Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-27947 State: PUBLISHED Published: 2021-04-02T17:37:59 Last Updated: 2024-08-04T16:25:43.994Z Vendors: Apple Products: macOS Problem Types: An application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. An application may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011
CVE ID: CVE-2020-27948 State: PUBLISHED Published: 2021-04-02T17:39:25 Last Updated: 2024-08-04T16:25:44.104Z Vendors: Apple Products: iOS and iPadOS, tvOS, watchOS, macOS Problem Types: Processing a maliciously crafted audio file may lead to arbitrary code execution Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted audio file may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212
y code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011 - https://support.apple.com/en-us/HT212003 - https://support.apple.com/en-us/HT212005 - https://support.apple.com/en-us/HT212009
CVE ID: CVE-2020-27949 State: PUBLISHED Published: 2021-04-02T17:39:58 Last Updated: 2024-08-04T16:25:44.113Z Vendors: Apple Products: macOS Problem Types: A malicious application may cause unexpected changes in memory belonging to processes traced by DTrace Description: This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may cause unexpected changes in memory belonging to processes traced by DTrace. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011
CVE ID: CVE-2020-27950 State: PUBLISHED Published: 2020-12-08T20:17:24.000Z Last Updated: 2025-10-21T23:35:32.054Z Vendors: Apple Products: watchOS, iOS and iPadOS, macOS Problem Types: A malicious application may be able to disclose kernel memory.. Description: A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to disclose kernel memory. Additional Analyst Notes: - CVE Program Container: - CISA
A malicious application may be able to disclose kernel memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT211928 - https://support.apple.com/en-us/HT211929 - https://support.apple.com/en-us/HT211940 - https://support.apple.com/en-us/HT211944 - https://support.apple.com/en-us/HT211945 - https://support.apple.com/en-us/HT211946 - https://support.apple.com/en-us/HT211947 - http://seclists.org/fulldisclosure/2020/Dec/32 - http://packetstormsecurity.com/files/161296/XNU-Kernel-Mach-Message-Trailers-Memory-Disclosure.html
CVE ID: CVE-2020-27951 State: PUBLISHED Published: 2021-04-02T17:38:51 Last Updated: 2024-08-04T16:25:44.128Z Vendors: Apple Products: iOS and iPadOS, iOS, watchOS Problem Types: Unauthorized code execution may lead to an authentication policy violation Description: This issue was addressed with improved checks. This issue is fixed in watchOS 6.3, iOS 12.5, iOS 14.3 and iPadOS 14.3, watchOS 7.2. Unauthorized code execution may lead to an authentication policy violation. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212003 - https://support.apple.com/en-us/HT212009 - https://support.apple.com/en-us/HT212004 - https://support.apple.com/en-us
- https://support.apple.com/en-us/HT212009 - https://support.apple.com/en-us/HT212004 - https://support.apple.com/en-us/HT212006
CVE ID: CVE-2020-27952 State: PUBLISHED Published: 2021-04-02T17:39:08 Last Updated: 2024-08-04T16:25:44.086Z Vendors: Apple Products: macOS Problem Types: Processing a maliciously crafted font file may lead to arbitrary code execution Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. Processing a maliciously crafted font file may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT212011
CVE ID: CVE-2020-27955 State: PUBLISHED Published: 2020-11-05T14:57:36 Last Updated: 2024-08-04T16:25:44.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Git LFS 2.12.0 allows Remote Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://legalhackers.com - https://exploitbox.io - https://github.com/git-lfs/git-lfs/releases - https://legalhackers.com/advisories/Git-LFS-RCE-Exploit-CVE-2020-27955.html - http://seclists.org/fulldisclosure/2020/Nov/1 - http://packetstormsecurity.com/files/159923/git-lfs-Remote-Code-Execution.html - http://packetstormsecurity.com/files/164180/Git-git-lfs-Remote-Code-Execution.html
CVE ID: CVE-2020-27956 State: PUBLISHED Published: 2020-10-28T02:18:22 Last Updated: 2024-08-04T16:25:44.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental Management System 1.0 allows the user to conduct remote code execution via admin/index.php?page=manage_car because .php files can be uploaded to admin/assets/uploads/ (under the web root). Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14544/car-rental-management-system-using-phpmysqli-source-code.html - https://www.exploit-db.com/exploits/48931
CVE ID: CVE-2020-27957 State: PUBLISHED Published: 2020-10-28T02:29:54 Last Updated: 2024-08-04T16:25:44.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RandomGameUnit extension for MediaWiki through 1.35 was not properly escaping various title-related data. When certain varieties of games were created within MediaWiki, their names or titles could be manipulated to generate stored XSS within the RandomGameUnit extension. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T266400 - https://gerrit.wikimedia.org/r/q/I497d2076038f75c9eb77e0e250f2af56f5bd2bfc
CVE ID: CVE-2020-27958 State: PUBLISHED Published: 2022-02-26T19:01:12 Last Updated: 2024-08-04T16:25:44.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote authenticated users to provide crafted input in a job template. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OSC/Open-OnDemand/commits/master - https://listsprd.osu.edu/pipermail/ood-users/ - https://discourse.osc.edu/t/security-fix-in-open-ondemand-1-8-18-and-1-7-19-patch-releases-now-available/1198
CVE ID: CVE-2020-27969 State: PUBLISHED Published: 2021-09-13T11:44:01 Last Updated: 2024-08-04T16:25:44.099Z Vendors: n/a Products: Yandex Browser for Android Problem Types: User Interface (UI) Misrepresentation of Critical Information Description: Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spoofing Additional Analyst Notes: - CVE Program Container: References: - https://yandex.com/bugbounty/i/hall-of-fame-browser/
CVE ID: CVE-2020-27970 State: PUBLISHED Published: 2021-09-13T11:46:00 Last Updated: 2024-08-04T16:25:44.126Z Vendors: n/a Products: Yandex Browser Lite for Android Problem Types: User Interface (UI) Misrepresentation of Critical Information Description: Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar Additional Analyst Notes: - CVE Program Container: References: - https://yandex.com/bugbounty/i/hall-of-fame-browser/
CVE ID: CVE-2020-27974 State: PUBLISHED Published: 2020-10-28T14:31:38 Last Updated: 2024-08-04T16:25:43.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: NeoPost Mail Accounting Software Pro 5.0.6 allows php/Commun/FUS_SCM_BlockStart.php?code= XSS. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/security-advisories/usd-2020-0029/
CVE ID: CVE-2020-27975 State: PUBLISHED Published: 2020-10-28T14:31:30 Last Updated: 2024-08-04T16:25:44.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: osCommerce Phoenix CE before 1.0.5.4 allows admin/define_language.php CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/security-advisories/usd-2020-0027/
CVE ID: CVE-2020-27976 State: PUBLISHED Published: 2020-10-28T14:31:20 Last Updated: 2024-08-04T16:25:43.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely. Within admin/mail.php, a from POST parameter can be passed to the application. This affects the PHP mail function, and the sendmail -f option. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/security-advisories/usd-2020-0026/
CVE ID: CVE-2020-27977 State: PUBLISHED Published: 2020-11-09T19:52:10 Last Updated: 2024-08-04T16:25:44.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: CapaSystems CapaInstaller before 6.0.101 does not properly assign, modify, or check privileges for an actor who attempts to edit registry values, allowing an attacker to escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://capawiki.capasystems.com/display/ci/CapaInstaller+6.0+-+Build+101
CVE ID: CVE-2020-27978 State: PUBLISHED Published: 2020-10-28T14:43:54 Last Updated: 2024-08-04T16:25:44.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shibboleth Identify Provider 3.x before 3.4.6 has a denial of service flaw. A remote unauthenticated attacker can cause a login flow to trigger Java heap exhaustion due to the creation of objects in the Java Servlet container session. Additional Analyst Notes: - CVE Program Container: References: - https://shibboleth.net/community/advisories/secadv_20191002.txt
CVE ID: CVE-2020-27980 State: PUBLISHED Published: 2020-10-28T18:45:43 Last Updated: 2024-08-04T16:25:44.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Genexis Platinum-4410 P4410-V2-1.28 devices allow stored XSS in the WLAN SSID parameter. This could allow an attacker to perform malicious actions in which the XSS popup will affect all privileged users. Additional Analyst Notes: - CVE Program Container: References: - https://genexis.eu/product/platinum/ - https://www.exploit-db.com/exploits/48948
CVE ID: CVE-2020-27981 State: REJECTED Published: 2020-10-28T20:03:45 Last Updated: 2020-11-04T14:14:48 Description: No description available.
CVE ID: CVE-2020-27982 State: PUBLISHED Published: 2020-11-09T19:12:39 Last Updated: 2024-08-04T16:25:44.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: IceWarp 11.4.5.0 allows XSS via the language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/159763/Icewarp-WebMail-11.4.5.0-Cross-Site-Scripting.html - https://cxsecurity.com/issue/WLB-2020100161
CVE ID: CVE-2020-27985 State: PUBLISHED Published: 2020-11-23T13:46:06 Last Updated: 2024-08-04T16:25:43.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home/<user>/SecurityOnion/setup/so-setup. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Security-Onion-Solutions/securityonion/releases - https://github.com/Security-Onion-Solutions/securityonion/commit/b14670030349a2747a00ace665568ab5f51ac47b - https://s1gh.sh/cve-2020-27985-security-onion-local-privile
urityonion/commit/b14670030349a2747a00ace665568ab5f51ac47b - https://s1gh.sh/cve-2020-27985-security-onion-local-privilege-escalation/
CVE ID: CVE-2020-27986 State: PUBLISHED Published: 2020-10-28T22:57:20 Last Updated: 2024-08-04T16:25:43.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. NOTE: reportedly, the vendor's position for SMTP and SVN is "it is the administrator's responsibility to configure it. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://csl.com.co/sonarqube-auditando-al-auditor-parte-i/
CVE ID: CVE-2020-27988 State: PUBLISHED Published: 2020-11-16T16:54:37 Last Updated: 2024-08-04T16:25:44.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI before 5.7.5 is vulnerable to XSS in Manage Users (Username field). Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/
CVE ID: CVE-2020-27989 State: PUBLISHED Published: 2020-11-16T16:56:02 Last Updated: 2024-08-04T16:25:44.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI before 5.7.5 is vulnerable to XSS in Dashboard Tools (Edit Dashboard). Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/
CVE ID: CVE-2020-27990 State: PUBLISHED Published: 2020-11-16T16:57:04 Last Updated: 2024-08-04T16:25:44.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI before 5.7.5 is vulnerable to XSS in the Deployment tool (add agent). Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/
CVE ID: CVE-2020-27991 State: PUBLISHED Published: 2020-11-16T16:57:54 Last Updated: 2024-08-04T16:25:44.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI before 5.7.5 is vulnerable to XSS in Account Information (Email field). Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/
CVE ID: CVE-2020-27992 State: PUBLISHED Published: 2020-10-31T16:14:45 Last Updated: 2024-08-04T16:25:44.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dr.Fone 3.0.0 allows local users to gain privileges via a Trojan horse DriverInstall.exe because %PROGRAMFILES(X86)%\Wondershare\dr.fone\Library\DriverInstaller has Full Control for BUILTIN\Users. Additional Analyst Notes: - CVE Program Container: References: - https://drfone.wondershare.com - https://packetstormsecurity.com/files/159775/Wondershare-Dr.Fone-3.0.0-Unquoted-Service-Path.html
CVE ID: CVE-2020-27993 State: PUBLISHED Published: 2020-10-29T15:05:02 Last Updated: 2024-08-04T16:25:44.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hrsale 2.0.0 allows download?type=files&filename=../ directory traversal to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/48920
CVE ID: CVE-2020-27994 State: PUBLISHED Published: 2021-02-03T15:51:50 Last Updated: 2024-08-04T16:25:43.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds Serv-U before 15.2.2 allows Authenticated Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://www.themissinglink.com.au/security-advisories-cve-2020-27994 - https://documentation.solarwinds.com/en/success_center/servu/Content/Release_Notes/Servu_15-2-2_release_notes.htm - http://seclists.org/fulldisclosure/2021/Feb/36 - http://packetstormsecurity.com/files/161399/SolarWinds-Serv-U-FTP-Server-15.2.1-Path-Traversal.html
CVE ID: CVE-2020-27995 State: PUBLISHED Published: 2020-10-29T16:31:52 Last Updated: 2024-08-04T16:25:44.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do template_resid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/applications_manager/issues.html#v14560
CVE ID: CVE-2020-27996 State: PUBLISHED Published: 2020-10-29T17:07:54 Last Updated: 2024-08-04T16:25:43.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SmartStoreNET before 4.0.1. It does not properly consider the need for a CustomModelPartAttribute decoration in certain ModelBase.CustomProperties situations. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/smartstore/SmartStoreNET/commit/8702c6140f4fc91956ef35dba12d24492fb3f768 - https://github.com/smartstore/SmartStoreNET/compare/4.0.0...4.0.1 - https://securitylab.github.com/advisories/GHSL-2020-138-139-SmartstoreAG-SmartStoreNET
CVE ID: CVE-2020-27997 State: PUBLISHED Published: 2021-02-19T23:00:25 Last Updated: 2024-08-04T16:25:44.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SmartStoreNET before 4.1.0. Lack of Cross Site Request Forgery (CSRF) protection may lead to elevation of privileges (e.g., /admin/customer/create to create an admin account). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/smartstore/SmartStoreNET/compare/4.0.1...4.1.0 - https://securitylab.github.com/advisories/GHSL-2020-138-139-SmartstoreAG-SmartStoreNET
CVE ID: CVE-2020-27998 State: PUBLISHED Published: 2020-10-29T17:08:03 Last Updated: 2024-08-04T16:25:44.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FastReport before 2020.4.0. It lacks a ScriptSecurity feature and therefore may mishandle (for example) GetType, typeof, TypeOf, DllImport, LoadLibrary, and GetProcAddress. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FastReports/FastReport/pull/206 - https://opensource.fast-report.com/2020/09/report-script-security.html - https://github.com/FastReports/FastReport/compare/v2020.3.0...v2020.4.0 - https://securitylab.github.com/advisories/GHSL-2020-143-FastReport
astReports/FastReport/compare/v2020.3.0...v2020.4.0 - https://securitylab.github.com/advisories/GHSL-2020-143-FastReportsInc-FastReports
CVE ID: CVE-2020-28001 State: PUBLISHED Published: 2021-02-03T15:53:33 Last Updated: 2024-08-04T16:25:44.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds Serv-U before 15.2.2 allows Authenticated Stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.themissinglink.com.au/security-advisories-cve-2020-28001 - https://documentation.solarwinds.com/en/success_center/servu/Content/Release_Notes/Servu_15-2-2_release_notes.htm - http://seclists.org/fulldisclosure/2021/Feb/37 - http://packetstormsecurity.com/files/161400/SolarWinds-Serv-U-FTP-Server-15.2.1-Cross-Site-Scripting.html
CVE ID: CVE-2020-28002 State: PUBLISHED Published: 2020-10-30T02:06:43 Last Updated: 2024-08-04T16:25:43.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SonarQube 8.4.2.36762, an external attacker can achieve authentication bypass through SonarScanner. With an empty value for the -D sonar.login option, anonymous authentication is forced. This allows creating and overwriting public and private projects via the /api/ce/submit endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://csl.com.co/sonarqube-auditando-al-auditor-parte-ii/
CVE ID: CVE-2020-28005 State: PUBLISHED Published: 2020-11-18T15:27:33 Last Updated: 2024-08-04T16:25:43.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: httpd on TP-Link TL-WPA4220 devices (hardware versions 2 through 4) allows remote authenticated users to trigger a buffer overflow (causing a denial of service) by sending a POST request to the /admin/syslog endpoint. Fixed version: TL-WPA4220(EU)_V4_201023 Additional Analyst Notes: - CVE Program Container: References: - https://www.tp-link.com/us/security - https://the-hyperbolic.com/posts/vulnerabilities-in-tlwpa4220/
CVE ID: CVE-2020-28007 State: PUBLISHED Published: 2021-05-06T02:58:36 Last Updated: 2024-08-04T16:25:44.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the log directory (owned by a non-root user), a symlink or hard link attack allows overwriting critical root-owned files anywhere on the filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28007-LFDIR.txt
CVE ID: CVE-2020-28008 State: PUBLISHED Published: 2021-05-06T03:07:13 Last Updated: 2024-08-04T16:25:44.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the spool directory (owned by a non-root user), an attacker can write to a /var/spool/exim4/input spool header file, in which a crafted recipient address can indirectly lead to command execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28008-SPDIR.txt
CVE ID: CVE-2020-28009 State: PUBLISHED Published: 2021-05-06T03:13:01 Last Updated: 2024-08-04T16:25:44.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because get_stdinput allows unbounded reads that are accompanied by unbounded increases in a certain size variable. NOTE: exploitation may be impractical because of the execution time needed to overflow (multiple days). Additional Analyst Notes: - CVE Program Container: References: - https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28009-STDIN.txt
CVE ID: CVE-2020-28010 State: PUBLISHED Published: 2021-05-06T03:17:16 Last Updated: 2024-08-04T16:25:44.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that is too small (on some common platforms). Additional Analyst Notes: - CVE Program Container: References: - https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28010-SLCWD.txt - http://www.openwall.com/lists/oss-security/2021/07/22/7
CVE ID: CVE-2020-28011 State: PUBLISHED Published: 2021-05-06T03:22:11 Last Updated: 2024-08-04T16:25:44.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4 before 4.94.2 allows Heap-based Buffer Overflow in queue_run via two sender options: -R and -S. This may cause privilege escalation from exim to root. Additional Analyst Notes: - CVE Program Container: References: - https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28011-SPRSS.txt
CVE ID: CVE-2020-28012 State: PUBLISHED Published: 2021-05-06T03:33:44 Last Updated: 2024-08-04T16:25:43.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rda_interpret uses a privileged pipe that lacks a close-on-exec flag. Additional Analyst Notes: - CVE Program Container: References: - https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28012-CLOSE.txt