Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-20124 State: PUBLISHED Published: 2021-09-28T22:05:11 Last Updated: 2024-08-04T14:15:29.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wuzhi CMS v4.1.0 contains a remote code execution (RCE) vulnerability in \attachment\admin\index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/188 - https://cwe.mitre.org/data/definitions/96.html
CVE ID: CVE-2020-20125 State: PUBLISHED Published: 2021-09-28T22:05:12 Last Updated: 2024-08-04T14:15:29.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: EARCLINK ESPCMS-P8 contains a cross-site scripting (XSS) vulnerability in espcms_web\espcms_load.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.cnblogs.com/feizianquan/p/11910530.html
CVE ID: CVE-2020-20128 State: PUBLISHED Published: 2021-09-29T21:28:59 Last Updated: 2024-08-04T14:15:28.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: LaraCMS v1.0.1 transmits sensitive information in cleartext which can be intercepted by attackers. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wanglelecc/laracms/issues/33
CVE ID: CVE-2020-20129 State: PUBLISHED Published: 2021-09-29T21:29:00 Last Updated: 2024-08-04T14:15:29.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the content editor. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wanglelecc/laracms/issues/34
CVE ID: CVE-2020-20131 State: PUBLISHED Published: 2021-09-29T21:29:02 Last Updated: 2024-08-04T14:15:28.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows atackers to execute arbitrary web scripts or HTML via a crafted payload in the page management module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wanglelecc/laracms/issues/36
CVE ID: CVE-2020-20136 State: PUBLISHED Published: 2020-12-14T18:30:43 Last Updated: 2024-08-04T14:15:29.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/QuantConnect/Lean/issues/3537
CVE ID: CVE-2020-20138 State: PUBLISHED Published: 2020-12-17T22:38:55 Last Updated: 2024-08-04T14:15:29.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in the Showtime2 Slideshow module in CMS Made Simple (CMSMS) 2.2.4. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/160604/Flexmonster-Pivot-Table-And-Charts-2.7.17-Cross-Site-Scripting.html
CVE ID: CVE-2020-20139 State: PUBLISHED Published: 2020-12-17T22:38:52 Last Updated: 2024-08-04T14:15:28.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in the Remote JSON component Under the Connect menu in Flexmonster Pivot Table & Charts 2.7.17. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/160604/Flexmonster-Pivot-Table-And-Charts-2.7.17-Cross-Site-Scripting.html
CVE ID: CVE-2020-20140 State: PUBLISHED Published: 2020-12-17T22:38:50 Last Updated: 2024-08-04T14:15:29.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Remote Report component under the Open menu in Flexmonster Pivot Table & Charts 2.7.17. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/160604/Flexmonster-Pivot-Table-And-Charts-2.7.17-Cross-Site-Scripting.html
CVE ID: CVE-2020-20141 State: PUBLISHED Published: 2020-12-17T22:38:47 Last Updated: 2024-08-04T14:15:28.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in the To OLAP (XMLA) component Under the Connect menu in Flexmonster Pivot Table & Charts 2.7.17. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/160604/Flexmonster-Pivot-Table-And-Charts-2.7.17-Cross-Site-Scripting.html
CVE ID: CVE-2020-20142 State: PUBLISHED Published: 2020-12-17T22:38:45 Last Updated: 2024-08-04T14:15:29.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in the "To Remote CSV" component under "Open" Menu in Flexmonster Pivot Table & Charts 2.7.17. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/160604/Flexmonster-Pivot-Table-And-Charts-2.7.17-Cross-Site-Scripting.html
CVE ID: CVE-2020-20145 State: REJECTED Published: N/A Last Updated: 2023-08-23T17:08:57.909960 Description: No description available.
CVE ID: CVE-2020-20178 State: PUBLISHED Published: 2021-05-24T19:01:07 Last Updated: 2024-08-04T14:15:29.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ethereum 0xe933c0cd9784414d5f278c114904f5a84b396919#code.sol latest version is affected by a denial of service vulnerability in the affected payout function. Once the length of this array is too long, it will result in an exception. Attackers can make attacks by creating a series of account addresses. Additional Analyst Notes: - CVE Program Container: References: - https://etherscan.io/address/0xe933c0cd9784414d5f278c114904f5a84b396919
CVE ID: CVE-2020-20183 State: PUBLISHED Published: 2020-12-14T19:42:20 Last Updated: 2024-08-04T14:15:29.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure direct object reference vulnerability in Zyxel’s P1302-T10 v3 with firmware version 2.00(ABBX.3) and earlier allows attackers to gain privileges and access certain admin pages. Additional Analyst Notes: - CVE Program Container: References: - https://www.zyxel.com/us/en/support/P1302-T10D-v3-modem-insecure-direct-object-reference-vulnerability.shtml
CVE ID: CVE-2020-20184 State: PUBLISHED Published: 2020-12-14T19:56:28 Last Updated: 2024-08-04T14:15:29.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: GateOne allows remote attackers to execute arbitrary commands via shell metacharacters in the port field when attempting an SSH connection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/liftoff/GateOne/issues/736
CVE ID: CVE-2020-20189 State: PUBLISHED Published: 2020-12-14T20:38:02 Last Updated: 2024-08-04T14:15:29.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ornose15/NewPK/issues/1
CVE ID: CVE-2020-20210 State: PUBLISHED Published: 2023-06-26T00:00:00 Last Updated: 2024-11-27T19:45:35.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bludit 3.9.2 is vulnerable to Remote Code Execution (RCE) via /admin/ajax/upload-images. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bludit/bludit/issues/1079
CVE ID: CVE-2020-20211 State: PUBLISHED Published: 2021-07-07T13:26:20 Last Updated: 2024-08-04T14:15:29.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs 6.44.5 (long-term tree) suffers from an assertion failure vulnerability in the /nova/bin/console process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/ - http://seclists.org/fulldisclosure/2021/May/0
CVE ID: CVE-2020-20212 State: PUBLISHED Published: 2021-07-07T13:27:27 Last Updated: 2024-08-04T14:15:29.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs 6.44.5 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/console process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference). Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/ - http://seclists.org/fulldisclosure/2021/May/0
CVE ID: CVE-2020-20213 State: PUBLISHED Published: 2021-07-07T13:28:48 Last Updated: 2024-08-04T14:15:28.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs 6.44.5 (long-term tree) suffers from an stack exhaustion vulnerability in the /nova/bin/net process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU. Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/ - http://seclists.org/fulldisclosure/2021/May/10 - https://cwe.mitre.org/data/definitions/674.html
CVE ID: CVE-2020-20214 State: PUBLISHED Published: 2021-05-18T18:21:41 Last Updated: 2024-08-04T14:15:29.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs 6.44.6 (long-term tree) suffers from an assertion failure vulnerability in the btest process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/ - http://seclists.org/fulldisclosure/2021/May/15 - http://seclists.org/fulldisclosure/2021/May/15 - http://packetstormsecurity.com/files/162513/Mikrotik-RouterOS-6.46.5-Memory-Corruption-Assertion-Failure.html
CVE ID: CVE-2020-20215 State: PUBLISHED Published: 2021-07-07T13:29:33 Last Updated: 2024-08-04T14:15:29.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/diskd process. An authenticated remote attacker can cause a Denial of Service due to invalid memory access. Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/ - http://seclists.org/fulldisclosure/2021/May/10
CVE ID: CVE-2020-20216 State: PUBLISHED Published: 2021-07-07T13:30:06 Last Updated: 2024-08-04T14:15:29.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/graphing process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference). Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/ - http://seclists.org/fulldisclosure/2021/May/10
CVE ID: CVE-2020-20217 State: PUBLISHED Published: 2021-07-08T11:39:28 Last Updated: 2024-08-04T14:15:29.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs before 6.47 (stable tree) suffers from an uncontrolled resource consumption vulnerability in the /nova/bin/route process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU. Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/ - https://cwe.mitre.org/data/definitions/400.html - https://github.com/cq674350529/pocs_slides/blob/master/advisory/MikroTik/CVE-2020-20217/README.md
CVE ID: CVE-2020-20218 State: PUBLISHED Published: 2021-05-03T15:13:44 Last Updated: 2024-08-04T14:15:29.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/traceroute process. An authenticated remote attacker can cause a Denial of Service due via the loop counter variable. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2020/May/30 - https://seclists.org/fulldisclosure/2021/May/1
CVE ID: CVE-2020-20219 State: PUBLISHED Published: 2021-07-21T13:25:16 Last Updated: 2024-08-04T14:15:28.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/igmp-proxy process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference). Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/ - https://seclists.org/fulldisclosure/2021/May/2
CVE ID: CVE-2020-20220 State: PUBLISHED Published: 2021-05-18T19:09:29 Last Updated: 2024-08-04T14:15:28.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs prior to stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin/bfd process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference). Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/ - http://seclists.org/fulldisclosure/2021/May/23 - http://packetstormsecurity.com/files/162533/MikroTik-RouterOS-Memory-Corruption.html
CVE ID: CVE-2020-20221 State: PUBLISHED Published: 2021-07-21T13:49:07 Last Updated: 2024-08-04T14:15:29.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs before 6.44.6 (long-term tree) suffers from an uncontrolled resource consumption vulnerability in the /nova/bin/cerm process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/400.html - https://seclists.org/fulldisclosure/2020/May/30 - https://seclists.org/fulldisclosure/2021/May/1
CVE ID: CVE-2020-20222 State: PUBLISHED Published: 2021-05-18T18:21:55 Last Updated: 2024-08-04T14:15:29.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference). Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/ - http://seclists.org/fulldisclosure/2021/May/15 - http://seclists.org/fulldisclosure/2021/May/15 - http://packetstormsecurity.com/files/162513/Mikrotik-RouterOS-6.46.5-Memory-Corruption-Assertion-Failure.html
CVE ID: CVE-2020-20225 State: PUBLISHED Published: 2021-07-07T13:31:15 Last Updated: 2024-08-04T14:15:29.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in the /nova/bin/user process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/ - http://seclists.org/fulldisclosure/2021/May/12
CVE ID: CVE-2020-20227 State: PUBLISHED Published: 2021-05-18T19:10:17 Last Updated: 2024-08-04T14:15:29.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin/diskd process. An authenticated remote attacker can cause a Denial of Service due to invalid memory access. Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/ - http://seclists.org/fulldisclosure/2021/May/23 - http://packetstormsecurity.com/files/162533/MikroTik-RouterOS-Memory-Corruption.html
CVE ID: CVE-2020-20230 State: PUBLISHED Published: 2021-07-19T16:14:19 Last Updated: 2024-08-04T14:15:29.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the sshd process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/400.html - https://github.com/cq674350529/pocs_slides/blob/master/advisory/MikroTik/CVE-2020-20230/README.md
CVE ID: CVE-2020-20231 State: PUBLISHED Published: 2021-07-14T13:53:25 Last Updated: 2024-08-04T14:15:29.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs through stable version 6.48.3 suffers from a memory corruption vulnerability in the /nova/bin/detnet process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference). Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/ - https://github.com/cq674350529/pocs_slides/blob/master/advisory/MikroTik/CVE-2020-20231/README.md
CVE ID: CVE-2020-20236 State: PUBLISHED Published: 2021-05-18T18:22:00 Last Updated: 2024-08-04T14:15:29.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs 6.46.3 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can cause a Denial of Service due to improper memory access. Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/ - http://seclists.org/fulldisclosure/2021/May/15 - http://seclists.org/fulldisclosure/2021/May/15 - http://packetstormsecurity.com/files/162513/Mikrotik-RouterOS-6.46.5-Memory-Corruption-Assertion-Failure.html
CVE ID: CVE-2020-20237 State: PUBLISHED Published: 2021-05-18T18:22:05 Last Updated: 2024-08-04T14:15:28.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs 6.46.3 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can cause a Denial of Service due to improper memory access. Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/ - http://seclists.org/fulldisclosure/2021/May/15 - http://seclists.org/fulldisclosure/2021/May/15 - http://packetstormsecurity.com/files/162513/Mikrotik-RouterOS-6.46.5-Memory-Corruption-Assertion-Failure.html
CVE ID: CVE-2020-20245 State: PUBLISHED Published: 2021-05-18T19:14:14 Last Updated: 2024-08-04T14:15:29.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs stable 6.46.3 suffers from a memory corruption vulnerability in the log process. An authenticated remote attacker can cause a Denial of Service due to improper memory access. Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/ - http://seclists.org/fulldisclosure/2021/May/23 - http://packetstormsecurity.com/files/162533/MikroTik-RouterOS-Memory-Corruption.html
CVE ID: CVE-2020-20246 State: PUBLISHED Published: 2021-05-18T19:11:01 Last Updated: 2024-08-04T14:15:29.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs stable 6.46.3 suffers from a memory corruption vulnerability in the mactel process. An authenticated remote attacker can cause a Denial of Service due to improper memory access. Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/ - http://seclists.org/fulldisclosure/2021/May/23 - http://packetstormsecurity.com/files/162533/MikroTik-RouterOS-Memory-Corruption.html
CVE ID: CVE-2020-20247 State: PUBLISHED Published: 2021-05-03T15:13:42 Last Updated: 2024-08-04T14:15:28.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs before 6.46.5 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/traceroute process. An authenticated remote attacker can cause a Denial of Service due via the loop counter variable. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2020/May/30
CVE ID: CVE-2020-20248 State: PUBLISHED Published: 2021-07-19T17:35:49 Last Updated: 2024-08-04T14:15:29.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the memtest process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/400.html - https://github.com/cq674350529/pocs_slides/blob/master/advisory/MikroTik/CVE-2020-20248/README.md
CVE ID: CVE-2020-20249 State: PUBLISHED Published: 2021-07-19T17:27:54 Last Updated: 2024-08-04T14:15:29.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs before stable 6.47 suffers from a memory corruption vulnerability in the resolver process. By sending a crafted packet, an authenticated remote attacker can cause a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cq674350529/pocs_slides/blob/master/advisory/MikroTik/CVE-2020-20249/README.md
CVE ID: CVE-2020-20250 State: PUBLISHED Published: 2021-07-13T11:59:52 Last Updated: 2024-08-04T14:15:29.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference). NOTE: this is different from CVE-2020-20253 and CVE-2020-20254. All four vulnerabilities in the /nova/bin/lcdstat process are discussed in the CVE-2020-20250 github.com/cq674350529 reference. Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/ - https://github.com/cq674350529/po
ditional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/ - https://github.com/cq674350529/pocs_slides/blob/master/advisory/MikroTik/CVE-2020-20250/README.md
CVE ID: CVE-2020-20252 State: PUBLISHED Published: 2021-07-13T17:06:57 Last Updated: 2024-08-04T14:15:28.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cq674350529/pocs_slides/blob/master/advisory/MikroTik/CVE-2020-20252/README.md
CVE ID: CVE-2020-20253 State: PUBLISHED Published: 2021-05-18T13:51:38 Last Updated: 2024-08-04T14:15:29.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs before 6.47 (stable tree) suffers from a divison by zero vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service due to a divide by zero error. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cq674350529/pocs_slides/blob/master/pocs/MikroTik/vul_lcdstat_4/README.md - http://seclists.org/fulldisclosure/2021/May/14
CVE ID: CVE-2020-20254 State: PUBLISHED Published: 2021-05-18T13:52:19 Last Updated: 2024-08-04T14:15:28.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cq674350529/pocs_slides/blob/master/pocs/MikroTik/vul_lcdstat_2/README.md - http://seclists.org/fulldisclosure/2021/May/14 - http://seclists.org/fulldisclosure/2021/May/14
CVE ID: CVE-2020-20262 State: PUBLISHED Published: 2021-07-21T13:25:24 Last Updated: 2024-08-04T14:15:28.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in the /ram/pckg/security/nova/bin/ipsec process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cq674350529/pocs_slides/blob/master/pocs/MikroTik/vul_ipsec/README.md - https://seclists.org/fulldisclosure/2021/May/2