Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-26525 State: PUBLISHED Published: 2020-10-02T19:47:52 Last Updated: 2024-08-04T15:56:04.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Damstra Smart Asset 2020.7 has SQL injection via the API/api/Asset originator parameter. This allows forcing the database and server to initiate remote connections to third party DNS servers. Additional Analyst Notes: - CVE Program Container: References: - https://www.smartasset.com.au/ - https://support.damstratechnology.com/hc/en-us/categories/900000115446-SmartAsset-Damstra-Asset-Management-Platform - https://github.com/lukaszstu/SmartAsset-SQLinj-CVE-2020-26525/blob/main/README.md
CVE ID: CVE-2020-26526 State: PUBLISHED Published: 2020-10-02T19:55:29 Last Updated: 2024-08-04T15:56:04.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Damstra Smart Asset 2020.7. It is possible to enumerate valid usernames on the login page. The application sends a different server response when the username is invalid than when the username is valid ("Unable to find an APIDomain" versus "Wrong email or password"). Additional Analyst Notes: - CVE Program Container: References: - https://support.damstratechnology.com/hc/en-us/categories/900000115446-SmartAsset-Damstra-Asset-Management-Platform - https://smartasset.com/ - https://github.com/lukaszst
gories/900000115446-SmartAsset-Damstra-Asset-Management-Platform - https://smartasset.com/ - https://github.com/lukaszstu/SmartAsset-UE-CVE-2020-26526
CVE ID: CVE-2020-26527 State: PUBLISHED Published: 2020-10-02T20:05:31 Last Updated: 2024-08-04T15:56:04.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in API/api/Version in Damstra Smart Asset 2020.7. Cross-origin resource sharing trusts random origins by accepting the arbitrary 'Origin: example.com' header and responding with 200 OK and a wildcard 'Access-Control-Allow-Origin: *' header. Additional Analyst Notes: - CVE Program Container: References: - https://support.damstratechnology.com/hc/en-us/categories/900000115446-SmartAsset-Damstra-Asset-Management-Platform - https://smartasset.com/ - https://github.com/lukaszstu/SmartAsset-CORS-CVE-2020-265
-Damstra-Asset-Management-Platform - https://smartasset.com/ - https://github.com/lukaszstu/SmartAsset-CORS-CVE-2020-26527/blob/main/README.md
CVE ID: CVE-2020-26534 State: PUBLISHED Published: 2020-10-02T08:02:15 Last Updated: 2024-08-04T15:56:04.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is an Opt object use-after-free related to Field::ClearItems and Field::DeleteOptions, during AcroForm JavaScript execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.html
CVE ID: CVE-2020-26535 State: PUBLISHED Published: 2020-10-02T08:01:55 Last Updated: 2024-08-04T15:56:04.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. If TslAlloc attempts to allocate thread local storage but obtains an unacceptable index value, V8 throws an exception that leads to a write access violation (and read access violation). Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.html
CVE ID: CVE-2020-26536 State: PUBLISHED Published: 2020-10-02T08:01:41 Last Updated: 2024-08-04T15:56:04.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is a NULL pointer dereference via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.html
CVE ID: CVE-2020-26537 State: PUBLISHED Published: 2020-10-02T08:01:28 Last Updated: 2024-08-04T15:56:04.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. In a certain Shading calculation, the number of outputs is unequal to the number of color components in a color space. This causes an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.html
CVE ID: CVE-2020-26538 State: PUBLISHED Published: 2020-10-02T08:01:17 Last Updated: 2024-08-04T15:56:04.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. It allows attackers to execute arbitrary code via a Trojan horse taskkill.exe in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.html
CVE ID: CVE-2020-26539 State: PUBLISHED Published: 2020-10-02T08:01:05 Last Updated: 2024-08-04T15:56:04.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. When there is a multiple interpretation error for /V (in the Additional Action and Field dictionaries), a use-after-free can occur with resultant remote code execution (or an information leak). Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.html
CVE ID: CVE-2020-26540 State: PUBLISHED Published: 2020-10-02T08:00:37 Last Updated: 2024-08-04T15:56:04.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader and PhantomPDF before 4.1 on macOS. Because the Hardened Runtime protection mechanism is not applied to code signing, code injection (or an information leak) can occur. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.html
CVE ID: CVE-2020-26541 State: PUBLISHED Published: 2020-10-02T18:14:22 Last Updated: 2024-08-04T15:56:04.670Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c. Additional Analyst Notes: - CVE Program Container: References: - https://lkml.org/lkml/2020/9/15/1871
CVE ID: CVE-2020-26542 State: PUBLISHED Published: 2020-11-09T19:07:19 Last Updated: 2024-08-04T15:56:04.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the MongoDB Simple LDAP plugin through 2020-10-02 for Percona Server when using the SimpleLDAP authentication in conjunction with Microsoft’s Active Directory, Percona has discovered a flaw that would allow authentication to complete when passing a blank value for the account password, leading to access against the service integrated with which Active Directory is deployed at the level granted to the authenticating account. Additional Analyst Notes: - CVE Program Container: References: - https://www
evel granted to the authenticating account. Additional Analyst Notes: - CVE Program Container: References: - https://www.percona.com/blog/2020/10/13/percona-distribution-for-mysql-pxc-variant-8-0-20-fixes-for-security-vulnerability-release-roundup-october-13-2020/ - https://jira.percona.com/browse/PS-7358 - https://jira.percona.com/browse/PSMDB-726 - https://www.percona.com/doc/percona-distribution-mysql/8.0/release-notes-pxc-v8.0.20.upd2.html
CVE ID: CVE-2020-26546 State: PUBLISHED Published: 2020-10-12T18:59:36.000Z Last Updated: 2025-05-30T16:01:24.763Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in HelpDeskZ 1.0.2. The feature to auto-login a user, via the RememberMe functionality, is prone to SQL injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://excellium-services.com/cert-xlm-advisory/CVE-2020-26546/ - https://cds.thalesgroup.com/en/tcs-cert/CVE-2020-26546
CVE ID: CVE-2020-26547 State: PUBLISHED Published: 2021-02-01T01:02:54 Last Updated: 2024-08-04T15:56:04.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monal before 4.9 does not implement proper sender verification on MAM and Message Carbon (XEP-0280) results. This allows a remote attacker (able to send stanzas to a victim) to inject arbitrary messages into the local history, with full control over the sender and receiver displayed to the victim. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/anurodhp/Monal/commits/develop - https://monal.im/blog/cve-2020-26547/
CVE ID: CVE-2020-26548 State: PUBLISHED Published: 2020-11-17T20:22:46 Last Updated: 2024-08-04T15:56:04.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Aviatrix Controller before R5.4.1290. There is an insecure sudo rule: a user exists that can execute all commands as any user on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/
CVE ID: CVE-2020-26549 State: PUBLISHED Published: 2020-11-17T20:24:20 Last Updated: 2024-08-04T15:56:04.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Aviatrix Controller before R5.4.1290. The htaccess protection mechanism to prevent requests to directories can be bypassed for file downloading. Additional Analyst Notes: - CVE Program Container: References: - https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/
CVE ID: CVE-2020-26550 State: PUBLISHED Published: 2020-11-17T20:26:14 Last Updated: 2024-08-04T15:56:04.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Aviatrix Controller before R5.3.1151. An encrypted file containing credentials to unrelated systems is protected by a three-character key. Additional Analyst Notes: - CVE Program Container: References: - https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/
CVE ID: CVE-2020-26551 State: PUBLISHED Published: 2020-11-17T20:33:54 Last Updated: 2024-08-04T15:56:04.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Aviatrix Controller before R5.3.1151. Encrypted key values are stored in a readable file. Additional Analyst Notes: - CVE Program Container: References: - https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/
CVE ID: CVE-2020-26552 State: PUBLISHED Published: 2020-11-17T20:58:07 Last Updated: 2024-08-04T15:56:04.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Aviatrix Controller before R6.0.2483. Multiple executable files, that implement API endpoints, do not require a valid session ID for access. Additional Analyst Notes: - CVE Program Container: References: - https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/
CVE ID: CVE-2020-26553 State: PUBLISHED Published: 2020-11-17T20:59:00 Last Updated: 2024-08-04T15:56:04.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Aviatrix Controller before R6.0.2483. Several APIs contain functions that allow arbitrary files to be uploaded to the web tree. Additional Analyst Notes: - CVE Program Container: References: - https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/
CVE ID: CVE-2020-26554 State: PUBLISHED Published: 2020-11-18T16:54:32 Last Updated: 2024-08-04T15:56:04.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: REDDOXX MailDepot 2033 (aka 2.3.3022) allows XSS via an incoming HTML e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/160077/MailDepot-2033-2.3.3022-Cross-Site-Scripting.html - https://www.syss.de/pentest-blog/syss-2020-037-persistent-cross-site-scripting-schwachstelle-in-reddoxx-maildepot
CVE ID: CVE-2020-26555 State: PUBLISHED Published: 2021-05-24T17:41:15.000Z Last Updated: 2025-11-04T19:12:16.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN. Additional Analyst Notes: - CVE Program Container: References: - https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/ - https://kb.cert.org/vuls/id/799380 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message
rt.org/vuls/id/799380 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSS6CTGE4UGTJLCOZOASDR3T3SLL6QJZ/ - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00520.html
CVE ID: CVE-2020-26556 State: PUBLISHED Published: 2021-05-24T17:34:58 Last Updated: 2024-08-04T15:56:04.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently random AuthValue before the provisioning procedure times out, to complete authentication by leveraging Malleable Commitment. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/799380 - https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/ - https://kb.cert.org/vuls/id/799380
CVE ID: CVE-2020-26557 State: PUBLISHED Published: 2021-05-24T17:28:56.000Z Last Updated: 2025-11-04T19:12:17.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (without possession of the AuthValue used in the provisioning protocol) to determine the AuthValue via a brute-force attack (unless the AuthValue is sufficiently random and changed each time). Additional Analyst Notes: - CVE Program Container: References: - https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/ - https://kb.cert.org/vuls/id/799380
CVE ID: CVE-2020-26558 State: PUBLISHED Published: 2021-05-24T17:22:16.000Z Last Updated: 2025-11-04T19:12:18.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a ti
e using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time. Additional Analyst Notes: - CVE Program Container: References: - https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/ - https://kb.cert.org/vuls/id/799380 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSS6CTGE4UGTJLCOZOASDR3T3SLL6QJZ/ - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00520.html - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00517.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00020.h
www/us/en/security-center/advisory/intel-sa-00517.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00022.html - https://www.debian.org/security/2021/dsa-4951 - https://security.gentoo.org/glsa/202209-16
CVE ID: CVE-2020-26559 State: PUBLISHED Published: 2021-05-24T17:13:12.000Z Last Updated: 2025-11-04T19:12:19.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (participating in the provisioning protocol) to identify the AuthValue used given the Provisioner’s public key, and the confirmation number and nonce provided by the provisioning device. This could permit a device without the AuthValue to complete provisioning without brute-forcing the AuthValue. Additional Analyst Notes: - CVE Program Container: References: - https://www.bluetooth.com/learn-about-bluetooth/key-attributes/b
l Analyst Notes: - CVE Program Container: References: - https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/ - https://kb.cert.org/vuls/id/799380
CVE ID: CVE-2020-26560 State: PUBLISHED Published: 2021-05-24T17:06:57.000Z Last Updated: 2025-11-04T19:12:21.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, reflecting the authentication evidence from a Provisioner, to complete authentication without possessing the AuthValue, and potentially acquire a NetKey and AppKey. Additional Analyst Notes: - CVE Program Container: References: - https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/ - https://kb.cert.org/vuls/id/799380
CVE ID: CVE-2020-26561 State: PUBLISHED Published: 2020-10-23T05:14:25 Last Updated: 2024-11-15T16:22:35.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Belkin LINKSYS WRT160NL 1.0.04.002_US_20130619 devices have a stack-based buffer overflow vulnerability because of sprintf in create_dir in mini_httpd. Successful exploitation leads to arbitrary code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://research.nccgroup.com/2020/10/20/wrt160nl-cve-2020-26561-bof/
CVE ID: CVE-2020-26563 State: PUBLISHED Published: 2021-07-30T02:52:25 Last Updated: 2024-08-04T15:56:04.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: ObjectPlanet Opinio before 7.14 allows reflected XSS via the survey/admin/surveyAdmin.do?action=viewSurveyAdmin query string. (There is also stored XSS if input to survey/admin/*.do is accepted from untrusted users.) Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/163699/ObjectPlanet-Opinio-7.12-Cross-Site-Scripting.html - https://www.objectplanet.com/opinio/changelog.html
CVE ID: CVE-2020-26564 State: PUBLISHED Published: 2021-07-31T16:28:05 Last Updated: 2024-08-04T15:56:05.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: ObjectPlanet Opinio before 7.15 allows XXE attacks via three steps: modify a .css file to have <!ENTITY content, create a .xml file for a generic survey template (containing a link to this .css file), and import this .xml file at the survey/admin/folderSurvey.do?action=viewImportSurvey['importFile'] URI. The XXE can then be triggered at a admin/preview.do?action=previewSurvey&surveyId= URI. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/163707/ObjectPlanet-Opinio-7.13-7.
t Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/163707/ObjectPlanet-Opinio-7.13-7.14-XML-Injection.html - https://www.objectplanet.com/opinio/changelog.html
CVE ID: CVE-2020-26565 State: PUBLISHED Published: 2021-07-31T16:43:53 Last Updated: 2024-08-04T15:56:04.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: ObjectPlanet Opinio before 7.14 allows Expression Language Injection via the admin/permissionList.do from parameter. This can be used to retrieve possibly sensitive serverInfo data. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/163708/ObjectPlanet-Opinio-7.13-Expression-Language-Injection.html - https://www.objectplanet.com/opinio/changelog.html
CVE ID: CVE-2020-26566 State: PUBLISHED Published: 2020-10-26T17:44:50 Last Updated: 2024-08-04T15:56:04.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the main process via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://motion-project.github.io/index.html - https://github.com/Motion-Project/motion/releases - https://github.com/Motion-Project/motion/issues/1227#issuecomment-715927776 - https://security.gentoo.org/glsa/202208-18
CVE ID: CVE-2020-26567 State: PUBLISHED Published: 2020-10-08T12:22:15 Last Updated: 2024-08-04T15:56:04.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link DSR-250N before 3.17B devices. The CGI script upgradeStatusReboot.cgi can be accessed without authentication. Any access reboots the device, rendering it therefore unusable for several minutes. Additional Analyst Notes: - CVE Program Container: References: - https://www.redteam-pentesting.de/advisories/rt-sa-2020-002 - http://seclists.org/fulldisclosure/2020/Oct/14 - http://packetstormsecurity.com/files/159516/D-Link-DSR-250N-Denial-Of-Service.html
CVE ID: CVE-2020-26569 State: PUBLISHED Published: 2020-12-28T15:52:48 Last Updated: 2024-08-04T15:56:04.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: In EVPN VxLAN setups in Arista EOS, specific malformed packets can lead to incorrect MAC to IP bindings and as a result packets can be incorrectly forwarded across VLAN boundaries. This can result in traffic being discarded on the receiving VLAN. This affects versions: 4.21.12M and below releases in the 4.21.x train; 4.22.7M and below releases in the 4.22.x train; 4.23.5M and below releases in the 4.23.x train; 4.24.2F and below releases in the 4.24.x train. Additional Analyst Notes: - CVE Program Container: References: - htt
in; 4.24.2F and below releases in the 4.24.x train. Additional Analyst Notes: - CVE Program Container: References: - https://www.arista.com/en/support/advisories-notices/security-advisories/11997-security-advisory-57
CVE ID: CVE-2020-26570 State: PUBLISHED Published: 2020-10-06T01:04:17 Last Updated: 2024-08-04T15:56:05.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_read_file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24316 - https://github.com/OpenSC/OpenSC/commit/6903aebfddc466d966c7b865fae34572bf3ed23e - http://www.openwall.com/lists/oss-security/2020/11/24/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXOHFDMNMO6IDECAGUTB3SJGAGXVRT6S/ - htt
doraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXOHFDMNMO6IDECAGUTB3SJGAGXVRT6S/ - https://lists.debian.org/debian-lts-announce/2021/11/msg00027.html
CVE ID: CVE-2020-26571 State: PUBLISHED Published: 2020-10-06T01:04:06 Last Updated: 2024-08-04T15:56:04.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20612 - http://www.openwall.com/lists/oss-security/2020/11/24/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXOHFDMNMO6IDECAGUTB3SJGAGXVRT6S/ - https://lists.debian.org/debian-lts-announce/2021/11/msg00027.html