Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-24186 State: PUBLISHED Published: 2020-08-24T13:02:04 Last Updated: 2024-08-04T15:05:11.853Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated users to upload any type of file, including PHP files via the wmuUploadFiles AJAX action. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2020/07/critical-arbitrary-file-upload-vulnerability-patched-in-wpdiscuz-plugin/ - http://packetstormsecurity.com/files/162983/WordP
ical-arbitrary-file-upload-vulnerability-patched-in-wpdiscuz-plugin/ - http://packetstormsecurity.com/files/162983/WordPress-wpDiscuz-7.0.4-Shell-Upload.html - http://packetstormsecurity.com/files/163012/WordPress-wpDiscuz-7.0.4-Remote-Code-Execution.html - http://packetstormsecurity.com/files/163302/WordPress-wpDiscuz-7.0.4-Shell-Upload.html
CVE ID: CVE-2020-24187 State: PUBLISHED Published: 2023-08-11T00:00:00 Last Updated: 2024-10-09T19:25:15.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ecma-helpers.c in jerryscript version 2.3.0, allows local attackers to cause a denial of service (DoS) (Null Pointer Dereference). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/4076 - https://github.com/Aurorainfinity/Poc/tree/master/jerryscript/NULL-dereference-ecma_get_lex_env_type
CVE ID: CVE-2020-24188 State: PUBLISHED Published: 2020-10-14T00:00:00 Last Updated: 2024-08-04T15:05:11.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search functionality in Intrexx before 9.4.0 allows remote attackers to inject arbitrary web script or HTML via the request parameter. Additional Analyst Notes: - CVE Program Container: References: - https://onlinehelp.unitedplanet.com/intrexx/9400/en/index.html?p=helpfiles/help.3.onlineupdate-02.html
CVE ID: CVE-2020-24193 State: PUBLISHED Published: 2020-09-03T17:59:59 Last Updated: 2024-08-04T15:05:11.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in login in Sourcecodetester Daily Tracker System 1.0 allows unauthenticated user to execute authentication bypass with SQL injection via the email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://sourcecodetester.com - https://www.exploit-db.com/exploits/48787
CVE ID: CVE-2020-24194 State: PUBLISHED Published: 2020-09-09T13:59:12 Last Updated: 2024-08-04T15:05:11.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-site scripting (XSS) vulnerability in 'user-profile.php' in SourceCodester Daily Tracker System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'fullname' parameter. Additional Analyst Notes: - CVE Program Container: References: - http://sourcecodetester.com - https://cxsecurity.com/issue/WLB-2020090030
CVE ID: CVE-2020-24195 State: PUBLISHED Published: 2020-09-09T14:21:26 Last Updated: 2024-08-04T15:05:11.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Arbitrary File Upload in the Upload Image component in Sourcecodester Online Bike Rental v1.0 allows authenticated administrator to conduct remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14374/online-bike-rental-phpmysql.html - https://packetstormsecurity.com/files/158704/Online-Bike-Rental-1.0-Shell-Upload.html
CVE ID: CVE-2020-24196 State: PUBLISHED Published: 2020-08-27T16:54:45 Last Updated: 2024-08-04T15:05:11.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Arbitrary File Upload in Vehicle Image Upload in Online Bike Rental v1.0 allows authenticated admin to conduct remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/158683/Online-Bike-Rental-1.0-Shell-Upload.html
CVE ID: CVE-2020-24197 State: PUBLISHED Published: 2020-09-09T14:02:01 Last Updated: 2024-08-04T15:05:11.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in the login component in Stock Management System v1.0 allows remote attacker to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14366/stock-management-system-php.html - https://cxsecurity.com/issue/WLB-2020090028
CVE ID: CVE-2020-24198 State: PUBLISHED Published: 2020-09-09T14:05:43 Last Updated: 2024-09-09T14:48:44.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: A persistent cross-site scripting vulnerability in Sourcecodester Stock Management System v1.0 allows remote attackers to inject arbitrary web script or HTML via the 'Brand Name.' Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/14366/stock-management-system-php.html - https://cxsecurity.com/issue/WLB-2020090024
CVE ID: CVE-2020-24199 State: PUBLISHED Published: 2020-09-09T14:16:57 Last Updated: 2024-08-04T15:05:12.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary File Upload in the Vehicle Image Upload component in Project Worlds Car Rental Management System v1.0 allows attackers to conduct remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://projectworlds.in/free-projects/php-projects/car-rental-project-in-php-and-mysql/ - https://github.com/hyd3sec/CarRentalManagement-Unauth-RCE-WebApp - https://github.com/hyd3sec/CarRentalManagement-Unauth-RCE-WebApp/blob/master/CarRental-Unauth-RCE.py
CVE ID: CVE-2020-24200 State: REJECTED Published: 2020-09-09T14:11:35 Last Updated: 2020-09-09T15:32:39 Description: No description available.
CVE ID: CVE-2020-24202 State: PUBLISHED Published: 2020-08-27T17:15:59 Last Updated: 2024-08-04T15:12:08.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload component in Projects World House Rental v1.0 suffers from an arbitrary file upload vulnerability with regular users, which allows remote attackers to conduct code execution. Additional Analyst Notes: - CVE Program Container: References: - https://projectworlds.in/free-projects/php-projects/house-rental-and-property-listing-project-php-mysql/ - https://github.com/hyd3sec/HouseRental_Unauth_RCE/blob/master/HouseRentalRCE.py
CVE ID: CVE-2020-24203 State: PUBLISHED Published: 2020-08-27T17:20:15 Last Updated: 2024-08-04T15:12:08.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects World Travel Management System v1.0 allows remote unauthenticated attackers to gain remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://projectworlds.in/free-projects/php-projects/travel-management-system-project-in-php-mysql/ - https://github.com/hyd3sec/TravelManagementSystemRCE
CVE ID: CVE-2020-24208 State: PUBLISHED Published: 2020-08-17T16:05:27 Last Updated: 2024-08-04T15:12:07.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in SourceCodester Online Shopping Alphaware 1.0 allows remote unauthenticated attackers to bypass the authentication process via email and password parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/48725 - https://www.sourcecodester.com/download-code?nid=14368&title=Online+Shopping+Alphaware+in+PHP%2FMysql - https://packetstormsecurity.com/files/158684/Online-Shopping-Alphaware-1.0-SQL-Injection.html
CVE ID: CVE-2020-24212 State: REJECTED Published: 2020-08-18T16:10:44 Last Updated: 2020-09-03T17:41:42 Description: No description available.
CVE ID: CVE-2020-24213 State: PUBLISHED Published: 2020-09-23T14:23:05 Last Updated: 2024-08-04T15:12:07.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow was discovered in YGOPro ygocore v13.51. Attackers can use it to leak the game server thread's memory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Fluorohydride/ygopro/issues/2314
CVE ID: CVE-2020-24214 State: PUBLISHED Published: 2020-10-06T12:58:05 Last Updated: 2024-08-04T15:12:08.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. Attackers can send a crafted unauthenticated RTSP request to cause a buffer overflow and application crash. The device will not be able to perform its main purpose of video encoding and streaming for up to a minute, until it automatically reboots. Attackers can send malicious requests once a minute, effectively disabling the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/
disabling the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/896979 - https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/ - http://packetstormsecurity.com/files/159605/HiSilicon-Video-Encoder-Buffer-Overflow-Denial-Of-Service.html
CVE ID: CVE-2020-24215 State: PUBLISHED Published: 2020-10-06T13:00:33 Last Updated: 2024-08-04T15:12:08.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. Attackers can use hard-coded credentials in HTTP requests to perform any administrative task on the device including retrieving the device's configuration (with the cleartext admin password), and uploading a custom firmware update, to ultimately achieve arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/896979 - https://kojenov.com/2020-09-15-hisilicon-encod
Program Container: References: - https://www.kb.cert.org/vuls/id/896979 - https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/ - http://packetstormsecurity.com/files/159601/HiSilicon-Video-Encoder-Backdoor-Password.html
CVE ID: CVE-2020-24216 State: PUBLISHED Published: 2020-10-06T13:02:48 Last Updated: 2024-08-04T15:12:08.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. When the administrator configures a secret URL for RTSP streaming, the stream is still available via its default name such as /0. Unauthenticated attackers can view video streams that are meant to be private. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/896979 - https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/
CVE ID: CVE-2020-24217 State: PUBLISHED Published: 2020-10-06T13:05:36 Last Updated: 2024-08-04T15:12:07.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endpoint does not enforce authentication. Attackers can send an unauthenticated HTTP request to upload a custom firmware component, possibly in conjunction with command injection, to achieve arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/896979 - https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/ - http://packetstormsecurit
.cert.org/vuls/id/896979 - https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/ - http://packetstormsecurity.com/files/159599/HiSilicon-Video-Encoder-Malicious-Firmware-Code-Execution.html - http://packetstormsecurity.com/files/159597/HiSilicon-Video-Encoder-Command-Injection.html
CVE ID: CVE-2020-24218 State: PUBLISHED Published: 2020-10-06T13:10:17 Last Updated: 2024-08-04T15:12:08.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97. Attackers can log in as root via the password that is hard-coded in the executable file. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/896979 - https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/
CVE ID: CVE-2020-24219 State: PUBLISHED Published: 2020-10-06T13:16:05 Last Updated: 2024-08-04T15:12:07.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97. Attackers can send crafted unauthenticated HTTP requests to exploit path traversal and pattern-matching programming flaws, and retrieve any file from the device's file system, including the configuration file with the cleartext administrative password. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/896979 - https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/ - http://packetstormsecu
.kb.cert.org/vuls/id/896979 - https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/ - http://packetstormsecurity.com/files/159595/HiSilicon-Video-Encoder-1.97-File-Disclosure-Path-Traversal.html
CVE ID: CVE-2020-24220 State: PUBLISHED Published: 2020-08-17T16:03:00 Last Updated: 2024-08-04T15:12:07.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: ShopXO v1.8.1 has a command execution vulnerability. Attackers can use this vulnerability to execute arbitrary commands and gain control of the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.cnvd.org.cn/flaw/show/CNVD-2020-42698
CVE ID: CVE-2020-24221 State: PUBLISHED Published: 2023-08-11T00:00:00 Last Updated: 2024-10-09T19:24:30.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local attackers to cause a denial of service (DoS) via crafted .gif file (infinite loop). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/miniupnp/ngiflib/issues/17
CVE ID: CVE-2020-24222 State: PUBLISHED Published: 2023-08-11T00:00:00 Last Updated: 2024-10-09T20:13:19.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in jfif_decode() function in rockcarry ffjpeg through version 1.0.0, allows local attackers to execute arbitrary code due to an issue with ALIGN. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rockcarry/ffjpeg/issues/31
CVE ID: CVE-2020-24223 State: PUBLISHED Published: 2020-08-30T17:34:22 Last Updated: 2024-08-04T15:12:08.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or pagetheme parameters. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/158728/Mara-CMS-7.5-Cross-Site-Scripting.html - https://github.com/FreySolarEye/CVE/blob/master/Mara%20CMS%207.5%20-%20Cross%20Site%20Scripting - https://www.exploit-db.com/exploits/48777
CVE ID: CVE-2020-24227 State: PUBLISHED Published: 2020-11-23T20:56:59 Last Updated: 2024-08-04T15:12:07.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Playground Sessions v2.5.582 (and earlier) for Windows, stores the user credentials in plain text allowing anyone with access to UserProfiles.sol to extract the email and password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nathunandwani/CVE-2020-24227
CVE ID: CVE-2020-24231 State: PUBLISHED Published: 2020-10-05T15:38:21 Last Updated: 2024-08-04T15:12:07.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symmetric DS <3.12.0 uses mx4j to provide access to JMX over HTTP. mx4j, by default, has no auth and is available on all interfaces. An attacker can interact with JMX: get system info, and invoke MBean methods. It is possible to install additional MBeans from a remote host using MLet that leads to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.symmetricds.org/issues/view.php?id=4263
CVE ID: CVE-2020-24240 State: PUBLISHED Published: 2020-08-25T13:45:01 Last Updated: 2024-08-04T15:12:08.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Bison before 3.7.1 has a use-after-free in _obstack_free in lib/obstack.c (called from gram_lex) when a '\0' byte is encountered. NOTE: there is a risk only if Bison is used with untrusted input, and the observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug report was intended to show that a crash may occur in Bison itself, not that a crash may occur in code that is generated by Bison. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/akimd/bison/com
generated by Bison. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/akimd/bison/commit/be95a4fe2951374676efc9454ffee8638faaf68d - https://lists.gnu.org/r/bug-bison/2020-07/msg00051.html - https://github.com/akimd/bison/compare/v3.7...v3.7.1
CVE ID: CVE-2020-24241 State: PUBLISHED Published: 2020-08-25T13:51:45 Last Updated: 2024-08-04T15:12:08.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Netwide Assembler (NASM) 2.15rc10, there is heap use-after-free in saa_wbytes in nasmlib/saa.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392707
CVE ID: CVE-2020-24242 State: PUBLISHED Published: 2020-08-25T13:54:42 Last Updated: 2024-08-04T15:12:07.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Netwide Assembler (NASM) 2.15rc10, SEGV can be triggered in tok_text in asm/preproc.c by accessing READ memory. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392708
CVE ID: CVE-2020-24246 State: PUBLISHED Published: 2020-10-07T15:10:19 Last Updated: 2024-08-04T15:12:08.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files (/filemanager/php/connector.php) from Web Admin. Additional Analyst Notes: - CVE Program Container: References: - https://download.peplink.com/resources/firmware-8.1.0rc1-release-notes.pdf - https://blog.bssi.fr/cve-2020-24246-leaking-source-file-using-the-web-admin-interface-of-peplink-balance/
CVE ID: CVE-2020-24263 State: PUBLISHED Published: 2021-03-16T14:42:39 Last Updated: 2024-08-04T15:12:08.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Portainer 1.24.1 and earlier is affected by an insecure permissions vulnerability that may lead to remote arbitrary code execution. A non-admin user is allowed to spawn new containers with critical capabilities such as SYS_MODULE, which can be used to take over the Docker host. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/portainer/portainer/issues/4105
CVE ID: CVE-2020-24264 State: PUBLISHED Published: 2021-03-16T14:42:45 Last Updated: 2024-08-04T15:12:08.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Portainer 1.24.1 and earlier is affected by incorrect access control that may lead to remote arbitrary code execution. The restriction checks for bind mounts are applied only on the client-side and not the server-side, which can lead to spawning a container with bind mount. Once such a container is spawned, it can be leveraged to break out of the container leading to complete Docker host machine takeover. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/portainer/portainer/issues/4106
CVE ID: CVE-2020-24265 State: PUBLISHED Published: 2020-10-19T14:58:10 Last Updated: 2024-08-04T15:12:08.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in MemcmpInterceptorCommon() that can make tcpprep crash and cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/appneta/tcpreplay/issues/616 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M623ONZKOZL5Y7XQNHKXEPV76XYCPXQM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message
Y7XQNHKXEPV76XYCPXQM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EA7K7VKDK2K3SY2DHQQYSCBGZLKPWXJ4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LC3UMBJFBK5HYUX7H2NGXVFI2I2EMAOF/ - https://security.gentoo.org/glsa/202105-21
CVE ID: CVE-2020-24266 State: PUBLISHED Published: 2020-10-19T14:58:19 Last Updated: 2024-08-04T15:12:08.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in get_l2len() that can make tcpprep crash and cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/appneta/tcpreplay/issues/617 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M623ONZKOZL5Y7XQNHKXEPV76XYCPXQM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EA7K7VKDK2K3S
YCPXQM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EA7K7VKDK2K3SY2DHQQYSCBGZLKPWXJ4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LC3UMBJFBK5HYUX7H2NGXVFI2I2EMAOF/ - https://security.gentoo.org/glsa/202105-21
CVE ID: CVE-2020-24271 State: PUBLISHED Published: 2021-02-01T14:17:11 Last Updated: 2024-08-04T15:12:08.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF vulnerability was discovered in EasyCMS v1.6 that can add an admin account through index.php?s=/admin/rbacuser/insert/navTabId/rbacuser/callbackType/closeCurrent, then post username=***&password=***. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/users/yohoho221/projects/1
CVE ID: CVE-2020-24275 State: PUBLISHED Published: 2023-07-20T00:00:00 Last Updated: 2024-10-24T19:48:06.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: A HTTP response header injection vulnerability in Swoole v4.5.2 allows attackers to execute arbitrary code via supplying a crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/swoole/swoole-src/pull/3539 - https://github.com/swoole/swoole-src/pull/3545 - https://blog.cal1.cn/post/HTTP%20Response%20Header%20Injection%20in%20Swoole%3C%3D4.5.2 - https://portswigger.net/kb/issues/00200200_http-response-header-injection
CVE ID: CVE-2020-24285 State: PUBLISHED Published: 2021-04-12T10:49:16 Last Updated: 2024-08-04T15:12:08.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: INTELBRAS TELEFONE IP TIP200 version 60.61.75.22 allows an attacker to obtain sensitive information through /cgi-bin/cgiServer.exx. Additional Analyst Notes: - CVE Program Container: References: - http://intelbras.com - https://github.com/SecLoop/CVE/blob/main/telefone_ip_tip200.md
CVE ID: CVE-2020-24292 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T19:53:54.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary code via opening of crafted ico file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/freeimage/discussion/36111/thread/afb98701eb/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6GKMK74POW3RU7F4HLUJE7XEFLQDO35/ - https://lists.fedoraproject.org/archives/list/package-announce%