Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
send some information to a wrong server. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=79329 - https://security.netapp.com/advisory/ntap-20200403-0001/ - https://lists.debian.org/debian-lts-announce/2020/04/msg00021.html - https://usn.ubuntu.com/4330-2/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00025.html - https://www.debian.org/security/2020/dsa-4717 - https://www.debian.org/security/2020/dsa-4719 - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2020-7067 State: PUBLISHED Published: 2020-04-27T20:38:39.634265Z Last Updated: 2024-09-17T02:21:12.549Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: PHP Group Products: PHP Problem Types: CWE-125, CWE-196 Description: In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (uncommon), urldecode() function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2020/dsa-4717 - https://www.debian.org/security/2020/dsa-4719 - https:
er: References: - https://www.debian.org/security/2020/dsa-4717 - https://www.debian.org/security/2020/dsa-4719 - https://www.oracle.com/security-alerts/cpuoct2020.html - https://bugs.php.net/bug.php?id=79465 - https://security.netapp.com/advisory/ntap-20200504-0001/ - https://www.oracle.com/security-alerts/cpuApr2021.html - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2020-7068 State: PUBLISHED Published: 2020-09-09T17:58:42.837584Z Last Updated: 2024-09-17T00:36:03.824Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-416 Description: In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=79797 - https://security.gentoo.org/glsa/202009-10 - https://security.netapp.com/advisory/ntap-2
bugs.php.net/bug.php?id=79797 - https://security.gentoo.org/glsa/202009-10 - https://security.netapp.com/advisory/ntap-20200918-0005/ - https://www.debian.org/security/2021/dsa-4856 - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2020-7069 State: PUBLISHED Published: 2020-10-02T14:14:45.340264Z Last Updated: 2024-09-17T04:04:37.418Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: PHP Group Products: PHP Problem Types: CWE-20 Description: In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=79601 - https://lists.fedoraproject.org/archives/list/package-announce%
r: References: - https://bugs.php.net/bug.php?id=79601 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RRU57N3OSYZPOMFWPRDNVH7EMYOTSZ66/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EVDN7D3IB4EAI4D3ZOM2OJKQ5SD7K4E/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2J3ZZDHCSX65T5QWV4AHBN7MOJXBEKG/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00045.html - https://usn.ubuntu.com/4583-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00067.html - https://security.gentoo.org/glsa/202012-16 - https://www.
pensuse.org/opensuse-security-announce/2020-10/msg00067.html - https://security.gentoo.org/glsa/202012-16 - https://www.debian.org/security/2021/dsa-4856 - https://www.oracle.com/security-alerts/cpuApr2021.html - https://security.netapp.com/advisory/ntap-20201016-0001/ - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2020-7070 State: PUBLISHED Published: 2020-10-02T14:14:45.406433Z Last Updated: 2024-09-16T16:28:36.773Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: PHP Group Products: PHP Problem Types: CWE-20 Description: In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. See also CVE-2020-8184 for more information. Additional Analyst Notes: - CVE Program Cont
hich is supposed to be secure. See also CVE-2020-8184 for more information. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/895727 - https://bugs.php.net/bug.php?id=79699 - http://cve.circl.lu/cve/CVE-2020-8184 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RRU57N3OSYZPOMFWPRDNVH7EMYOTSZ66/ - https://lists.debian.org/debian-lts-announce/2020/10/msg00008.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EVDN7D3IB4EAI4D3ZOM2OJKQ5SD7K4E/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2J3ZZDH
OJKQ5SD7K4E/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2J3ZZDHCSX65T5QWV4AHBN7MOJXBEKG/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00045.html - https://usn.ubuntu.com/4583-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00067.html - https://security.gentoo.org/glsa/202012-16 - https://www.debian.org/security/2021/dsa-4856 - https://security.netapp.com/advisory/ntap-20201016-0001/ - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2020-7071 State: PUBLISHED Published: 2021-02-15T04:10:16.239604Z Last Updated: 2024-09-16T17:28:54.077Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: PHP Group Products: PHP Problem Types: CWE-20 Description: In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filter_var($url, FILTER_VALIDATE_URL), PHP will accept an URL with invalid password as valid URL. This may lead to functions that rely on URL being valid to mis-parse the URL and produce wrong data as components of the URL. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=77423 - https:/
he URL. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=77423 - https://www.debian.org/security/2021/dsa-4856 - https://security.gentoo.org/glsa/202105-23 - https://lists.debian.org/debian-lts-announce/2021/07/msg00008.html - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.tenable.com/security/tns-2021-14 - https://security.netapp.com/advisory/ntap-20210312-0005/
CVE ID: CVE-2020-7079 State: PUBLISHED Published: 2020-04-17T17:54:37 Last Updated: 2024-08-04T09:18:03.092Z Vendors: n/a Products: Autodesk Dynamo BIM Problem Types: Improper signature validation vulnerability Description: An improper signature validation vulnerability in Autodesk Dynamo BIM versions 2.5.1 and 2.5.0 may lead to code execution through maliciously crafted DLL files. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2020-0001
CVE ID: CVE-2020-7080 State: PUBLISHED Published: 2020-04-17T17:52:17 Last Updated: 2024-08-04T09:18:03.094Z Vendors: n/a Products: Autodesk FBX-SDK Problem Types: Buffer Overflow vulnerability Description: A buffer overflow vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to arbitrary code execution on a system running it. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2020-0002
CVE ID: CVE-2020-7081 State: PUBLISHED Published: 2020-04-17T17:52:36 Last Updated: 2024-08-04T09:18:03.075Z Vendors: n/a Products: Autodesk FBX-SDK Problem Types: Type confusion vulnerability Description: A type confusion vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to arbitary code read/write on the system running it. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2020-0002
CVE ID: CVE-2020-7082 State: PUBLISHED Published: 2020-04-17T17:52:49 Last Updated: 2024-08-04T09:18:03.072Z Vendors: n/a Products: Autodesk FBX-SDK Problem Types: Use-After-Free vulnerability Description: A use-after-free vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to code execution on a system running it. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2020-0002
CVE ID: CVE-2020-7083 State: PUBLISHED Published: 2020-04-17T17:53:07 Last Updated: 2024-08-04T09:18:03.027Z Vendors: n/a Products: Autodesk FBX-SDK Problem Types: Integer overflow vulnerability Description: An intager overflow vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to denial of service of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2020-0002
CVE ID: CVE-2020-7084 State: PUBLISHED Published: 2020-04-17T17:53:26 Last Updated: 2024-08-04T09:18:02.962Z Vendors: n/a Products: Autodesk FBX-SDK Problem Types: NULL pointer dereference vulnerability Description: A NULL pointer dereference vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to denial of service of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2020-0002
CVE ID: CVE-2020-7085 State: PUBLISHED Published: 2020-04-17T17:53:49 Last Updated: 2024-08-04T09:18:03.025Z Vendors: n/a Products: Autodesk FBX-SDK Problem Types: Heap overflow vulnerability Description: A heap overflow vulnerability in the Autodesk FBX-SDK versions 2019.2 and earlier may lead to arbitrary code execution on a system running it. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2020-0002
CVE ID: CVE-2020-7104 State: PUBLISHED Published: 2020-01-17T22:10:48 Last Updated: 2024-08-04T09:18:03.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: The chained-quiz plugin 1.1.8.1 for WordPress has reflected XSS via the wp-admin/admin-ajax.php total_questions parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/10029
CVE ID: CVE-2020-7105 State: PUBLISHED Published: 2020-01-16T03:36:35 Last Updated: 2024-08-04T09:18:03.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/redis/hiredis/issues/747 - https://lists.debian.org/debian-lts-announce/2020/01/msg00028.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/76ZDGWBV3YEEQ2YC65ZJEQLKQFVFBZHX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproj
ge/76ZDGWBV3YEEQ2YC65ZJEQLKQFVFBZHX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKOTCIYFEWJJILUGL4JQ3CJAM3TWYZ2A/
CVE ID: CVE-2020-7106 State: PUBLISHED Published: 2020-01-16T03:55:12 Last Updated: 2024-08-04T09:18:03.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and user_group_admin.php, as demonstrated by the description parameter in data_sources.php (a raw string from the database that is displayed by $header to trigger the XSS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cacti/cacti/issues/3191 - https://lists.debian.org/debian-lts-announce/2020/01/msg00014.html - https://lists.fedoraproject.org/archi
issues/3191 - https://lists.debian.org/debian-lts-announce/2020/01/msg00014.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SUSOTOIEJKD2IWJHN7TY56TDZJQZJUVJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XLZAMGTW2OSIBLYLXWHQBGWP7M4DTRS7/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00005.html - https://security.gentoo.org/glsa/202003-40 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00048.html
se-security-announce/2020-04/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00048.html - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00032.html - https://lists.debian.org/debian-lts-announce/2022/03/msg00038.html
CVE ID: CVE-2020-7107 State: PUBLISHED Published: 2020-01-16T04:01:50 Last Updated: 2024-08-04T09:18:03.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via Display_FAQ to Shortcodes/DisplayFAQs.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ultimate-faqs/#developers - https://wpvulndb.com/vulnerabilities/10006 - https://plugins.trac.wordpress.org/changeset/2222959/ultimate-faqs/tags/1.8.30/Shortcodes/DisplayFAQs.php
CVE ID: CVE-2020-7108 State: PUBLISHED Published: 2020-01-16T04:07:16 Last Updated: 2024-08-04T09:18:03.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/10026 - https://learndash.releasenotes.io/release/uCskc-version-312 - https://www.getastra.com/blog/911/plugin-exploit/reflected-xss-vulnerability-found-in-learndash-lms-plugin/ - https://www.jinsonvarghese.com/reflected-xss-in-learndash-wordpress-plugin/ - http://packetstormsecurity.com/files/156275/LearnDash-WordPress-LMS-3.1.2-Cr
lected-xss-in-learndash-wordpress-plugin/ - http://packetstormsecurity.com/files/156275/LearnDash-WordPress-LMS-3.1.2-Cross-Site-Scripting.html
CVE ID: CVE-2020-7109 State: PUBLISHED Published: 2020-01-22T16:08:57 Last Updated: 2024-08-04T09:18:03.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Elementor Page Builder plugin before 2.8.4 for WordPress does not sanitize data during creation of a new template. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/elementor/#developers
CVE ID: CVE-2020-7110 State: PUBLISHED Published: 2020-04-16T16:14:49 Last Updated: 2024-08-04T09:18:03.079Z Vendors: n/a Products: ClearPass Policy Manager Problem Types: persisted cross site scripting Description: ClearPass is vulnerable to Stored Cross Site Scripting by allowing a malicious administrator, or a compromised administrator account, to save malicious scripts within ClearPass that could be executed resulting in a privilege escalation attack. Resolution: Fixed in 6.7.13, 6.8.4, 6.9.0 and higher. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-004.txt
CVE ID: CVE-2020-7111 State: PUBLISHED Published: 2020-04-16T16:14:16 Last Updated: 2024-08-04T09:18:03.111Z Vendors: n/a Products: ClearPass Policy Manager Problem Types: server side injection leading to remote code execution Description: A server side injection vulnerability exists which could allow an authenticated administrative user to achieve Remote Code Execution in ClearPass. Resolution: Fixed in 6.7.13, 6.8.4, 6.9.0 and higher. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-004.txt
CVE ID: CVE-2020-7112 State: REJECTED Published: N/A Last Updated: 2023-01-06T15:20:51.314Z Description: No description available.
CVE ID: CVE-2020-7113 State: PUBLISHED Published: 2020-04-16T16:14:37 Last Updated: 2024-08-04T09:18:03.129Z Vendors: n/a Products: ClearPass Policy Manager Problem Types: interception and modification of http packets Description: A vulnerability was found when an attacker, while communicating with the ClearPass management interface, is able to intercept and change parameters in the HTTP packets resulting in the compromise of some of ClearPass' service accounts. Resolution: Fixed in 6.7.10, 6.8.1, 6.9.0 and higher. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-004.txt
CVE ID: CVE-2020-7114 State: PUBLISHED Published: 2020-04-16T16:14:06 Last Updated: 2024-08-04T09:18:03.032Z Vendors: n/a Products: ClearPass Policy Manager Problem Types: network database compromise Description: A vulnerability exists allowing attackers, when present in the same network segment as ClearPass' management interface, to make changes to certain databases in ClearPass by crafting HTTP packets. As a result of this attack, a possible complete cluster compromise might occur. Resolution: Fixed in 6.7.13, 6.8.4, 6.9.0 and higher. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-004.txt
CVE ID: CVE-2020-7115 State: PUBLISHED Published: 2020-06-03T12:43:13 Last Updated: 2024-08-04T09:18:03.098Z Vendors: n/a Products: ClearPass Policy Manager Problem Types: Unauthenticated Remote Command Execution in the Web Interface Description: The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass. Upon successful bypass an attacker could then execute an exploit that would allow to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF, 6.8.6, 6.9.1 and higher. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-005.tx
l Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-005.txt - http://packetstormsecurity.com/files/158368/ClearPass-Policy-Manager-Unauthenticated-Remote-Command-Execution.html
CVE ID: CVE-2020-7116 State: PUBLISHED Published: 2020-06-03T12:51:07 Last Updated: 2024-08-04T09:18:03.076Z Vendors: n/a Products: ClearPass Policy Manager Problem Types: Authenticated Remote Command Execution Description: The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authenticated to the administrative interface, they could then exploit the system, leading to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF, 6.8.6, 6.9.1 and higher. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-
. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-005.txt
CVE ID: CVE-2020-7117 State: PUBLISHED Published: 2020-06-03T12:49:47 Last Updated: 2024-08-04T09:18:03.039Z Vendors: n/a Products: ClearPass Policy Manager Problem Types: Authenticated Remote Command Execution Description: The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authenticated to the administrative interface, they could then exploit the system, leading to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF, 6.8.6, 6.9.1 and higher. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-
CVE ID: CVE-2020-7118 State: REJECTED Published: N/A Last Updated: 2023-01-06T15:20:56.442Z Description: No description available.
CVE ID: CVE-2020-7119 State: PUBLISHED Published: 2020-09-04T12:01:08 Last Updated: 2024-08-04T09:18:03.274Z Vendors: n/a Products: Aruba ALE ClearPass C1000 S-1200 R4 HW-Based Appliance Problem Types: Remote Arbitrary File Modification Description: A vulnerability exists in the Aruba Analytics and Location Engine (ALE) web management interface 2.1.0.2 and earlier firmware that allows an already authenticated administrative user to arbitrarily modify files as an underlying privileged operating system user. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-008.txt
CVE ID: CVE-2020-7120 State: PUBLISHED Published: 2021-02-23T18:08:36 Last Updated: 2024-08-04T09:18:03.133Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Local Authenticated Buffer Overflow in Clearpass Onguard Description: A local authenticated buffer overflow vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in ClearPass OnGuard could allow local authenticated users to cause a buffer overflow condition. A successful exploit could allow a local attacker to execute arbitrary code within the context the binary is running in, which is a lower privileged account. Additional Analyst Notes: - C
ary code within the context the binary is running in, which is a lower privileged account. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt
CVE ID: CVE-2020-7121 State: PUBLISHED Published: 2020-09-23T12:36:57 Last Updated: 2024-08-04T09:18:03.069Z Vendors: n/a Products: Aruba CX Switch Series 6200F, 6300, 6400, 8320, 8325, and 8400 Problem Types: Multiple Memory Corruption Vulnerabilities in the LLDP Implementation Description: Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the LLDP (Link Layer Discovery Protocol) process in the switch. This applies to firmware versions prior to 10.04.3021. Additional Analyst Notes: - CVE Program Container: References: - http
applies to firmware versions prior to 10.04.3021. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-009.txt
CVE ID: CVE-2020-7122 State: PUBLISHED Published: 2020-09-23T12:35:21 Last Updated: 2024-08-04T09:18:03.070Z Vendors: n/a Products: Aruba CX Switch Series 6200F, 6300, 6400, 8320, 8325, and 8400 Problem Types: Multiple Memory Corruption Vulnerabilities in the CDP Implementation Description: Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the CDP (Cisco Discovery Protocol) process in the switch. This applies to firmware versions prior to 10.04.1000. Additional Analyst Notes: - CVE Program Container: References: - https://www
s to firmware versions prior to 10.04.1000. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-009.txt