Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
g/opensuse-security-announce/2020-07/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html - https://usn.ubuntu.com/4434-1/ - https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
CVE ID: CVE-2020-14399 State: PUBLISHED Published: 2020-06-17T15:12:57 Last Updated: 2024-08-04T12:46:34.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. NOTE: there is reportedly "no trust boundary crossed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13 - https://github.com/LibVNC/libvncserver/commit/23e5cbe6b090d7f22982aee909a6a618174d3c2d - https://lists.debian.org/debian-lts-announce/2020/06/msg00035.html - http://lists.opensuse.or
2982aee909a6a618174d3c2d - https://lists.debian.org/debian-lts-announce/2020/06/msg00035.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html - https://usn.ubuntu.com/4434-1/ - https://bugzilla.redhat.com/show_bug.cgi?id=1860354 - https://lists.debian.org/debian-lts-announce/2020/08/msg00045.html
CVE ID: CVE-2020-14400 State: PUBLISHED Published: 2020-06-17T15:12:50 Last Updated: 2024-08-04T12:46:34.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. NOTE: Third parties do not consider this to be a vulnerability as there is no known path of exploitation or cross of a trust boundary Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13 - https://github.com/LibVNC/libvncserver/commit/53073c8d7e232151ea2ecd8a1243124121e10e2d - https://list
VNCServer-0.9.13 - https://github.com/LibVNC/libvncserver/commit/53073c8d7e232151ea2ecd8a1243124121e10e2d - https://lists.debian.org/debian-lts-announce/2020/06/msg00035.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html - https://usn.ubuntu.com/4434-1/ - https://bugzilla.redhat.com/show_bug.cgi?id=1860361 - https://lists.debian.org/debian-lts-announce/2020/08/msg00045.html
CVE ID: CVE-2020-14401 State: PUBLISHED Published: 2020-06-17T15:12:41 Last Updated: 2024-08-04T12:46:34.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value integer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13 - https://github.com/LibVNC/libvncserver/commit/a6788d1da719ae006605b78d22f5a9f170b423af - https://lists.debian.org/debian-lts-announce/2020/06/msg00035.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html - http://lists.opensuse.org/op
sg00035.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html - https://usn.ubuntu.com/4434-1/ - https://lists.debian.org/debian-lts-announce/2020/08/msg00045.html - https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
CVE ID: CVE-2020-14402 State: PUBLISHED Published: 2020-06-17T15:12:32 Last Updated: 2024-08-04T12:46:34.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibVNCServer before 0.9.13. libvncserver/corre.c allows out-of-bounds access via encodings. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13 - https://github.com/LibVNC/libvncserver/commit/74e8a70f2c9a5248d6718ce443e07c7ed314dfff - https://lists.debian.org/debian-lts-announce/2020/06/msg00035.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html - http://lists.opensuse
20/06/msg00035.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html - https://usn.ubuntu.com/4434-1/ - https://lists.debian.org/debian-lts-announce/2020/08/msg00045.html - https://usn.ubuntu.com/4573-1/ - https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
CVE ID: CVE-2020-14403 State: PUBLISHED Published: 2020-06-17T15:12:21 Last Updated: 2024-08-04T12:46:34.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibVNCServer before 0.9.13. libvncserver/hextile.c allows out-of-bounds access via encodings. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13 - https://github.com/LibVNC/libvncserver/commit/74e8a70f2c9a5248d6718ce443e07c7ed314dfff - https://lists.debian.org/debian-lts-announce/2020/06/msg00035.html - https://usn.ubuntu.com/4434-1/ - https://lists.debian.org/debian-lts-announce/2020/08/msg00045.h
2020/06/msg00035.html - https://usn.ubuntu.com/4434-1/ - https://lists.debian.org/debian-lts-announce/2020/08/msg00045.html - https://usn.ubuntu.com/4573-1/ - https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
CVE ID: CVE-2020-14404 State: PUBLISHED Published: 2020-06-17T15:11:43 Last Updated: 2024-08-04T12:46:34.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rre.c allows out-of-bounds access via encodings. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13 - https://github.com/LibVNC/libvncserver/commit/74e8a70f2c9a5248d6718ce443e07c7ed314dfff - https://lists.debian.org/debian-lts-announce/2020/06/msg00035.html - https://usn.ubuntu.com/4434-1/ - https://lists.debian.org/debian-lts-announce/2020/08/msg00045.html
/06/msg00035.html - https://usn.ubuntu.com/4434-1/ - https://lists.debian.org/debian-lts-announce/2020/08/msg00045.html - https://usn.ubuntu.com/4573-1/ - https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
CVE ID: CVE-2020-14405 State: PUBLISHED Published: 2020-06-17T15:11:35 Last Updated: 2024-08-04T12:46:34.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13 - https://github.com/LibVNC/libvncserver/commit/8937203441ee241c4ace85da687b7d6633a12365 - https://lists.debian.org/debian-lts-announce/2020/06/msg00035.html - https://usn.ubuntu.com/4434-1/ - https://lists.debian.org/debian-lts-announce/2020/08/msg00045.html - https:
0035.html - https://usn.ubuntu.com/4434-1/ - https://lists.debian.org/debian-lts-announce/2020/08/msg00045.html - https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
CVE ID: CVE-2020-14408 State: PUBLISHED Published: 2020-06-17T19:21:23 Last Updated: 2024-08-04T12:46:34.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Agentejo Cockpit 0.10.2. Insufficient sanitization of the to parameter in the /auth/login route allows for injection of arbitrary JavaScript code into a web page's content, creating a Reflected XSS attack vector. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/agentejo/cockpit/issues/1310
CVE ID: CVE-2020-14409 State: PUBLISHED Published: 2021-01-19T00:00:00 Last Updated: 2024-08-04T12:46:34.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libsdl.org/show_bug.cgi?id=5200 - https://hg.libsdl.org/SDL/rev/3f9b4e92c1d9 - https://lists.debian.org/debian-lts-announce/2021/01/msg00024.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FS32YCEJLQ2FYUWSWYI2ZMQW
tps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FS32YCEJLQ2FYUWSWYI2ZMQWQEAWJNR/ - https://security.gentoo.org/glsa/202107-55 - https://www.starwindsoftware.com/security/sw-20210325-0001/ - https://lists.debian.org/debian-lts-announce/2023/02/msg00008.html
CVE ID: CVE-2020-14410 State: PUBLISHED Published: 2021-01-19T00:00:00 Last Updated: 2024-08-04T12:46:34.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libsdl.org/show_bug.cgi?id=5200 - https://hg.libsdl.org/SDL/rev/3f9b4e92c1d9 - https://lists.debian.org/debian-lts-announce/2021/01/msg00024.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FS32YCEJLQ2FYUWSWYI2ZMQWQEAWJNR/ - https:
aproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FS32YCEJLQ2FYUWSWYI2ZMQWQEAWJNR/ - https://security.gentoo.org/glsa/202107-55 - https://lists.debian.org/debian-lts-announce/2023/02/msg00008.html
CVE ID: CVE-2020-14412 State: PUBLISHED Published: 2020-06-29T16:33:21 Last Updated: 2024-08-04T12:46:34.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: NeDi 1.9C is vulnerable to Remote Command Execution. System-Snapshot.php improperly escapes shell metacharacters from a POST request. An attacker can exploit this by crafting an arbitrary payload (any system commands) that contains shell metacharacters via a POST request with a psw parameter. (This can also be exploited via CSRF.) Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/farid007/c0df57620a3cc1fb565bc77a945aa3fd
CVE ID: CVE-2020-14413 State: PUBLISHED Published: 2020-06-29T16:37:26 Last Updated: 2024-08-04T12:46:34.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: NeDi 1.9C is vulnerable to XSS because of an incorrect implementation of sanitize() in inc/libmisc.php. This function attempts to escape the SCRIPT tag from user-controllable values, but can be easily bypassed, as demonstrated by an onerror attribute of an IMG element as a Devices-Config.php?sta= value. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/farid007/8db2ab5367ba00e87f9479b32d46fea8
CVE ID: CVE-2020-14414 State: PUBLISHED Published: 2020-06-29T16:41:37 Last Updated: 2024-08-04T12:46:34.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: NeDi 1.9C is vulnerable to Remote Command Execution. pwsec.php improperly escapes shell metacharacters from a POST request. An attacker can exploit this by crafting an arbitrary payload (any system commands) that contains shell metacharacters via a POST request with a pw parameter. (This can also be exploited via CSRF.) Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/farid007/a3d96d305f028d221f729eb6ae681f5a
CVE ID: CVE-2020-14415 State: PUBLISHED Published: 2020-08-27T15:31:38 Last Updated: 2024-08-04T12:46:34.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: oss_write in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/4467-1/ - https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=7a4ede0047a8613b0e3b72c9d351038f013dd357
CVE ID: CVE-2020-14416 State: PUBLISHED Published: 2020-06-18T10:45:17 Last Updated: 2024-08-04T12:46:34.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1162002 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0ace17d56824165c7f4c68785d6b58971db954dd - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5
linux.git/commit/?id=0ace17d56824165c7f4c68785d6b58971db954dd - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.16 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html
CVE ID: CVE-2020-14418 State: PUBLISHED Published: 2021-01-30T05:26:59 Last Updated: 2024-08-04T12:46:34.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to elevate their privileges to SYSTEM. This occurs because path redirection can occur via vectors involving directory junctions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nettitude/metasploit-modules - https://labs.nettitude.com/blog/cve-2020-14418-madcodehook-library-local-privilege-escalation/
CVE ID: CVE-2020-14421 State: PUBLISHED Published: 2020-06-18T12:51:09 Last Updated: 2024-08-04T12:46:34.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via the Script Content box on the Add Cron Job screen. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jenaye/aapanel - https://forum.aapanel.com - http://packetstormsecurity.com/files/159575/aaPanel-6.6.6-Privilege-Escalation.html
CVE ID: CVE-2020-14422 State: PUBLISHED Published: 2020-06-18T00:00:00 Last Updated: 2024-08-04T12:46:34.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or IPv6Interface objects, and this attacker can cause many dictionary entries to be created. This is fixed in: v3.5.10, v3.5.10rc1; v3.6.12; v3.7.9; v3.8.4, v3.8.4rc1, v3.8.5, v3.8.6, v3.8.6rc1; v3.9.0, v3.9.0b4, v3.9.0b5, v3.9.0rc1, v3.9.0rc2. Additional
6.12; v3.7.9; v3.8.4, v3.8.4rc1, v3.8.5, v3.8.6, v3.8.6rc1; v3.9.0, v3.9.0b4, v3.9.0b5, v3.9.0rc1, v3.9.0rc2. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.python.org/issue41004 - https://github.com/python/cpython/pull/20956 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00006.html - https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X36Y523UAZY5QFXZAAORNFY63HLBWX7N/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.
36Y523UAZY5QFXZAAORNFY63HLBWX7N/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FCCZTAYZATTNSNEAXWA7U3HCO2OVQKT5/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00041.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VT4AF72TJ2XNIKCR4WEBR7URBJJ4YZRD/ - https://usn.ubuntu.com/4428-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3TALOUBYU2MQD4BPLRTDQUMBKGCAXUA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr
sage/V3TALOUBYU2MQD4BPLRTDQUMBKGCAXUA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE4O3PNDNNOMSKHNUKZKD3NGHIFUFDPX/ - https://security.gentoo.org/glsa/202008-01 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YILCHHTNLH4GG4GSQBX2MZRKZBXOLCKE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NTBKKOLFFNHG6CM4ACDX4APHSD5ZX5N4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CNHPQGSP2YM3JAUD2VAMPXTIUQTZ2M2U/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproje
e/CNHPQGSP2YM3JAUD2VAMPXTIUQTZ2M2U/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V53P2YOLEQH4J7S5QHXMKMZYFTVVMTMO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CTUNTBJ3POHONQOTLEZC46POCIYYTAKZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36XI3EEQNMHGOZEI63Y7UV6XZRELYEAU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OXI72HIHMXCQFWTULUXDG7VDA2BCYL4Y/ - https://www.oracle.com/security-alerts/cpujan2021.html - https://security.netapp.com/advisory/ntap-20200724-0004/ - https://lists.
w.oracle.com/security-alerts/cpujan2021.html - https://security.netapp.com/advisory/ntap-20200724-0004/ - https://lists.debian.org/debian-lts-announce/2023/05/msg00016.html
CVE ID: CVE-2020-14423 State: PUBLISHED Published: 2020-06-18T13:27:19 Last Updated: 2024-08-04T12:46:34.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Convos before 4.20 does not properly generate a random secret in Core/Settings.pm and Util.pm. This leads to a predictable CONVOS_LOCAL_SECRET value, affecting password resets and invitations. Additional Analyst Notes: - CVE Program Container: References: - https://convos.chat/blog/2020/6/18/local-secret-got-more-secure - https://github.com/Nordaaker/convos/commit/54d1763ac65c05aad27ad454b4e5a62ba8352d39 - https://github.com/Nordaaker/convos/compare/4.19...4.20
CVE ID: CVE-2020-14424 State: PUBLISHED Published: 2021-11-14T19:48:18 Last Updated: 2024-08-04T12:46:34.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2001016 - https://github.com/Cacti/cacti/pull/4261
CVE ID: CVE-2020-14425 State: PUBLISHED Published: 2020-11-02T17:01:34 Last Updated: 2024-08-04T12:46:34.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can execute local files and bypass the security dialog. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://www.exploit-db.com/exploits/48982 - http://packetstormsecurity.com/files/159784/Foxit-Reader-9.7.1-Remote-Command-Execution.html
CVE ID: CVE-2020-14426 State: PUBLISHED Published: 2020-06-18T16:20:03 Last Updated: 2024-08-04T12:46:34.252Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBK853 before 3.2.10.11, RBR850 before 3.2.10.11, RBS850 before 3.2.10.11, RBK842 before 3.2.10.11, RBR840 before 3.2.10.11, and RBS840 before 3.2.10.11. Additional Analyst Notes: - CVE Program Container: Refer
.2.10.11, RBR840 before 3.2.10.11, and RBS840 before 3.2.10.11. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061931/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-Wifi-Systems-PSV-2020-0033
CVE ID: CVE-2020-14427 State: PUBLISHED Published: 2020-06-18T16:21:05 Last Updated: 2024-08-04T12:46:34.311Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: Refer
.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061935/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-WiFi-Systems-PSV-2020-0042
CVE ID: CVE-2020-14428 State: PUBLISHED Published: 2020-06-18T16:21:45 Last Updated: 2024-08-04T12:46:34.682Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: Refer
.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061936/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-WiFi-Systems-PSV-2020-0044
CVE ID: CVE-2020-14429 State: PUBLISHED Published: 2020-06-18T16:25:30 Last Updated: 2024-08-04T12:46:34.531Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects MK62 before 1.0.4.92, MK63 before 1.0.4.92, MR60 before 1.0.4.92, MS60 before 1.0.4.92, RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBS750 before 3.2.15.25, RBR750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.2
R840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061938/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-WiFi-Systems-PSV-2020-0050