Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-26845 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26846 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26847 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26848 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26849 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26850 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26851 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26852 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26853 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26854 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26855 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26856 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26857 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26858 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26859 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26860 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26861 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26862 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26863 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26864 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26865 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26866 State: REJECTED Published: N/A Last Updated: 2022-10-13T00:00:00 Description: No description available.
CVE ID: CVE-2020-26867 State: PUBLISHED Published: 2020-10-12T13:54:47.081903Z Last Updated: 2024-09-16T22:16:02.000Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ARC Informatique Products: PcVue Problem Types: CWE-502 Description: ARC Informatique PcVue prior to version 12.0.17 is vulnerable due to the deserialization of untrusted data, which may allow an attacker to remotely execute arbitrary code on the web and mobile back-end server. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-308-03 - https://www.pcvuesolutions.com/security - https://ics-cert.kaspersky.com/advisories/klcert-adviso
ories/icsa-20-308-03 - https://www.pcvuesolutions.com/security - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2020/10/09/klcert-20-015-remote-code-execution-in-arc-informatique-pcvue/ - https://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1076-security-bulletin-2020-1 - https://us-cert.cisa.gov/ics/advisories/icsa-20-308-03
CVE ID: CVE-2020-26868 State: PUBLISHED Published: 2020-10-12T13:50:37.117523Z Last Updated: 2024-09-17T00:31:32.157Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ARC Informatique Products: PcVue Problem Types: CWE-767 Description: ARC Informatique PcVue prior to version 12.0.17 is vulnerable to a denial-of-service attack due to the ability of an unauthorized user to modify information used to validate messages sent by legitimate web clients. This issue also affects third-party systems based on the Web Services Toolkit. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-308-03 - https://www.pcvue
Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-308-03 - https://www.pcvuesolutions.com/security - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2020/10/09/klcert-20-016-denial-of-service-in-arc-informatique-pcvue/ - https://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1076-security-bulletin-2020-1
CVE ID: CVE-2020-26869 State: PUBLISHED Published: 2020-10-12T13:52:50.268076Z Last Updated: 2024-09-17T02:16:16.234Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ARC Informatique Products: PcVue Problem Types: CWE-200 Description: ARC Informatique PcVue prior to version 12.0.17 is vulnerable to information exposure, allowing unauthorized users to access session data of legitimate users. This issue also affects third-party systems based on the Web Services Toolkit. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-308-03 - https://www.pcvuesolutions.com/security - https://ics-cert.kaspersky.com/
-cert.cisa.gov/ics/advisories/icsa-20-308-03 - https://www.pcvuesolutions.com/security - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2020/10/09/klcert-20-017-session-information-exposure-in-arc-informatique-pcvue/ - https://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1076-security-bulletin-2020-1
CVE ID: CVE-2020-26870 State: PUBLISHED Published: 2020-10-07T15:50:09 Last Updated: 2024-08-04T16:03:22.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a namespace can change from HTML to MathML, as demonstrated by nesting of FORM elements. Additional Analyst Notes: - CVE Program Container: References: - https://research.securitum.com/mutation-xss-via-mathml-mutation-dompurify-2-0-17-bypass/ - https://github.com/cure53/DOMPurify/commit/02724b8eb048dd219d6725b05c3000936f11d62d - https://github.com/cure53/DOMPurify/compare/2
hub.com/cure53/DOMPurify/commit/02724b8eb048dd219d6725b05c3000936f11d62d - https://github.com/cure53/DOMPurify/compare/2.0.16...2.0.17 - https://lists.debian.org/debian-lts-announce/2020/10/msg00029.html - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-26870 - https://www.oracle.com//security-alerts/cpujul2021.html
CVE ID: CVE-2020-26876 State: PUBLISHED Published: 2020-10-07T16:56:25 Last Updated: 2024-08-04T16:03:22.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-courses plugin through 2.0.27 for WordPress allows remote attackers to bypass the intended payment step (for course videos and materials) by using the /wp-json REST API, as exploited in the wild in September 2020. This occurs because show_in_rest is enabled for custom post types (e.g., /wp-json/wp/v2/course and /wp-json/wp/v2/lesson exist). Additional Analyst Notes: - CVE Program Container: References: - https://www.redtimmy.com/critical-information-disclosure-on-wp-courses-plugin-exposes-private-course-videos-and-mate
: - https://www.redtimmy.com/critical-information-disclosure-on-wp-courses-plugin-exposes-private-course-videos-and-materials/ - https://plugins.trac.wordpress.org/changeset/2389243 - https://plugins.trac.wordpress.org/changeset/2388997
CVE ID: CVE-2020-26877 State: PUBLISHED Published: 2022-06-29T13:15:33 Last Updated: 2024-08-04T16:03:22.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: ApiFest OAuth 2.0 Server 0.3.1 does not validate the redirect URI in accordance with RFC 6749 and is susceptible to an open redirector attack. Specifically, it directly sends an authorization code to the redirect URI submitted with the authorization request, without checking whether the redirect URI is registered by the client who initiated the request. This allows an attacker to craft a request with a manipulated redirect URI (redirect_uri parameter), which is under the attacker's control, and consequently obtain the leaked
ulated redirect URI (redirect_uri parameter), which is under the attacker's control, and consequently obtain the leaked authorization code when the server redirects the client to the manipulated redirect URI with an authorization code. NOTE: this is similar to CVE-2019-3778. Additional Analyst Notes: - CVE Program Container: References: - https://tools.ietf.org/html/rfc6749#section-3.1.2.3 - https://github.com/apifest/apifest-oauth20 - http://www.apifest.org/index.html
CVE ID: CVE-2020-26878 State: PUBLISHED Published: 2020-10-26T19:13:47 Last Updated: 2024-08-04T16:03:22.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can submit a query to the API (/service/v1/createUser endpoint), injecting arbitrary commands that will be executed as root user via web.py. Additional Analyst Notes: - CVE Program Container: References: - https://adepts.of0x.cc - https://twitter.com/TheXC3LL - https://x-c3ll.github.io - https://support.ruckuswireless.com/documents - https://support.ruckuswireless.com/security_bulletins/305 - https://adepts.of0x.cc/ruckus-vriot-rce/
CVE ID: CVE-2020-26879 State: PUBLISHED Published: 2020-10-26T19:20:44 Last Updated: 2024-08-04T16:03:22.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py. An unauthenticated attacker can interact with the service API by using a backdoor value as the Authorization header. Additional Analyst Notes: - CVE Program Container: References: - https://adepts.of0x.cc - https://twitter.com/TheXC3LL - https://x-c3ll.github.io - https://support.ruckuswireless.com/documents - https://support.ruckuswireless.com/security_bulletins/305 - https://adepts.of0x.cc/ruckus-vriot-rce/
CVE ID: CVE-2020-26880 State: PUBLISHED Published: 2020-10-07T17:33:49 Last Updated: 2024-08-04T16:03:22.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sympa through 6.2.57b.2 allows a local privilege escalation from the sympa user account to full root access by modifying the sympa.conf configuration file (which is owned by sympa) and parsing it through the setuid sympa_newaliases-wrapper executable. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sympa-community/sympa/issues/1009 - https://github.com/sympa-community/sympa/issues/943#issuecomment-704779420 - https://github.com/sympa-community/sympa/issues/943#issuecomment-704842235 - https
a/issues/943#issuecomment-704779420 - https://github.com/sympa-community/sympa/issues/943#issuecomment-704842235 - https://lists.debian.org/debian-lts-announce/2020/11/msg00015.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2TKOL454ZKKLQCUSUPNEZ52WELN4OAH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5CUVLHGWCDA6B2NH467ZMKL6O2NGLQZN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B5MFWWYY4TSQAXBWZ6SBFX43BLUL3WWI/
CVE ID: CVE-2020-26882 State: PUBLISHED Published: 2020-11-06T13:26:14 Last Updated: 2024-08-04T16:03:22.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON input. Additional Analyst Notes: - CVE Program Container: References: - https://www.playframework.com/security/vulnerability - https://www.playframework.com/security/vulnerability/CVE-2020-26882-JsonParseDataAmplification
CVE ID: CVE-2020-26883 State: PUBLISHED Published: 2020-11-06T13:21:29 Last Updated: 2024-08-04T16:03:22.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents. Additional Analyst Notes: - CVE Program Container: References: - https://www.playframework.com/security/vulnerability - https://www.playframework.com/security/vulnerability/CVE-2020-26883-JsonParseUncontrolledRecursion
CVE ID: CVE-2020-26884 State: PUBLISHED Published: 2020-11-18T15:24:22 Last Updated: 2024-08-04T16:03:22.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: RSA Archer 6.8 through 6.8.0.3 and 6.9 contains a URL injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability by tricking a victim application user into executing malicious JavaScript code in the context of the web application. Additional Analyst Notes: - CVE Program Container: References: - https://community.rsa.com/docs/DOC-114997
CVE ID: CVE-2020-26885 State: PUBLISHED Published: 2021-06-07T03:06:30 Last Updated: 2024-08-04T16:03:22.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in 2sic 2sxc before 11.22. A XSS vulnerability in the sxcver parameter of dnn/ui.html allows an attacker to craft a malicious URL that executes a JavaScript payload in a victim's browser. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/2sic/2sxc/releases - https://burninatorsec.blogspot.com/2020/10/cve-2020-26885-xss-in-anchor-tags.html - http://burninatorsec.blogspot.com/2021/04/cve-2020-26885-xss-in-2sxc.html?m=1 - https://2SXC.org/en/blog/post/2sxc-security-notifi
ninatorsec.blogspot.com/2021/04/cve-2020-26885-xss-in-2sxc.html?m=1 - https://2SXC.org/en/blog/post/2sxc-security-notification-2021-001
CVE ID: CVE-2020-26886 State: PUBLISHED Published: 2021-03-18T19:22:12 Last Updated: 2024-08-04T16:03:22.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Softaculous before 5.5.7 is affected by a code execution vulnerability because of External Initialization of Trusted Variables or Data Stores. This leads to privilege escalation on the local host. Additional Analyst Notes: - CVE Program Container: References: - https://www.softaculous.com/board/index.php?tid=17086&title=Softaculous_5.5.7_Launched - https://vulnerable.af - https://vulnerable.af/posts/cve-2020-26886/
CVE ID: CVE-2020-26887 State: PUBLISHED Published: 2020-10-23T04:57:57 Last Updated: 2024-08-04T16:03:22.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: FRITZ!OS before 7.21 on FRITZ!Box devices allows a bypass of a DNS Rebinding protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://en.avm.de/news/ - https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses - http://packetstormsecurity.com/files/159606/FRITZ-Box-7.20-DNS-Rebinding-Protection-Bypass.html
CVE ID: CVE-2020-26890 State: PUBLISHED Published: 2020-11-24T02:07:06 Last Updated: 2024-08-04T16:03:22.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such a malformed event is accepted into the room's state, the impact is long-lasting and is not fixed by an upgrade to a newer version, requiring the event to be manually redacted instead. Since events are replicated to servers of other room members, the impact is not constra
to be manually redacted instead. Since events are replicated to servers of other room members, the impact is not constrained to the server of the event sender. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrix-org/synapse/security/advisories/GHSA-4mp3-385r-v63f - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U34DPP4ZLOEDUY2ZCWOHQPU5GA5LYNUQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G7YXMMYQP46PYL664JQUXCA3LPBJU7DQ/
CVE ID: CVE-2020-26891 State: PUBLISHED Published: 2020-10-19T16:47:17 Last Updated: 2024-08-04T16:03:22.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: AuthRestServlet in Matrix Synapse before 1.21.0 is vulnerable to XSS due to unsafe interpolation of the session GET parameter. This allows a remote attacker to execute an XSS attack on the domain Synapse is hosted on, by supplying the victim user with a malicious URL to the /_matrix/client/r0/auth/*/fallback/web or /_matrix/client/unstable/auth/*/fallback/web Synapse endpoints. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrix-org/synapse/pull/8444 - https://matrix.org/blog/2020/10/15/
E Program Container: References: - https://github.com/matrix-org/synapse/pull/8444 - https://matrix.org/blog/2020/10/15/synapse-1-21-2-released-and-security-advisory - https://github.com/matrix-org/synapse/releases/tag/v1.21.2 - https://github.com/matrix-org/synapse/security/advisories/GHSA-3x8c-fmpc-5rmq
CVE ID: CVE-2020-26892 State: PUBLISHED Published: 2020-11-06T07:36:45 Last Updated: 2024-08-04T16:03:22.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JWT library in NATS nats-server before 2.1.9 has Incorrect Access Control because of how expired credentials are handled. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nats-io/nats-server/commits/master - https://www.openwall.com/lists/oss-security/2020/11/02/2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VT67XCLIIBYRT762SVFBYFFTQFVSM3SI/
CVE ID: CVE-2020-26893 State: PUBLISHED Published: 2020-10-16T12:53:54 Last Updated: 2024-08-04T16:03:22.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ClamXAV 3 before 3.1.1. A malicious actor could use a properly signed copy of ClamXAV 2 (running with an injected malicious dylib) to communicate with ClamXAV 3's helper tool and perform privileged operations. This occurs because of inadequate client verification in the helper tool. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/matt-clamxav/d341bd48f12a14d2147f8ce860bb36d0
CVE ID: CVE-2020-26894 State: PUBLISHED Published: 2020-10-08T20:04:01 Last Updated: 2024-08-04T16:03:22.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: LiveCode v9.6.1 on Windows allows local, low-privileged users to gain privileges by creating a malicious "cmd.exe" in the folder of the vulnerable LiveCode application. If the application is using LiveCode's "shell()" function, it will attempt to search for "cmd.exe" in the folder of the current application and run the malicious "cmd.exe". Additional Analyst Notes: - CVE Program Container: References: - https://john-woodman.com/posts/LiveCode-Privilege-Escalation-Vulnerability/ - https://quality.livecode.com/show_bug.cgi?id=2
s://john-woodman.com/posts/LiveCode-Privilege-Escalation-Vulnerability/ - https://quality.livecode.com/show_bug.cgi?id=22942 - https://github.com/livecode/livecode/pull/7454
CVE ID: CVE-2020-26895 State: PUBLISHED Published: 2020-10-21T02:00:23 Last Updated: 2024-08-04T16:03:22.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prior to 0.10.0-beta, LND (Lightning Network Daemon) would have accepted a counterparty high-S signature and broadcast tx-relay invalid local commitment/HTLC transactions. This can be exploited by any peer with an open channel regardless of the victim situation (e.g., routing node, payment-receiver, or payment-sender). The impact is a loss of funds in certain situations. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/ariard/fb432a9d2cd3ba24fdc18ccc8c5c6eb4 - https://lists.linuxfoundat
am Container: References: - https://gist.github.com/ariard/fb432a9d2cd3ba24fdc18ccc8c5c6eb4 - https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-October/002856.html - https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-October/002858.html
CVE ID: CVE-2020-26896 State: PUBLISHED Published: 2020-10-21T02:00:49 Last Updated: 2024-08-04T16:03:23.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prior to 0.11.0-beta, LND (Lightning Network Daemon) had a vulnerability in its invoice database. While claiming on-chain a received HTLC output, it didn't verify that the corresponding outgoing off-chain HTLC was already settled before releasing the preimage. In the case of a hash-and-amount collision with an invoice, the preimage for an expected payment was instead released. A malicious peer could have deliberately intercepted an HTLC intended for the victim node, probed the preimage through a colluding relayed HTLC, and st
iberately intercepted an HTLC intended for the victim node, probed the preimage through a colluding relayed HTLC, and stolen the intercepted HTLC. The impact is a loss of funds in certain situations, and a weakening of the victim's receiver privacy. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/ariard/6bdeb995565d1cc292753e1ee4ae402d - https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-October/002857.html - https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-October/002855.html
CVE ID: CVE-2020-26897 State: PUBLISHED Published: 2020-10-09T06:34:28 Last Updated: 2024-08-04T16:03:22.779Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062357/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-WiFi-Systems-PSV-2020-0045
CVE ID: CVE-2020-26898 State: PUBLISHED Published: 2020-10-09T06:34:19 Last Updated: 2024-08-04T16:03:22.750Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR RAX40 devices before 1.0.3.80 are affected by incorrect configuration of security settings. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062356/Security-Advisory-for-Security-Misconfiguration-on-RAX40-PSV-2019-0267
CVE ID: CVE-2020-26899 State: PUBLISHED Published: 2020-10-09T06:34:09 Last Updated: 2024-08-04T16:03:23.044Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by disclosure of sensitive information. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062355/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-WiFi-Systems-PSV-2020-0030