Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-27266 State: PUBLISHED Published: 2021-01-19T21:17:33 Last Updated: 2024-08-04T16:11:36.390Z Vendors: n/a Products: SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A Problem Types: CWE-603 Description: In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows physically proximate attackers to bypass user authentication checks via Bluetooth Low Energy. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-012-01
CVE ID: CVE-2020-27267 State: PUBLISHED Published: 2021-01-13T23:25:07 Last Updated: 2024-08-04T16:11:36.412Z Vendors: n/a Products: PTC Kepware KEPServerEX, ThingWorx Kepware Server, ThingWorx Industrial Connectivity, OPC-Aggregator, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server, Software Toolbox TOP Server Problem Types: CWE-416 Description: KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all versions), Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server v7.68.804 and v7.66, and Software Toolbox TOP Server all 6.x versions, are vulnerable to a heap
ndustrial Gateway Server v7.68.804 and v7.66, and Software Toolbox TOP Server all 6.x versions, are vulnerable to a heap-based buffer overflow. Opening a specifically crafted OPC UA message could allow an attacker to crash the server and potentially leak data. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-352-02
CVE ID: CVE-2020-27268 State: PUBLISHED Published: 2021-01-19T21:17:53 Last Updated: 2024-08-04T16:11:36.584Z Vendors: n/a Products: SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A Problem Types: CWE-602 Description: In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDana-i and AnyDana-A mobile applications allows physically proximate attackers to bypass checks for default PINs via Bluetooth Low Energy. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-012-01
CVE ID: CVE-2020-27269 State: PUBLISHED Published: 2021-01-19T21:17:59 Last Updated: 2024-08-04T16:11:36.578Z Vendors: n/a Products: SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A Problem Types: CWE-294 Description: In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i and AnyDana-A mobile applications lacks replay protection measures, which allows unauthenticated, physically proximate attackers to replay communication sequences via Bluetooth Low Energy. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-012-01
CVE ID: CVE-2020-27270 State: PUBLISHED Published: 2021-01-19T16:17:59 Last Updated: 2024-08-04T16:11:36.599Z Vendors: n/a Products: SOOIL Developments CoLtd DiabecareRS,AnyDana-i,AnyDana-A Problem Types: UNPROTECTED TRANSPORT OF CREDENTIALS CWE523 Description: SOOIL Developments CoLtd DiabecareRS, AnyDana-i ,AnyDana-A, communication protocol of the insulin pump & AnyDana-i,AnyDana-A mobile apps doesnt use adequate measures to protect encryption keys in transit which allows unauthenticated physically proximate attacker to sniff keys via (BLE). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-012-01
CVE ID: CVE-2020-27272 State: PUBLISHED Published: 2021-01-19T16:18:13 Last Updated: 2024-08-04T16:11:36.580Z Vendors: n/a Products: SOOIL Developments CoLtd DiabecareRS,AnyDana-i,AnyDana-A Problem Types: KEY EXCHANGE WITHOUT ENTITY AUTHENTICATION CWE322 Description: SOOIL Developments CoLtd DiabecareRS, AnyDana-i, AnyDana-A, The communication protocol of the insulin pump and AnyDana-i,AnyDana-A mobile apps doesn't use adequate measures to authenticate the pump before exchanging keys, which allows unauthenticated, physically proximate attackers to eavesdrop the keys and spoof the pump via BLE. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advis
of the pump via BLE. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-012-01
CVE ID: CVE-2020-27274 State: PUBLISHED Published: 2021-01-26T19:03:18 Last Updated: 2024-08-04T16:11:36.611Z Vendors: n/a Products: OPC UA Tunneller Problem Types: CWE-754 Description: Some parsing functions in the affected product do not check the return value of malloc and the thread handling the message is forced to close, which may lead to a denial-of-service condition on the OPC UA Tunneller (versions prior to 6.3.0.8233). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03
CVE ID: CVE-2020-27275 State: PUBLISHED Published: 2021-01-11T15:23:02 Last Updated: 2024-08-04T16:11:36.608Z Vendors: n/a Products: Delta Electronics Problem Types: CWE-787 Description: Delta Electronics DOPSoft Version 4.0.8.21 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-005-05 - https://www.zerodayinitiative.com/advisories/ZDI-21-038/ - https://www.zerodayinitiative.com/advisories/ZDI-21-036/ - https://www.zerodayinitiative.com/advisories/ZDI-21-035/ - https://www.zerodayinitiative.com/
m/advisories/ZDI-21-036/ - https://www.zerodayinitiative.com/advisories/ZDI-21-035/ - https://www.zerodayinitiative.com/advisories/ZDI-21-037/ - https://www.zerodayinitiative.com/advisories/ZDI-21-032/ - https://www.zerodayinitiative.com/advisories/ZDI-21-028/ - https://www.zerodayinitiative.com/advisories/ZDI-21-034/ - https://www.zerodayinitiative.com/advisories/ZDI-21-029/
CVE ID: CVE-2020-27276 State: PUBLISHED Published: 2021-01-19T16:18:20 Last Updated: 2024-08-04T16:11:36.643Z Vendors: n/a Products: SOOIL Developments CoLtd DiabecareRS,AnyDana-i,AnyDana-A Problem Types: CWE-290 Description: SOOIL Developments Co Ltd DiabecareRS,AnyDana-i & AnyDana-A, the communication protocol of the insulin pump and its AnyDana-i & AnyDana-A mobile apps doesn't use adequate measures to authenticate the communicating entities before exchanging keys, which allows unauthenticated, physically proximate attackers to eavesdrop the authentication sequence via Bluetooth Low Energy. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advis
luetooth Low Energy. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-012-01
CVE ID: CVE-2020-27277 State: PUBLISHED Published: 2021-01-11T15:22:46 Last Updated: 2024-08-04T16:11:36.560Z Vendors: n/a Products: Delta Electronics Problem Types: CWE-822 Description: Delta Electronics DOPSoft Version 4.0.8.21 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-005-05 - https://www.zerodayinitiative.com/advisories/ZDI-21-033/
CVE ID: CVE-2020-27278 State: PUBLISHED Published: 2021-03-15T21:21:38 Last Updated: 2024-08-04T16:11:36.593Z Vendors: n/a Products: Hamilton Medical AG, T1-Ventillator Problem Types: CWE-798 Description: In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, hard-coded credentials in the ventilator allow attackers with physical access to obtain admin privileges for the device’s configuration interface. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-047-01
CVE ID: CVE-2020-27279 State: PUBLISHED Published: 2021-01-06T15:03:47 Last Updated: 2024-08-04T16:11:36.610Z Vendors: n/a Products: Crimson 3.1 Problem Types: CWE-476 Description: A NULL pointer deference vulnerability has been identified in the protocol converter. An attacker could send a specially crafted packet that could reboot the device running Crimson 3.1 (Build versions prior to 3119.001). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-005-04
CVE ID: CVE-2020-27280 State: PUBLISHED Published: 2021-01-26T12:51:33 Last Updated: 2024-08-04T16:11:36.597Z Vendors: n/a Products: ISPSoft Problem Types: CWE-416 Description: A use after free issue has been identified in the way ISPSoft(v3.12 and prior) processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-021-01
CVE ID: CVE-2020-27281 State: PUBLISHED Published: 2021-01-11T15:57:05 Last Updated: 2024-08-04T16:11:36.581Z Vendors: n/a Products: Delta Electronics CNCSoft ScreenEditor Problem Types: CWE-121 Description: A stack-based buffer overflow may exist in Delta Electronics CNCSoft ScreenEditor versions 1.01.26 and prior when processing specially crafted project files, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-005-06 - https://www.zerodayinitiative.com/advisories/ZDI-21-039/
CVE ID: CVE-2020-27282 State: PUBLISHED Published: 2021-03-15T21:21:54 Last Updated: 2024-08-04T16:11:36.603Z Vendors: n/a Products: Hamilton Medical AG, T1-Ventillator Problem Types: CWE-112 Description: In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allows privileged attackers with physical access to render the device persistently unusable by uploading specially crafted configuration files. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-047-01
CVE ID: CVE-2020-27283 State: PUBLISHED Published: 2021-01-06T15:05:07 Last Updated: 2024-08-04T16:11:36.591Z Vendors: n/a Products: Crimson 3.1 Problem Types: CWE-404 Description: An attacker could send a specially crafted message to Crimson 3.1 (Build versions prior to 3119.001) that could leak arbitrary memory locations. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-005-04
CVE ID: CVE-2020-27284 State: PUBLISHED Published: 2021-01-26T12:53:01 Last Updated: 2024-08-04T16:11:36.594Z Vendors: n/a Products: TPEditor Problem Types: CWE-787 Description: TPEditor (v1.98 and prior) is vulnerable to two out-of-bounds write instances in the way it processes project files, allowing an attacker to craft a special project file that may permit arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-021-02
CVE ID: CVE-2020-27285 State: PUBLISHED Published: 2021-01-06T15:01:44 Last Updated: 2024-08-04T16:11:36.571Z Vendors: n/a Products: Crimson 3.1 Problem Types: CWE-306 Description: The default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be able to read and modify the database without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-005-04
CVE ID: CVE-2020-27287 State: PUBLISHED Published: 2021-01-11T15:27:51 Last Updated: 2024-08-04T16:11:36.585Z Vendors: n/a Products: Delta Electronics Problem Types: CWE-787 Description: Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-007-04 - https://www.zerodayinitiative.com/advisories/ZDI-21-044/ - https://www.zerodayinitiative.com/advisories/ZDI-21-030/ - https://www.zerodayinitiative.com/advisories/ZDI-21-043/ - https://www.zerodayinitiative.co
com/advisories/ZDI-21-030/ - https://www.zerodayinitiative.com/advisories/ZDI-21-043/ - https://www.zerodayinitiative.com/advisories/ZDI-21-031/ - https://www.zerodayinitiative.com/advisories/ZDI-21-041/
CVE ID: CVE-2020-27288 State: PUBLISHED Published: 2021-01-26T12:48:45 Last Updated: 2024-08-04T16:11:36.669Z Vendors: n/a Products: TPEditor Problem Types: CWE-822 Description: An untrusted pointer dereference has been identified in the way TPEditor(v1.98 and prior) processes project files, allowing an attacker to craft a special project file that may permit arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-021-02
CVE ID: CVE-2020-27289 State: PUBLISHED Published: 2021-01-11T15:27:57 Last Updated: 2024-08-04T16:11:36.592Z Vendors: n/a Products: Delta Electronics Problem Types: CWE-822 Description: Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-007-04 - https://www.zerodayinitiative.com/advisories/ZDI-21-040/
CVE ID: CVE-2020-27290 State: PUBLISHED Published: 2021-03-15T21:22:02 Last Updated: 2024-08-04T16:11:36.579Z Vendors: n/a Products: Hamilton Medical AG, T1-Ventillator Problem Types: CWE-200 Description: In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an information disclosure vulnerability in the ventilator allows attackers with physical access to the configuration interface's logs to get valid checksums for tampered configuration files. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-047-01
CVE ID: CVE-2020-27291 State: PUBLISHED Published: 2021-01-11T15:27:54 Last Updated: 2024-08-04T16:11:36.616Z Vendors: n/a Products: Delta Electronics Problem Types: CWE-125 Description: Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-007-04 - https://www.zerodayinitiative.com/advisories/ZDI-21-042/
CVE ID: CVE-2020-27293 State: PUBLISHED Published: 2021-01-11T15:28:00 Last Updated: 2024-08-04T16:11:36.569Z Vendors: n/a Products: Delta Electronics Problem Types: CWE-843 Description: Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a type confusion issue while processing project files, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-007-04 - https://www.zerodayinitiative.com/advisories/ZDI-21-045/
CVE ID: CVE-2020-27295 State: PUBLISHED Published: 2021-01-26T19:07:48 Last Updated: 2024-08-04T16:11:36.639Z Vendors: n/a Products: OPC UA Tunneller Problem Types: CWE-400 Description: The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-service condition on the OPC UA Tunneller (versions prior to 6.3.0.8233). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03
CVE ID: CVE-2020-27297 State: PUBLISHED Published: 2021-01-26T19:06:19 Last Updated: 2024-08-04T16:11:36.582Z Vendors: n/a Products: OPC UA Tunneller Problem Types: CWE-122 Description: The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to manipulate memory with controlled values and remotely execute code on the OPC UA Tunneller (versions prior to 6.3.0.8233). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03
CVE ID: CVE-2020-27298 State: PUBLISHED Published: 2021-01-20T19:27:22 Last Updated: 2025-06-04T19:46:39.186Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Philips Products: Interventional Workspot, Coronary Tools/Dynamic Coronary Roadmap/Stentboost Live, ViewForum Problem Types: CWE-78 Description: Philips Interventional Workspot (Release 1.3.2, 1.4.0, 1.4.1, 1.4.3, 1.4.5), Coronary Tools/Dynamic Coronary Roadmap/Stentboost Live (Release 1.0), ViewForum (Release 6.3V1L10). The software constructs all or part of an OS command using externally influenced input from an upstream component but does not neutralize or incorrectly neutralizes special elements tha
ally influenced input from an upstream component but does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when sent to a downstream component. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-21-019-01 - https://www.philips.com/a-w/security/security-advisories/product-security-2021.html#2021_archive
CVE ID: CVE-2020-27299 State: PUBLISHED Published: 2021-01-26T19:04:56 Last Updated: 2024-08-04T16:11:36.579Z Vendors: n/a Products: OPC UA Tunneller Problem Types: CWE-125 Description: The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensitive data information or cause the device to crash on the OPC UA Tunneller (versions prior to 6.3.0.8233). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03
CVE ID: CVE-2020-27301 State: PUBLISHED Published: 2021-06-04T12:24:37 Last Updated: 2024-08-04T16:11:36.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "AES_UnWRAP" function, when an attacker in Wi-Fi range sends a crafted "Encrypted GTK" value as part of the WPA2 4-way-handshake. Additional Analyst Notes: - CVE Program Container: References: - https://www.vdoo.com/blog/realtek-wifi-vulnerabilities-zero-day
CVE ID: CVE-2020-27302 State: PUBLISHED Published: 2021-06-04T12:24:41 Last Updated: 2024-08-04T16:11:36.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "memcpy" function, when an attacker in Wi-Fi range sends a crafted "Encrypted GTK" value as part of the WPA2 4-way-handshake. Additional Analyst Notes: - CVE Program Container: References: - https://www.vdoo.com/blog/realtek-wifi-vulnerabilities-zero-day
CVE ID: CVE-2020-27304 State: PUBLISHED Published: 2021-10-21T15:42:23 Last Updated: 2024-08-04T16:11:36.691Z Vendors: civetweb_project Products: civetweb Problem Types: CWE-23 Description: The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the built-in HTTP form-based file upload mechanism, via the mg_handle_form_request API. Web applications that use the file upload form handler, and use parts of the user-controlled filename in the output path, are susceptible to directory traversal Additional Analyst Notes: - CVE Program Container: References: - https://jfrog.com/blog/cve-2020-27304-rce-via-directory-traversal-in-civetweb-htt
- CVE Program Container: References: - https://jfrog.com/blog/cve-2020-27304-rce-via-directory-traversal-in-civetweb-http-server/ - https://groups.google.com/g/civetweb/c/yPBxNXdGgJQ - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf
CVE ID: CVE-2020-27336 State: PUBLISHED Published: 2020-12-22T21:04:08.000Z Last Updated: 2025-09-30T15:52:30.900Z Severity: LOW (CVSS 3.7 CVSS:3.1/AC:H/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Treck IPv6 before 6.0.1.68. Improper input validation in the IPv6 component when handling a packet sent by an unauthenticated remote attacker could result in an out-of-bounds read of up to three bytes via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://treck.com/vulnerability-response-information/ - https://security.netapp.com/advisory/ntap-20210201-0003/
CVE ID: CVE-2020-27337 State: PUBLISHED Published: 2020-12-22T21:04:11.000Z Last Updated: 2025-09-30T15:50:10.920Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AC:L/AV:N/A:L/C:L/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the IPv6 component allows an unauthenticated remote attacker to cause an Out of Bounds Write, and possibly a Denial of Service via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://treck.com/vulnerability-response-information/ - https://security.netapp.com/advisory/ntap-20210201-0003/
CVE ID: CVE-2020-27338 State: PUBLISHED Published: 2020-12-22T21:04:13 Last Updated: 2024-08-04T16:11:36.591Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AC:H/AV:A/A:H/C:L/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the DHCPv6 client component allows an unauthenticated remote attacker to cause an Out of Bounds Read, and possibly a Denial of Service via adjacent network access. Additional Analyst Notes: - CVE Program Container: References: - https://treck.com/vulnerability-response-information/ - https://security.netapp.com/advisory/ntap-20210201-0003/
CVE ID: CVE-2020-27339 State: PUBLISHED Published: 2021-06-16T15:49:34.000Z Last Updated: 2025-11-04T19:12:22.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to corrupt either the firmware or the OS memory. The fixed versions for this issue in the AhciBusDxe, IdeBusDxe, NvmExpressDxe, SdHostDriverDxe, and SdMmcDeviceDxe drivers are 05.16.25, 05.26.25, 05.35.25, 05.43.25, and 05.51.25 (for Kernel 5.1 through 5.5). Additional Analyst Notes: - CVE Program Container: References: - https://www.insyde.com/security-pledge/SA-2021001 - h
. Additional Analyst Notes: - CVE Program Container: References: - https://www.insyde.com/security-pledge/SA-2021001 - https://security.netapp.com/advisory/ntap-20220216-0005/ - https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf
CVE ID: CVE-2020-27340 State: PUBLISHED Published: 2020-12-18T07:14:05 Last Updated: 2024-08-04T16:11:36.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: The online help portal of Mitel MiCollab before 9.2 could allow an attacker to redirect a user to an unauthorized website by executing malicious script due to insufficient access control. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories
CVE ID: CVE-2020-27344 State: PUBLISHED Published: 2020-10-21T19:09:23 Last Updated: 2024-08-04T16:11:36.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cm-download-manager plugin before 2.8.0 for WordPress allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/cm-download-manager/#developers - https://gist.github.com/qwebee/da79c6a9fa982c3c40988a1e0598c0d9
CVE ID: CVE-2020-27346 State: REJECTED Published: 2020-11-04T03:05:15 Last Updated: 2020-11-04T03:05:15 Description: No description available.