Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-5064 State: REJECTED Published: 2021-01-05T18:48:28 Last Updated: 2021-01-05T18:48:28 Description: No description available.
CVE ID: CVE-2020-5065 State: REJECTED Published: 2021-01-05T18:49:00 Last Updated: 2021-01-05T18:49:00 Description: No description available.
CVE ID: CVE-2020-5066 State: REJECTED Published: 2021-01-05T18:49:32 Last Updated: 2021-01-05T18:49:32 Description: No description available.
CVE ID: CVE-2020-5067 State: REJECTED Published: 2021-01-05T18:50:05 Last Updated: 2021-01-05T18:50:05 Description: No description available.
CVE ID: CVE-2020-5068 State: REJECTED Published: 2021-01-05T18:50:36 Last Updated: 2021-01-05T18:50:36 Description: No description available.
CVE ID: CVE-2020-5069 State: REJECTED Published: 2021-01-05T18:52:58 Last Updated: 2021-01-05T18:52:58 Description: No description available.
CVE ID: CVE-2020-5070 State: REJECTED Published: 2021-01-05T18:53:34 Last Updated: 2021-01-05T18:53:34 Description: No description available.
CVE ID: CVE-2020-5071 State: REJECTED Published: 2021-01-05T18:54:07 Last Updated: 2021-01-05T18:54:07 Description: No description available.
CVE ID: CVE-2020-5072 State: REJECTED Published: 2021-01-05T18:54:42 Last Updated: 2021-01-05T18:54:42 Description: No description available.
CVE ID: CVE-2020-5073 State: REJECTED Published: 2021-01-05T18:55:14 Last Updated: 2021-01-05T18:55:14 Description: No description available.
CVE ID: CVE-2020-5074 State: REJECTED Published: 2021-01-05T18:55:44 Last Updated: 2021-01-05T18:55:44 Description: No description available.
CVE ID: CVE-2020-5075 State: REJECTED Published: 2021-01-05T18:56:20 Last Updated: 2021-01-05T18:56:20 Description: No description available.
CVE ID: CVE-2020-5076 State: REJECTED Published: 2021-01-05T18:57:24 Last Updated: 2021-01-05T18:57:24 Description: No description available.
CVE ID: CVE-2020-5077 State: REJECTED Published: 2021-01-05T18:57:57 Last Updated: 2021-01-05T18:57:57 Description: No description available.
CVE ID: CVE-2020-5078 State: REJECTED Published: 2021-01-05T18:58:34 Last Updated: 2021-01-05T18:58:34 Description: No description available.
CVE ID: CVE-2020-5079 State: REJECTED Published: 2021-01-05T18:59:30 Last Updated: 2021-01-05T18:59:30 Description: No description available.
CVE ID: CVE-2020-5080 State: REJECTED Published: 2021-01-05T19:00:02 Last Updated: 2021-01-05T19:00:02 Description: No description available.
CVE ID: CVE-2020-5081 State: REJECTED Published: 2021-01-05T19:00:34 Last Updated: 2021-01-05T19:00:34 Description: No description available.
CVE ID: CVE-2020-5082 State: REJECTED Published: 2021-01-05T19:01:09 Last Updated: 2021-01-05T19:01:09 Description: No description available.
CVE ID: CVE-2020-5083 State: REJECTED Published: 2021-01-05T19:01:42 Last Updated: 2021-01-05T19:01:42 Description: No description available.
CVE ID: CVE-2020-5084 State: REJECTED Published: 2021-01-05T19:02:12 Last Updated: 2021-01-05T19:02:12 Description: No description available.
CVE ID: CVE-2020-5085 State: REJECTED Published: 2021-01-05T19:02:43 Last Updated: 2021-01-05T19:02:43 Description: No description available.
CVE ID: CVE-2020-5086 State: REJECTED Published: 2021-01-05T19:03:25 Last Updated: 2021-01-05T19:03:25 Description: No description available.
CVE ID: CVE-2020-5087 State: REJECTED Published: 2021-01-05T19:03:58 Last Updated: 2021-01-05T19:03:58 Description: No description available.
CVE ID: CVE-2020-5088 State: REJECTED Published: 2021-01-05T19:04:26 Last Updated: 2021-01-05T19:04:26 Description: No description available.
CVE ID: CVE-2020-5089 State: REJECTED Published: 2021-01-05T19:04:58 Last Updated: 2021-01-05T19:04:58 Description: No description available.
CVE ID: CVE-2020-5090 State: REJECTED Published: 2021-01-05T19:05:26 Last Updated: 2021-01-05T19:05:26 Description: No description available.
CVE ID: CVE-2020-5091 State: REJECTED Published: 2021-01-05T19:05:55 Last Updated: 2021-01-05T19:05:55 Description: No description available.
CVE ID: CVE-2020-5092 State: REJECTED Published: 2021-01-05T19:06:29 Last Updated: 2021-01-05T19:06:29 Description: No description available.
CVE ID: CVE-2020-5093 State: REJECTED Published: 2021-01-05T19:06:59 Last Updated: 2021-01-05T19:06:59 Description: No description available.
CVE ID: CVE-2020-5094 State: REJECTED Published: 2021-01-05T19:07:42 Last Updated: 2021-01-05T19:07:42 Description: No description available.
CVE ID: CVE-2020-5095 State: REJECTED Published: 2021-01-05T19:08:10 Last Updated: 2021-01-05T19:08:10 Description: No description available.
CVE ID: CVE-2020-5096 State: REJECTED Published: 2021-01-05T19:08:41 Last Updated: 2021-01-05T19:08:41 Description: No description available.
CVE ID: CVE-2020-5097 State: REJECTED Published: 2021-01-05T19:09:09 Last Updated: 2021-01-05T19:09:09 Description: No description available.
CVE ID: CVE-2020-5098 State: REJECTED Published: 2021-01-05T19:09:35 Last Updated: 2021-01-05T19:09:35 Description: No description available.
CVE ID: CVE-2020-5099 State: REJECTED Published: 2021-01-05T19:10:04 Last Updated: 2021-01-05T19:10:04 Description: No description available.
CVE ID: CVE-2020-5100 State: REJECTED Published: 2021-01-05T19:10:32 Last Updated: 2021-01-05T19:10:32 Description: No description available.
CVE ID: CVE-2020-5101 State: REJECTED Published: 2021-01-05T19:11:04 Last Updated: 2021-01-05T19:11:04 Description: No description available.
CVE ID: CVE-2020-5102 State: REJECTED Published: 2021-01-06T16:52:28 Last Updated: 2021-01-06T16:52:28 Description: No description available.
CVE ID: CVE-2020-5103 State: REJECTED Published: 2021-01-06T16:52:57 Last Updated: 2021-01-06T16:52:57 Description: No description available.
CVE ID: CVE-2020-5104 State: REJECTED Published: 2021-01-06T16:57:45 Last Updated: 2021-01-06T16:57:45 Description: No description available.
CVE ID: CVE-2020-5105 State: REJECTED Published: 2021-01-06T17:24:21 Last Updated: 2021-01-06T17:24:21 Description: No description available.
CVE ID: CVE-2020-5106 State: REJECTED Published: 2021-01-06T17:24:52 Last Updated: 2021-01-06T17:24:52 Description: No description available.
CVE ID: CVE-2020-5107 State: REJECTED Published: 2021-01-06T19:25:31 Last Updated: 2021-01-06T19:25:31 Description: No description available.
CVE ID: CVE-2020-5108 State: REJECTED Published: 2021-01-06T19:26:07 Last Updated: 2021-01-06T19:26:07 Description: No description available.
CVE ID: CVE-2020-5109 State: REJECTED Published: 2021-01-06T19:26:41 Last Updated: 2021-01-06T19:26:41 Description: No description available.
CVE ID: CVE-2020-5110 State: REJECTED Published: 2021-01-06T19:27:18 Last Updated: 2021-01-06T19:27:18 Description: No description available.
CVE ID: CVE-2020-5111 State: REJECTED Published: 2021-01-06T19:27:48 Last Updated: 2021-01-06T19:27:48 Description: No description available.
CVE ID: CVE-2020-5112 State: REJECTED Published: 2021-01-06T19:28:21 Last Updated: 2021-01-06T19:28:21 Description: No description available.
CVE ID: CVE-2020-5113 State: REJECTED Published: 2021-01-06T19:29:11 Last Updated: 2021-01-06T19:29:11 Description: No description available.
CVE ID: CVE-2020-5114 State: REJECTED Published: 2021-01-06T19:29:42 Last Updated: 2021-01-06T19:29:42 Description: No description available.
CVE ID: CVE-2020-5115 State: REJECTED Published: 2021-01-06T19:30:10 Last Updated: 2021-01-06T19:30:10 Description: No description available.
CVE ID: CVE-2020-5116 State: REJECTED Published: 2021-01-06T19:30:44 Last Updated: 2021-01-06T19:30:44 Description: No description available.
CVE ID: CVE-2020-5117 State: REJECTED Published: 2021-01-06T19:31:38 Last Updated: 2021-01-06T19:31:38 Description: No description available.
CVE ID: CVE-2020-5118 State: REJECTED Published: 2021-01-06T19:31:15 Last Updated: 2021-01-06T19:31:15 Description: No description available.
CVE ID: CVE-2020-5119 State: REJECTED Published: 2021-01-06T19:32:00 Last Updated: 2021-01-06T19:32:00 Description: No description available.
CVE ID: CVE-2020-5120 State: REJECTED Published: 2021-01-06T19:32:27 Last Updated: 2021-01-06T19:32:27 Description: No description available.
CVE ID: CVE-2020-5121 State: REJECTED Published: 2021-01-06T19:32:56 Last Updated: 2021-01-06T19:32:56 Description: No description available.
CVE ID: CVE-2020-5122 State: REJECTED Published: 2021-01-06T19:33:18 Last Updated: 2021-01-06T19:33:18 Description: No description available.
CVE ID: CVE-2020-5123 State: REJECTED Published: 2021-01-06T19:33:41 Last Updated: 2021-01-06T19:33:41 Description: No description available.
CVE ID: CVE-2020-5124 State: REJECTED Published: 2021-01-06T19:34:10 Last Updated: 2021-01-06T19:34:10 Description: No description available.
CVE ID: CVE-2020-5125 State: REJECTED Published: 2021-01-06T19:34:35 Last Updated: 2021-01-06T19:34:35 Description: No description available.
CVE ID: CVE-2020-5126 State: REJECTED Published: 2021-01-06T19:35:01 Last Updated: 2021-01-06T19:35:01 Description: No description available.
CVE ID: CVE-2020-5127 State: REJECTED Published: 2021-01-06T19:35:25 Last Updated: 2021-01-06T19:35:25 Description: No description available.
CVE ID: CVE-2020-5128 State: REJECTED Published: 2021-01-06T19:35:48 Last Updated: 2021-01-06T19:35:48 Description: No description available.
CVE ID: CVE-2020-5129 State: PUBLISHED Published: 2020-03-26T03:35:12 Last Updated: 2024-08-04T08:22:08.523Z Vendors: SonicWall Products: SMA1000 Problem Types: CWE-248 Description: A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote attacker to cause HTTP server crash which leads to Denial of Service. This vulnerability affected SMA1000 Version 12.1.0-06411 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0002
CVE ID: CVE-2020-5130 State: PUBLISHED Published: 2020-07-17T17:15:14 Last Updated: 2024-08-04T08:22:08.342Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-20 Description: SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper validation of the request. This vulnerability impact SonicOS version 6.5.4.4-44n and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0003
CVE ID: CVE-2020-5131 State: PUBLISHED Published: 2020-07-17T17:15:15 Last Updated: 2024-08-04T08:22:08.682Z Vendors: SonicWall Products: SonicWall NetExtender Problem Types: CWE-20 Description: SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute code with the same privilege in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 9.0.815 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0004
CVE ID: CVE-2020-5132 State: PUBLISHED Published: 2020-09-30T05:25:11 Last Updated: 2024-08-04T08:22:08.680Z Vendors: SonicWall Products: SMA100, SMA1000, SonicOS Problem Types: CWE-200 Description: SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision vulnerability. When the users publicly display their organization’s internal domain names in the SSL-VPN authentication page, an attacker with knowledge of internal domain names can potentially take advantage of this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0006
CVE ID: CVE-2020-5133 State: PUBLISHED Published: 2020-10-12T10:40:27 Last Updated: 2024-08-04T08:22:09.005Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-120 Description: A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service due to buffer overflow, which leads to a firewall crash. This vulnerability affected SonicOS Gen 6 version 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0008
CVE ID: CVE-2020-5134 State: PUBLISHED Published: 2020-10-12T10:40:28 Last Updated: 2024-08-04T08:22:09.026Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-125 Description: A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a firewall crash. This vulnerability affected SonicOS Gen 6 version 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0009
CVE ID: CVE-2020-5135 State: PUBLISHED Published: 2020-10-12T10:40:28.000Z Last Updated: 2025-10-21T23:35:35.728Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-120 Description: A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. This vulnerability affected SonicOS Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0010
CVE ID: CVE-2020-5136 State: PUBLISHED Published: 2020-10-12T10:40:29 Last Updated: 2024-08-04T08:22:08.451Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-120 Description: A buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of Service (DoS) in the SSL-VPN and virtual assist portal, which leads to a firewall crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0011
CVE ID: CVE-2020-5137 State: PUBLISHED Published: 2020-10-12T10:40:29 Last Updated: 2024-08-04T08:22:08.704Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-120 Description: A buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service and leads to firewall crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0012
CVE ID: CVE-2020-5138 State: PUBLISHED Published: 2020-10-12T10:40:30 Last Updated: 2024-08-04T08:22:08.765Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-122 Description: A Heap Overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service and leads to SonicOS crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0013
CVE ID: CVE-2020-5139 State: PUBLISHED Published: 2020-10-12T10:40:30 Last Updated: 2024-08-04T08:22:08.741Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-763 Description: A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of Invalid pointer and leads to a firewall crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0014
CVE ID: CVE-2020-5140 State: PUBLISHED Published: 2020-10-12T10:40:30 Last Updated: 2024-08-04T08:22:08.956Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-125 Description: A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN service by sending a malicious HTTP request that leads to memory addresses leak. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0015
CVE ID: CVE-2020-5141 State: PUBLISHED Published: 2020-10-12T10:40:31 Last Updated: 2024-08-04T08:22:08.563Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-799 Description: A vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist ticket ID in the firewall SSLVPN service. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0016
CVE ID: CVE-2020-5142 State: PUBLISHED Published: 2020-10-12T10:40:31 Last Updated: 2024-08-04T08:22:09.083Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface. A remote unauthenticated attacker is able to store and potentially execute arbitrary JavaScript code in the firewall SSLVPN portal. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0017
CVE ID: CVE-2020-5143 State: PUBLISHED Published: 2020-10-12T10:40:32 Last Updated: 2024-08-04T08:22:08.901Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-203 Description: SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username enumeration based on the server responses. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0018
CVE ID: CVE-2020-5144 State: PUBLISHED Published: 2020-10-28T10:40:15 Last Updated: 2024-08-04T08:22:08.672Z Vendors: SonicWall Products: SonicWall Global VPN Client Problem Types: CWE-426 Description: SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SYSTEM through loaded process hijacking vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0020
CVE ID: CVE-2020-5145 State: PUBLISHED Published: 2020-10-28T10:40:15 Last Updated: 2024-08-04T08:22:09.084Z Vendors: SonicWall Products: SonicWall Global VPN Client Problem Types: CWE-427 Description: SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to remote code execution in the target system. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0021
CVE ID: CVE-2020-5146 State: PUBLISHED Published: 2021-01-09T00:15:14 Last Updated: 2024-08-04T08:22:09.010Z Vendors: SonicWall Products: SMA100 Problem Types: CWE-78 Description: A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection using HTTP POST parameters. This vulnerability affected SMA100 Appliance version 10.2.0.2-20sv and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0022
CVE ID: CVE-2020-5147 State: PUBLISHED Published: 2021-01-09T00:15:15 Last Updated: 2024-08-04T08:22:08.269Z Vendors: SonicWall Products: SonicWall NetExtender Problem Types: CWE-428 Description: SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privileges in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 10.2.300 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0023 - http://packetstormsecurity.com/files/163857/SonicWall-NetExtender-10.2.0.300-Unquoted-Service-Path.html
CVE ID: CVE-2020-5148 State: PUBLISHED Published: 2021-03-05T03:45:14 Last Updated: 2024-08-04T08:22:08.614Z Vendors: SonicWall Products: Directory Services Connector Problem Types: CWE-287 Description: SonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network, this client probing method allows a potential attacker to capture the password hash of the privileged user and potentially forces the SSO Agent to authenticate allowing an attacker to bypass firewall access controls. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0003
CVE ID: CVE-2020-5179 State: PUBLISHED Published: 2020-01-01T15:07:07 Last Updated: 2024-08-04T08:22:08.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Diagnostics Ping page and entering shell metacharacters in the Target IP address field. (In some cases, authentication can be achieved with the comtech password for the comtech account.) Additional Analyst Notes: - CVE Program Container: References: - https://overload.cl/blog/comtech-authenticated-rce-on-comtech-fx-series/ - https://sku11army.blogspot.com/2020/01/comtech-authenticated-rce-on-co
comtech-authenticated-rce-on-comtech-fx-series/ - https://sku11army.blogspot.com/2020/01/comtech-authenticated-rce-on-comtech-fx.html
CVE ID: CVE-2020-5180 State: PUBLISHED Published: 2020-01-14T19:01:08 Last Updated: 2024-08-04T08:22:08.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Viscosity 1.8.2 on Windows and macOS allows an unprivileged user to set a subset of OpenVPN parameters, which can be used to load a malicious library into the memory of the OpenVPN process, leading to limited local privilege escalation. (When a VPN connection is initiated using a TLS/SSL client profile, the privileges are dropped, and the library will be loaded, resulting in arbitrary code execution as a user with limited privileges. This greatly reduces the impact of the vulnerability.) Additional Analyst Notes: - CVE Program
with limited privileges. This greatly reduces the impact of the vulnerability.) Additional Analyst Notes: - CVE Program Container: References: - https://www.sparklabs.com/blog/viscosity-for-mac-windows-version-1-8-4/
CVE ID: CVE-2020-5182 State: PUBLISHED Published: 2020-02-03T16:52:05 Last Updated: 2024-08-04T08:22:08.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: The J-BusinessDirectory extension before 5.2.9 for Joomla! allows Reverse Tabnabbing. In some configurations, the link to the business website can be entered by any user. If it doesn't contain rel="noopener" (or similar attributes such as noreferrer), the tabnabbing may occur. To reproduce the bug, create a business with a website link that contains JavaScript to exploit the window.opener property (for example, by setting window.opener.location). Additional Analyst Notes: - CVE Program Container: References: - https://www.cmsj
e, by setting window.opener.location). Additional Analyst Notes: - CVE Program Container: References: - https://www.cmsjunkie.com/blog/joomla_business_directory_5-2-9_release/