Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-8197 State: PUBLISHED Published: 2020-07-10T15:40:09 Last Updated: 2024-08-04T09:56:27.921Z Vendors: n/a Products: Citrix ADC, Citrix Gateway Problem Types: Privilege Escalation (CAPEC-233) Description: Privilege escalation vulnerability on Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 allows a low privileged user with management access to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX276688
CVE ID: CVE-2020-8198 State: PUBLISHED Published: 2020-07-10T15:39:14 Last Updated: 2024-08-04T09:56:27.527Z Vendors: n/a Products: Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP Problem Types: CWE-79 Description: Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in Stored Cross-Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX276688
CVE ID: CVE-2020-8199 State: PUBLISHED Published: 2020-07-10T15:40:38 Last Updated: 2024-08-04T09:56:27.536Z Vendors: n/a Products: Citrix Gateway Plug-in for Linux Problem Types: Privilege Escalation (CAPEC-233) Description: Improper access control in Citrix ADC Gateway Linux client versions before 1.0.0.137 results in local privilege escalation to root. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX276688
CVE ID: CVE-2020-8200 State: PUBLISHED Published: 2020-09-18T20:13:00 Last Updated: 2024-08-04T09:56:27.556Z Vendors: n/a Products: Citrix StoreFront Problem Types: CWE-287 Description: Improper authentication in Citrix StoreFront Server < 1912.0.1000 allows an attacker who is authenticated on the same Microsoft Active Directory domain as a Citrix StoreFront server to read arbitrary files from that server. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX277455
CVE ID: CVE-2020-8201 State: PUBLISHED Published: 2020-09-18T20:12:43 Last Updated: 2025-04-30T22:24:25.163Z Vendors: NodeJS Products: Node Problem Types: CWE-444 Description: Node.js < 12.18.4 and < 14.11 can be exploited to perform HTTP desync attacks and deliver malicious payloads to unsuspecting users. The payloads can be crafted by an attacker to hijack user sessions, poison cookies, perform clickjacking, and a multitude of other attacks depending on the architecture of the underlying system. The attack was possible due to a bug in processing of carrier-return symbols in the HTTP header names. Additional Analyst Notes: - CVE Program Container: References: - https://nodejs.org/en/blog/vu
in the HTTP header names. Additional Analyst Notes: - CVE Program Container: References: - https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/ - https://hackerone.com/reports/922597 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00011.html - https://security.netapp.com/advisory/ntap-20201009-0004/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4OOYAMJVLLCLXDTHW3V5UXNULZBBK4O6/ - https://security.gentoo.org/glsa/202101-07
CVE ID: CVE-2020-8202 State: PUBLISHED Published: 2020-07-30T12:53:02 Last Updated: 2024-08-04T09:56:28.271Z Vendors: n/a Products: Nextcloud Preferred Providers Problem Types: CWE-307 Description: Improper check of inputs in Nextcloud Preferred Providers app v1.6.0 allowed to perform a denial of service attack when using a very long password. Additional Analyst Notes: - CVE Program Container: References: - https://nextcloud.com/security/advisory/?id=NC-SA-2020-028 - https://hackerone.com/reports/840598
CVE ID: CVE-2020-8203 State: PUBLISHED Published: 2020-07-15T16:10:27 Last Updated: 2024-08-04T09:56:28.214Z Vendors: n/a Products: lodash Problem Types: CWE-770 Description: Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/712065 - https://www.oracle.com/security-alerts/cpuApr2021.html - https://security.netapp.com/advisory/ntap-20200724-0006/ - https://github.com/lodash/lodash/issues/4874 - https://www.oracle.com//security-alerts/cpujul2021.html - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpujan2022.html - https:
https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2020-8204 State: PUBLISHED Published: 2020-07-30T12:53:02 Last Updated: 2024-08-04T09:56:27.562Z Vendors: n/a Products: Pulse Connect Secure Problem Types: CWE-79 Description: A cross site scripting (XSS) vulnerability exists in Pulse Connect Secure <9.1R5 on the PSAL Page. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516
CVE ID: CVE-2020-8205 State: PUBLISHED Published: 2020-07-20T15:00:53 Last Updated: 2024-08-04T09:56:27.599Z Vendors: n/a Products: uppy Problem Types: CWE-918 Description: The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/891270
CVE ID: CVE-2020-8206 State: PUBLISHED Published: 2020-07-30T12:53:02 Last Updated: 2024-08-04T09:56:27.638Z Vendors: n/a Products: Pulse Connect Secure Problem Types: CWE-287 Description: An improper authentication vulnerability exists in Pulse Connect Secure <9.1RB that allows an attacker with a users primary credentials to bypass the Google TOTP. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516
CVE ID: CVE-2020-8207 State: PUBLISHED Published: 2020-07-24T21:24:36 Last Updated: 2024-08-04T09:56:27.549Z Vendors: n/a Products: Citrix Workspace App for Windows Problem Types: CWE-284 Description: Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX277662
CVE ID: CVE-2020-8208 State: PUBLISHED Published: 2020-08-17T15:36:10 Last Updated: 2024-08-04T09:56:27.452Z Vendors: n/a Products: Citrix XenMobile Server Problem Types: CWE-79 Description: Improper input validation in Citrix XenMobile Server 10.12 before RP1, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.11 before RP6 and Citrix XenMobile Server before 10.9 RP5 allows Cross-Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX277457
CVE ID: CVE-2020-8209 State: PUBLISHED Published: 2020-08-17T15:37:15 Last Updated: 2024-08-04T09:56:27.437Z Vendors: n/a Products: Citrix XenMobile Server Problem Types: CWE-22 Description: Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 and leads to the ability to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX277457
CVE ID: CVE-2020-8210 State: PUBLISHED Published: 2020-08-17T15:39:33 Last Updated: 2024-08-04T09:56:27.597Z Vendors: n/a Products: Citrix XenMobile Server Problem Types: CWE-200 Description: Insufficient protection of secrets in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 discloses credentials of a service account. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX277457
CVE ID: CVE-2020-8211 State: PUBLISHED Published: 2020-08-17T15:40:20 Last Updated: 2024-08-04T09:56:27.458Z Vendors: n/a Products: Citrix XenMobile Server Problem Types: CWE-77 Description: Improper input validation in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX277457
CVE ID: CVE-2020-8212 State: PUBLISHED Published: 2020-08-17T15:40:35 Last Updated: 2024-08-04T09:56:27.536Z Vendors: n/a Products: Citrix XenMobile Server Problem Types: CWE-749 Description: Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows access to privileged functionality. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX277457
CVE ID: CVE-2020-8213 State: PUBLISHED Published: 2020-07-30T12:53:02 Last Updated: 2024-08-04T09:56:27.443Z Vendors: UniFi Products: Protect for UniFi Cloud Key Gen2 Plus Problem Types: CWE-209 Description: An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attackers access to valid usernames for the UniFi Protect web application via HTTP response code and response timing. Additional Analyst Notes: - CVE Program Container: References: - https://community.ui.com/releases/Security-advisory-bulletin-013-013/56d4d616-4afd-40ee-863f-319b7126ed84
CVE ID: CVE-2020-8214 State: PUBLISHED Published: 2020-07-20T15:02:56 Last Updated: 2024-08-04T09:56:27.593Z Vendors: n/a Products: servey Problem Types: CWE-22 Description: A path traversal vulnerability in servey version < 3 allows an attacker to read content of any arbitrary file. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/355501
CVE ID: CVE-2020-8215 State: PUBLISHED Published: 2020-07-20T15:01:38 Last Updated: 2024-08-04T09:56:27.459Z Vendors: n/a Products: node-canvas Problem Types: CWE-120 Description: A buffer overflow is present in canvas version <= 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/315037
CVE ID: CVE-2020-8216 State: PUBLISHED Published: 2020-07-30T12:53:02 Last Updated: 2024-08-04T09:56:27.410Z Vendors: n/a Products: Pulse Connect Secure Problem Types: CWE-200 Description: An information disclosure vulnerability in meeting of Pulse Connect Secure <9.1R8 allowed an authenticated end-users to find meeting details, if they know the Meeting ID. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516
CVE ID: CVE-2020-8217 State: PUBLISHED Published: 2020-07-30T12:53:02 Last Updated: 2024-08-04T09:56:27.493Z Vendors: n/a Products: Pulse Connect Secure Problem Types: CWE-79 Description: A cross site scripting (XSS) vulnerability in Pulse Connect Secure <9.1R8 allowed attackers to exploit in the URL used for Citrix ICA. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516
CVE ID: CVE-2020-8218 State: PUBLISHED Published: 2020-07-30T12:53:02.000Z Last Updated: 2025-10-21T23:35:38.731Z Vendors: n/a Products: Pulse Connect Secure Problem Types: CWE-94 Description: A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516 - https://www.gosecure.net/blog/2020/11/13/forget-your-perimeter-part-2-four-vulnerabilities-in-pulse-connect-secure/
CVE ID: CVE-2020-8219 State: PUBLISHED Published: 2020-07-30T12:53:02 Last Updated: 2024-08-04T09:56:27.612Z Vendors: n/a Products: Pulse Connect Secure Problem Types: CWE-280 Description: An insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to change the password of a full administrator. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516
CVE ID: CVE-2020-8220 State: PUBLISHED Published: 2020-07-30T12:53:02 Last Updated: 2024-08-04T09:56:27.763Z Vendors: n/a Products: Pulse Connect Secure Problem Types: CWE-400 Description: A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform command injection via the administrator web which can cause DOS. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516
CVE ID: CVE-2020-8221 State: PUBLISHED Published: 2020-07-30T12:53:02 Last Updated: 2024-08-04T09:56:27.888Z Vendors: n/a Products: Pulse Connect Secure Problem Types: CWE-22 Description: A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 which allows an authenticated attacker to read arbitrary files via the administrator web interface. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516
CVE ID: CVE-2020-8222 State: PUBLISHED Published: 2020-07-30T12:53:02 Last Updated: 2024-08-04T09:56:27.511Z Vendors: n/a Products: Pulse Connect Secure Problem Types: CWE-22 Description: A path traversal vulnerability exists in Pulse Connect Secure <9.1R8 that allowed an authenticated attacker via the administrator web interface to perform an arbitrary file reading vulnerability through Meeting. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516
CVE ID: CVE-2020-8223 State: PUBLISHED Published: 2020-10-05T13:16:48 Last Updated: 2024-08-04T09:56:27.895Z Vendors: n/a Products: Nextcloud Server Problem Types: CWE-269 Description: A logic error in Nextcloud Server 19.0.0 caused a privilege escalation allowing malicious users to reshare with higher permissions than they got assigned themselves. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/889243 - https://nextcloud.com/security/advisory/?id=NC-SA-2020-029 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KC6HLX5SG4PZO6Y54D2LFJ4ATG76BKOP/ - https://lists.fedoraproject.org/archives/list/packa
0lists.fedoraproject.org/message/KC6HLX5SG4PZO6Y54D2LFJ4ATG76BKOP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7FX3O6SJE2S52I2HAA4DSTUIISP5BNA/
CVE ID: CVE-2020-8224 State: PUBLISHED Published: 2020-08-10T13:35:37 Last Updated: 2024-08-04T09:56:27.643Z Vendors: n/a Products: Desktop Client Problem Types: CWE-94 Description: A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/622170 - https://nextcloud.com/security/advisory/?id=NC-SA-2020-030 - https://security.gentoo.org/glsa/202009-09
CVE ID: CVE-2020-8225 State: PUBLISHED Published: 2020-09-18T20:11:32 Last Updated: 2024-08-04T09:56:27.608Z Vendors: n/a Products: Desktop Client Problem Types: CWE-312 Description: A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies and their authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/685990 - https://nextcloud.com/security/advisory/?id=NC-SA-2020-031
CVE ID: CVE-2020-8226 State: PUBLISHED Published: 2020-08-17T15:37:51 Last Updated: 2024-08-04T09:56:27.385Z Vendors: n/a Products: https://github.com/phpbb/phpbb Problem Types: CWE-610 Description: A vulnerability exists in phpBB <v3.2.10 and <v3.3.1 which allowed remote image dimensions check to be used to SSRF. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpbb.com/community/viewtopic.php?f=14&t=2562631 - https://www.phpbb.com/community/viewtopic.php?f=14&t=2562636
CVE ID: CVE-2020-8227 State: PUBLISHED Published: 2020-08-21T20:33:44 Last Updated: 2024-08-04T09:56:27.442Z Vendors: n/a Products: Desktop Client Problem Types: CWE-22 Description: Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a malicious Nextcloud Server to store files outside of the dedicated sync directory. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/590319 - https://nextcloud.com/security/advisory/?id=NC-SA-2020-032 - https://security.gentoo.org/glsa/202009-09
CVE ID: CVE-2020-8228 State: PUBLISHED Published: 2020-10-05T13:15:23 Last Updated: 2024-08-04T09:56:27.455Z Vendors: n/a Products: Nextcloud Preferred Provider Problem Types: CWE-840 Description: A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/922470 - https://nextcloud.com/security/advisory/?id=NC-SA-2020-033 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00019.html
CVE ID: CVE-2020-8229 State: PUBLISHED Published: 2020-08-10T13:35:33 Last Updated: 2024-08-04T09:56:27.858Z Vendors: n/a Products: Desktop Client Problem Types: CWE-400 Description: A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/588562 - https://nextcloud.com/security/advisory/?id=NC-SA-2020-034
CVE ID: CVE-2020-8230 State: PUBLISHED Published: 2020-08-17T15:36:50 Last Updated: 2024-08-04T09:56:27.973Z Vendors: n/a Products: Desktop Client Problem Types: CWE-119 Description: A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in for windows allowed to corrupt memory. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/380102 - https://nextcloud.com/security/advisory/?id=NC-SA-2020-035
CVE ID: CVE-2020-8231 State: PUBLISHED Published: 2020-12-14T19:39:19 Last Updated: 2024-08-04T09:56:27.965Z Vendors: n/a Products: https://github.com/curl/curl Problem Types: CWE-416 Description: Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/948876 - https://curl.haxx.se/docs/CVE-2020-8231.html - https://security.gentoo.org/glsa/202012-14 - https://www.debian.org/security/2021/dsa-4881 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists
read.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2022.html - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
CVE ID: CVE-2020-8232 State: PUBLISHED Published: 2020-08-17T15:40:59 Last Updated: 2024-08-04T09:56:27.604Z Vendors: n/a Products: EdgeSwitch firmware v1.9.0 and prior Problem Types: CWE-200 Description: An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through SNMP community pages. Additional Analyst Notes: - CVE Program Container: References: - https://community.ui.com/releases/Security-advisory-bulletin-014-014/1c32c056-2c64-4e60-ac23-ce7d8f387821 - https://community.ui.com/releases/EdgeMAX-EdgeSwitch-Firmware-v1-9-1-v1-9-1/8a87dfc5-70f5-4055-8d67-570db1f5695c - https://www.ui.com/downlo
.com/releases/EdgeMAX-EdgeSwitch-Firmware-v1-9-1-v1-9-1/8a87dfc5-70f5-4055-8d67-570db1f5695c - https://www.ui.com/download/edgemax
CVE ID: CVE-2020-8233 State: PUBLISHED Published: 2020-08-17T15:41:19 Last Updated: 2024-08-04T09:56:27.573Z Vendors: n/a Products: EdgeSwitch firmware v1.9.0 and prior Problem Types: CWE-77 Description: A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over the HTTP interface, allowing them to escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://community.ui.com/releases/Security-advisory-bulletin-014-014/1c32c056-2c64-4e60-ac23-ce7d8f387821 - https://community.ui.com/releases/EdgeMAX-EdgeSwitch-Firmware-v1-9-1-v1-9-1/8a87dfc5-70f5-4055-8d67-570db1f
7d8f387821 - https://community.ui.com/releases/EdgeMAX-EdgeSwitch-Firmware-v1-9-1-v1-9-1/8a87dfc5-70f5-4055-8d67-570db1f5695c - https://www.ui.com/download/edgemax - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00019.html
CVE ID: CVE-2020-8234 State: PUBLISHED Published: 2020-08-21T20:37:22 Last Updated: 2024-08-04T09:56:27.524Z Vendors: n/a Products: EdgeSwitch firmware v1.9.0 and prior Problem Types: CWE-613 Description: A vulnerability exists in The EdgeMax EdgeSwitch firmware <v1.9.1 where the EdgeSwitch legacy web interface SIDSSL cookie for admin can be guessed, enabling the attacker to obtain high privileges and get a root shell by a Command injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.ui.com/download/edgemax - https://community.ui.com/releases/Security-advisory-bulletin-014-014/1c32c056-2c64-4e60-ac23-ce7d8f387821%2C - https://community.ui.com/releases/EdgeMA
es/Security-advisory-bulletin-014-014/1c32c056-2c64-4e60-ac23-ce7d8f387821%2C - https://community.ui.com/releases/EdgeMAX-EdgeSwitch-Firmware-v1-9-1-v1-9-1/8a87dfc5-70f5-4055-8d67-570db1f5695c%2C
CVE ID: CVE-2020-8235 State: PUBLISHED Published: 2020-10-05T13:16:08 Last Updated: 2024-08-04T09:56:27.666Z Vendors: n/a Products: Nextcloud Deck app Problem Types: CWE-639 Description: Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/916704 - https://nextcloud.com/security/advisory/?id=NC-SA-2020-036
CVE ID: CVE-2020-8236 State: PUBLISHED Published: 2020-10-30T18:11:49 Last Updated: 2024-08-04T09:56:27.950Z Vendors: n/a Products: Nextcloud Server Problem Types: CWE-287 Description: A wrong configuration in Nextcloud Server 19.0.1 incorrectly made the user feel the passwordless WebAuthn is also a two factor verification by asking for the PIN of the passwordless WebAuthn but not verifying it. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/924393 - https://nextcloud.com/security/advisory/?id=NC-SA-2020-037
CVE ID: CVE-2020-8237 State: PUBLISHED Published: 2020-09-18T20:12:51 Last Updated: 2024-08-04T09:56:27.752Z Vendors: n/a Products: json-bigint Problem Types: CWE-400 Description: Prototype pollution in json-bigint npm package < 1.0.0 may lead to a denial-of-service (DoS) attack. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/916430