Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-29562 State: PUBLISHED Published: 2020-12-04T06:48:23.000Z Last Updated: 2025-06-09T15:14:25.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=26923 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TVCUNLQ3HXGS4VPUQKWTJGRAW2KTFGXS/ - ht
edoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TVCUNLQ3HXGS4VPUQKWTJGRAW2KTFGXS/ - https://security.netapp.com/advisory/ntap-20210122-0004/ - https://security.gentoo.org/glsa/202101-20 - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE ID: CVE-2020-29563 State: PUBLISHED Published: 2020-12-11T23:50:01 Last Updated: 2024-08-04T16:55:10.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118. A NAS Admin authentication bypass vulnerability could allow an unauthenticated user to gain access to the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.westerndigital.com/support/productsecurity/wdc-20010-my-cloud-os5-firmware-5-07-118 - https://www.zerodayinitiative.com/advisories/ZDI-20-1446/
CVE ID: CVE-2020-29564 State: PUBLISHED Published: 2020-12-08T15:26:59 Last Updated: 2024-08-04T16:55:10.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official Consul Docker images 0.7.1 through 1.4.2 contain a blank password for a root user. System using the Consul Docker container deployed by affected versions of the Docker image may allow a remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-29564
CVE ID: CVE-2020-29565 State: PUBLISHED Published: 2020-12-04T07:06:03 Last Updated: 2024-08-04T16:55:10.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allow someone to supply a malicious URL in Horizon that can cause an automatic redirect to the provided malicious URL. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/horizon/+bug/1865026 - https://review.opendev.org/c/openstack/horizon/+/758841/ - https://review.opendev.org/c/openstack/hor
zon/+bug/1865026 - https://review.opendev.org/c/openstack/horizon/+/758841/ - https://review.opendev.org/c/openstack/horizon/+/758843/ - https://security.openstack.org/ossa/OSSA-2020-008.html - http://www.openwall.com/lists/oss-security/2020/12/08/2 - https://www.debian.org/security/2020/dsa-4820
CVE ID: CVE-2020-29566 State: PUBLISHED Published: 2020-12-15T16:49:11 Last Updated: 2024-08-04T16:55:10.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.14.x. When they require assistance from the device model, x86 HVM guests must be temporarily de-scheduled. The device model will signal Xen when it has completed its operation, via an event channel, so that the relevant vCPU is rescheduled. If the device model were to signal Xen without having actually completed the operation, the de-schedule / re-schedule cycle would repeat. If, in addition, Xen is resignalled very quickly, the re-schedule may occur before the de-schedule was fully co
repeat. If, in addition, Xen is resignalled very quickly, the re-schedule may occur before the de-schedule was fully complete, triggering a shortcut. This potentially repeating process uses ordinary recursive function calls, and thus could result in a stack overflow. A malicious or buggy stubdomain serving a HVM guest can cause Xen to crash, resulting in a Denial of Service (DoS) to the entire host. Only x86 systems are affected. Arm systems are not affected. Only x86 stubdomains serving HVM guests can exploit the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-348.html - https://www.debian.org/security/2020/dsa-481
ainer: References: - https://xenbits.xenproject.org/xsa/advisory-348.html - https://www.debian.org/security/2020/dsa-4812 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OBLV6L6Q24PPQ2CRFXDX4Q76KU776GKI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2C6M6S3CIMEBACH6O7V4H2VDANMO6TVA/ - https://security.gentoo.org/glsa/202107-30
CVE ID: CVE-2020-29567 State: PUBLISHED Published: 2020-12-15T16:50:37 Last Updated: 2024-08-04T16:55:10.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen 4.14.x. When moving IRQs between CPUs to distribute the load of IRQ handling, IRQ vectors are dynamically allocated and de-allocated on the relevant CPUs. De-allocation has to happen when certain constraints are met. If these conditions are not met when first checked, the checking CPU may send an interrupt to itself, in the expectation that this IRQ will be delivered only after the condition preventing the cleanup has cleared. For two specific IRQ vectors, this expectation was violated, resultin
the condition preventing the cleanup has cleared. For two specific IRQ vectors, this expectation was violated, resulting in a continuous stream of self-interrupts, which renders the CPU effectively unusable. A domain with a passed through PCI device can cause lockup of a physical CPU, resulting in a Denial of Service (DoS) to the entire host. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only guests with physical PCI devices passed through to them can exploit the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-356.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora
its.xenproject.org/xsa/advisory-356.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OBLV6L6Q24PPQ2CRFXDX4Q76KU776GKI/ - https://security.gentoo.org/glsa/202107-30
CVE ID: CVE-2020-29568 State: PUBLISHED Published: 2020-12-15T16:52:04 Last Updated: 2024-08-04T16:55:10.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.14.x. Some OSes (such as Linux, FreeBSD, and NetBSD) are processing watch events using a single thread. If the events are received faster than the thread is able to handle, they will get queued. As the queue is unbounded, a guest may be able to trigger an OOM in the backend. All systems with a FreeBSD, Linux, or NetBSD (any version) dom0 are vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-349.html - https://www.de
lyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-349.html - https://www.debian.org/security/2021/dsa-4843 - https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html - https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html - https://security.gentoo.org/glsa/202107-30
CVE ID: CVE-2020-29569 State: PUBLISHED Published: 2020-12-15T17:00:36 Last Updated: 2024-08-04T16:55:10.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thread handler to reset ring->xenblkd to NULL when stopped. However, the handler may not have time to run if the frontend quickly toggles between the states connect and disconnect. As a consequence, the block backend may re-use a pointer after it was freed. A misbehaving guest can trigger a dom0 crash by continuously connecting / disconnecting a block frontend. Privilege escalation
having guest can trigger a dom0 crash by continuously connecting / disconnecting a block frontend. Privilege escalation and information leaks cannot be ruled out. This only affects systems with a Linux blkback. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-350.html - https://www.debian.org/security/2021/dsa-4843 - https://security.netapp.com/advisory/ntap-20210205-0001/ - https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html - https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html - https://security.gentoo.org/glsa/202107-30
CVE ID: CVE-2020-29570 State: PUBLISHED Published: 2020-12-15T17:01:36 Last Updated: 2024-08-04T16:55:10.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.14.x. Recording of the per-vCPU control block mapping maintained by Xen and that of pointers into the control block is reversed. The consumer assumes, seeing the former initialized, that the latter are also ready for use. Malicious or buggy guest kernels can mount a Denial of Service (DoS) attack affecting the entire system. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-358.html - https://www.debian.org/security/2020/dsa-48
tainer: References: - https://xenbits.xenproject.org/xsa/advisory-358.html - https://www.debian.org/security/2020/dsa-4812 - http://www.openwall.com/lists/oss-security/2020/12/16/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OBLV6L6Q24PPQ2CRFXDX4Q76KU776GKI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2C6M6S3CIMEBACH6O7V4H2VDANMO6TVA/ - https://security.gentoo.org/glsa/202107-30
CVE ID: CVE-2020-29571 State: PUBLISHED Published: 2020-12-15T17:02:42 Last Updated: 2024-08-04T16:55:10.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.14.x. A bounds check common to most operation time functions specific to FIFO event channels depends on the CPU observing consistent state. While the producer side uses appropriately ordered writes, the consumer side isn't protected against re-ordered reads, and may hence end up de-referencing a NULL pointer. Malicious or buggy guest kernels can mount a Denial of Service (DoS) attack affecting the entire system. Only Arm systems may be vulnerable. Whether a system is vulnerable depends
ice (DoS) attack affecting the entire system. Only Arm systems may be vulnerable. Whether a system is vulnerable depends on the specific CPU. x86 systems are not vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-359.html - https://www.debian.org/security/2020/dsa-4812 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OBLV6L6Q24PPQ2CRFXDX4Q76KU776GKI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2C6M6S3CIMEBACH6O7V4H2VDANMO6TVA/ - https://security.gentoo.org/glsa/202107-30
CVE ID: CVE-2020-29572 State: PUBLISHED Published: 2020-12-05T23:02:48 Last Updated: 2024-08-04T16:55:10.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/View/Elements/genericElements/SingleViews/Fields/genericField.ctp in MISP 2.4.135 has XSS via the authkey comment field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/0bfc0bf38a7758b27c5c446fec5e3b905e5a54ab
CVE ID: CVE-2020-29573 State: PUBLISHED Published: 2020-12-05T23:18:58 Last Updated: 2024-08-04T16:55:10.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern, as seen when passing a \x00\x04\x00\x00\x00\x00\x00\x00\x00\x04 value to sprintf. NOTE: the issue does not affect glibc by default in 2016 or later (i.e., 2.23 or later) because of commits made in 2015 for inlining of C99 math functions through use of GCC built-ins. In other words, the refe
ecause of commits made in 2015 for inlining of C99 math functions through use of GCC built-ins. In other words, the reference to 2.23 is intentional despite the mention of "Fixed for glibc 2.33" in the 26649 reference. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=26649 - https://sourceware.org/pipermail/libc-alpha/2020-September/117779.html - https://security.netapp.com/advisory/ntap-20210122-0004/ - https://security.gentoo.org/glsa/202101-20
CVE ID: CVE-2020-29574 State: PUBLISHED Published: 2020-12-11T16:03:47.000Z Last Updated: 2025-10-21T23:35:31.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cyberoam.com/ngfw.html - https://www.bleepingcomputer.com/news/security/sophos-fixes-sql-injection-vulnerability-in-their-cyberoam-os/
CVE ID: CVE-2020-29575 State: PUBLISHED Published: 2020-12-08T15:16:42 Last Updated: 2024-08-04T16:55:10.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official elixir Docker images before 1.8.0-alpine (Alpine specific) contain a blank password for a root user. Systems using the elixir Linux Docker container deployed by affected versions of the Docker image may allow a remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-29575
CVE ID: CVE-2020-29576 State: PUBLISHED Published: 2020-12-08T15:28:22 Last Updated: 2024-08-04T16:55:10.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official eggdrop Docker images before 1.8.4rc2 contain a blank password for a root user. Systems using the Eggdrop Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-29576
CVE ID: CVE-2020-29577 State: PUBLISHED Published: 2020-12-08T15:15:15 Last Updated: 2024-08-04T16:55:10.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official znc docker images before 1.7.1-slim contain a blank password for a root user. Systems using the znc docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-29577
CVE ID: CVE-2020-29578 State: PUBLISHED Published: 2020-12-08T15:02:12 Last Updated: 2024-08-04T16:55:10.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official piwik Docker images before fpm-alpine (Alpine specific) contain a blank password for a root user. Systems using the Piwik Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-29578
CVE ID: CVE-2020-29579 State: PUBLISHED Published: 2020-12-08T15:05:21 Last Updated: 2024-08-04T16:55:10.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official Express Gateway Docker images before 1.14.0 contain a blank password for a root user. Systems using the Express Gateway Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-29579
CVE ID: CVE-2020-29580 State: PUBLISHED Published: 2020-12-08T15:13:21 Last Updated: 2024-08-04T16:55:10.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official storm Docker images before 1.2.1 contain a blank password for a root user. Systems using the Storm Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-29580
CVE ID: CVE-2020-29581 State: PUBLISHED Published: 2020-12-08T15:07:40 Last Updated: 2024-08-04T16:55:10.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official spiped docker images before 1.5-alpine contain a blank password for a root user. Systems using the spiped docker container deployed by affected versions of the docker image may allow an remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-29581
CVE ID: CVE-2020-29582 State: PUBLISHED Published: 2021-02-03T15:20:28 Last Updated: 2024-08-04T16:55:10.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe%40%3Cusers.kafka.apache.org%3E - https://www.oracle.com//security-alerts/cpujul2021.html - https://blog.jetbrains.com/blog/2021/02/03/je
.apache.org%3E - https://www.oracle.com//security-alerts/cpujul2021.html - https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/ - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2020-29583 State: PUBLISHED Published: 2020-12-22T00:00:00.000Z Last Updated: 2025-10-21T23:35:31.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account can be found in cleartext in the firmware. This account can be used by someone to login to the ssh server or web interface with admin privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/support/security_advisories.shtml - http://ftp.zyxel.com/USG40/firmware/USG40_4.60%28AALA.1%29C0_2.pdf - https://businessfo
port/security_advisories.shtml - http://ftp.zyxel.com/USG40/firmware/USG40_4.60%28AALA.1%29C0_2.pdf - https://businessforum.zyxel.com/discussion/5254/whats-new-for-zld4-60-patch-1-available-on-dec-15 - https://businessforum.zyxel.com/discussion/5252/zld-v4-60-revoke-and-wk48-firmware-release - https://www.eyecontrol.nl/blog/undocumented-user-account-in-zyxel-products.html - https://www.zyxel.com/support/CVE-2020-29583.shtml - https://www.secpod.com/blog/a-secret-zyxel-firewall-and-ap-controllers-could-allow-for-administrative-access-cve-2020-29583/
CVE ID: CVE-2020-29587 State: PUBLISHED Published: 2021-01-14T15:07:16 Last Updated: 2024-08-04T16:55:10.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: SimplCommerce 1.0.0-rc uses the Bootbox.js library, which allows creation of programmatic dialog boxes using Bootstrap modals. The Bootbox.js library intentionally does not perform any sanitization of user input, which results in a DOM XSS, because it uses the jQuery .html() function to directly append the payload to a dialog. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/simplcommerce/SimplCommerce/issues/969
CVE ID: CVE-2020-29589 State: REJECTED Published: 2020-12-11T15:02:26 Last Updated: 2021-01-04T17:24:09 Description: No description available.
CVE ID: CVE-2020-29590 State: REJECTED Published: 2020-12-11T14:58:08 Last Updated: 2020-12-22T14:18:22 Description: No description available.
CVE ID: CVE-2020-29591 State: PUBLISHED Published: 2020-12-11T14:27:18 Last Updated: 2024-08-04T16:55:10.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Versions of the Official registry Docker images through 2.7.0 contain a blank password for the root user. Systems deployed using affected versions of the registry container may allow a remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://hub.docker.com/_/registry - https://github.com/docker/distribution-library-image - https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-29591
CVE ID: CVE-2020-29592 State: PUBLISHED Published: 2021-04-14T14:23:12 Last Updated: 2024-08-04T16:55:10.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Orchard before 1.10. A broken access control issue in Orchard components that use the TinyMCE HTML editor's file upload allows an attacker to upload dangerous executables that bypass the file types allowed (regardless of the file types allowed list in Media settings). Additional Analyst Notes: - CVE Program Container: References: - https://burninatorsec.blogspot.com/2021/04/cve-2020-29592-and-cve-2020-29593.html - https://github.com/OrchardCMS/Orchard/releases
CVE ID: CVE-2020-29593 State: PUBLISHED Published: 2021-04-14T14:25:41 Last Updated: 2024-08-04T16:55:10.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Orchard before 1.10. The Media Settings Allowed File Types list field allows an attacker to add a XSS payload that will execute when users attempt to upload a disallowed file type, causing the error to display. Additional Analyst Notes: - CVE Program Container: References: - https://burninatorsec.blogspot.com/2021/04/cve-2020-29592-and-cve-2020-29593.html - https://github.com/OrchardCMS/Orchard/releases
CVE ID: CVE-2020-29594 State: PUBLISHED Published: 2020-12-30T06:17:19 Last Updated: 2024-08-04T16:55:10.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rocket.Chat before 0.74.4, 1.x before 1.3.4, 2.x before 2.4.13, 3.x before 3.7.3, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 mishandles SAML login. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RocketChat/Rocket.Chat/releases/tag/3.9.1 - https://github.com/RocketChat/Rocket.Chat/compare/3.8.2...3.8.3
CVE ID: CVE-2020-29595 State: PUBLISHED Published: 2020-12-07T18:49:59 Last Updated: 2024-08-04T16:55:10.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: PlugIns\IDE_ACDStd.apl in ACDSee Photo Studio Studio Professional 2021 14.0 Build 1705 has a User Mode Write AV starting at IDE_ACDStd!JPEGTransW+0x00000000000031aa. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/secluck/pentest/blob/main/000078.md
CVE ID: CVE-2020-29596 State: PUBLISHED Published: 2020-12-21T21:36:06 Last Updated: 2024-08-04T16:55:10.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: MiniWeb HTTP server 0.8.19 allows remote attackers to cause a denial of service (daemon crash) via a long name for the first parameter in a POST request. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/miniweb/files/miniweb/0.8/ - https://packetstormsecurity.com/files/160470/MiniWeb-HTTP-Server-0.8.19-Buffer-Overflow.html - https://www.exploit-db.com/exploits/49247 - https://securityforeveryone.com/blog/miniweb-http-server-vulnerability-0-day-cve-2020-29596