Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-15422 State: PUBLISHED Published: 2020-07-28T17:01:07 Last Updated: 2024-08-04T13:15:20.692Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the archivo parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulner
properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9731. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-739/
CVE ID: CVE-2020-15423 State: PUBLISHED Published: 2020-07-28T17:01:07 Last Updated: 2024-08-04T13:15:20.706Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the dominio parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulner
properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9732. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-740/
CVE ID: CVE-2020-15424 State: PUBLISHED Published: 2020-07-28T17:01:08 Last Updated: 2024-08-04T13:15:20.711Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the domain parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnera
properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9735. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-741/
CVE ID: CVE-2020-15425 State: PUBLISHED Published: 2020-07-28T17:01:08 Last Updated: 2024-08-04T13:15:20.614Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute
a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9742. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-742/
CVE ID: CVE-2020-15426 State: PUBLISHED Published: 2020-07-28T17:01:08 Last Updated: 2024-08-04T13:15:20.758Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_migration_cpanel.php. When parsing the serverip parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this v
s not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9709. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-743/
CVE ID: CVE-2020-15427 State: PUBLISHED Published: 2020-07-28T17:01:09 Last Updated: 2024-08-04T13:15:20.695Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_disk_usage.php. When parsing the folderName parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulne
t properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9713. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-744/
CVE ID: CVE-2020-15428 State: PUBLISHED Published: 2020-07-28T17:01:09 Last Updated: 2024-08-04T13:15:20.712Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_crons.php. When parsing the line parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to
validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9714. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-745/
CVE ID: CVE-2020-15429 State: PUBLISHED Published: 2020-07-28T17:01:10 Last Updated: 2024-08-04T13:15:20.693Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_crons.php. When parsing the user parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to
validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9716. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-746/
CVE ID: CVE-2020-15430 State: PUBLISHED Published: 2020-07-28T17:01:10 Last Updated: 2024-08-04T13:15:20.732Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the username parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vuln
ot properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9736. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-747/
CVE ID: CVE-2020-15431 State: PUBLISHED Published: 2020-07-28T17:01:11 Last Updated: 2024-08-04T13:15:20.813Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_crons.php. When parsing the user parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to
validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9740. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-748/
CVE ID: CVE-2020-15432 State: PUBLISHED Published: 2020-07-28T17:01:11 Last Updated: 2024-08-04T13:15:20.820Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_migration_cpanel.php. When parsing the filespace parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this
es not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9743. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-749/
CVE ID: CVE-2020-15433 State: PUBLISHED Published: 2020-07-28T17:01:12 Last Updated: 2024-08-04T13:15:20.716Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_php_pecl.php. When parsing the phpversion parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnera
properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9715. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-750/
CVE ID: CVE-2020-15434 State: PUBLISHED Published: 2020-07-28T17:01:12 Last Updated: 2024-08-04T13:15:20.948Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_php_pecl.php. When parsing the canal parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerabilit
rly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9745. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-751/
CVE ID: CVE-2020-15435 State: PUBLISHED Published: 2020-07-28T17:01:12 Last Updated: 2024-08-04T13:15:20.800Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the service_start parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vul
not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9719. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-752/
CVE ID: CVE-2020-15436 State: PUBLISHED Published: 2020-11-23T20:08:17 Last Updated: 2024-08-04T13:15:20.795Z Vendors: n/a Products: linux kernel Problem Types: Use After Free Description: Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field. Additional Analyst Notes: - CVE Program Container: References: - https://lkml.org/lkml/2020/6/7/379 - https://security.netapp.com/advisory/ntap-20201218-0002/
CVE ID: CVE-2020-15437 State: PUBLISHED Published: 2020-11-23T20:10:28 Last Updated: 2024-08-04T13:15:20.694Z Vendors: n/a Products: linux kernel Problem Types: NULL Pointer Dereference Description: The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:serial8250_isa_init_ports() that allows local users to cause a denial of service by using the p->serial_in pointer which uninitialized. Additional Analyst Notes: - CVE Program Container: References: - https://lkml.org/lkml/2020/7/21/80
CVE ID: CVE-2020-15438 State: REJECTED Published: 2021-05-27T20:13:09 Last Updated: 2021-05-27T20:13:09 Description: No description available.
CVE ID: CVE-2020-15439 State: REJECTED Published: 2021-05-27T20:13:10 Last Updated: 2021-05-27T20:13:10 Description: No description available.
CVE ID: CVE-2020-15440 State: REJECTED Published: 2021-05-27T20:13:10 Last Updated: 2021-05-27T20:13:10 Description: No description available.
CVE ID: CVE-2020-15441 State: REJECTED Published: 2021-05-27T20:13:10 Last Updated: 2021-05-27T20:13:10 Description: No description available.
CVE ID: CVE-2020-15442 State: REJECTED Published: 2021-05-27T20:13:10 Last Updated: 2021-05-27T20:13:10 Description: No description available.
CVE ID: CVE-2020-15443 State: REJECTED Published: 2021-05-27T20:13:10 Last Updated: 2021-05-27T20:13:10 Description: No description available.
CVE ID: CVE-2020-15444 State: REJECTED Published: 2021-05-27T20:13:10 Last Updated: 2021-05-27T20:13:10 Description: No description available.
CVE ID: CVE-2020-15445 State: REJECTED Published: 2021-05-27T20:13:10 Last Updated: 2021-05-27T20:13:10 Description: No description available.
CVE ID: CVE-2020-15446 State: REJECTED Published: 2021-05-27T20:13:10 Last Updated: 2021-05-27T20:13:10 Description: No description available.
CVE ID: CVE-2020-15447 State: REJECTED Published: 2021-05-27T20:13:11 Last Updated: 2021-05-27T20:13:11 Description: No description available.
CVE ID: CVE-2020-15448 State: REJECTED Published: 2021-05-27T20:13:11 Last Updated: 2021-05-27T20:13:11 Description: No description available.
CVE ID: CVE-2020-15449 State: REJECTED Published: 2021-05-27T20:13:11 Last Updated: 2021-05-27T20:13:11 Description: No description available.
CVE ID: CVE-2020-15450 State: REJECTED Published: 2021-05-27T20:13:11 Last Updated: 2021-05-27T20:13:11 Description: No description available.
CVE ID: CVE-2020-15451 State: REJECTED Published: 2021-05-27T20:13:11 Last Updated: 2021-05-27T20:13:11 Description: No description available.
CVE ID: CVE-2020-15452 State: REJECTED Published: 2021-05-27T20:13:11 Last Updated: 2021-05-27T20:13:11 Description: No description available.
CVE ID: CVE-2020-15453 State: REJECTED Published: 2021-05-27T20:13:11 Last Updated: 2021-05-27T20:13:11 Description: No description available.
CVE ID: CVE-2020-15454 State: REJECTED Published: 2021-05-27T20:13:11 Last Updated: 2021-05-27T20:13:11 Description: No description available.
CVE ID: CVE-2020-15455 State: REJECTED Published: 2021-05-27T20:13:11 Last Updated: 2021-05-27T20:13:11 Description: No description available.
CVE ID: CVE-2020-15456 State: REJECTED Published: 2021-05-27T20:13:12 Last Updated: 2021-05-27T20:13:12 Description: No description available.
CVE ID: CVE-2020-15457 State: REJECTED Published: 2021-05-27T20:13:12 Last Updated: 2021-05-27T20:13:12 Description: No description available.
CVE ID: CVE-2020-15458 State: REJECTED Published: 2021-05-27T20:13:12 Last Updated: 2021-05-27T20:13:12 Description: No description available.
CVE ID: CVE-2020-15459 State: REJECTED Published: 2021-05-27T20:13:12 Last Updated: 2021-05-27T20:13:12 Description: No description available.
CVE ID: CVE-2020-15460 State: REJECTED Published: 2021-05-27T20:13:12 Last Updated: 2021-05-27T20:13:12 Description: No description available.
CVE ID: CVE-2020-15461 State: REJECTED Published: 2021-05-27T20:13:12 Last Updated: 2021-05-27T20:13:12 Description: No description available.
CVE ID: CVE-2020-15462 State: REJECTED Published: 2021-05-27T20:13:12 Last Updated: 2021-05-27T20:13:12 Description: No description available.
CVE ID: CVE-2020-15463 State: REJECTED Published: 2021-05-27T20:13:12 Last Updated: 2021-05-27T20:13:12 Description: No description available.
CVE ID: CVE-2020-15464 State: REJECTED Published: 2021-05-27T20:13:12 Last Updated: 2021-05-27T20:13:12 Description: No description available.
CVE ID: CVE-2020-15465 State: REJECTED Published: 2021-05-27T20:13:13 Last Updated: 2021-05-27T20:13:13 Description: No description available.
CVE ID: CVE-2020-15466 State: PUBLISHED Published: 2020-07-05T10:04:58 Last Updated: 2024-08-04T13:15:20.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16029 - https://www.wireshark.org/security/wnpa-sec-2020-09.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=11f40896b696e4e8c7f8b2ad96028404a83a51a4 - https://security.gentoo.org/glsa/202007-13 -
b?p=wireshark.git%3Ba=commit%3Bh=11f40896b696e4e8c7f8b2ad96028404a83a51a4 - https://security.gentoo.org/glsa/202007-13 - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00038.html - https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html
CVE ID: CVE-2020-15467 State: PUBLISHED Published: 2020-08-04T12:48:02 Last Updated: 2024-08-04T13:15:20.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative interface of Cohesive Networks vns3:vpn appliances before version 4.11.1 is vulnerable to authenticated remote code execution leading to server compromise. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fireeye/Vulnerability-Disclosures - https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2020-0007/FEYE-2020-0007.md
CVE ID: CVE-2020-15468 State: PUBLISHED Published: 2020-07-01T02:16:21 Last Updated: 2024-08-04T13:15:20.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Persian VIP Download Script 1.0 allows SQL Injection via the cart_edit.php active parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/48190
CVE ID: CVE-2020-15469 State: PUBLISHED Published: 2020-07-02T19:25:42 Last Updated: 2024-08-04T13:15:20.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2020-06/msg09961.html - http://www.openwall.com/lists/oss-security/2020/07/02/1 - https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html - https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE ID: CVE-2020-15470 State: PUBLISHED Published: 2020-07-01T10:05:49 Last Updated: 2024-08-04T13:15:20.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: ffjpeg through 2020-02-24 has a heap-based buffer overflow in jfif_decode in jfif.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rockcarry/ffjpeg/issues/26
CVE ID: CVE-2020-15471 State: PUBLISHED Published: 2020-07-01T10:54:39 Last Updated: 2024-08-04T13:15:20.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: In nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in ndpi_parse_packet_line_info in lib/ndpi_main.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ntop/nDPI/commit/61066fb106efa6d3d95b67e47b662de208b2b622
CVE ID: CVE-2020-15472 State: PUBLISHED Published: 2020-07-01T10:54:30 Last Updated: 2024-08-04T13:15:20.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: In nDPI through 3.2, the H.323 dissector is vulnerable to a heap-based buffer over-read in ndpi_search_h323 in lib/protocols/h323.c, as demonstrated by a payload packet length that is too short. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ntop/nDPI/commit/b7e666e465f138ae48ab81976726e67deed12701 - https://lists.debian.org/debian-lts-announce/2022/08/msg00016.html
CVE ID: CVE-2020-15473 State: PUBLISHED Published: 2020-07-01T10:54:17 Last Updated: 2024-08-04T13:15:20.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpi_search_openvpn in lib/protocols/openvpn.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ntop/nDPI/commit/8e7b1ea7a136cc4e4aa9880072ec2d69900a825e
CVE ID: CVE-2020-15474 State: PUBLISHED Published: 2020-07-01T10:54:08 Last Updated: 2024-08-04T13:15:20.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: In nDPI through 3.2, there is a stack overflow in extractRDNSequence in lib/protocols/tls.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ntop/nDPI/commit/23594f036536468072198a57c59b6e9d63caf6ce
CVE ID: CVE-2020-15475 State: PUBLISHED Published: 2020-07-01T10:53:58 Last Updated: 2024-08-04T13:15:20.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: In nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c omits certain reinitialization, leading to a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ntop/nDPI/commit/6a9f5e4f7c3fd5ddab3e6727b071904d76773952