-21T19:12:50.000Z
CVE-2015-6458 
Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.
Problem types: cwe_id: CWE-120
description: Classic buffer overflow CWE-120
Affected products: vendor: Moxa
product: SoftCMS
Published: 2019-03-21T19:23:47.000Z
CVE-2015-6459 
Absolute path traversal vulnerability in the download feature in FileDownloadServlet in GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 allows remote attackers to read or delete arbitrary files via a full pathname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T22:00:00.000Z
CVE-2015-6460 
Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execute arbitrary code via opcode (1) 0x3ef or (2) 0x3f0.
Problem types: description: n/a
Affected products: vendor: CODESYS
product: 3S-Smart CODESYS Gateway Server
Published: 2015-09-18T22:00:00.000Z
CVE-2015-6461 
Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC web server, which, when launched, will result in the browser redirecting to a remote file via a Java script loaded with the web page.
Problem types: cwe_id: CWE-98
description: Remote file inclusion CWE-98
Affected products: vendor: n/a
product: Schneider Electric Modicon PLC
Published: 2019-03-21T18:17:48.000Z
CVE-2015-6462 
Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC client browser.
Problem types: cwe_id: CWE-79
description: Cross-site scripting CWE-79
Affected products: vendor: n/a
product: Schneider Electric Modicon PLC
Published: 2019-03-21T18:44:47.000Z
CVE-2015-6463 
CodeWrights HART Comm DTM components, as used with Endress+Hauser FieldCare, allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a longtag XML schema containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-28T01:00:00.000Z
CVE-2015-6464 
The administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to bypass a read-only protection mechanism by using Firefox with a web-developer plugin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-11T16:00:00.000Z