Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-22452 State: PUBLISHED Published: 2023-01-26T00:00:00.000Z Last Updated: 2025-04-01T14:08:08.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to tbl_create.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://phpmyadmin.com - https://github.com/phpmyadmin/phpmyadmin/issues/15898 - https://github.com/phpmyadmin/phpmyadmin/pull/16004 - https://github.com/phpmyadmin/phpmyadmin/blob/master/ChangeLog
CVE ID: CVE-2020-22453 State: PUBLISHED Published: 2020-09-24T13:27:07 Last Updated: 2024-08-04T14:51:10.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information. Additional Analyst Notes: - CVE Program Container: References: - https://help.untis.at/hc/en-150/articles/360008456699 - https://robin.meis.space/2020/03/11/notenmanipulation-in-elektronischen-klassenbuchern/
CVE ID: CVE-2020-22474 State: PUBLISHED Published: 2021-02-22T16:07:14 Last Updated: 2024-08-04T14:51:10.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: In webERP 4.15, the ManualContents.php file allows users to specify the "Language" parameter, which can lead to local file inclusion. Additional Analyst Notes: - CVE Program Container: References: - https://lyhinslab.org/index.php/2020/05/16/weberp-lfi/
CVE ID: CVE-2020-22475 State: PUBLISHED Published: 2021-02-22T16:11:45 Last Updated: 2024-08-04T14:51:10.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: "Tasks" application version before 9.7.3 is affected by insecure permissions. The VoiceCommandActivity application component allows arbitrary applications on a device to add tasks with no restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://lyhinslab.org/index.php/2020/07/18/how-the-white-box-hacking-works-ok-google-i-wanna-pwn-this-app/ - https://www.exploit-db.com/exploits/49563
CVE ID: CVE-2020-22481 State: PUBLISHED Published: 2020-09-30T12:34:36 Last Updated: 2024-08-04T14:51:11.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in HFish 0.5.1. When a payload is inserted where the password is entered, XSS code is triggered when the administrator views the information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hacklcx/HFish/issues/69
CVE ID: CVE-2020-22524 State: PUBLISHED Published: 2023-08-22T00:00:00.000Z Last Updated: 2025-05-05T12:39:04.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in FreeImage_Load function in FreeImage Library 3.19.0(r1828) allows attackers to cuase a denial of service via crafted PFM file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/freeimage/bugs/319/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RUEK2JOVJBQZVNQIIZZO3JFMTVB4R5KS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/messag
ZVNQIIZZO3JFMTVB4R5KS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGOMCRAANNCQYJYPPMGRQWKRZGIP6NME/ - https://lists.debian.org/debian-lts-announce/2023/11/msg00020.html - https://www.debian.org/security/2023/dsa-5579
CVE ID: CVE-2020-22533 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T16:30:37.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Zentao allows a remote attacker to execute arbitrary code via the lang parameter Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liuyusjs/zentao/issues/1
CVE ID: CVE-2020-22535 State: PUBLISHED Published: 2021-07-09T15:57:48 Last Updated: 2024-08-04T14:51:10.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Access Control vulnerability in PbootCMS 2.0.6 via the list parameter in the update function in upgradecontroller.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Pbootcms/Pbootcms/issues/5
CVE ID: CVE-2020-22539 State: PUBLISHED Published: 2024-04-15T00:00:00 Last Updated: 2024-08-22T18:49:56.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the Add Category function of Codoforum v4.9 allows attackers to execute arbitrary code via uploading a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/s4fv4n/320f536a684650c6948433de8d53713c
CVE ID: CVE-2020-22540 State: PUBLISHED Published: 2024-04-15T00:00:00 Last Updated: 2024-10-31T17:27:20.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored Cross-Site Scripting (XSS) vulnerability in Codoforum v4.9, allows attackers to execute arbitrary code and obtain sensitive information via crafted payload to Category name component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/s4fv4n/0d7a5093886cf41d9c478166e4aeec64
CVE ID: CVE-2020-22550 State: PUBLISHED Published: 2021-01-04T14:19:53 Last Updated: 2024-08-04T14:51:10.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/Sp3eD-X/22640377f96340544baf12891f708b8f - https://codecanyon.net/item/veno-file-manager-host-and-share-files/6114247
CVE ID: CVE-2020-22552 State: PUBLISHED Published: 2020-10-28T13:51:44 Last Updated: 2024-08-04T14:51:10.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Snap7 server component in version 1.4.1, when an attacker sends a crafted packet with COTP protocol the last-data-unit flag set to No and S7 writes a var function, the Snap7 server will be crashed. Additional Analyst Notes: - CVE Program Container: References: - http://snap7.com - https://sourceforge.net/p/snap7/discussion/bugfix/thread/456d76fdde/ - https://sourceforge.net/projects/snap7/
CVE ID: CVE-2020-22570 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T18:05:32.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memcached 1.6.0 before 1.6.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted meta command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/memcached/memcached/issues/636
CVE ID: CVE-2020-22597 State: PUBLISHED Published: 2023-07-03T00:00:00 Last Updated: 2024-11-25T18:17:58.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Jerrscript- project Jerryscrip v. 2.3.0 allows a remote attacker to execute arbitrary code via the ecma_builtin_array_prototype_object_slice parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/3637
CVE ID: CVE-2020-22607 State: PUBLISHED Published: 2021-06-28T18:22:18 Last Updated: 2024-08-04T14:51:11.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerabilty in LimeSurvey 4.1.11+200316 via the (1) name and (2) description parameters in application/controllers/admin/PermissiontemplatesController.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LimeSurvey/LimeSurvey/commit/2aada33c76efbbc35d33c149ac02b1dc16a81f62
CVE ID: CVE-2020-22608 State: PUBLISHED Published: 2021-06-28T18:30:09 Last Updated: 2024-08-04T14:51:10.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter to include/ajax.search.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osTicket/osTicket/commit/d54cca0b265128f119b6c398575175cb10cf1754
CVE ID: CVE-2020-22609 State: PUBLISHED Published: 2021-06-28T18:38:04 Last Updated: 2024-08-04T14:51:11.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter in include/class.queue.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osTicket/osTicket/commit/6c724ea3fe352d10d457d334dc054ef81917fde1
CVE ID: CVE-2020-22612 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T16:51:57.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Installer RCE on settings file write in MyBB before 1.8.22. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mybb.com/versions/1.8.22/
CVE ID: CVE-2020-22617 State: PUBLISHED Published: 2021-10-08T19:06:57 Last Updated: 2024-08-04T14:51:11.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ardour v5.12 contains a use-after-free vulnerability in the component ardour/libs/pbd/xml++.cc when using xmlFreeDoc and xmlXPathFreeContext. Additional Analyst Notes: - CVE Program Container: References: - https://tracker.ardour.org/view.php?id=7926 - https://github.com/Ardour/ardour/commit/96daa4036a
CVE ID: CVE-2020-22623 State: PUBLISHED Published: 2023-07-27T00:00:00 Last Updated: 2024-10-23T13:06:21.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Jinfornet Jreport 15.6 allows unauthenticated attackers to gain sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://jinfornet.com - http://jreport.com - https://medium.com/%40nguyenhongphu/cve-2020-22623-jinfornet-jreport-unauthenticated-path-traversal-arbitrary-file-download-83224cef32c8
CVE ID: CVE-2020-22628 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T18:04:08.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LibRaw/LibRaw/issues/269 - https://lists.debian.org/debian-lts-announce/2023/09/msg00007.html
CVE ID: CVE-2020-22643 State: PUBLISHED Published: 2021-01-21T16:11:54 Last Updated: 2024-08-04T14:51:10.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/liufee/cms/issues/51
CVE ID: CVE-2020-22647 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T20:42:24.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in DepositGame v.1.0 allows an attacker to gain sensitive information via the GetBonusWithdraw and withdraw functions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Messi-Q/CVE-Application/blob/master/DepositGame-reentrancy/README.md
CVE ID: CVE-2020-22650 State: PUBLISHED Published: 2021-07-19T16:53:56 Last Updated: 2024-08-04T14:51:11.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak vulnerability in sim-organizer.c of AlienVault Ossim v5 causes a denial of service (DOS) via a system crash triggered by the occurrence of a large number of alarm events. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jpalanco/alienvault-ossim/issues/4
CVE ID: CVE-2020-22653 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T17:45:23.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to exploit the official
oneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to exploit the official image signature to force injection unauthorized image signature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.ruckuswireless.com/security_bulletins/302 - https://hdhrmi.blogspot.com/2020/03/multiple-vulnerabilities-in-ruckus.html?m=1
CVE ID: CVE-2020-22654 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T17:43:35.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to bypass firmware image
oneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to bypass firmware image bad md5 checksum failed error. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.ruckuswireless.com/security_bulletins/302 - https://hdhrmi.blogspot.com/2020/03/multiple-vulnerabilities-in-ruckus.html?m=1
CVE ID: CVE-2020-22655 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T18:03:04.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to persistently to writi
oneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to persistently to writing unauthorized image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.ruckuswireless.com/security_bulletins/302 - https://hdhrmi.blogspot.com/2020/03/multiple-vulnerabilities-in-ruckus.html?m=1
CVE ID: CVE-2020-22656 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T18:01:29.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to make the Secure Boot
oneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to make the Secure Boot in failed attempts state (rfwd). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.ruckuswireless.com/security_bulletins/302 - https://hdhrmi.blogspot.com/2020/03/multiple-vulnerabilities-in-ruckus.html?m=1
CVE ID: CVE-2020-22657 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T17:59:56.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to perform WEB GUI login
oneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to perform WEB GUI login authentication bypass. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.ruckuswireless.com/security_bulletins/302 - https://hdhrmi.blogspot.com/2020/03/multiple-vulnerabilities-in-ruckus.html?m=1
CVE ID: CVE-2020-22658 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T20:48:13.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to switch completely to
oneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to switch completely to unauthorized image to be Boot as primary verified image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.ruckuswireless.com/security_bulletins/302 - https://hdhrmi.blogspot.com/2020/03/multiple-vulnerabilities-in-ruckus.html?m=1
CVE ID: CVE-2020-22659 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T17:57:18.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to exploit the official
CVE ID: CVE-2020-22660 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T17:55:51.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to force bypass Secure B
oneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to force bypass Secure Boot failed attempts and run temporarily the previous Backup image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.ruckuswireless.com/security_bulletins/302 - https://hdhrmi.blogspot.com/2020/03/multiple-vulnerabilities-in-ruckus.html?m=1
CVE ID: CVE-2020-22661 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T17:54:19.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to erase the backup seco
oneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to erase the backup secondary official image and write secondary backup unauthorized image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.ruckuswireless.com/security_bulletins/302 - https://hdhrmi.blogspot.com/2020/03/multiple-vulnerabilities-in-ruckus.html?m=1
CVE ID: CVE-2020-22662 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T17:52:58.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to change and set unauth
oneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to change and set unauthorized "illegal region code" by remote code Execution command injection which leads to run illegal frequency with maxi output power. Vulnerability allows attacker to create an arbitrary amount of ssid wlans interface per radio which creates overhead over noise (the default max limit is 8 ssid only per radio in solo AP). Vulnerability allows attacker to unlock hidden regions by privilege command injection in WEB GUI. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.ruckuswireless.com/security_bulletins/302 - https://hd
Container: - CISA ADP Vulnrichment: References: - https://support.ruckuswireless.com/security_bulletins/302 - https://hdhrmi.blogspot.com/2020/03/multiple-vulnerabilities-in-ruckus.html?m=1
CVE ID: CVE-2020-22669 State: PUBLISHED Published: 2022-09-02T00:00:00.000Z Last Updated: 2025-11-03T19:25:32.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Modsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a SQL injection bypass vulnerability. Attackers can use the comment characters and variable assignments in the SQL syntax to bypass Modsecurity WAF protection and implement SQL injection attacks on Web applications. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1727 - https://github.com/coreruleset/coreruleset/pull/1793 - https://lists.debian.org/debian-lts-announce/2023/01/msg
s/1727 - https://github.com/coreruleset/coreruleset/pull/1793 - https://lists.debian.org/debian-lts-announce/2023/01/msg00033.html
CVE ID: CVE-2020-22673 State: PUBLISHED Published: 2021-10-12T20:37:07 Last Updated: 2024-08-04T14:51:10.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the senc_Parse function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1342