rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-18233 
In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special characters in the error response, allowing attackers to use a reflected XSS attack.
Problem types: cwe_id: CWE-79
description: IMPROPER NEUTRALIZATION OF INPUT DURING WEB PAGE GENERATION CWE-79
Affected products: vendor: n/a
product: Advantech Spectre RT Industrial Routers ERT351
Published: 2021-03-17T18:08:39.000Z
CVE-2019-18234 
Equinox Control Expert all versions, is vulnerable to an SQL injection attack, which may allow an attacker to remotely execute arbitrary code.
Problem types: cwe_id: CWE-89
description: IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS USED IN AN SQL COMMAND (SQL INJECTION) CWE-89
Affected products: vendor: n/a
product: Equinox Control Expert
Published: 2019-12-23T18:36:38.000Z
CVE-2019-18235 
Advantech Spectre RT ERT351 Versions 5.1.3 and prior has insufficient login authentication parameters required for the web application may allow an attacker to gain full access using a brute-force password attack.
Problem types: cwe_id: CWE-307
description: IMPROPER RESTRICTION OF EXCESSIVE AUTHENTICATION ATTEMPTS CWE-307
Affected products: vendor: n/a
product: Advantech Spectre RT ERT351 Versions 5.1.3 and prior
Published: 2021-03-17T18:13:47.000Z
CVE-2019-18236 
Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.5_20190129 processes project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
Problem types: cwe_id: CWE-121
description: STACK-BASED BUFFER OVERFLOW CWE-121
Affected products: vendor: n/a
product: WECON PLC Editor
Published: 2019-12-23T19:23:04.000Z
CVE-2019-18238 
In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is stored in configuration files without encryption, which may allow an attacker to access an administrative account.
Problem types: cwe_id: CWE-312
description: CLEARTEXT STORAGE OF SENSITIVE INFORMATION CWE-312
Affected products: vendor: n/a
product: Moxa ioLogik 2500 series firmware, Version 3.0 or lower, IOxpress configuration utility, Version 2.3.0 or lower
Published: 2020-02-26T21:19:56.000Z
CVE-2019-18240 
In Fuji Electric V-Server 4.0.6 and prior, several heap-based buffer overflows have been identified, which may allow an attacker to remotely execute arbitrary code.
Problem types: cwe_id: CWE-122
description: HEAP-BASED BUFFER OVERFLOW CWE-122
Affected products: vendor: n/a
product: Fuji Electric V-Server 4.0.6 and prior
Published: 2019-11-13T22:21:01.000Z
CVE-2019-18241 
In Philips IntelliBridge EC40 and EC80, IntelliBridge EC40 Hub all versions, and IntelliBridge EC80 Hub all versions, the SSH server running on the affected products is configured to allow weak ciphers. This could enable an unauthorized attacker with access to the network to capture and replay the session and gain unauthorized access to the EC40/80 hub.
Problem types: cwe_id: CWE-326
description: INADEQUATE ENCRYPTION STRENGTH CWE-326
Affected products: vendor: n/a
product: Philips IntelliBridge EC40 and EC80
Published: 2019-11-25T23:25:05.000Z
CVE-2019-18242 
In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, frequent and multiple requests for short-term use may cause the web server to fail.
Problem types: cwe_id: CWE-941
description: INCORRECTLY SPECIFIED DESTINATION IN A COMMUNICATION CHANNEL CWE-941
Affected products: vendor: n/a
product: Moxa ioLogik 2500 series firmware, Version 3.0 or lower, IOxpress configuration utility, Version 2.3.0 or lower
Published: 2020-03-24T16:53:32.000Z
CVE-2019-18243 
HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through the registry. This may allow privilege escalation.
Problem types: cwe_id: CWE-732
description: INCORRECT PERMISSION ASSIGNMENT FOR CRITICAL RESOURCE CWE-732
Affected products: vendor: n/a
product: HMI/SCADA iFIX
Published: 2021-02-18T15:02:34.000Z
CVE-2019-18244 
In OSIsoft PI System multiple products and versions, a local attacker could view sensitive information in log files when service accounts are customized during installation or upgrade of PI Vision. The update fixes a previously reported issue.
Problem types: cwe_id: CWE-532
description: INSERTION OF SENSITIVE INFORMATION INTO LOG FILE CWE-532
Affected products: vendor: n/a
product: OSIsoft PI System multiple products and versions
Published: 2020-01-15T18:50:00.000Z
CVE-2019-18245 
Reliable Controls LicenseManager versions 3.4 and prior may allow an authenticated user to insert malicious code into the system root path, which may allow execution of code with elevated privileges of the application.
Problem types: cwe_id: CWE-428
description: UNQUOTED SEARCH PATH OR ELEMENT CWE-428
Affected products: vendor: n/a
product: Reliable Controls LicenseManager
Published: 2019-12-11T22:17:46.000Z
CVE-2019-18246 
BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication infrastructure.
Problem types: cwe_id: CWE-287
description: IMPROPER AUTHENTICATION CWE-287
Affected products: vendor: n/a
product: BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM
Published: 2020-06-29T13:58:20.000Z
CVE-2019-18247 
An attacker may use a specially crafted message to force Relion 650 series (versions 1.3.0.5 and prior) or Relion 670 series (versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior) to reboot, which could cause a denial of service.
Problem types: cwe_id: CWE-20
description: IMPROPER INPUT VALIDATION CWE-20
Affected products: vendor: n/a
product: Relion 650 and 670 Series
Published: 2019-11-27T22:03:01.000Z
CVE-2019-18248 
BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypted communication channel. An attacker can disclose the product’s client credentials for connecting to the BIOTRONIK Remote Communication infrastructure.
Problem types: cwe_id: CWE-319
description: CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-319
Affected products: vendor: n/a
product: BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM
Published: 2020-06-29T13:58:22.000Z
CVE-2019-18249 
Reliable Controls MACH-ProWebCom/Sys, all versions prior to 2.15 (Firmware versions prior to 8.26.4), may allow attacker to execute commands on behalf of the user when an authenticated user clicks on a malicious link.
Problem types: cwe_id: CWE-79
description: IMPROPER NEUTRALIZATION OF INPUT DURING WEB PAGE GENERATION ('CROSS-SITE SCRIPTING') CWE-79
Affected products: vendor: n/a
product: Reliable Controls MACH-ProWebCom/Sys
Published: 2019-12-24T14:39:35.000Z
CVE-2019-18250 
In all versions of ABB Power Generation Information Manager (PGIM) and Plant Connect, the affected product is vulnerable to authentication bypass, which may allow an attacker to remotely bypass authentication and extract credentials from the affected device.
Problem types: cwe_id: CWE-288
description: AUTHENTICATION BYPASS USING AN ALTERNATE PATH OR CHANNEL CWE-288
Affected products: vendor: n/a
product: ABB Power Generation Information Manager (PGIM) and Plant Connect All Versions
Published: 2019-11-25T23:13:29.000Z
CVE-2019-18251 
In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version of Teamviewer is vulnerable to an obsolete function vulnerability requiring user interaction to exploit.
Problem types: cwe_id: CWE-477
description: USE OF OBSOLETE FUNCTION CWE-477
Affected products: vendor: n/a
product: Omron CX-Supervisor
Published: 2019-11-25T23:29:02.000Z
CVE-2019-18252 
BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes. An attacker with adjacent access to the CardioMessenger can disclose its credentials used for connecting to the BIOTRONIK Remote Communication infrastructure.
Problem types: cwe_id: CWE-287
description: IMPROPER AUTHENTICATION CWE-287
Affected products: vendor: n/a
product: BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM
Published: 2020-06-29T13:58:25.000Z
CVE-2019-18253 
An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series (versions 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1, and prior) outside the intended directory.
Problem types: cwe_id: CWE-22
description: IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-22
Affected products: vendor: n/a
product: Relion 670 Series
Published: 2019-11-27T22:05:47.000Z
CVE-2019-18254 
BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to the CardioMessenger can disclose medical measurement data and the serial number from the implanted cardiac device the CardioMessenger is paired with.
Problem types: cwe_id: CWE-311
description: MISSING ENCRYPTION OF SENSITIVE DATA CWE-311
Affected products: vendor: n/a
product: BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM
Published: 2020-06-29T13:56:26.000Z
CVE-2019-18255 
HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through section objects. This may allow privilege escalation.
Problem types: cwe_id: CWE-732
description: INCORRECT PERMISSION ASSIGNMENT FOR CRITICAL RESOURCE CWE-732
Affected products: vendor: n/a
product: HMI/SCADA iFIX
Published: 2021-02-18T15:00:54.000Z
CVE-2019-18256 
BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attacker with physical access to the CardioMessenger can use these credentials for network authentication and decryption of local data in transit.
Problem types: cwe_id: CWE-257
description: STORING PASSWORDS IN A RECOVERABLE FORMAT CWE-257
Affected products: vendor: n/a
product: BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM
Published: 2020-06-29T13:56:28.000Z
CVE-2019-18257 
In Advantech DiagAnywhere Server, Versions 3.07.11 and prior, multiple stack-based buffer overflow vulnerabilities exist in the file transfer service listening on the TCP port. Successful exploitation could allow an unauthenticated attacker to execute arbitrary code with the privileges of the user running DiagAnywhere Server.
Problem types: cwe_id: CWE-121
description: STACK-BASED BUFFER OVERFLOW CWE-121
Affected products: vendor: n/a
product: Advantech DiagAnywhere Server
Published: 2019-12-17T22:28:49.000Z
CVE-2019-18259 
In Omron PLC CJ series, all versions and Omron PLC CS series, all versions, an attacker could spoof arbitrary messages or execute commands.
Problem types: cwe_id: CWE-290
description: AUTHENTICATION BYPASS BY SPOOFING CWE-290
Affected products: vendor: n/a
product: Omron PLC CJ and CS Series
Published: 2019-12-16T19:19:04.000Z
CVE-2019-18261 
In Omron PLC CS series, all versions, Omron PLC CJ series, all versions, and Omron PLC NJ series, all versions, the software does not implement sufficient measures to prevent multiple failed authentication attempts within in a short time frame, making it more susceptible to brute force attacks.
Problem types: cwe_id: CWE-307
description: IMPROPER RESTRICTION OF EXCESSIVE AUTHENTICATION ATTEMPTS CWE-307
Affected products: vendor: n/a
product: Omron PLC CJ, CS and NJ Series
Published: 2019-12-16T19:27:58.000Z
CVE-2019-18263 
An issue was found in Philips Veradius Unity, Pulsera, and Endura Dual WAN Router, Veradius Unity (718132) with wireless option (shipped between 2016-August 2018), Veradius Unity (718132) with ViewForum option (shipped between 2016-August 2018), Pulsera (718095) and Endura (718075) with wireless option (shipped between 26-June-2017 through 07-August 2018), Pulsera (718095) and Endura (718075) with ViewForum option (shipped between 26-June-2017 through 07-August 2018). The router software uses an encryption scheme that is not strong enough for the level of protection required.
Problem types: cwe_id: CWE-326
description: INADEQUATE ENCRYPTION STRENGTH CWE-326
Affected products: vendor: n/a
product: Philips Veradius Unity, Pulsera, and Endura Dual WAN Router
Published: 2019-12-20T15:27:16.000Z
CVE-2019-18265 
Digital Alert Systems’ DASDEC software prior to version 4.1 contains a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the SSH username, username field of the login page, or via the HTTP host header. The injected content is stored in logs and rendered when viewed in the web application.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Digital Alert Systems
product: DASDEC
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.7
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
version: 3.1
Credits: lang: en
value: Ken Pyle
Published: 2022-11-30T22:58:26.586Z
CVE-2019-18267 
An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior. An attacker can inject arbitrary Javascript in a specially crafted HTTP request that may be reflected back in the HTTP response. The device is also vulnerable to a stored cross-site scripting vulnerability that may allow session hijacking, disclosure of sensitive data, cross-site request forgery (CSRF) attacks, and remote code execution.
Problem types: cwe_id: CWE-79
description: IMPROPER NEUTRALIZATION OF INPUT DURING WEB PAGE GENERATION ('CROSS-SITE SCRIPTING') CWE-79
Affected products: vendor: n/a
product: GE S2020/S2020G Fast Switch 61850
Published: 2019-12-18T19:37:46.000Z
CVE-2019-18269 
Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability.
Problem types: cwe_id: CWE-412
description: CWE-412 Unrestricted Externally Accessible Lock
Affected products: vendor: Omron
product: Omron PLC CJ Series
default_status: unaffected
vendor: Omron
product: Omron PLC CS series
default_status: unaffected
vendor: Omron
product: Omron PLC NX1P2 series
default_status: unaffected
Credits: lang: en
value: Jipeng You (XDU) and n0b0dy reported these vulnerabilities to CISA.
Published: 2019-12-16T19:21:31.000Z
CVE-2019-18271 
OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to a cross-site request forgery that may be introduced on the PI Vision administration site.
Problem types: cwe_id: CWE-352
description: CROSS-SITE REQUEST FORGERY (CSRF) CWE-352
Affected products: vendor: n/a
product: OSIsoft PI Vision
Published: 2020-01-15T18:40:25.000Z
CVE-2019-18273 
OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 SP1. The affected product is vulnerable to cross-site scripting, which may allow invalid input to be introduced.
Problem types: cwe_id: CWE-79
description: IMPROPER NEUTRALIZATION OF INPUT DURING WEB PAGE GENERATION ('CROSS-SITE SCRIPTING') CWE-79
Affected products: vendor: n/a
product: OSIsoft PI Vision
Published: 2020-01-15T18:44:13.000Z
CVE-2019-18275 
OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access control, which may return unauthorized tag data when viewing analysis data reference attributes.
Problem types: cwe_id: CWE-284
description: IMPROPER ACCESS CONTROL CWE-284
Affected products: vendor: n/a
product: OSIsoft PI Vision
Published: 2020-01-15T18:36:52.000Z
CVE-2019-18276 
An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its real UID, it will drop privileges by setting its effective UID to its real UID. However, it does so incorrectly. On Linux and other systems that support "saved UID" functionality, the saved UID is not dropped. An attacker with command execution in the shell can use "enable -f" for runtime loading of a new builtin, which can be a shared object that calls setuid() and therefore regains privileges. However, binaries running with an effective UID of 0 are unaffected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-28T00:27:51.000Z
CVE-2019-18277 
A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the "chunked" value were not being correctly rejected. The impact was limited but if combined with the "http-reuse always" setting, it could be used to help construct an HTTP request smuggling attack against a vulnerable component employing a lenient parser that would ignore the content-length header as soon as it saw a transfer-encoding one (even if not entirely valid according to the specification).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-23T13:07:01.000Z
CVE-2019-18278 
When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqt_plugin!vlc_entry_license__3_0_0f+0x00000000003b9aba. NOTE: the VideoLAN security team indicates that they have not been contacted, and have no way of reproducing this issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-23T13:22:26.000Z
CVE-2019-18279 
In Phoenix SCT WinFlash 1.1.12.0 through 1.5.74.0, the included drivers could be used by a malicious Windows application to gain elevated privileges. Adverse impacts are limited to the Windows environment and there is no known direct impact to the UEFI firmware. This was fixed in late June 2019.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-13T17:34:20.000Z
CVE-2019-18280 
Sourcecodester Online Grading System 1.0 is affected by a Cross Site Request Forgery vulnerability due to a lack of CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code via a crafted HTML page, as demonstrated by a Create User action at the admin/modules/user/controller.php?action=add URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-23T13:40:34.000Z
CVE-2019-18281 
An out-of-bounds memory access in the generateDirectionalRuns() function in qtextengine.cpp in Qt qtbase 5.11.x and 5.12.x before 5.12.5 allows attackers to cause a denial of service by crashing an application via a text file containing many directional characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-23T14:03:53.000Z
CVE-2019-18282 
The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash (instead of siphash) is used. The hashrnd value remains the same starting from boot time, and can be inferred by an attacker. This affects net/core/flow_dissector.c and related code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-16T15:22:58.000Z
CVE-2019-18283 
A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The AdminService is available without authentication on the Application Server. An attacker can gain remote code execution by sending specifically crafted objects to one of its functions. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
Problem types: cwe_id: CWE-502
description: CWE-502: Deserialization of Untrusted Data
Affected products: vendor: Siemens
product: SPPA-T3000 Application Server
Published: 2019-12-12T19:08:47.000Z
CVE-2019-18284 
A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The AdminService is available without authentication on the Application Server. An attacker can use methods exposed via this interface to receive password hashes of other users and to change user passwords. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
Problem types: cwe_id: CWE-287
description: CWE-287: Improper Authentication
Affected products: vendor: Siemens
product: SPPA-T3000 Application Server
Published: 2019-12-12T19:08:47.000Z
CVE-2019-18285 
A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The RMI communication between the client and the Application Server is unencrypted. An attacker with access to the communication channel can read credentials of a valid user. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
Problem types: cwe_id: CWE-319
description: CWE-319: Cleartext Transmission of Sensitive Information
Affected products: vendor: Siemens
product: SPPA-T3000 Application Server
Published: 2019-12-12T19:08:47.000Z
CVE-2019-18286 
A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The Application Server exposes directory listings and files containing sensitive information. This vulnerability is independent from CVE-2019-18287. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
Problem types: cwe_id: CWE-287
description: CWE-287: Improper Authentication
Affected products: vendor: Siemens
product: SPPA-T3000 Application Server
Published: 2019-12-12T19:08:47.000Z
CVE-2019-18287 
A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The Application Server exposes directory listings and files containing sensitive information. This vulnerability is independent from CVE-2019-18286. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
Problem types: cwe_id: CWE-287
description: CWE-287: Improper Authentication
Affected products: vendor: Siemens
product: SPPA-T3000 Application Server
Published: 2019-12-12T19:08:47.000Z
CVE-2019-18288 
A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with valid authentication at the RMI interface could be able to gain remote code execution through an unsecured file upload. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
Problem types: cwe_id: CWE-434
description: CWE-434: Unrestricted Upload of File with Dangerous Type
Affected products: vendor: Siemens
product: SPPA-T3000 Application Server
Published: 2019-12-12T19:08:47.000Z