Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
uce a user to crafted web page, causing damage such as malicious code infection. Additional Analyst Notes: - CVE Program Container: References: - http://www.handysoft.co.kr/en/ - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35551
CVE ID: CVE-2020-7811 State: PUBLISHED Published: 2020-10-12T13:16:49 Last Updated: 2024-08-04T09:41:01.898Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Electronics Products: Samsung Update Problem Types: CWE-502 Description: Samsung Update 3.0.2.0 ~ 3.0.32.0 has a vulnerability that allows privilege escalation as commands crafted by attacker are executed while the engine deserializes the data received during inter-process communication Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35708
CVE ID: CVE-2020-7812 State: PUBLISHED Published: 2020-05-28T13:12:54 Last Updated: 2024-08-04T09:41:01.885Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Kaoni Products: ezHTTPTrans Problem Types: CWE-494 Description: Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution by rebooting the victim’s PC. Additional Analyst Notes: - CVE Program Container: References: - http://www.kaoni.com/ - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=3
tainer: References: - http://www.kaoni.com/ - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35428
CVE ID: CVE-2020-7813 State: PUBLISHED Published: 2020-05-22T13:05:13 Last Updated: 2024-08-04T09:41:01.888Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Kaoni Products: ezHTTPTrans Problem Types: CWE-494 Description: Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download and execute arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.kaoni.com/ - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35428
CVE ID: CVE-2020-7814 State: PUBLISHED Published: 2020-07-10T12:58:14.660303Z Last Updated: 2024-09-16T19:35:05.058Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: RAONWIZ Products: RAON KUpload Problem Types: File download & execution Description: RAONWIZ v2018.0.2.50 and eariler versions contains a vulnerability that could allow remote files to be downloaded and excuted by lack of validation to file extension, witch can used as remote-code-excution attacks by hackers File download & execution vulnerability in ____COMPONENT____ of RAONWIZ RAON KUpload allows ____ATTACKER/ATTACK____ to cause ____IMPACT____. This issue affects: RAONWIZ RAON KUpload 2018.0.2.50
AON KUpload allows ____ATTACKER/ATTACK____ to cause ____IMPACT____. This issue affects: RAONWIZ RAON KUpload 2018.0.2.50 versions prior to 2018.0.2.51 on Windows. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35495
CVE ID: CVE-2020-7815 State: PUBLISHED Published: 2020-07-10T13:05:10.010448Z Last Updated: 2024-09-17T02:57:22.368Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: TOBESOFT Products: XPLATFORM Problem Types: File download Description: XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the arguments to the vulnerable method. this can be leveraged for code execution. File download vulnerability in ____COMPONENT____ of TOBESOFT XPLATFORM allows ____ATTACKER/ATTACK____ to cause ____IMPACT____. This issue affects: TOBESOFT XPLATFORM 9.2.250 versions prior to 9.2.260 on Windows. Additional Analy
se ____IMPACT____. This issue affects: TOBESOFT XPLATFORM 9.2.250 versions prior to 9.2.260 on Windows. Additional Analyst Notes: - CVE Program Container: References: - http://support.tobesoft.co.kr/Support/index.html - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35496
CVE ID: CVE-2020-7816 State: PUBLISHED Published: 2020-06-30T13:12:46.478176Z Last Updated: 2024-09-17T04:04:55.107Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: HUMAN TALK Products: DaView Indy, DaVA+, DaOffice Problem Types: Stack-based Buffer Overflow Description: A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker to cause an arbitrary code execution on an affected device.nThe vulnerability is due to a stack overflow read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device. Additional Analyst Notes: - CVE Program Container:
s vulnerability by sending a crafted PDF file to an affected device. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35483
CVE ID: CVE-2020-7817 State: PUBLISHED Published: 2020-08-06T16:57:29 Last Updated: 2024-08-04T09:41:01.850Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: ActiveSoft Products: MyBrowserPlus Problem Types: CWE-494 Description: MyBrowserPlus downloads the files needed to run the program through the setup file (Setup.inf). At this time, there is a vulnerability in downloading arbitrary files due to insufficient integrity verification of the files. Additional Analyst Notes: - CVE Program Container: References: - http://www.activesoft.co.kr/demo.html - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35549
CVE ID: CVE-2020-7818 State: PUBLISHED Published: 2020-07-17T21:05:35.650258Z Last Updated: 2024-09-17T03:23:12.174Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: HumanTolk Co.Ltd Products: DaviewIndy Problem Types: CWE-20 Description: DaviewIndy 8.98.9 and earlier has a Heap-based overflow vulnerability, triggered when the user opens a malformed PDF file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.hmtalk.com/ - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35521
CVE ID: CVE-2020-7819 State: PUBLISHED Published: 2021-09-07T14:44:52 Last Updated: 2024-08-04T09:41:01.939Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: nTrackSystem Products: nTracker USB Enterprise Problem Types: CWE-200 Description: A SQL-Injection vulnerability in the nTracker USB Enterprise(secure USB management solution) allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36223
CVE ID: CVE-2020-7820 State: PUBLISHED Published: 2020-07-02T12:40:28 Last Updated: 2024-08-04T09:41:01.879Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Tobesoft Products: NEXACRO14/17 ExCommonApiV13 Problem Types: CWE-20 Description: Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by setting the arguments to the vulnerable API. This can be leveraged for code execution by rebooting the victim’s PC Additional Analyst Notes: - CVE Program Container: References: - http://support.tobesoft.co.kr/Support/index.html - https://www.krcert.or.kr/krcert/secNoticeView.do?bul
r: References: - http://support.tobesoft.co.kr/Support/index.html - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35491
CVE ID: CVE-2020-7821 State: PUBLISHED Published: 2020-07-02T12:37:35 Last Updated: 2024-08-04T09:41:01.859Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Tobesoft Products: NEXACRO14/17 ExCommonApiV13 Problem Types: CWE-20 Description: Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by modifying the value of registry path. This can be leveraged for code execution by rebooting the victim’s PC Additional Analyst Notes: - CVE Program Container: References: - http://support.tobesoft.co.kr/Support/index.html - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_w
rences: - http://support.tobesoft.co.kr/Support/index.html - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35491
CVE ID: CVE-2020-7822 State: PUBLISHED Published: 2020-08-04T14:14:04.972975Z Last Updated: 2024-09-16T16:49:02.141Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: HumanTalk Co,Ltd Products: DaviewIndy Problem Types: CWE-20 Description: DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed image file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.hmtalk.com/ - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35545
CVE ID: CVE-2020-7823 State: PUBLISHED Published: 2020-08-04T14:14:31.146971Z Last Updated: 2024-09-17T02:57:45.915Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: HumanTalk Co,Ltd Products: DaviewIndy Problem Types: CWE-20 Description: DaviewIndy has a Memory corruption vulnerability, triggered when the user opens a malformed image file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.hmtalk.com/ - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35545
CVE ID: CVE-2020-7824 State: PUBLISHED Published: 2020-08-25T18:41:25.867012Z Last Updated: 2024-09-17T03:22:55.023Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Ericsson-LG Products: iPCES UCM Problem Types: CWE-267 Description: A vulnerability in the web-based management interface of iPECS could allow an authenticated, remote attacker to get administrator permission. The vulnerability is due to insecure permission when handling session cookies. An attacker could exploit this vulnerability by modification the cookie value to an affected device. A successful exploit could allow the attacker access to sensitive device information, which includes configurat
device. A successful exploit could allow the attacker access to sensitive device information, which includes configuration files. Additional Analyst Notes: - CVE Program Container: References: - http://www.ericssonlg.co.kr/ - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35572
CVE ID: CVE-2020-7825 State: PUBLISHED Published: 2020-07-17T15:13:14.656747Z Last Updated: 2024-09-17T01:41:26.008Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: TOBESOFT Products: MiPlatform 320, 320U, 330, 330U Problem Types: CWE-78 Description: A vulnerability exists that could allow the execution of operating system commands on systems running MiPlatform 2019.05.16 and earlier. An attacker could execute arbitrary remote command by sending parameters to WinExec function in ExtCommandApi.dll module of MiPlatform. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35509
CVE ID: CVE-2020-7826 State: PUBLISHED Published: 2020-07-17T15:01:59.356397Z Last Updated: 2024-09-17T04:04:52.364Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bflysoft Products: EyeSurfer BflyInstallerX.ocx Problem Types: CWE-494 Description: EyeSurfer BflyInstallerX.ocx v1.0.0.16 and earlier versions contain a vulnerability that could allow remote files to be download by setting the arguments to the vulnerable method. This can be leveraged for code execution. When the vulnerable method is called, they fail to properly check the parameters that are passed to it. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcer
ers that are passed to it. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35512
CVE ID: CVE-2020-7827 State: PUBLISHED Published: 2020-07-30T13:22:26 Last Updated: 2024-08-04T09:41:01.874Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: HumanTalk Products: DavieIndy Problem Types: CWE-416 Description: DaviewIndy 8.98.7 and earlier version contain Use-After-Free vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35539
CVE ID: CVE-2020-7828 State: PUBLISHED Published: 2020-07-30T13:30:41 Last Updated: 2024-08-04T09:41:01.881Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: HumanTalk Products: DavieIndy Problem Types: CWE-122 Description: DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35539
CVE ID: CVE-2020-7829 State: PUBLISHED Published: 2020-07-30T13:27:39 Last Updated: 2024-08-04T09:41:01.879Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: HumanTalk Products: DavieIndy Problem Types: CWE-122 Description: DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35539
CVE ID: CVE-2020-7830 State: PUBLISHED Published: 2020-09-02T19:10:09.309227Z Last Updated: 2024-09-16T18:13:01.375Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: RAONWIZ Products: RAON KUpload Problem Types: File download Description: RAONWIZ v2018.0.2.50 and earlier versions contains a vulnerability that could allow remote files to be downloaded by lack of validation. Vulnerabilities in downloading with Kupload agent allow files to be downloaded to arbitrary paths due to insufficient verification of extensions and download paths. This issue affects: RAONWIZ RAON KUpload 2018.0.2.50 versions and earlier. Additional Analyst Notes: - CVE Program Container: Re
ue affects: RAONWIZ RAON KUpload 2018.0.2.50 versions and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35582
CVE ID: CVE-2020-7831 State: PUBLISHED Published: 2020-08-24T15:00:55.627299Z Last Updated: 2024-09-17T02:12:07.149Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: INOGARD Products: Ebiz4u CViewer Object AxECM.dll Problem Types: CWE-494 Description: A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=
Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35559
CVE ID: CVE-2020-7832 State: PUBLISHED Published: 2021-09-07T14:47:21 Last Updated: 2024-08-04T09:41:01.861Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: RAONWIZ Products: DEXT5 Upload Problem Types: CWE-20 Description: A vulnerability (improper input validation) in the DEXT5 Upload solution allows an unauthenticated attacker to download and execute an arbitrary file via AddUploadFile, SetSelectItem, DoOpenFile function.(CVE-2020-7832) Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36231
CVE ID: CVE-2020-7836 State: PUBLISHED Published: 2021-02-24T16:35:43.251218Z Last Updated: 2024-09-17T03:28:29.004Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: VOICEYE Products: WSActiveBridgeES Problem Types: CWE-121 Description: VOICEYE WSActiveBridgeES versions prior to 2.1.0.3 contains a stack-based buffer overflow vulnerability caused by improper bound checking parameter given by attack. It finally leads to a stack-based buffer overflow via access to crafted web page. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35922
CVE ID: CVE-2020-7837 State: PUBLISHED Published: 2020-12-16T16:09:34.379062Z Last Updated: 2024-09-17T03:08:26.838Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Infraware Products: ML Report Problem Types: CWE-121 Description: An issue was discovered in ML Report Program. There is a stack-based buffer overflow in function sub_41EAF0 at MLReportDeamon.exe. The function will call vsprintf without checking the length of strings in parameters given by attacker. And it finally leads to a stack-based buffer overflow via access to crafted web page. This issue affects: Infraware ML Report 2.19.312.0000. Additional Analyst Notes: - CVE Program Container: References
ge. This issue affects: Infraware ML Report 2.19.312.0000. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35849
CVE ID: CVE-2020-7838 State: PUBLISHED Published: 2020-12-18T00:04:31 Last Updated: 2024-08-04T09:41:01.896Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Smilegate Products: STOVE Client Problem Types: CWE-20 Description: A arbitrary code execution vulnerability exists in the way that the Stove client improperly validates input value. An attacker could execute arbitrary code when the user access to crafted web page. This issue affects: Smilegate STOVE Client 0.0.4.72. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35851
CVE ID: CVE-2020-7839 State: PUBLISHED Published: 2021-03-24T16:30:23 Last Updated: 2024-08-04T09:41:01.872Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: MarkAny Products: MaEPSBroker Problem Types: CWE-20 Description: In MaEPSBroker 2.5.0.31 and prior, a command injection vulnerability caused by improper input validation checks when parsing brokerCommand parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.markany.com/ - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35946
CVE ID: CVE-2020-7841 State: PUBLISHED Published: 2020-11-17T13:04:12 Last Updated: 2024-08-04T09:41:01.890Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: TOBESOFT Products: XPLATFORM XPlatformLib922.dll Problem Types: CWE-20 Description: Improper input validation vulnerability exists in TOBESOFT XPLATFORM which could cause arbitrary .hta file execution when the command string is begun with http://, https://, mailto:// Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35789
CVE ID: CVE-2020-7842 State: PUBLISHED Published: 2020-11-20T15:30:23 Last Updated: 2024-08-04T09:41:01.879Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Netis Korea Products: D'live set-top box AP(WF2429TB) Problem Types: CWE-20 Description: Improper Input validation vulnerability exists in Netis Korea D'live AP which could cause arbitrary command injection and execution when the time setting (using ntpServerlp1 parameter) for the users. This affects D'live set-top box AP(WF2429TB) v1.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35797
CVE ID: CVE-2020-7845 State: PUBLISHED Published: 2020-12-27T01:26:36 Last Updated: 2024-08-04T09:41:01.866Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Jiransecurity Products: Spamsniper Problem Types: CWE-121 Description: Spamsniper 5.0 ~ 5.2.7 contain a stack-based buffer overflow vulnerability caused by improper boundary checks when parsing MAIL FROM command. It leads remote attacker to execute arbitrary code via crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.jiransecurity.com/ - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35855
CVE ID: CVE-2020-7846 State: PUBLISHED Published: 2021-02-24T15:46:51 Last Updated: 2024-08-04T09:41:01.885Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Cnesty Products: Helpcom Problem Types: CWE-321 Description: Helpcom before v10.0 contains a file download and execution vulnerability caused by storing hardcoded cryptographic key. It finally leads to a file download and execution via access to crafted web page. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35919
CVE ID: CVE-2020-7847 State: PUBLISHED Published: 2021-02-23T15:39:06 Last Updated: 2024-08-04T09:41:01.870Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: EFM Networks Products: ipTIME NAS Problem Types: CWE-434 Description: The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution. This issue affects: pTIME NAS 1.4.36. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35921
CVE ID: CVE-2020-7848 State: PUBLISHED Published: 2021-02-17T13:29:52 Last Updated: 2024-08-04T09:41:01.870Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: EFM networks & multimedia Products: ipTIME C200 IP Camera Problem Types: CWE-20 Description: The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploit this vulnerability, an attacker can send a GET request that executes arbitrary OS commands via cookie value. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35905
CVE ID: CVE-2020-7849 State: PUBLISHED Published: 2021-02-17T13:25:31 Last Updated: 2024-08-04T09:41:01.891Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: uPrism.io Products: CURIX 7.0 Agent Problem Types: CWE-20 Description: A vulnerability of uPrism.io CURIX(Video conferecing solution) could allow an unauthenticated attacker to execute arbitrary code. This vulnerability is due to insufficient input(server domain) validation. An attacker could exploit this vulnerability through crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35903