Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-22674 State: PUBLISHED Published: 2021-10-12T20:37:04 Last Updated: 2024-08-04T14:51:10.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in gpac 0.8.0. An invalid memory dereference exists in the function FixTrackID located in isom_intern.c, which allows attackers to cause a denial of service (DoS) via a crafted input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1346
CVE ID: CVE-2020-22675 State: PUBLISHED Published: 2021-10-12T20:37:04 Last Updated: 2024-08-04T14:51:11.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in gpac 0.8.0. The GetGhostNum function in stbl_read.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1344
CVE ID: CVE-2020-22677 State: PUBLISHED Published: 2021-10-12T20:37:03 Last Updated: 2024-08-04T14:51:10.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in gpac 0.8.0. The dump_data_hex function in box_dump.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1341
CVE ID: CVE-2020-22678 State: PUBLISHED Published: 2021-10-12T20:37:01 Last Updated: 2024-08-04T14:51:11.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in gpac 0.8.0. The gf_media_nalu_remove_emulation_bytes function in av_parsers.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1339
CVE ID: CVE-2020-22679 State: PUBLISHED Published: 2021-10-12T20:37:01 Last Updated: 2024-08-04T14:51:11.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the sgpd_parse_entry function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1345
CVE ID: CVE-2020-22719 State: PUBLISHED Published: 2021-11-22T22:20:16 Last Updated: 2024-08-04T14:51:10.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shimo Document v2.0.1 contains a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the table content text field. Additional Analyst Notes: - CVE Program Container: References: - https://1drv.ms/u/s%21Ahrd0_3xjLgDhWFRO8bnsAg9I2UQ
CVE ID: CVE-2020-22720 State: REJECTED Published: 2020-08-14T15:44:33 Last Updated: 2020-08-17T15:08:57 Description: No description available.
CVE ID: CVE-2020-22721 State: PUBLISHED Published: 2020-08-14T15:44:45 Last Updated: 2024-08-04T14:51:10.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: A File Upload Vulnerability in PNotes - Andrey Gruber PNotes.NET v3.8.1.2 allows a local attacker to execute arbitrary code via the Miscellaneous " External Programs by uploading the malicious .exe file to the external program. Additional Analyst Notes: - CVE Program Container: References: - https://syhack.wordpress.com/2020/04/18/pnotes-insecure-file-upload-vulnerability-code-execution/
CVE ID: CVE-2020-22722 State: PUBLISHED Published: 2020-08-14T15:44:56 Last Updated: 2024-08-04T14:51:10.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rapid Software LLC Rapid SCADA 5.8.0 is affected by a local privilege escalation vulnerability in the ScadaAgentSvc.exe executable file. An attacker can obtain admin privileges by placing a malicious .exe file in the application and renaming it ScadaAgentSvc.exe, which would result in executing the binary as NT AUTHORITY\SYSTEM in a Windows operating system. For example, an attacker can plant a reverse shell from a low privileged user account and by restarting the computer, the malicious service will be started as NT AUTHORIT
from a low privileged user account and by restarting the computer, the malicious service will be started as NT AUTHORITY\SYSTEM by giving the attacker full system access to the remote PC. Additional Analyst Notes: - CVE Program Container: References: - https://syhack.wordpress.com/2020/04/21/rapid-scada-local-privilege-escalation-vulnerability/
CVE ID: CVE-2020-22723 State: PUBLISHED Published: 2020-11-18T21:20:30 Last Updated: 2024-08-04T14:51:11.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Beijing Liangjing Zhicheng Technology Co., Ltd ljcmsshop version 1.14 allows remote attackers to inject arbitrary web script or HTML via user.php by registering an account directly in the user center, and then adding the payload to the delivery address. Additional Analyst Notes: - CVE Program Container: References: - https://baijiahao.baidu.com/s?id=1653681087434824406&wfr=spider&for=pc - https://www.freebuf.com/articles/web/192318.html
CVE ID: CVE-2020-22724 State: PUBLISHED Published: 2021-10-14T10:50:42 Last Updated: 2024-08-04T14:51:10.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote command execution vulnerability exists in add_server_service of PPTP_SERVER in Mercury Router MER1200 v1.0.1 and Mercury Router MER1200G v1.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/78.html - https://github.com/DarkEyeR/CVE_Apply/blob/master/Mercury/Mercury%20MER1200%20Router%20v1.0.1%20RCE%20%20.md
CVE ID: CVE-2020-22732 State: PUBLISHED Published: 2021-08-05T16:24:14 Last Updated: 2024-08-04T14:51:10.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple (CMSMS) 2.2.14 allows stored XSS via the Extensions > Fie Picker.. Additional Analyst Notes: - CVE Program Container: References: - http://dev.cmsmadesimple.org/bug/view/12288
CVE ID: CVE-2020-22741 State: PUBLISHED Published: 2021-07-19T18:31:21 Last Updated: 2024-08-04T14:51:10.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xuperchain 3.6.0 that allows for attackers to recover any arbitrary users' private key after obtaining the partial signature in multisignature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xuperchain/xuperchain/issues/782
CVE ID: CVE-2020-22755 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T16:47:34.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: File upload vulnerability in MCMS 5.0 allows attackers to execute arbitrary code via a crafted thumbnail. A different vulnerability than CVE-2022-31943. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ming-soft/MCMS - https://github.com/ming-soft/MCMS/issues/42
CVE ID: CVE-2020-22761 State: PUBLISHED Published: 2021-07-29T14:05:56 Last Updated: 2024-08-04T14:51:10.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatpressblog/flatpress/issues/64 - https://www.baomatcoban.info/2020/04/funnymini0day-flatpress-11-cross-site.html
CVE ID: CVE-2020-22765 State: PUBLISHED Published: 2021-07-29T14:29:14 Last Updated: 2024-08-04T14:51:11.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in NukeViet cms 4.4.0 via the editor in the News module. Additional Analyst Notes: - CVE Program Container: References: - https://nukeviet.vn/vi/news/Tin-tuc/nukeviet-cam-on-le-thanh-trung-da-phat-hien-loi-an-ninh-nukeviet-631.html
CVE ID: CVE-2020-22781 State: PUBLISHED Published: 2021-04-28T20:23:11 Last Updated: 2024-08-04T14:51:11.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Etherpad < 1.8.3, a specially crafted URI would raise an unhandled exception in the cache mechanism and cause a denial of service (crash the instance). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ether/etherpad-lite/issues/3502
CVE ID: CVE-2020-22782 State: PUBLISHED Published: 2021-04-28T20:23:04 Last Updated: 2024-08-04T14:51:10.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Etherpad < 1.8.3 is affected by a denial of service in the import functionality. Upload of binary file to the import endpoint would crash the instance. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ether/etherpad-lite/issues/3825
CVE ID: CVE-2020-22783 State: PUBLISHED Published: 2021-04-28T20:22:54 Last Updated: 2024-08-04T14:51:10.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Etherpad <1.8.3 stored passwords used by users insecurely in the database and in log files. This affects every database backend supported by Etherpad. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ether/etherpad-lite/commit/53f126082a8b3d094e48b159f0f0bc8a5db4b2f4 - https://github.com/ether/etherpad-lite/issues/3421
CVE ID: CVE-2020-22784 State: PUBLISHED Published: 2021-04-28T20:22:44 Last Updated: 2024-08-04T14:51:11.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Etherpad UeberDB < 0.4.4, due to MySQL omitting trailing spaces on char / varchar columns during comparisons, retrieving database records using UeberDB's MySQL connector could allow bypassing access controls enforced on key names. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ether/ueberDB/commit/e8b58d03534ade8d83c2d1946a8350a23952531e
CVE ID: CVE-2020-22785 State: PUBLISHED Published: 2021-04-28T20:22:37 Last Updated: 2024-08-04T14:51:11.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Etherpad < 1.8.3 is affected by a missing lock check which could cause a denial of service. Aggressively targeting random pad import endpoints with empty data would flatten all pads due to lack of rate limiting and missing ownership check. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ether/etherpad-lite/pull/3833
CVE ID: CVE-2020-22789 State: PUBLISHED Published: 2021-04-28T20:43:05 Last Updated: 2024-08-04T14:51:10.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unauthenticated Stored XSS in FME Server versions 2019.2 and 2020.0 Beta allows a remote attacker to gain admin privileges by injecting arbitrary web script or HTML via the login page. The XSS is executed when an administrator accesses the logs. Additional Analyst Notes: - CVE Program Container: References: - https://mexicanpentester.com/2020/04/09/vulnerabilities-in-fme-server-versions-2019-2-and-2020-0-beta-and-probably-previous-versions/ - https://community.safe.com/s/article/fme-server-2019-security-update - https://commu
a-and-probably-previous-versions/ - https://community.safe.com/s/article/fme-server-2019-security-update - https://community.safe.com/s/article/FME-Server-Stored-Cross-Site-Scripting-XSS-Vulnerabilities
CVE ID: CVE-2020-22790 State: PUBLISHED Published: 2021-04-28T20:42:54 Last Updated: 2024-08-04T14:51:10.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Authenticated Stored XSS in FME Server versions 2019.2 and 2020.0 Beta allows a remote attacker to execute codeby injecting arbitrary web script or HTML via modifying the name of the users. The XSS is executed when an administrator access the logs. Additional Analyst Notes: - CVE Program Container: References: - https://mexicanpentester.com/2020/04/09/vulnerabilities-in-fme-server-versions-2019-2-and-2020-0-beta-and-probably-previous-versions/ - https://community.safe.com/s/article/fme-server-2019-security-update - https://co
beta-and-probably-previous-versions/ - https://community.safe.com/s/article/fme-server-2019-security-update - https://community.safe.com/s/article/FME-Server-Stored-Cross-Site-Scripting-XSS-Vulnerabilities
CVE ID: CVE-2020-22807 State: PUBLISHED Published: 2021-04-29T18:17:51 Last Updated: 2024-08-04T14:51:11.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was dicovered in vtiger crm 7.2. Union sql injection in the calendar exportdata feature. Additional Analyst Notes: - CVE Program Container: References: - https://cloud.tencent.com/developer/article/1612208
CVE ID: CVE-2020-22808 State: PUBLISHED Published: 2021-04-29T18:18:02 Last Updated: 2024-08-04T14:51:11.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was found in yii2_fecshop 2.x. There is a reflected XSS vulnerability in the check cart page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fecshop/yii2_fecshop/issues/87 - https://github.com/fecshop/yii2_fecshop/commit/8fac6455882333cfe3d81c4121d523813e28e31a
CVE ID: CVE-2020-22809 State: PUBLISHED Published: 2021-05-10T12:33:54 Last Updated: 2024-08-04T14:51:11.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Windscribe v1.83 Build 20, 'WindscribeService' has an Unquoted Service Path that facilitates privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/48306
CVE ID: CVE-2020-22818 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-05T13:42:43.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://unc1e.blogspot.com/2020/04/mkcms-v62-has-mutilple-vulnerabilities.html
CVE ID: CVE-2020-22819 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-05T13:41:32.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://unc1e.blogspot.com/2020/04/mkcms-v62-has-mutilple-vulnerabilities.html
CVE ID: CVE-2020-22820 State: PUBLISHED Published: 2022-11-03T00:00:00.000Z Last Updated: 2025-05-05T13:40:49.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://unc1e.blogspot.com/2020/04/mkcms-v62-has-mutilple-vulnerabilities.html
CVE ID: CVE-2020-22839 State: PUBLISHED Published: 2021-02-09T19:39:05 Last Updated: 2024-08-04T14:51:10.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected cross-site scripting vulnerability (XSS) in the evoadm.php file in b2evolution cms version 6.11.6-stable allows remote attackers to inject arbitrary webscript or HTML code via the tab3 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://sohambakore.medium.com/b2evolution-cms-reflected-xss-in-tab-type-parameter-in-evoadm-php-38886216cdd3 - http://packetstormsecurity.com/files/161363/b2evolution-CMS-6.11.6-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/49555
CVE ID: CVE-2020-22840 State: PUBLISHED Published: 2021-02-09T13:09:35 Last Updated: 2024-08-04T14:51:11.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attacker controlled resource via redirect_to parameter in email_passthrough.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/b2evolution/b2evolution/issues/102 - http://packetstormsecurity.com/files/161362/b2evolution-CMS-6.11.6-Open-Redirection.html - https://www.exploit-db.com/exploits/49554
CVE ID: CVE-2020-22841 State: PUBLISHED Published: 2021-02-09T13:09:58 Last Updated: 2024-08-04T14:51:10.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious JavaScript code execution via the plugin name input field in the plugin module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/b2evolution/b2evolution/issues/102 - http://packetstormsecurity.com/files/161363/b2evolution-CMS-6.11.6-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/49551
CVE ID: CVE-2020-22842 State: PUBLISHED Published: 2020-09-30T03:12:33 Last Updated: 2024-08-04T14:51:10.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple before 2.2.15 allows XSS via the m1_mod parameter in a ModuleManager local_uninstall action to admin/moduleinterface.php. Additional Analyst Notes: - CVE Program Container: References: - http://dev.cmsmadesimple.org/bug/view/12291
CVE ID: CVE-2020-22844 State: PUBLISHED Published: 2022-02-28T18:48:44 Last Updated: 2024-08-04T14:51:11.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service (DOS) via crafted SMB requests. Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/support - https://github.com/colorlight/mikrotik_poc/blob/master/two_vulns.md
CVE ID: CVE-2020-22845 State: PUBLISHED Published: 2022-02-28T18:48:56 Last Updated: 2024-08-04T14:51:11.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service (DOS) via crafted FTP requests. Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/support - https://github.com/colorlight/mikrotik_poc/blob/master/two_vulns.md
CVE ID: CVE-2020-22848 State: PUBLISHED Published: 2021-08-30T22:12:51 Last Updated: 2024-08-04T14:51:10.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution (RCE) vulnerability in the \Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/6
CVE ID: CVE-2020-22864 State: PUBLISHED Published: 2021-10-26T21:08:14 Last Updated: 2024-08-04T14:51:11.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross site scripting (XSS) vulnerability in the Insert Video function of Froala WYSIWYG Editor 3.1.0 allows attackers to execute arbitrary web scripts or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/froala/wysiwyg-editor/issues/3880 - https://www.youtube.com/watch?v=WE3b1iSnWJY
CVE ID: CVE-2020-22873 State: PUBLISHED Published: 2021-07-13T14:43:41 Last Updated: 2024-08-04T14:51:11.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in function NumberToPrecisionCmd in jsish before 3.0.7, allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pcmacdon/jsish/commit/430ea27accd4d4ffddc946c9402e7c9064835a18
CVE ID: CVE-2020-22874 State: PUBLISHED Published: 2021-07-13T14:43:49 Last Updated: 2024-08-04T14:51:11.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow vulnerability in function Jsi_ObjArraySizer in jsish before 3.0.8, allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pcmacdon/jsish/commit/858da537bde4de9d8c92466d5a866505310bc328 - https://github.com/pcmacdon/jsish/issues/5
CVE ID: CVE-2020-22875 State: PUBLISHED Published: 2021-07-13T14:43:53 Last Updated: 2024-08-04T14:51:11.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow vulnerability in function Jsi_ObjSetLength in jsish before 3.0.6, allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pcmacdon/jsish/commit/5408a6d93f45bf1f7acd9ae5d44e0ebd77379e98 - https://github.com/pcmacdon/jsish/issues/10
CVE ID: CVE-2020-22876 State: PUBLISHED Published: 2021-07-13T14:43:58 Last Updated: 2024-08-04T14:51:10.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in quickjs.c in QuickJS, allows remote attackers to cause denial of service. This issue is resolved in the 2020-07-05 release. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ldarren/QuickJS/issues/11
CVE ID: CVE-2020-22882 State: PUBLISHED Published: 2021-07-13T14:44:03 Last Updated: 2024-08-04T14:51:11.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Issue was discovered in the fxParserTree function in moddable, allows attackers to cause denial of service via a crafted payload. Fixed in commit 723816ab9b52f807180c99fc69c7d08cf6c6bd61. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Moddable-OpenSource/moddable/issues/351
CVE ID: CVE-2020-22884 State: PUBLISHED Published: 2021-07-13T14:44:09 Last Updated: 2024-08-04T14:51:10.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in function jsvGetStringChars in Espruino before RELEASE_2V09, allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/espruino/Espruino/issues/1799
CVE ID: CVE-2020-22885 State: PUBLISHED Published: 2021-07-13T14:44:16 Last Updated: 2024-08-04T14:51:11.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in mujs before 1.0.8 due to recursion in the GC scanning phase, allows remote attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ccxvii/mujs/issues/133
CVE ID: CVE-2020-22886 State: PUBLISHED Published: 2021-07-13T14:44:21 Last Updated: 2024-08-04T14:51:11.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in function jsG_markobject in jsgc.c in mujs before 1.0.8, allows remote attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ccxvii/mujs/issues/134
CVE ID: CVE-2020-22907 State: PUBLISHED Published: 2021-07-13T14:44:28 Last Updated: 2024-08-04T14:51:10.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow vulnerability in function jsi_evalcode_sub in jsish before 3.0.18, allows remote attackers to cause a Denial of Service via a crafted value to the execute parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pcmacdon/jsish/issues/16
CVE ID: CVE-2020-22916 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-29T13:27:25.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in XZ 5.2.5 allows attackers to cause a denial of service via decompression of a crafted file. NOTE: the vendor disputes the claims of "endless output" and "denial of service" because decompression of the 17,486 bytes always results in 114,881,179 bytes, which is often a reasonable size increase. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://tukaani.org/xz/ - https://github.com/snappyJack/CVE-request-XZ-5.2.5-has-denial-of-service-vulnerability - https://
ps://tukaani.org/xz/ - https://github.com/snappyJack/CVE-request-XZ-5.2.5-has-denial-of-service-vulnerability - https://github.com/tukaani-project/xz/issues/61 - https://security-tracker.debian.org/tracker/CVE-2020-22916 - https://bugzilla.redhat.com/show_bug.cgi?id=2234987 - https://bugzilla.suse.com/show_bug.cgi?id=1214590 - http://web.archive.org/web/20230918084612/https://github.com/snappyJack/CVE-request-XZ-5.2.5-has-denial-of-service-vulnerability