Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-5781 State: PUBLISHED Published: 2020-09-23T15:33:52 Last Updated: 2024-08-04T08:39:25.924Z Vendors: n/a Products: IgniteNet HeliOS GLinq Problem Types: Denial of Service Description: In IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci configuration file (/etc/config/luci) by the authenticator.htmlauth function. When modified with arbitrary javascript, this causes a denial-of-service condition for all other users. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-55
CVE ID: CVE-2020-5782 State: PUBLISHED Published: 2020-09-23T15:33:45 Last Updated: 2024-08-04T08:39:25.914Z Vendors: n/a Products: IgniteNet HeliOS GLinq Problem Types: Denial of Service Description: In IgniteNet HeliOS GLinq v2.2.1 r2961, if a user logs in and sets the ‘wan_type’ parameter, the wan interface for the device will become unreachable, which results in a denial of service condition for devices dependent on this connection. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-55
CVE ID: CVE-2020-5783 State: PUBLISHED Published: 2020-09-23T15:33:39 Last Updated: 2024-08-04T08:39:25.877Z Vendors: n/a Products: IgniteNet HeliOS GLinq Problem Types: Denial of Service Description: In IgniteNet HeliOS GLinq v2.2.1 r2961, the login functionality does not contain any CSRF protection mechanisms. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-55
CVE ID: CVE-2020-5784 State: PUBLISHED Published: 2020-10-01T19:36:33 Last Updated: 2024-08-04T08:39:25.916Z Vendors: n/a Products: Teltonika Gateway TRB245 Problem Types: Server-Side Request Forgery Description: Server-Side Request Forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a low privileged user to cause the application to perform HTTP GET requests to arbitrary URLs. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-57
CVE ID: CVE-2020-5785 State: PUBLISHED Published: 2020-10-01T19:43:32 Last Updated: 2024-08-04T08:39:25.907Z Vendors: n/a Products: Teltonika Gateway TRB245 Problem Types: Reflected Cross-site Scripting Description: Insufficient output sanitization in Teltonika firmware TRB2_R_00.02.04.3 allows an unauthenticated attacker to conduct reflected cross-site scripting via a crafted ‘action’ or ‘pkg_name’ parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-57
CVE ID: CVE-2020-5786 State: PUBLISHED Published: 2020-10-01T19:41:22 Last Updated: 2024-08-04T08:39:25.892Z Vendors: n/a Products: Teltonika Gateway TRB245 Problem Types: Cross-site Request Forgery Description: Cross-site request forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-57
CVE ID: CVE-2020-5787 State: PUBLISHED Published: 2020-10-01T19:45:15 Last Updated: 2024-08-04T08:39:25.927Z Vendors: n/a Products: Teltonika Gateway TRB245 Problem Types: Directory traversal / arbitrary file delete Description: Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/services/packages/remove action. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-57
CVE ID: CVE-2020-5788 State: PUBLISHED Published: 2020-10-01T19:47:10 Last Updated: 2024-08-04T08:39:25.936Z Vendors: n/a Products: Teltonika Gateway TRB245 Problem Types: Directory traversal / arbitrary file delete Description: Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/system/admin/certificates/delete action. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-57
CVE ID: CVE-2020-5789 State: PUBLISHED Published: 2020-10-01T19:39:43 Last Updated: 2024-08-04T08:39:25.919Z Vendors: n/a Products: Teltonika Gateway TRB245 Problem Types: Directory traversal / arbitrary file read Description: Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to read the contents of arbitrary files on disk. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-57
CVE ID: CVE-2020-5790 State: PUBLISHED Published: 2020-10-20T21:20:21 Last Updated: 2024-08-04T08:39:25.840Z Vendors: n/a Products: Nagios XI Problem Types: Cross-site Request Forgery Description: Cross-site request forgery in Nagios XI 5.7.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-58
CVE ID: CVE-2020-5791 State: PUBLISHED Published: 2020-10-20T21:22:00 Last Updated: 2024-08-04T08:39:25.932Z Vendors: n/a Products: Nagios XI Problem Types: Authenticated OS Command Injection Description: Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admin user to execute operating system commands with the privileges of the apache user. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-58 - http://packetstormsecurity.com/files/159743/Nagios-XI-5.7.3-Remote-Command-Injection.html - http://packetstormsecurity.com/files/162235/Nagios-XI-5.7.3-Remote-Code-Execut
-XI-5.7.3-Remote-Command-Injection.html - http://packetstormsecurity.com/files/162235/Nagios-XI-5.7.3-Remote-Code-Execution.html
CVE ID: CVE-2020-5792 State: PUBLISHED Published: 2020-10-20T21:18:30 Last Updated: 2024-08-04T08:39:25.923Z Vendors: n/a Products: Nagios XI Problem Types: Authenticated OS Command Argument Injection Description: Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user to write to arbitrary files and ultimately execute code with the privileges of the apache user. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-58 - http://packetstormsecurity.com/files/162284/Nagios-XI-5.7.3-Remote-Code-Execution.html
CVE ID: CVE-2020-5793 State: PUBLISHED Published: 2020-11-05T19:11:24 Last Updated: 2024-08-04T08:39:26.035Z Vendors: n/a Products: Tenable Nessus for Windows and Tenable Nessus Agent for Windows Problem Types: Local Privilege Escalation Description: A vulnerability in Nessus versions 8.9.0 through 8.12.0 for Windows & Nessus Agent 8.0.0 and 8.1.0 for Windows could allow an authenticated local attacker to copy user-supplied files to a specially constructed path in a specifically named user directory. An attacker could exploit this vulnerability by creating a malicious file and copying the file to a system directory. The attacker needs valid credentials on the Windows system to exploit this v
and copying the file to a system directory. The attacker needs valid credentials on the Windows system to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2020-07 - https://www.tenable.com/security/tns-2020-08
CVE ID: CVE-2020-5794 State: PUBLISHED Published: 2020-11-06T16:12:53 Last Updated: 2024-08-04T08:39:25.990Z Vendors: n/a Products: Nessus Network Monitor Problem Types: Local Privilege Escalation Description: A vulnerability in Nessus Network Monitor versions 5.11.0, 5.11.1, and 5.12.0 for Windows could allow an authenticated local attacker to execute arbitrary code by copying user-supplied files to a specially constructed path in a specifically named user directory. The attacker needs valid credentials on the Windows system to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2020-09
CVE ID: CVE-2020-5795 State: PUBLISHED Published: 2020-11-06T14:09:38 Last Updated: 2024-08-04T08:39:25.912Z Vendors: n/a Products: TP-Link Archer A7 v5 Problem Types: UNIX Symbolic Link (Symlink) Following Description: UNIX Symbolic Link (Symlink) Following in TP-Link Archer A7(US)_V5_200721 allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a crafted USB drive into the router. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-60
CVE ID: CVE-2020-5796 State: PUBLISHED Published: 2020-11-13T19:55:44 Last Updated: 2024-08-04T08:39:25.911Z Vendors: n/a Products: Nagios XI Problem Types: Local Privilege Escalation Description: Improper preservation of permissions in Nagios XI 5.7.4 allows a local, low-privileged, authenticated user to weaken the permissions of files, resulting in low-privileged users being able to write to and execute arbitrary PHP code with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-61
CVE ID: CVE-2020-5797 State: PUBLISHED Published: 2020-11-21T05:32:37 Last Updated: 2024-08-04T08:39:25.752Z Vendors: n/a Products: TP-Link Archer C9 A1 Problem Types: UNIX Symbolic Link (Symlink) Following Description: UNIX Symbolic Link (Symlink) Following in TP-Link Archer C9(US)_V1_180125 firmware allows an unauthenticated actor, with physical access and network access, to read sensitive files and write to a limited set of files after plugging a crafted USB drive into the router. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-60
CVE ID: CVE-2020-5798 State: PUBLISHED Published: 2020-12-07T12:44:31 Last Updated: 2024-08-04T08:39:25.821Z Vendors: n/a Products: Druva inSync macOS Client Installers for v6.8.0 and prior Problem Types: Privilege Escalation Description: inSync Client installer for macOS versions v6.8.0 and prior could allow an attacker to gain privileges of a root user from a lower privileged user due to improper integrity checks and directory permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-67 - https://www.tenable.com/security/research/tra-2020-67%2Chttps://docs.druva.com/001_inSync_Cloud/Cloud/010_Release_Details/010_inSync_
enable.com/security/research/tra-2020-67%2Chttps://docs.druva.com/001_inSync_Cloud/Cloud/010_Release_Details/010_inSync_Cloud_Updates
CVE ID: CVE-2020-5799 State: PUBLISHED Published: 2020-12-07T12:40:16 Last Updated: 2024-08-04T08:39:25.912Z Vendors: n/a Products: Eat Spray Love Problem Types: Backdoor Account Description: The Eat Spray Love mobile app for both iOS and Android contains a backdoor account that, when modified, allowed privileged access to restricted functionality and to other users' data. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-65
CVE ID: CVE-2020-5800 State: PUBLISHED Published: 2020-12-07T12:40:30 Last Updated: 2024-08-04T08:39:25.918Z Vendors: n/a Products: Eat Spray Love Problem Types: Insufficient Access Controls Description: The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they would not normally have access to. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-65
CVE ID: CVE-2020-5801 State: PUBLISHED Published: 2020-12-29T15:15:32 Last Updated: 2024-08-04T08:39:26.067Z Vendors: n/a Products: Rockwell FactoryTalk Linx Problem Types: Unauthenticated Remote DoS Description: An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDManager::HandleRequest function in RnaDaSvr.dll, resulting in process termination. Observed in FactoryTalk Linx 6.11. All versions of FactoryTalk Linx are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-71
CVE ID: CVE-2020-5802 State: PUBLISHED Published: 2020-12-29T15:04:26 Last Updated: 2024-08-04T08:39:25.932Z Vendors: n/a Products: Rockwell FactoryTalk Linx Problem Types: Unauthenticated Remote Denial of Service Description: An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems message to TCP port 4241. This will cause an unhandled exception, resulting in termination of RSLinxNG.exe. Observed in FactoryTalk 6.11. All versions of FactoryTalk Linx are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-71
CVE ID: CVE-2020-5803 State: PUBLISHED Published: 2020-12-18T20:52:50 Last Updated: 2024-08-04T08:39:25.916Z Vendors: n/a Products: Marvell QConvergeConsole GUI Problem Types: Path traversal Description: Relative Path Traversal in Marvell QConvergeConsole GUI 5.5.0.74 allows a remote, authenticated attacker to delete arbitrary files on disk as SYSTEM or root. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-56
CVE ID: CVE-2020-5804 State: PUBLISHED Published: 2021-01-08T15:12:54 Last Updated: 2024-08-04T08:39:25.999Z Vendors: n/a Products: Marvell QConvergeConsole GUI Problem Types: Path Traversal Description: Marvell QConvergeConsole GUI <= 5.5.0.74 is affected by a path traversal vulnerability. The deleteEventLogFile method of the GWTTestServiceImpl class lacks proper validation of a user-supplied path prior to using it in file deletion operations. An authenticated, remote attacker can leverage this vulnerability to delete arbitrary remote files as SYSTEM or root. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2021-01
CVE ID: CVE-2020-5805 State: PUBLISHED Published: 2021-01-08T15:13:11 Last Updated: 2024-08-04T08:39:25.930Z Vendors: n/a Products: Marvell QConvergeConsole GUI Problem Types: Cleartext Storage of Sensitive Information Description: In Marvell QConvergeConsole GUI <= 5.5.0.74, credentials are stored in cleartext in tomcat-users.xml. OS-level users on the QCC host who are not authorized to use QCC may use the plaintext credentials to login to QCC. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2021-01
CVE ID: CVE-2020-5806 State: PUBLISHED Published: 2020-12-29T15:08:36 Last Updated: 2024-08-04T08:39:25.924Z Vendors: n/a Products: Rockwell FactoryTalk Linx Problem Types: Local Denial of Service Description: An attacker-controlled memory allocation size can be passed to the C++ new operator in the CServerManager::HandleBrowseLoadIconStreamRequest in messaging.dll. This can be done by sending a specially crafted message to 127.0.0.1:7153. Observed in FactoryTalk Linx 6.11. All versions of FactoryTalk Linx are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-71
CVE ID: CVE-2020-5807 State: PUBLISHED Published: 2020-12-29T15:18:35 Last Updated: 2024-08-04T08:39:25.779Z Vendors: n/a Products: Rockwell FactoryTalk Diagnostics Problem Types: Unauthenticated Remote Denial of Service Description: An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpy_s() if a local user opens FactoryTalk Diagnostics Viewer (FTDiagViewer.exe) to view the log entry. Observed in FactoryTalk Diagnostics 6.11. All versions of FactoryTalk Diagnostics are affected. Additional Analyst
ntry. Observed in FactoryTalk Diagnostics 6.11. All versions of FactoryTalk Diagnostics are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-71
CVE ID: CVE-2020-5808 State: PUBLISHED Published: 2020-12-21T17:45:49 Last Updated: 2024-08-04T08:39:25.862Z Vendors: n/a Products: Tenable.sc Problem Types: Improper Access Control Description: In certain scenarios in Tenable.sc prior to 5.17.0, a scanner could potentially be used outside the user's defined scan zone without a particular zone being specified within the Automatic Distribution configuration. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2020-11
CVE ID: CVE-2020-5809 State: PUBLISHED Published: 2020-12-30T15:18:06 Last Updated: 2024-08-04T08:39:25.908Z Vendors: n/a Products: Umbraco CMS Problem Types: Stored Cross-Site Scripting Description: A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user can inject arbitrary JavaScript code into iframes when editing content using the TinyMCE rich-text editor, as TinyMCE is configured to allow iframes by default in Umbraco CMS. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-59
CVE ID: CVE-2020-5810 State: PUBLISHED Published: 2020-12-30T15:18:02 Last Updated: 2024-08-04T08:39:25.775Z Vendors: n/a Products: Umbraco CMS Problem Types: Stored Cross-Site Scripting Description: A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user authorized to upload media can upload a malicious .svg file which act as a stored XSS payload. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-59
CVE ID: CVE-2020-5811 State: PUBLISHED Published: 2020-12-30T15:17:57 Last Updated: 2024-08-04T08:39:25.926Z Vendors: n/a Products: Umbraco CMS Problem Types: Path Traversal Description: An authenticated path traversal vulnerability exists during package installation in Umbraco CMS <= 8.9.1 or current, which could result in arbitrary files being written outside of the site home and expected paths when installing an Umbraco package. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-59 - http://packetstormsecurity.com/files/163965/Umbraco-CMS-8.9.1-Traversal-Arbitrary-File-Write.html
CVE ID: CVE-2020-5812 State: PUBLISHED Published: 2021-02-05T23:44:56 Last Updated: 2024-08-04T08:39:25.841Z Vendors: n/a Products: Tenable Nessus AMI Problem Types: Improper Certificate Validation Description: Nessus AMI versions 8.12.0 and earlier were found to either not validate, or incorrectly validate, a certificate which could allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2021-01
CVE ID: CVE-2020-5820 State: PUBLISHED Published: 2020-02-11T17:01:32 Last Updated: 2024-08-04T08:39:25.921Z Vendors: n/a Products: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE) Problem Types: Privilege Escalation Description: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user. Ad
he software application to gain elevated access to resources that are normally protected from an application or user. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1505.html
CVE ID: CVE-2020-5821 State: PUBLISHED Published: 2020-02-11T17:02:07 Last Updated: 2024-08-04T08:39:25.861Z Vendors: n/a Products: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE) Problem Types: DLL Injection Description: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to a DLL injection vulnerability, which is a type of issue whereby an individual attempts to execute their own code in place of legitimate code as a means to perform an exploit. Additional Analyst Notes: - CVE Program Container: References:
lace of legitimate code as a means to perform an exploit. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1505.html
CVE ID: CVE-2020-5822 State: PUBLISHED Published: 2020-02-11T17:04:33 Last Updated: 2024-08-04T08:39:25.924Z Vendors: n/a Products: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE) Problem Types: Privilege Escalation Description: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user. Ad
CVE ID: CVE-2020-5823 State: PUBLISHED Published: 2020-02-11T17:04:40 Last Updated: 2024-08-04T08:39:25.924Z Vendors: n/a Products: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE) Problem Types: Privilege Escalation Description: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user. Ad
CVE ID: CVE-2020-5824 State: PUBLISHED Published: 2020-02-11T17:07:04 Last Updated: 2024-08-04T08:39:25.932Z Vendors: n/a Products: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE) Problem Types: Denial of Service Description: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to a denial of service vulnerability, which is a type of issue whereby a threat actor attempts to tie up the resources of a resident application, thereby making certain functions unavailable. Additional Analyst Notes: - CVE Program Cont
es of a resident application, thereby making certain functions unavailable. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1505.html
CVE ID: CVE-2020-5825 State: PUBLISHED Published: 2020-02-11T17:07:31 Last Updated: 2024-08-04T08:39:25.922Z Vendors: n/a Products: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE) Problem Types: Arbitrary File Write Description: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to an arbitrary file write vulnerability, which is a type of issue whereby an attacker is able to overwrite existing files on the resident system without proper privileges. Additional Analyst Notes: - CVE Program Container: Reference
ing files on the resident system without proper privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1505.html