Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-5606 State: PUBLISHED Published: 2020-09-18T05:05:24 Last Updated: 2024-08-04T08:30:24.615Z Vendors: BUFFALO INC. Products: WHR-G54S Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary script via a specially crafted page. Additional Analyst Notes: - CVE Program Container: References: - https://www.buffalo.jp/news/detail/20200911-01.html - https://jvn.jp/en/jp/JVN09166495/index.html
CVE ID: CVE-2020-5607 State: PUBLISHED Published: 2020-07-10T01:30:18 Last Updated: 2024-08-04T08:30:24.618Z Vendors: SHIRASAGI Project Products: SHIRASAGI Problem Types: Open Redirect Description: Open redirect vulnerability in SHIRASAGI v1.13.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.ss-proj.org/ - https://github.com/shirasagi/shirasagi - https://github.com/shirasagi/shirasagi/commit/040a02c9d4b5dd2f91c5c29c0008a47cde6ee99a - https://github.com/shirasagi/shirasagi/commit/040a02c9d4b5dd2f91c5c29c0008a47cde6ee99a.patch - https
c0008a47cde6ee99a - https://github.com/shirasagi/shirasagi/commit/040a02c9d4b5dd2f91c5c29c0008a47cde6ee99a.patch - https://jvn.jp/en/jp/JVN55657988/index.html
CVE ID: CVE-2020-5608 State: PUBLISHED Published: 2020-08-05T13:13:02 Last Updated: 2024-08-04T08:30:24.658Z Vendors: Yokogawa Electric Corporation Products: CAMS for HIS Problem Types: Authentication bypass Description: CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to bypass authentication and send altered communication packets via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://web-material3.yokogawa.com/1/29820/files/YSAR-20-0001-E.pdf
alyst Notes: - CVE Program Container: References: - https://web-material3.yokogawa.com/1/29820/files/YSAR-20-0001-E.pdf - https://jvn.jp/vu/JVNVU97997181/index.html
CVE ID: CVE-2020-5609 State: PUBLISHED Published: 2020-08-05T13:12:59 Last Updated: 2024-08-04T08:30:24.580Z Vendors: Yokogawa Electric Corporation Products: CAMS for HIS Problem Types: Directory traversal Description: Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to create or overwrite arbitrary files and run arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://web-material3.yokogawa.
ia unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://web-material3.yokogawa.com/1/29820/files/YSAR-20-0001-E.pdf - https://jvn.jp/vu/JVNVU97997181/index.html
CVE ID: CVE-2020-5610 State: PUBLISHED Published: 2020-07-30T08:00:14 Last Updated: 2024-08-04T08:30:24.564Z Vendors: TOYOTA MOTOR CORPORATION Products: Global TechStream (GTS) for TOYOTA dealers Problem Types: Denial-of-service (DoS) Description: Global TechStream (GTS) for TOYOTA dealers version 15.10.032 and earlier allows an attacker to cause a denial-of-service (DoS) condition and execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN40400577/index.html
CVE ID: CVE-2020-5611 State: PUBLISHED Published: 2020-07-27T06:55:12 Last Updated: 2024-08-04T08:30:24.583Z Vendors: Social Rocket Products: Social Sharing Plugin Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Social Sharing Plugin versions prior to 1.2.10 allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/social-rocket/ - https://jvn.jp/en/jp/JVN05502028/index.html
CVE ID: CVE-2020-5612 State: PUBLISHED Published: 2020-07-29T01:05:20 Last Updated: 2024-08-04T08:30:24.802Z Vendors: kujirahand Products: KonaWiki Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://kujirahand.com/konawiki/ - https://jvn.jp/en/jp/JVN48194211/index.html
CVE ID: CVE-2020-5613 State: PUBLISHED Published: 2020-07-29T01:05:28 Last Updated: 2024-08-04T08:30:24.621Z Vendors: kujirahand Products: KonaWiki Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://kujirahand.com/konawiki/ - https://jvn.jp/en/jp/JVN48194211/index.html
CVE ID: CVE-2020-5614 State: PUBLISHED Published: 2020-07-29T01:05:37 Last Updated: 2024-08-04T08:30:24.561Z Vendors: kujirahand Products: KonaWiki Problem Types: Directory traversal Description: Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kujirahand.com/konawiki/ - https://jvn.jp/en/jp/JVN48194211/index.html
CVE ID: CVE-2020-5615 State: PUBLISHED Published: 2020-08-04T01:05:49 Last Updated: 2024-08-04T08:39:24.031Z Vendors: PHP Factory Products: [Calendar01] and [Calendar02] Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in [Calendar01] free edition ver1.0.0 and [Calendar02] free edition ver1.0.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.php-factory.net/calendar/01.php - https://www.php-factory.net/calendar/02.php - https://jvn.jp/en/jp/JVN73169744/index.html
CVE ID: CVE-2020-5616 State: PUBLISHED Published: 2020-08-04T01:05:50 Last Updated: 2024-08-04T08:39:24.038Z Vendors: PHP Factory Products: [Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01] Problem Types: Authentication bypass Description: [Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01] [Calendar01] free edition ver1.0.0, [Calendar02] free edition ver1.0.0, [PKOBO-News01] free edition ver1.0.3 and earlier, [PKOBO-vote01] free edition ver1.0.1 and earlier, [Telop01] free edition ver1.0.0, [Gallery01] free edition ver1.0.3 and earlier, [CalendarForm01] free editio
nd earlier, [Telop01] free edition ver1.0.0, [Gallery01] free edition ver1.0.3 and earlier, [CalendarForm01] free edition ver1.0.3 and earlier, and [Link01] free edition ver1.0.0 allows remote attackers to bypass authentication and log in to the product with administrative privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.php-factory.net/calendar/01.php - https://www.php-factory.net/calendar/02.php - https://jvn.jp/en/jp/JVN73169744/index.html - https://www.php-factory.net/news/pkobo-news01.php - https://www.php-factory.net/vote/01.php - https://www.php-factory.net/telop/01.php - https://www.php-factory.net/gallery/01.php - https
-factory.net/vote/01.php - https://www.php-factory.net/telop/01.php - https://www.php-factory.net/gallery/01.php - https://www.php-factory.net/calendar_form/01.php - https://www.php-factory.net/link/01.php
CVE ID: CVE-2020-5617 State: PUBLISHED Published: 2020-08-04T01:05:50 Last Updated: 2024-08-04T08:39:23.935Z Vendors: Sky Co., LTD. Products: SKYSEA Client View Problem Types: Privilege escalation Description: Privilege escalation vulnerability in SKYSEA Client View Ver.12.200.12n to 15.210.05f allows an attacker to obtain unauthorized privileges and modify/obtain sensitive information or perform unintended operations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.skyseaclientview.net/news/200803_01/ - https://jvn.jp/en/jp/JVN25422698/index.html
CVE ID: CVE-2020-5619 State: PUBLISHED Published: 2020-08-25T02:20:22 Last Updated: 2024-08-04T08:39:23.994Z Vendors: Kajitori Co.,Ltd Products: Exment Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exment.net/docs/#/weakness/20200819 - https://jvn.jp/en/jp/JVN88315581/
CVE ID: CVE-2020-5620 State: PUBLISHED Published: 2020-08-25T02:20:22 Last Updated: 2024-08-04T08:39:25.753Z Vendors: Kajitori Co.,Ltd Products: Exment Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via a specially crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://exment.net/docs/#/weakness/20200819 - https://jvn.jp/en/jp/JVN88315581/
CVE ID: CVE-2020-5621 State: PUBLISHED Published: 2020-08-28T04:05:28 Last Updated: 2024-08-04T08:39:25.504Z Vendors: Neuroinformatics Unit, Integrative Computational Brain Science Collaboration Division, RIKEN Center for Brain Science Products: Multiple NETGEAR switching hubs Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in NETGEAR switching hubs (GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier) allow remote attackers to hijack the authentication of administrators and alter the settings of the device via unspecified vectors. Additional Analyst Notes: - CVE Program Container: Reference
d alter the settings of the device via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.netgear.com/support/product/gs716Tv2.aspx - https://www.netgear.com/support/product/gs724tv3.aspx - https://jvn.jp/en/jp/JVN29903998/index.html - http://jvn.jp/en/jp/JVN29903998/index.html
CVE ID: CVE-2020-5622 State: PUBLISHED Published: 2020-09-02T04:35:14 Last Updated: 2024-08-04T08:39:25.017Z Vendors: Cyber Security Cloud , Inc. Products: Shadankun Server Security Type (excluding normal blocking method types) Problem Types: Denial-of-service (DoS) Description: Shadankun Server Security Type (excluding normal blocking method types) Ver.1.5.3 and earlier allows remote attackers to cause a denial of service which may result in not being able to add newly detected attack source IP addresses as blocking targets for about 10 minutes via a specially crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://www.shadan-kun.com/news/20200831/ - https:
est. Additional Analyst Notes: - CVE Program Container: References: - https://www.shadan-kun.com/news/20200831/ - https://jvn.jp/en/jp/JVN42665874/index.html
CVE ID: CVE-2020-5623 State: PUBLISHED Published: 2020-08-28T04:05:29 Last Updated: 2024-08-04T08:39:25.781Z Vendors: Nitori Holdings Co., Ltd. Products: NITORI App for Android and NITORI App for iOS Problem Types: Fails to restrict access Description: NITORI App for Android versions 6.0.4 and earlier and NITORI App for iOS versions 6.0.2 and earlier allow remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN77402327/index.html
CVE ID: CVE-2020-5624 State: PUBLISHED Published: 2020-08-28T04:05:29 Last Updated: 2024-08-04T08:39:25.370Z Vendors: Neuroinformatics Unit, Integrative Computational Brain Science Collaboration Division, RIKEN Center for Brain Science Products: XooNIps Problem Types: SQL Injection Description: SQL injection vulnerability in the XooNIps 3.48 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://xoonips.osdn.jp/ - https://xoonips.osdn.jp/modules/news/index.php?page=article&storyid=12 - https://jvn.jp/en/jp/JVN40725650/index.html
CVE ID: CVE-2020-5625 State: PUBLISHED Published: 2020-08-28T04:05:30 Last Updated: 2024-08-04T08:39:25.435Z Vendors: Neuroinformatics Unit, Integrative Computational Brain Science Collaboration Division, RIKEN Center for Brain Science Products: XooNIps Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in XooNIps 3.48 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://xoonips.osdn.jp/ - https://xoonips.osdn.jp/modules/news/index.php?page=article&storyid=12 - https://jvn.jp/en/jp/JVN40725650/index.html
CVE ID: CVE-2020-5626 State: PUBLISHED Published: 2021-01-28T10:00:28 Last Updated: 2024-08-04T08:39:25.686Z Vendors: Infoscience Corporation Products: Logstorage and ELC Analytics Problem Types: OS Command Injection Description: Logstorage version 8.0.0 and earlier, and ELC Analytics version 3.0.0 and earlier allow remote attackers to execute arbitrary OS commands via a specially crafted log file. Additional Analyst Notes: - CVE Program Container: References: - https://www.logstorage.com/support/vulnerability_info.html#jvn-41853173 - https://jvn.jp/en/jp/JVN41853173/index.html
CVE ID: CVE-2020-5627 State: PUBLISHED Published: 2020-09-09T08:50:12 Last Updated: 2024-08-04T08:39:25.092Z Vendors: YODOBASHI CAMERA CO.,LTD. Products: Yodobashi App for Android Problem Types: Fails to restrict access Description: Yodobashi App for Android versions 1.8.7 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN77402327/index.html
CVE ID: CVE-2020-5628 State: PUBLISHED Published: 2020-09-18T05:05:25 Last Updated: 2024-08-04T08:39:25.687Z Vendors: UNIQLO CO., LTD. Products: UNIQLO App for Android Problem Types: Fails to restrict access Description: UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, if the access destination is a malicious website, the user may fall victim to the social engineering attack. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN31864411/index.html
CVE ID: CVE-2020-5629 State: PUBLISHED Published: 2020-09-18T05:05:25 Last Updated: 2024-08-04T08:39:24.918Z Vendors: UNIQLO CO., LTD. Products: UNIQLO App for Android Problem Types: Fails to restrict access Description: UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website via a malicious App created by the third party. As a result, if the access destination is a malicious website, the user may fall victim to the social engineering attack. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN31864411/index.html
CVE ID: CVE-2020-5631 State: PUBLISHED Published: 2020-10-06T05:00:26 Last Updated: 2024-08-04T08:39:25.269Z Vendors: CMONOS Co. Ltd. Products: CMONOS.JP Problem Types: Cross-site scripting Description: Stored cross-site scripting vulnerability in CMONOS.JP ver2.0.20191009 and earlier allows remote attackers to inject arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://cmonos.jp/download/history.html - https://cmonos.jp/download/index.shtml - https://jvn.jp/en/vu/JVNVU93741515/index.html
CVE ID: CVE-2020-5632 State: PUBLISHED Published: 2020-10-06T05:00:27 Last Updated: 2024-08-04T08:39:25.321Z Vendors: NEC Corporation Products: InfoCage SiteShell series Problem Types: Fails to restrict access Description: InfoCage SiteShell series (Host type SiteShell for IIS V1.4, V1.5, and V1.6, Host type SiteShell for IIS prior to revision V2.0.0.6, V2.1.0.7, V2.1.1.6, V3.0.0.11, V4.0.0.6, V4.1.0.5, and V4.2.0.1, Host type SiteShell for Apache Windows V1.4, V1.5, and V1.6, and Host type SiteShell for Apache Windows prior to revision V2.0.0.6, V2.1.0.7, V2.1.1.6, V3.0.0.11, V4.0.0.6, V4.1.0.5, and V4.2.0.1) allow authenticated attackers to bypass access restriction and to execute arbitrar
11, V4.0.0.6, V4.1.0.5, and V4.2.0.1) allow authenticated attackers to bypass access restriction and to execute arbitrary code with an elevated privilege via a specially crafted executable files. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/infocage/siteshell/everyone_20200918.html - https://jvn.jp/en/jp/JVN07426151/index.html
CVE ID: CVE-2020-5633 State: PUBLISHED Published: 2021-01-13T09:40:35 Last Updated: 2024-08-04T08:39:25.706Z Vendors: NEC Corporation Products: Multiple NEC products where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied Problem Types: Authentication bypass Description: Multiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, and Express5800/GT110j) where Baseboard Management Controller (BMC) firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and then obtain/modify BMC setting information, obtain monitoring information, or reboot/shut down the
ss authentication and then obtain/modify BMC setting information, obtain monitoring information, or reboot/shut down the vulnerable product via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv21-002.html - https://www.support.nec.co.jp/View.aspx?id=9010108754 - https://jvn.jp/en/jp/JVN38752718/index.html
CVE ID: CVE-2020-5634 State: PUBLISHED Published: 2020-10-06T05:00:27 Last Updated: 2024-08-04T08:39:25.452Z Vendors: ELECOM CO.,LTD. Products: ELECOM LAN routers Problem Types: OS Command Injection Description: ELECOM LAN routers (WRC-2533GST2 firmware versions prior to v1.14, WRC-1900GST2 firmware versions prior to v1.14, WRC-1750GST2 firmware versions prior to v1.14, and WRC-1167GST2 firmware versions prior to v1.10) allow an attacker on the same network segment to execute arbitrary OS commands with a root privilege via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20201005-01/ - https://jvn.jp/en/jp/JVN8289209
E Program Container: References: - https://www.elecom.co.jp/news/security/20201005-01/ - https://jvn.jp/en/jp/JVN82892096/index.html
CVE ID: CVE-2020-5635 State: PUBLISHED Published: 2020-12-14T02:25:51 Last Updated: 2024-08-04T08:39:25.507Z Vendors: NEC Corporation Products: Aterm SA3500G Problem Types: OS Command Injection Description: Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker on the adjacent network to send a specially crafted request to a specific URL, which may result in an arbitrary command execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.necplatforms.co.jp/product/security_ap/info_20201211.html - https://jvn.jp/en/jp/JVN55917325/index.html - https://jvn.jp/jp/JVN55917325/index.html
CVE ID: CVE-2020-5636 State: PUBLISHED Published: 2020-12-14T02:25:51 Last Updated: 2024-08-04T08:39:25.013Z Vendors: NEC Corporation Products: Aterm SA3500G Problem Types: OS Command Injection Description: Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker with an administrative privilege to send a specially crafted request to a specific URL, which may result in an arbitrary command execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.necplatforms.co.jp/product/security_ap/info_20201211.html - https://jvn.jp/en/jp/JVN55917325/index.html - https://jvn.jp/jp/JVN55917325/index.html
CVE ID: CVE-2020-5637 State: PUBLISHED Published: 2020-12-14T02:25:52 Last Updated: 2024-08-04T08:39:25.664Z Vendors: NEC Corporation Products: Aterm SA3500G Problem Types: Improper Validation of Integrity Check Value Description: Improper validation of integrity check value vulnerability in Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker with an administrative privilege to execute a malicious program. Additional Analyst Notes: - CVE Program Container: References: - https://www.necplatforms.co.jp/product/security_ap/info_20201211.html - https://jvn.jp/en/jp/JVN55917325/index.html - https://jvn.jp/jp/JVN55917325/index.html
CVE ID: CVE-2020-5638 State: PUBLISHED Published: 2020-12-03T11:15:31 Last Updated: 2024-08-04T08:39:25.495Z Vendors: NEOJAPAN Inc. Products: desknet's NEO Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in desknet's NEO (desknet's NEO Small License V5.5 R1.5 and earlier, and desknet's NEO Enterprise License V5.5 R1.5 and earlier) allows remote attackers to inject arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.desknets.com/neo/support/mainte/9700/ - https://jvn.jp/en/jp/JVN42199826/index.html
CVE ID: CVE-2020-5639 State: PUBLISHED Published: 2020-12-14T02:25:53 Last Updated: 2024-08-04T08:39:25.369Z Vendors: Soliton Systems K.K. Products: FileZen Problem Types: Directory traversal Description: Directory traversal vulnerability in FileZen versions from V3.0.0 to V4.2.2 allows remote attackers to upload an arbitrary file in a specific directory via unspecified vectors. As a result, an arbitrary OS command may be executed. Additional Analyst Notes: - CVE Program Container: References: - https://www.soliton.co.jp/support/2020/004278.html - https://jvn.jp/en/jp/JVN12884935/index.html - https://jvn.jp/jp/JVN12884935/index.html
CVE ID: CVE-2020-5640 State: PUBLISHED Published: 2020-10-20T07:55:20 Last Updated: 2024-08-04T08:39:25.727Z Vendors: SpiQe Software Products: OneThird CMS Problem Types: Local file inclusion vulnerability Description: Local file inclusion vulnerability in OneThird CMS v1.96c and earlier allows a remote unauthenticated attacker to execute arbitrary code or obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://onethird.net/en/p1340.html - https://jvn.jp/en/vu/JVNVU99467898/index.html
CVE ID: CVE-2020-5641 State: PUBLISHED Published: 2020-11-24T06:55:22 Last Updated: 2024-08-04T08:39:25.661Z Vendors: Netgear Japan G.K. Products: GS108Ev3 Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in GS108Ev3 firmware version 2.06.10 and earlier allows remote attackers to hijack the authentication of administrators and the product's settings may be changed without the user's intention or consent via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062496/GS108Ev3-Firmware-Version-2-06-14 - https://jvn.jp/en/jp/JVN27806339/index.html
CVE ID: CVE-2020-5642 State: PUBLISHED Published: 2020-10-15T02:20:15 Last Updated: 2024-08-04T08:39:25.686Z Vendors: onWebChat Products: Live Chat - Live support Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Live Chat - Live support version 3.1.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/onwebchat/ - https://plugins.trac.wordpress.org/changeset?new=2384440%40onwebchat&old=2364589%40onwebchat - https://jvn.jp/en/jp/JVN92404841/index.html