Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-11875 State: PUBLISHED Published: 2020-04-17T13:26:02 Last Updated: 2024-08-04T11:42:00.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10.0 (MTK chipsets) software. The MTK kernel does not properly implement exception handling, allowing an attacker to gain privileges. The LG ID is LVE-SMP-200001 (February 2020). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/ - https://cwe.mitre.org/data/definitions/755.html
CVE ID: CVE-2020-11876 State: PUBLISHED Published: 2020-04-17T15:46:01 Last Updated: 2024-08-04T11:42:00.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: airhost.exe in Zoom Client for Meetings 4.6.11 uses the SHA-256 hash of 0123425234234fsdfsdr3242 for initialization of an OpenSSL EVP AES-256 CBC context. NOTE: the vendor states that this initialization only occurs within unreachable code Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://dev.io/posts/zoomzoo/
CVE ID: CVE-2020-11877 State: PUBLISHED Published: 2020-04-17T15:45:43 Last Updated: 2024-08-04T11:42:00.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: airhost.exe in Zoom Client for Meetings 4.6.11 uses 3423423432325249 as the Initialization Vector (IV) for AES-256 CBC encryption. NOTE: the vendor states that this IV is used only within unreachable code Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://dev.io/posts/zoomzoo/
CVE ID: CVE-2020-11878 State: PUBLISHED Published: 2020-04-17T15:57:33 Last Updated: 2024-08-04T11:42:00.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Jitsi Meet (aka docker-jitsi-meet) stack on Docker before stable-4384-1 uses default passwords (such as passw0rd) for system accounts. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jitsi/docker-jitsi-meet/compare/stable-4384...stable-4384-1 - https://github.com/jitsi/docker-jitsi-meet/blob/master/CHANGELOG.md#stable-4384-1
CVE ID: CVE-2020-11879 State: PUBLISHED Published: 2020-04-17T17:07:41 Last Updated: 2024-08-04T11:42:00.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNOME Evolution before 3.35.91. By using the proprietary (non-RFC6068) "mailto?attach=..." parameter, a website (or other source of mailto links) can make Evolution attach local files or directories to a composed email message without showing a warning to the user, as demonstrated by an attach=. value. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/evolution/issues/784 - https://gitlab.gnome.org/GNOME/evolution/-/blob/master/NEWS - https://www.nds.ruh
gnome.org/GNOME/evolution/issues/784 - https://gitlab.gnome.org/GNOME/evolution/-/blob/master/NEWS - https://www.nds.ruhr-uni-bochum.de/media/nds/veroeffentlichungen/2020/08/15/mailto-paper.pdf
CVE ID: CVE-2020-11880 State: PUBLISHED Published: 2020-04-17T17:07:26 Last Updated: 2024-08-04T11:42:00.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in KDE KMail before 19.12.3. By using the proprietary (non-RFC6068) "mailto?attach=..." parameter, a website (or other source of mailto links) can make KMail attach local files to a composed email message without showing a warning to the user, as demonstrated by an attach=.bash_history value. Additional Analyst Notes: - CVE Program Container: References: - https://cgit.kde.org/kmail.git/commit/?id=2a348eccd352260f192d9b449492071bbf2b34b1 - https://cgit.kde.org/kmail.git/tag/?h=v19.12.3
CVE ID: CVE-2020-11881 State: PUBLISHED Published: 2020-09-14T20:06:38 Last Updated: 2024-08-04T11:42:00.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: An array index error in MikroTik RouterOS 6.41.3 through 6.46.5, and 7.x through 7.0 Beta5, allows an unauthenticated remote attacker to crash the SMB server via modified setup-request packets, aka SUP-12964. Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com - https://github.com/botlabsDev/CVE-2020-11881
CVE ID: CVE-2020-11882 State: PUBLISHED Published: 2020-07-07T15:39:00 Last Updated: 2024-08-04T11:42:00.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: The O2 Business application 1.2.0 for Android exposes the canvasm.myo2.SplashActivity activity to other applications. The purpose of this activity is to handle deeplinks that can be delivered either via links or by directly calling the activity. However, the deeplink format is not properly validated. This can be abused by an attacker to redirect a user to any page and deliver any content to the user. Additional Analyst Notes: - CVE Program Container: References: - https://rcesecurity.com/ - http://packetstormsecurity.com/file
nal Analyst Notes: - CVE Program Container: References: - https://rcesecurity.com/ - http://packetstormsecurity.com/files/158302/Android-o2-Business-1.2.0-Open-Redirect.html
CVE ID: CVE-2020-11883 State: PUBLISHED Published: 2020-04-17T18:39:11 Last Updated: 2024-08-04T11:42:00.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DivanteLtd/vue-storefront-api/pull/431 - https://github.com/DivanteLtd/storefront-api/pull/59
CVE ID: CVE-2020-11884 State: PUBLISHED Published: 2020-04-29T12:07:37 Last Updated: 2024-08-04T11:42:00.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3f777e19d171670ab558a6d5e6b1ac7f9b6c574f - https://www.debian.org/security/2020/dsa-4667
t/torvalds/linux.git/commit/?id=3f777e19d171670ab558a6d5e6b1ac7f9b6c574f - https://www.debian.org/security/2020/dsa-4667 - https://usn.ubuntu.com/4343-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKVJMS4GQRH5SO35WM5GINCFAGXQ3ZW6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQUVKC3IPUC5B374VVAZV4J5P3GAUGSW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3TZBP2HINNAX7HKHCOUMIFVQPV6GWMCZ/ - https://usn.ubuntu.com/4345-1/ - https://usn.ubuntu.com/4342-1/ - https://security.netapp.com/advisory/ntap-20200608-0001/ - https://git.kernel.o
45-1/ - https://usn.ubuntu.com/4342-1/ - https://security.netapp.com/advisory/ntap-20200608-0001/ - https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=215d1f3928713d6eaec67244bcda72105b898000
CVE ID: CVE-2020-11885 State: PUBLISHED Published: 2020-04-17T19:14:03 Last Updated: 2024-08-04T11:42:00.790Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AC:H/AV:N/A:L/C:L/I:N/PR:H/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: WSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user (with admin console access) can use the XML validator to make unintended network invocations such as SSRF via an uploaded file. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0684
CVE ID: CVE-2020-11886 State: PUBLISHED Published: 2020-04-17T19:37:49 Last Updated: 2024-08-04T11:42:00.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCriteriaForSnmpParm. This affects Horizon before 25.2.1, Meridian 2019 before 2019.1.4, Meridian 2018 before 2018.1.16, and Meridian 2017 before 2017.1.21. Additional Analyst Notes: - CVE Program Container: References: - https://issues.opennms.org/browse/NMS-12572
CVE ID: CVE-2020-11887 State: PUBLISHED Published: 2020-04-17T20:08:39 Last Updated: 2024-08-04T11:42:00.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/domenic/svg2png/issues/117
CVE ID: CVE-2020-11888 State: PUBLISHED Published: 2020-04-20T15:48:13 Last Updated: 2024-08-04T11:42:00.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/trentm/python-markdown2/issues/348 - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00035.html - https://lists.fedoraproject.org/archives/list/package-annou
nsuse.org/opensuse-security-announce/2020-05/msg00035.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PN6QSHRFZXRQAYZJQ4MOW5MKIXBYOMED/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQLRBGRVRRZK7P5SFL2MNGXFX37YHJAV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XOAIRJJCZNJUALXDHSIGH5PS2H63A3J/
CVE ID: CVE-2020-11889 State: PUBLISHED Published: 2020-04-21T16:39:09 Last Updated: 2024-08-04T11:42:00.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow the unauthorized deletion of usergroups. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/811-20200403-core-incorrect-access-control-in-com-users-access-level-deletion-function
CVE ID: CVE-2020-11890 State: PUBLISHED Published: 2020-04-21T16:38:23 Last Updated: 2024-08-04T11:42:00.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to a broken ACL configuration. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/810-20200402-core-missing-checks-for-the-root-usergroup-in-usergroup-table.html
CVE ID: CVE-2020-11891 State: PUBLISHED Published: 2020-04-21T16:40:04 Last Updated: 2024-08-04T11:42:00.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow the unauthorized editing of usergroups. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/809-20200401-core-incorrect-access-control-in-com-users-access-level-editing-function.html
CVE ID: CVE-2020-11894 State: PUBLISHED Published: 2020-04-19T18:04:45 Last Updated: 2024-08-04T11:42:00.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ming (aka libming) 0.4.8 has a heap-based buffer over-read (8 bytes) in the function decompileIF() in decompile.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/196
CVE ID: CVE-2020-11895 State: PUBLISHED Published: 2020-04-19T18:04:35 Last Updated: 2024-08-04T11:42:00.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ming (aka libming) 0.4.8 has a heap-based buffer over-read (2 bytes) in the function decompileIF() in decompile.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/197
CVE ID: CVE-2020-11896 State: PUBLISHED Published: 2020-06-17T10:21:31 Last Updated: 2024-08-04T11:42:00.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/257161/ - https://www.treck.com - https://jsof-tech.com/vulnerability-disclosure-policy/ - https://www.kb.cert.org/vuls/id/257161 - https://www.jsof-tech.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.tx
CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.netapp.com/advisory/ntap-20200625-0006/ - https://cert-portal.siemens.com/productcert/pdf/ssa-631949.pdf - https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04012en_us - https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities
CVE ID: CVE-2020-11897 State: PUBLISHED Published: 2020-06-17T10:23:22 Last Updated: 2024-08-04T11:42:00.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packets. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/257161/ - https://www.treck.com - https://jsof-tech.com/vulnerability-disclosure-policy/ - https://www.kb.cert.org/vuls/id/257161 - https://www.jsof-tech.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020
ontent/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities
CVE ID: CVE-2020-11898 State: PUBLISHED Published: 2020-06-17T10:26:18 Last Updated: 2024-08-04T11:42:00.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers to trigger an information leak. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/257161/ - https://www.treck.com - https://jsof-tech.com/vulnerability-disclosure-policy/ - https://www.kb.cert.org/vuls/id/257161 - https://www.jsof-tech.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stac
w.jsof-tech.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.netapp.com/advisory/ntap-20200625-0006/ - https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04012en_us - https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities
CVE ID: CVE-2020-11899 State: PUBLISHED Published: 2020-06-17T10:27:59.000Z Last Updated: 2025-10-21T23:35:41.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cwe.mitre.org/data/definitions/125.html - https://www.kb.cert.org/vuls/id/257161/ - https://www.treck.com - https://jsof-tech.com/vulnerability-disclosure-policy/ - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html - https://www.kb.cert.org/vuls/id/257161 - https://www.jsof-tech.com/ripple20/ - https://tools.cisco.com/se
a-00295.html - https://www.kb.cert.org/vuls/id/257161 - https://www.jsof-tech.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.netapp.com/advisory/ntap-20200625-0006/ - https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities
CVE ID: CVE-2020-11900 State: PUBLISHED Published: 2020-06-17T10:30:24 Last Updated: 2024-08-04T11:42:00.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/257161/ - https://www.treck.com - https://jsof-tech.com/vulnerability-disclosure-policy/ - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html - https://www.kb.cert.org/vuls/id/257161 - https://www.jsof-tech.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC
.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.netapp.com/advisory/ntap-20200625-0006/ - https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04012en_us - https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities
CVE ID: CVE-2020-11901 State: PUBLISHED Published: 2020-06-17T10:34:01 Last Updated: 2024-08-04T11:42:00.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/257161/ - https://www.treck.com - https://jsof-tech.com/vulnerability-disclosure-policy/ - https://www.kb.cert.org/vuls/id/257161 - https://www.jsof-tech.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020
CVE ID: CVE-2020-11902 State: PUBLISHED Published: 2020-06-17T10:36:19 Last Updated: 2024-08-04T11:42:00.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/257161/ - https://www.treck.com - https://jsof-tech.com/vulnerability-disclosure-policy/ - https://www.kb.cert.org/vuls/id/257161 - https://www.jsof-tech.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - htt
curityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.netapp.com/advisory/ntap-20200625-0006/ - https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities
CVE ID: CVE-2020-11903 State: PUBLISHED Published: 2020-06-17T10:37:56 Last Updated: 2024-08-04T11:42:00.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/257161/ - https://www.treck.com - https://jsof-tech.com/vulnerability-disclosure-policy/ - https://www.kb.cert.org/vuls/id/257161 - https://www.jsof-tech.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.netap
o-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.netapp.com/advisory/ntap-20200625-0006/ - https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities
CVE ID: CVE-2020-11904 State: PUBLISHED Published: 2020-06-17T10:41:12.000Z Last Updated: 2025-09-30T14:49:48.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.kb.cert.org/vuls/id/257161/ - https://www.treck.com - https://jsof-tech.com/vulnerability-disclosure-policy/ - https://www.kb.cert.org/vuls/id/257161 - https://www.jsof-tech.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http:
pple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.netapp.com/advisory/ntap-20200625-0006/ - https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities
CVE ID: CVE-2020-11905 State: PUBLISHED Published: 2020-06-17T10:43:14 Last Updated: 2024-08-04T11:42:00.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/257161/ - https://www.treck.com - https://jsof-tech.com/vulnerability-disclosure-policy/ - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html - https://www.kb.cert.org/vuls/id/257161 - https://www.jsof-tech.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC -
om/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.netapp.com/advisory/ntap-20200625-0006/ - https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities
CVE ID: CVE-2020-11906 State: PUBLISHED Published: 2020-06-17T10:44:58 Last Updated: 2024-08-04T11:42:00.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Treck TCP/IP stack before 6.0.1.66 has an Ethernet Link Layer Integer Underflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/257161/ - https://www.treck.com - https://jsof-tech.com/vulnerability-disclosure-policy/ - https://www.kb.cert.org/vuls/id/257161 - https://www.jsof-tech.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https:/
tyAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.netapp.com/advisory/ntap-20200625-0006/ - https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04012en_us - https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities
CVE ID: CVE-2020-11907 State: PUBLISHED Published: 2020-06-17T10:47:17 Last Updated: 2024-08-04T11:42:00.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Treck TCP/IP stack before 6.0.1.66 improperly handles a Length Parameter Inconsistency in TCP. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/257161/ - https://www.treck.com - https://jsof-tech.com/vulnerability-disclosure-policy/ - https://www.kb.cert.org/vuls/id/257161 - https://www.jsof-tech.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006