Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
onstruct the decryption process using the hardcoded key material and obtain easy access to otherwise protected data. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2020/Jun/31 - https://korelogic.com/Resources/Advisories/KL-001-2020-003.txt - http://packetstormsecurity.com/files/158254/Cellebrite-EPR-Decryption-Hardcoded-AES-Key-Material.html
CVE ID: CVE-2020-14475 State: PUBLISHED Published: 2020-06-19T16:20:00 Last Updated: 2024-08-04T12:46:34.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in Dolibarr 11.0.3 allows remote attackers to inject arbitrary web script or HTML into public/notice.php (related to transphrase and transkey). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/22ca5e067189bffe8066df26df923a386f044c08
CVE ID: CVE-2020-14476 State: REJECTED Published: 2020-07-08T14:36:32 Last Updated: 2020-07-08T14:36:32 Description: No description available.
CVE ID: CVE-2020-14477 State: PUBLISHED Published: 2020-06-26T16:15:14 Last Updated: 2025-06-04T21:56:59.294Z Severity: LOW (CVSS 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Philips Products: Ultrasound ClearVue, Ultrasound CX, Ultrasound EPIQ/Affiniti, Ultrasound Sparq, Ultrasound Xperius Problem Types: CWE-288 Description: In Philips Ultrasound ClearVue Versions 3.2 and prior, Ultrasound CX Versions 5.0.2 and prior, Ultrasound EPIQ/Affiniti Versions VM5.0 and prior, Ultrasound Sparq Version 3.0.2 and prior and Ultrasound Xperius all versions, an attacker may use an alternate path or channel that does not require authentication of the alternate service login to view or modify
y use an alternate path or channel that does not require authentication of the alternate service login to view or modify information. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsma-20-177-01
CVE ID: CVE-2020-14478 State: PUBLISHED Published: 2022-02-24T18:27:13.156Z Last Updated: 2025-04-17T18:48:04.974Z Vendors: Rockwell Automation Products: FactoryTalk Services Platform Problem Types: CWE-611 Description: A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files to access local or remote content. A successful exploit could potentially cause a denial-of-service condition and allow the attacker to arbitrarily read any local file via system-level services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-20-177-02
CVE ID: CVE-2020-14479 State: PUBLISHED Published: 2022-04-01T22:17:52.198Z Last Updated: 2025-04-16T16:32:19.854Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Inductive Automation Products: Ignition 7 Gateway, Ignition 8 Gateway Problem Types: CWE-306 Description: Sensitive information can be obtained through the handling of serialized data. The issue results from the lack of proper authentication required to query the server Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-20-147-01
CVE ID: CVE-2020-14480 State: PUBLISHED Published: 2022-02-24T18:27:14.889Z Last Updated: 2025-04-17T18:47:48.674Z Vendors: Rockwell Automation Products: FactoryTalk View SE Problem Types: CWE-312 Description: Due to usernames/passwords being stored in plaintext in Random Access Memory (RAM), a local, authenticated attacker could gain access to certain credentials, including Windows Logon credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-20-177-03
CVE ID: CVE-2020-14481 State: PUBLISHED Published: 2022-02-24T18:27:13.935Z Last Updated: 2025-04-17T18:47:56.750Z Vendors: Rockwell Automation Products: FactoryTalk View SE Problem Types: CWE-261 Description: The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain full access to the user’s operating system and certain components of FactoryTalk View SE. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.
toryTalk View SE. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-20-177-03
CVE ID: CVE-2020-14482 State: PUBLISHED Published: 2020-06-30T17:43:23 Last Updated: 2024-08-04T12:46:34.646Z Vendors: n/a Products: Delta Industrial Automation DOPSoft Problem Types: CWE-122 Description: Delta Industrial Automation DOPSoft, Version 4.00.08.15 and prior. Opening a specially crafted project file may overflow the heap, which may allow remote code execution, disclosure/modification of information, or cause the application to crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.us-cert.gov/ics/advisories/icsa-20-182-01
CVE ID: CVE-2020-14483 State: PUBLISHED Published: 2020-08-13T14:41:35 Last Updated: 2024-08-04T12:46:34.631Z Vendors: n/a Products: Niagara Problem Types: CWE-1088 Description: A timeout during a TLS handshake can result in the connection failing to terminate. This can result in a Niagara thread hanging and requires a manual restart of Niagara (Versions 4.6.96.28, 4.7.109.20, 4.7.110.32, 4.8.0.110) and Niagara Enterprise Security (Versions 2.4.31, 2.4.45, 4.8.0.35) to correct. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-224-03
CVE ID: CVE-2020-14484 State: PUBLISHED Published: 2020-07-20T14:45:20 Last Updated: 2024-08-04T12:46:34.703Z Vendors: n/a Products: OpenClinic GA Problem Types: CWE-307 Description: OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass the system’s account lockout protection, which may allow brute force password attacks. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-20-184-01
CVE ID: CVE-2020-14485 State: PUBLISHED Published: 2020-07-20T14:45:10 Last Updated: 2024-08-04T12:46:34.594Z Vendors: n/a Products: OpenClinic GA Problem Types: CWE-288 Description: OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass client-side access controls or use a crafted request to initiate a session with limited functionality, which may allow execution of admin functions such as SQL queries. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-20-184-01
CVE ID: CVE-2020-14486 State: PUBLISHED Published: 2020-07-29T13:21:03.686519Z Last Updated: 2024-09-16T20:58:04.126Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: open source Products: OpenClinic GA Problem Types: CWE-285 Description: An attacker may bypass permission/authorization checks in OpenClinic GA 5.09.02 and 5.89.05b by ignoring the redirect of a permission failure, which may allow unauthorized execution of commands. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/ICSMA-20-184-01
CVE ID: CVE-2020-14487 State: PUBLISHED Published: 2020-07-29T13:22:25.067610Z Last Updated: 2024-09-16T19:21:13.646Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: open source Products: OpenClinic GA Problem Types: CWE-912 Description: OpenClinic GA 5.09.02 contains a hidden default user account that may be accessed if an administrator has not expressly turned off this account, which may allow an attacker to login and execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/ICSMA-20-184-01
CVE ID: CVE-2020-14488 State: PUBLISHED Published: 2020-07-29T13:15:21.912690Z Last Updated: 2024-09-17T02:06:04.474Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: open source Products: OpenClinic GA Problem Types: CWE-434 Description: OpenClinic GA 5.09.02 and 5.89.05b does not properly verify uploaded files, which may allow a low-privilege user to upload and execute arbitrary files on the system. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/ICSMA-20-184-01
CVE ID: CVE-2020-14489 State: PUBLISHED Published: 2020-07-29T12:24:11.103756Z Last Updated: 2024-09-17T01:46:22.188Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: open source Products: OpenClinic GA Problem Types: CWE-522 Description: OpenClinic GA 5.09.02 and 5.89.05b stores passwords using inadequate hashing complexity, which may allow an attacker to recover passwords using known password cracking techniques. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/ICSMA-20-184-01
CVE ID: CVE-2020-14490 State: PUBLISHED Published: 2020-07-29T12:25:53.168931Z Last Updated: 2024-09-16T17:03:10.971Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: open source Products: OpenClinic GA Problem Types: CWE-22 Description: OpenClinic GA 5.09.02 and 5.89.05b includes arbitrary local files specified within its parameter and executes some files, which may allow disclosure of sensitive files or the execution of malicious uploaded files. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/ICSMA-20-184-01
CVE ID: CVE-2020-14491 State: PUBLISHED Published: 2020-07-20T14:45:36 Last Updated: 2024-08-04T12:46:34.656Z Vendors: n/a Products: OpenClinic GA Problem Types: CWE-862 Description: OpenClinic GA versions 5.09.02 and 5.89.05b do not properly check permissions before executing SQL queries, which may allow a low-privilege user to access privileged information. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-20-184-01
CVE ID: CVE-2020-14492 State: PUBLISHED Published: 2020-07-29T12:29:11.124116Z Last Updated: 2024-09-16T22:45:24.888Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: open source Products: OpenClinic GA Problem Types: CWE-79 Description: OpenClinic GA 5.09.02 and 5.89.05b does not properly neutralize user-controllable input, which may allow the execution of malicious code within the user’s browser. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/ICSMA-20-184-01
CVE ID: CVE-2020-14493 State: PUBLISHED Published: 2020-07-29T12:27:28.691565Z Last Updated: 2024-09-17T03:13:05.119Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: open source Products: OpenClinic GA Problem Types: CWE-250 Description: A low-privilege user may use SQL syntax to write arbitrary files to the OpenClinic GA 5.09.02 and 5.89.05b server, which may allow the execution of arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/ICSMA-20-184-01
CVE ID: CVE-2020-14494 State: PUBLISHED Published: 2020-07-20T14:45:28 Last Updated: 2024-08-04T12:46:34.648Z Vendors: n/a Products: OpenClinic GA Problem Types: CWE-287 Description: OpenClinic GA versions 5.09.02 and 5.89.05b contain an authentication mechanism within the system that does not provide sufficient complexity to protect against brute force attacks, which may allow unauthorized users to access the system after no more than a fixed maximum number of attempts. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-20-184-01
CVE ID: CVE-2020-14495 State: REJECTED Published: 2020-09-25T17:47:18 Last Updated: 2020-09-25T17:47:18 Description: No description available.
CVE ID: CVE-2020-14496 State: PUBLISHED Published: 2022-05-19T17:24:43.000Z Last Updated: 2025-04-16T17:53:51.797Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Mitsubishi Electric Products: CPU Module Logging Configuration Tool, CW Configurator, Data Transfer, EZSocket, FR Configurator2, GT Designer3 Version1 (GOT2000), GT SoftGOT1000 Version3, GT SoftGOT2000 Version1, GX LogViewer, GX Works2, GX Works3, M_CommDTM-HART, M_CommDTM-IO-Link, MELFA-Works, MELSEC WinCPU Setting Utility, MELSOFT EM Software Development Kit (EM Configurator), MELSOFT FieldDeviceConfigurator, MELSOFT Navigator, MH11 SettingTool Version2, MI Configurator, Motorizer, MR Configurator2
SOFT FieldDeviceConfigurator, MELSOFT Navigator, MH11 SettingTool Version2, MI Configurator, Motorizer, MR Configurator2, MT Works2, MX Component, Network Interface Board CC IE Control utility, Network Interface Board CC IE Field Utility, Network Interface Board CC-Link Ver.2 Utility, Network Interface Board MNETH utility, PX Developer, RT ToolBox2, RT ToolBox3, Setting/monitoring tools for the C Controller module Problem Types: CWE-275 Description: Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a
s of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information to be disclosed, tampered with, and/or destroyed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-20-212-02
CVE ID: CVE-2020-14497 State: PUBLISHED Published: 2020-07-15T01:50:54 Last Updated: 2024-08-04T12:46:34.614Z Vendors: n/a Products: Advantech iView Problem Types: CWE-89 Description: Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use of an attacker-controlled string in the construction of SQL queries. An attacker could extract user credentials, read or modify information, and remotely execute code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01 - https://www.zerodayinitiative.com/advisories/ZDI-20-847/ - https://www.zerodayinitiative.com/advisories/ZD
a-20-196-01 - https://www.zerodayinitiative.com/advisories/ZDI-20-847/ - https://www.zerodayinitiative.com/advisories/ZDI-20-827/ - https://www.zerodayinitiative.com/advisories/ZDI-20-868/ - https://www.zerodayinitiative.com/advisories/ZDI-20-852/ - https://www.zerodayinitiative.com/advisories/ZDI-20-862/ - https://www.zerodayinitiative.com/advisories/ZDI-20-860/ - https://www.zerodayinitiative.com/advisories/ZDI-20-846/ - https://www.zerodayinitiative.com/advisories/ZDI-20-844/ - https://www.zerodayinitiative.com/advisories/ZDI-20-845/ - https://www.zerodayinitiative.com/advisories/ZDI-20-855/ - https://www.zerodayinitiative.com/advisories/ZDI-20-857/ - https://www.zerodayinitiative.com/adv
dvisories/ZDI-20-855/ - https://www.zerodayinitiative.com/advisories/ZDI-20-857/ - https://www.zerodayinitiative.com/advisories/ZDI-20-854/ - https://www.zerodayinitiative.com/advisories/ZDI-20-864/ - https://www.zerodayinitiative.com/advisories/ZDI-20-849/ - https://www.zerodayinitiative.com/advisories/ZDI-20-832/ - https://www.zerodayinitiative.com/advisories/ZDI-20-835/ - https://www.zerodayinitiative.com/advisories/ZDI-20-848/ - https://www.zerodayinitiative.com/advisories/ZDI-20-838/ - https://www.zerodayinitiative.com/advisories/ZDI-20-850/ - https://www.zerodayinitiative.com/advisories/ZDI-20-856/ - https://www.zerodayinitiative.com/advisories/ZDI-20-866/ - https://www.zerodayinitiati
tive.com/advisories/ZDI-20-856/ - https://www.zerodayinitiative.com/advisories/ZDI-20-866/ - https://www.zerodayinitiative.com/advisories/ZDI-20-842/ - https://www.zerodayinitiative.com/advisories/ZDI-20-837/ - https://www.zerodayinitiative.com/advisories/ZDI-20-865/ - https://www.zerodayinitiative.com/advisories/ZDI-20-851/ - https://www.zerodayinitiative.com/advisories/ZDI-20-828/ - https://www.zerodayinitiative.com/advisories/ZDI-20-853/ - https://www.zerodayinitiative.com/advisories/ZDI-20-843/ - https://www.zerodayinitiative.com/advisories/ZDI-20-839/ - https://www.zerodayinitiative.com/advisories/ZDI-20-858/ - https://www.zerodayinitiative.com/advisories/ZDI-20-830/ - https://www.zerod
odayinitiative.com/advisories/ZDI-20-858/ - https://www.zerodayinitiative.com/advisories/ZDI-20-830/ - https://www.zerodayinitiative.com/advisories/ZDI-20-861/ - https://www.zerodayinitiative.com/advisories/ZDI-20-863/ - https://www.zerodayinitiative.com/advisories/ZDI-20-869/ - https://www.zerodayinitiative.com/advisories/ZDI-20-833/ - https://www.zerodayinitiative.com/advisories/ZDI-20-836/
CVE ID: CVE-2020-14498 State: PUBLISHED Published: 2020-08-26T13:30:01 Last Updated: 2024-08-04T12:46:34.660Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: HMS Industrial Networks AB Products: eCatcher Problem Types: CWE-121 Description: HMS Industrial Networks AB eCatcher all versions prior to 6.5.5 is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-210-03 - https://www.hms-networks.com/cybersecurity/security-advisories
CVE ID: CVE-2020-14499 State: PUBLISHED Published: 2020-07-15T02:11:10 Last Updated: 2024-08-04T12:46:34.628Z Vendors: n/a Products: Advantech iView Problem Types: CWE-284 Description: Advantech iView, versions 5.6 and prior, has an improper access control vulnerability. Successful exploitation of this vulnerability may allow an attacker to obtain all user accounts credentials. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01 - https://www.zerodayinitiative.com/advisories/ZDI-20-867/
CVE ID: CVE-2020-14500 State: PUBLISHED Published: 2020-08-25T13:12:30.705759Z Last Updated: 2024-09-17T03:34:07.630Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Secomea GateManager all versions prior to 9.2c Products: Secomea GateManager all versions prior to 9.2c Problem Types: CWE-158 Description: Secomea GateManager all versions prior to 9.2c, An attacker can send a negative value and overwrite arbitrary data. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-210-01
CVE ID: CVE-2020-14501 State: PUBLISHED Published: 2020-07-15T02:19:48 Last Updated: 2024-08-04T12:46:34.613Z Vendors: n/a Products: Advantech iView Problem Types: CWE-306 Description: Advantech iView, versions 5.6 and prior, has an improper authentication for critical function (CWE-306) issue. Successful exploitation of this vulnerability may allow an attacker to obtain the information of the user table, including the administrator credentials in plain text. An attacker may also delete the administrator account. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01 - https://www.zerodayinitiative.com/advisories/ZDI-20-859/
CVE ID: CVE-2020-14502 State: PUBLISHED Published: 2022-02-24T18:26:57.475Z Last Updated: 2025-04-17T18:48:11.572Z Vendors: Rockwell Automation Products: 1734-AENTR Problem Types: CWE-79 Description: The web interface of the 1734-AENTR communication module is vulnerable to stored XSS. A remote, unauthenticated attacker could store a malicious script within the web interface that, when executed, could modify some string values on the homepage of the web interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-063-01
CVE ID: CVE-2020-14503 State: PUBLISHED Published: 2020-07-15T02:15:13 Last Updated: 2024-08-04T12:46:34.726Z Vendors: n/a Products: Advantech iView Problem Types: CWE-20 Description: Advantech iView, versions 5.6 and prior, has an improper input validation vulnerability. Successful exploitation of this vulnerability could allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01 - https://www.zerodayinitiative.com/advisories/ZDI-20-834/
CVE ID: CVE-2020-14504 State: PUBLISHED Published: 2022-02-24T18:26:56.514Z Last Updated: 2025-04-17T18:48:19.175Z Vendors: Rockwell Automation Products: 1734-AENTR Problem Types: CWE-284 Description: The web interface of the 1734-AENTR communication module mishandles authentication for HTTP POST requests. A remote, unauthenticated attacker can send a crafted request that may allow for modification of the configuration settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-063-01
CVE ID: CVE-2020-14505 State: PUBLISHED Published: 2020-07-15T01:59:33 Last Updated: 2024-08-04T12:46:34.675Z Vendors: n/a Products: Advantech iView Problem Types: CWE-77 Description: Advantech iView, versions 5.6 and prior, has an improper neutralization of special elements used in a command (“command injection”) vulnerability. Successful exploitation of this vulnerability may allow an attacker to send a HTTP GET or POST request that creates a command string without any validation. The attacker may then remotely execute code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01 - https://www.zerodayinitiative.com/advisories/
er: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01 - https://www.zerodayinitiative.com/advisories/ZDI-20-831/
CVE ID: CVE-2020-14506 State: PUBLISHED Published: 2020-09-18T17:46:53 Last Updated: 2025-06-04T20:03:25.989Z Severity: LOW (CVSS 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: Philips Products: Clinical Collaboration Platform Problem Types: CWE-352 Description: Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01 - https://www.philips.com/a-w/security/security-advisories/produc
ttps://us-cert.cisa.gov/ics/advisories/icsma-20-261-01 - https://www.philips.com/a-w/security/security-advisories/product-security-2020.html#2020_archive
CVE ID: CVE-2020-14507 State: PUBLISHED Published: 2020-07-15T01:48:12 Last Updated: 2024-08-04T12:46:34.669Z Vendors: n/a Products: Advantech iView Problem Types: CWE-22 Description: Advantech iView, versions 5.6 and prior, is vulnerable to multiple path traversal vulnerabilities that could allow an attacker to create/download arbitrary files, limit system availability, and remotely execute code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-196-01 - https://www.zerodayinitiative.com/advisories/ZDI-20-847/ - https://www.zerodayinitiative.com/advisories/ZDI-20-841/ - https://www.zerodayinitiative.com/advisories/ZDI-20-829/ -
- https://www.zerodayinitiative.com/advisories/ZDI-20-841/ - https://www.zerodayinitiative.com/advisories/ZDI-20-829/ - https://www.zerodayinitiative.com/advisories/ZDI-20-840/