Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-22176 State: PUBLISHED Published: 2021-06-22T14:19:48 Last Updated: 2024-08-04T14:51:10.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Hospital Management System in PHP v4.0 has a sensitive information disclosure vulnerability in multiple areas. Remote unauthenticated users can exploit the vulnerability to obtain user sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itodaro/PHPGurukul_Hospital_Management_System4.0_cve
CVE ID: CVE-2020-22181 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T20:00:16.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross site scripting (XSS) vulnerability was discovered on Samsung sww-3400rw Router devices via the m2 parameter of the sess-bin/command.cgi Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://github.com/gusrmsdlrh/Vulner/blob/master/Sww-3400rw.md
CVE ID: CVE-2020-22198 State: PUBLISHED Published: 2021-06-16T15:21:27 Last Updated: 2024-08-04T14:51:10.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to member/ajax_membergroup.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blindkey/DedeCMSv5/issues/1 - http://www.hackdig.com/?02/hack-8391.htm
CVE ID: CVE-2020-22199 State: PUBLISHED Published: 2021-06-16T16:19:09 Last Updated: 2024-08-04T14:51:10.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in phpCMS 2007 SP6 build 0805 via the digg_mod parameter to digg_add.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blindkey/cve_like/issues/1
CVE ID: CVE-2020-22200 State: PUBLISHED Published: 2021-06-16T16:30:28 Last Updated: 2024-08-04T14:51:09.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in phpCMS 9.1.13 via the q parameter to public_get_suggest_keyword. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blindkey/cve_like/issues/2
CVE ID: CVE-2020-22201 State: PUBLISHED Published: 2021-06-16T16:50:50 Last Updated: 2024-08-04T14:51:10.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpCMS 2008 sp4 allowas remote malicious users to execute arbitrary php commands via the pagesize parameter to yp/product.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blindkey/cve_like/issues/4 - https://cwe.mitre.org/data/definitions/95.html
CVE ID: CVE-2020-22203 State: PUBLISHED Published: 2021-06-16T17:05:09 Last Updated: 2024-08-04T14:51:10.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blindkey/cve_like/issues/6
CVE ID: CVE-2020-22204 State: PUBLISHED Published: 2021-06-16T17:13:03 Last Updated: 2024-08-04T14:51:10.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in ECShop 2.7.6 via the goods_number parameter to flow.php. . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blindkey/cve_like/issues/7
CVE ID: CVE-2020-22205 State: PUBLISHED Published: 2021-06-16T17:18:27 Last Updated: 2024-08-04T14:51:10.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in ECShop 3.0 via the id parameter to admin/shophelp.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blindkey/cve_like/issues/8
CVE ID: CVE-2020-22206 State: PUBLISHED Published: 2021-06-16T17:22:36 Last Updated: 2024-08-04T14:51:10.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in ECShop 3.0 via the aid parameter to admin/affiliate_ck.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blindkey/cve_like/issues/9
CVE ID: CVE-2020-22208 State: PUBLISHED Published: 2021-06-16T17:42:16 Last Updated: 2024-08-04T14:51:10.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajax_street.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blindkey/cve_like/issues/10
CVE ID: CVE-2020-22209 State: PUBLISHED Published: 2021-06-16T17:48:05 Last Updated: 2024-08-04T14:51:10.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajax_common.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blindkey/cve_like/issues/12
CVE ID: CVE-2020-22210 State: PUBLISHED Published: 2021-06-16T17:51:49 Last Updated: 2024-08-04T14:51:10.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in 74cms 3.2.0 via the x parameter to ajax_officebuilding.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blindkey/cve_like/issues/11
CVE ID: CVE-2020-22211 State: PUBLISHED Published: 2021-06-16T17:56:37 Last Updated: 2024-08-04T14:51:10.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajax_street.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blindkey/cve_like/issues/13
CVE ID: CVE-2020-22212 State: PUBLISHED Published: 2021-06-16T17:59:47 Last Updated: 2024-08-04T14:51:10.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in 74cms 3.2.0 via the id parameter to wap/wap-company-show.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blindkey/cve_like/issues/14
CVE ID: CVE-2020-22217 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T19:59:30.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/c-ares/c-ares/issues/333 - https://lists.debian.org/debian-lts-announce/2023/09/msg00014.html
CVE ID: CVE-2020-22218 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T18:09:37.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libssh2/libssh2/pull/476 - https://lists.debian.org/debian-lts-announce/2023/09/msg00006.html - https://security.netapp.com/advisory/ntap-20231006-0002/
CVE ID: CVE-2020-22219 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T18:08:04.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xiph/flac/issues/215 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZD2AJTU4PCJQP7HPTS2L2ELJWBASCRGD/ - https://www.debian.org/security/2023/dsa-5500 - https://lists.debian.org/debian-lts-announce/2023/09/msg000
JWBASCRGD/ - https://www.debian.org/security/2023/dsa-5500 - https://lists.debian.org/debian-lts-announce/2023/09/msg00028.html
CVE ID: CVE-2020-22222 State: PUBLISHED Published: 2021-11-05T22:46:01 Last Updated: 2024-08-04T14:51:10.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the pjActionLoadCss function. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/cZFwMb5F
CVE ID: CVE-2020-22223 State: PUBLISHED Published: 2021-11-05T22:46:02 Last Updated: 2024-08-04T14:51:10.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoad function. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/cZFwMb5F
CVE ID: CVE-2020-22224 State: PUBLISHED Published: 2021-11-05T22:46:03 Last Updated: 2024-08-04T14:51:10.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the pjActionPreview function. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/cZFwMb5F
CVE ID: CVE-2020-22225 State: PUBLISHED Published: 2021-11-05T22:46:04 Last Updated: 2024-08-04T14:51:10.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoadForm function. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/cZFwMb5F
CVE ID: CVE-2020-22226 State: PUBLISHED Published: 2021-11-05T22:46:07 Last Updated: 2024-08-04T14:51:10.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionSetAmount function. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/cZFwMb5F
CVE ID: CVE-2020-22249 State: PUBLISHED Published: 2021-07-06T19:47:39 Last Updated: 2024-08-04T14:51:10.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Code Execution vulnerability in phplist 3.5.1. The application does not check any file extensions stored in the plugin zip file, Uploading a malicious plugin which contains the php files with extensions like PHP,phtml,php7 will be copied to the plugins directory which would lead to the remote code execution Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1znDU4fDKA_seg16mJLLtgaaFfvmf-mS6
CVE ID: CVE-2020-22251 State: PUBLISHED Published: 2021-07-06T19:20:03 Last Updated: 2024-08-04T14:51:10.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in phpList 3.5.3 via the login name field in Manage Administrators when adding a new admin. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpList/phplist3/issues/660
CVE ID: CVE-2020-22253 State: PUBLISHED Published: 2022-04-06T22:41:18 Last Updated: 2024-08-04T14:51:10.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E_50H10L_S39 were all discovered to have port 9530 open which allows unauthenticated attackers to make arbitrary Telnet connections with the victim device. Additional Analyst Notes: - CVE Program Container: References: - http://www.xiongmaitech.com/en/index.php/news/info/12/68
CVE ID: CVE-2020-22273 State: PUBLISHED Published: 2020-11-04T17:03:44 Last Updated: 2024-08-04T14:51:10.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Neoflex Video Subscription System Version 2.0 is affected by CSRF which allows the Website's Settings to be changed (such as Payment Settings) Additional Analyst Notes: - CVE Program Container: References: - https://uploadboy.com/v630a7smyykc/539/mp4 - https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22273.pdf
CVE ID: CVE-2020-22274 State: PUBLISHED Published: 2020-11-04T17:06:20 Last Updated: 2024-08-04T14:51:10.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: JomSocial (Joomla Social Network Extention) 4.7.6 allows CSV injection via a customer's profile. Additional Analyst Notes: - CVE Program Container: References: - https://gofile.io/?c=LsAOtL - http://uploadboy.me/iypl38958pon/JomSocial.mp4.html - https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22274.pdf
CVE ID: CVE-2020-22275 State: PUBLISHED Published: 2020-11-04T16:59:58 Last Updated: 2024-08-04T14:51:10.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Easy Registration Forms (ER Forms) Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV commands. After that, when the system administrator generates CSV output from the forms information, there is no check on this inputs and the codes are executable. Additional Analyst Notes: - CVE Program Container: References: - https://filebin.net/30ceikgukh268yyj - http://uploadboy.com/ty0715vdcii6/886/mp4 - https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22275.pdf
CVE ID: CVE-2020-22276 State: PUBLISHED Published: 2020-11-04T16:54:50 Last Updated: 2024-08-04T14:51:10.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry. Additional Analyst Notes: - CVE Program Container: References: - https://filebin.net/khncr59vyfztn6wj - http://uploadboy.com/tvvs4p2gf03m/887/mp4 - https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22276.pdf
CVE ID: CVE-2020-22277 State: PUBLISHED Published: 2020-11-04T16:57:01 Last Updated: 2024-08-04T14:51:10.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile. Additional Analyst Notes: - CVE Program Container: References: - https://mega.nz/file/bSQnlS4R#UY_ozLkvXgXFKzqtTRKeB9RXGi6aEQF3X6eKXdSiBt0 - https://wordpress.org/plugins/import-users-from-csv-with-meta/#:~:text=Install%20Import%20and%20export%20users%20and%20customers%20automatically%2Cis%20uploaded%20and%20extracted%2C%20click%20Activate%20Plugin%20. - https://cert.ikiu.ac.ir/public-files/news/document/CVE
20uploaded%20and%20extracted%2C%20click%20Activate%20Plugin%20. - https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22277.pdf
CVE ID: CVE-2020-22278 State: PUBLISHED Published: 2020-11-04T16:52:26 Last Updated: 2024-08-04T14:51:10.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents. Additional Analyst Notes: - CVE Program Container: References: - https://mega.nz/file/ySQnlQSR#vXzY46mgf0CE2ysYpWpbE4O6T_g37--rtaL8pqdHcQs - https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22278.pdf
CVE ID: CVE-2020-22283 State: PUBLISHED Published: 2021-07-22T00:00:00 Last Updated: 2024-08-04T14:51:11.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in the icmp6_send_response_with_addrs_and_netif() function of Free Software Foundation lwIP version git head allows attackers to access sensitive information via a crafted ICMPv6 packet. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.nongnu.org/bugs/index.php?58553 - https://lists.debian.org/debian-lts-announce/2023/11/msg00011.html
CVE ID: CVE-2020-22284 State: PUBLISHED Published: 2021-07-22T19:38:09 Last Updated: 2024-08-04T14:51:10.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in the zepif_linkoutput() function of Free Software Foundation lwIP git head version and version 2.1.2 allows attackers to access sensitive information via a crafted 6LoWPAN packet. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.nongnu.org/bugs/index.php?58554
CVE ID: CVE-2020-22312 State: PUBLISHED Published: 2021-10-28T14:10:26 Last Updated: 2024-08-04T14:51:10.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability was discovered in the OJ/admin-tool /cal_scores.php function of HZNUOJ v1.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wlx65003/HZNUOJ/issues/17
CVE ID: CVE-2020-22327 State: PUBLISHED Published: 2023-01-26T00:00:00.000Z Last Updated: 2025-04-01T14:09:34.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in HFish 0.5.1. When a payload is inserted where the name is entered, XSS code is triggered when the administrator views the information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hacklcx/HFish/issues/61
CVE ID: CVE-2020-22330 State: PUBLISHED Published: 2021-08-06T13:26:45 Last Updated: 2024-08-04T14:51:10.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) vulnerability in Subrion 4.2.1 via the title when adding a page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/intelliants/subrion/issues/850
CVE ID: CVE-2020-22334 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T16:48:57.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in beescms v4 allows attackers to delete the administrator account via crafted request to /admin/admin_admin.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/source-trace/beescms/issues/5 - https://github.com/source-trace/beescms
CVE ID: CVE-2020-22336 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-20T20:13:43.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in pdfcrack 0.17 thru 0.18, allows attackers to execute arbitrary code via a stack overflow in the MD5 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/pdfcrack/bugs/12/ - https://lists.debian.org/debian-lts-announce/2023/08/msg00004.html
CVE ID: CVE-2020-22345 State: PUBLISHED Published: 2021-08-18T20:21:28 Last Updated: 2024-08-04T14:51:10.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: /graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://engindemirbilek.github.io/centreon-19.10-rce - https://github.com/centreon/centreon/pull/8467#event-3163627607
CVE ID: CVE-2020-22352 State: PUBLISHED Published: 2021-08-04T20:02:36 Last Updated: 2024-08-04T14:51:10.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gf_dash_segmenter_probe_input function in GPAC v0.8 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1423
CVE ID: CVE-2020-22390 State: PUBLISHED Published: 2021-06-21T14:02:56 Last Updated: 2024-08-04T14:51:10.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Akaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function. Attackers can inject arbitrary code into the name parameter and perform code execution when the crafted file is opened. Additional Analyst Notes: - CVE Program Container: References: - https://cqinfo.la/csv-injection-in-akaunting/
CVE ID: CVE-2020-22392 State: PUBLISHED Published: 2021-08-05T21:04:50 Last Updated: 2024-08-04T14:51:10.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.2 when adding a blog and then editing an image file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/intelliants/subrion/issues/868
CVE ID: CVE-2020-22394 State: PUBLISHED Published: 2020-11-19T17:55:40 Last Updated: 2024-08-04T14:51:10.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yzmcms/yzmcms/issues/42
CVE ID: CVE-2020-22402 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-03T17:03:53.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sogo.nu/bugs/view.php?id=4979
CVE ID: CVE-2020-22403 State: PUBLISHED Published: 2021-08-12T00:00:00 Last Updated: 2024-08-04T14:51:10.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in Express cart v1.1.16 allows attackers to add an administrator account, add discount code or other unspecified impacts. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mrvautin/expressCart/issues/120
CVE ID: CVE-2020-22421 State: PUBLISHED Published: 2021-12-08T03:42:23 Last Updated: 2024-08-04T14:51:10.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: 74CMS v6.0.4 was discovered to contain a cross-site scripting (XSS) vulnerability via /index.php?m=&c=help&a=help_list&key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/congcong9184-123/congcong9184-123.github.io/blob/master/74cms.docx
CVE ID: CVE-2020-22425 State: PUBLISHED Published: 2021-02-15T17:39:15 Last Updated: 2024-08-04T14:51:10.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remote command execution. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2020/04/postauth-sqli-in-centreon-1910-1el7.html%2C - https://github.com/c610/free/
CVE ID: CVE-2020-22427 State: PUBLISHED Published: 2021-02-15T17:39:26 Last Updated: 2024-08-04T14:51:10.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: NagiosXI 5.6.11 is affected by a remote code execution (RCE) vulnerability. An authenticated nagiosadmin user can inject additional commands into a request. NOTE: the vendor disputes whether the CVE and its references are actionable because all technical details are omitted, and the only option is to pay for a subscription service where technical details may be disclosed at an unspecified later time Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2020/03/postauth-rce-bugs-in-nagio
al Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2020/03/postauth-rce-bugs-in-nagiosxi-5611.html
CVE ID: CVE-2020-22428 State: PUBLISHED Published: 2021-05-05T02:42:51 Last Updated: 2024-08-04T14:51:10.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a JavaScript payload. Additional Analyst Notes: - CVE Program Container: References: - https://www.linkedin.com/in/gabrielegristina - https://twitter.com/gm4tr1x - https://github.com/matrix - https://support.solarwinds.com/SuccessCenter/s/article/Serv-U-15-1-6-Hotfix-3?language=en_US
CVE ID: CVE-2020-22429 State: PUBLISHED Published: 2023-05-03T00:00:00.000Z Last Updated: 2025-01-30T17:15:30.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: redox-os v0.1.0 was discovered to contain a use-after-free bug via the gethostbyaddr() function at /src/header/netdb/mod.rs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.redox-os.org/redox-os/relibc/issues/159 - https://burtonqin.github.io/posts/2023/04/CVE-2020-22429/