Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-6123 State: PUBLISHED Published: 2020-09-01T14:01:53 Last Updated: 2024-08-04T08:55:20.860Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OS4Ed Problem Types: CWE-89 Description: An exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed openSIS 7.3. The email parameter in the page EmailCheck.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1073
CVE ID: CVE-2020-6124 State: PUBLISHED Published: 2020-09-01T14:03:00 Last Updated: 2024-08-04T08:55:21.491Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OS4Ed Problem Types: CWE-89 Description: An exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed openSIS 7.3. The email parameter in the page EmailCheckOthers.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1073
CVE ID: CVE-2020-6125 State: PUBLISHED Published: 2020-09-01T14:07:04 Last Updated: 2024-08-04T08:55:20.848Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OS4Ed Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in the GetSchool.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1074
CVE ID: CVE-2020-6126 State: PUBLISHED Published: 2020-09-01T14:14:36 Last Updated: 2024-08-04T08:55:20.868Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OS4Ed Problem Types: CWE-89 Description: SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The course_period_id parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1075
CVE ID: CVE-2020-6127 State: PUBLISHED Published: 2020-09-01T14:14:51 Last Updated: 2024-08-04T08:55:20.858Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OS4Ed Problem Types: CWE-89 Description: SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The id parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1075
CVE ID: CVE-2020-6128 State: PUBLISHED Published: 2020-09-01T14:15:36 Last Updated: 2024-08-04T08:55:21.318Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OS4Ed Problem Types: CWE-89 Description: SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. The meet_date parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-107
Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1075
CVE ID: CVE-2020-6129 State: PUBLISHED Published: 2020-09-01T13:06:41 Last Updated: 2024-08-04T08:55:21.415Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OS4ED Problem Types: CWE-89 Description: SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_period_id parameter in the page CpSessionSet.php is vulnerable to SQL injection.An attacker can make an authenticated HTTP request to trigger these vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1076
CVE ID: CVE-2020-6130 State: PUBLISHED Published: 2020-09-01T13:07:08 Last Updated: 2024-08-04T08:55:21.859Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OS4ED Problem Types: CWE-89 Description: SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_period_id parameter in the page MassDropSessionSet.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1076
CVE ID: CVE-2020-6131 State: PUBLISHED Published: 2020-09-01T13:07:24 Last Updated: 2024-08-04T08:55:21.808Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OS4ED Problem Types: CWE-89 Description: SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_period_id parameter in the page MassScheduleSessionSet.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1076
CVE ID: CVE-2020-6132 State: PUBLISHED Published: 2020-09-01T14:24:20 Last Updated: 2024-08-04T08:55:21.458Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OS4Ed Problem Types: CWE-89 Description: SQL injection vulnerability exists in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page ChooseCP.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1077
CVE ID: CVE-2020-6133 State: PUBLISHED Published: 2020-09-01T14:24:56 Last Updated: 2024-08-04T08:55:21.324Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OS4Ed Problem Types: CWE-89 Description: SQL injection vulnerabilities exist in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page CourseMoreInfo.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1077
CVE ID: CVE-2020-6134 State: PUBLISHED Published: 2020-09-01T14:25:19 Last Updated: 2024-08-04T08:55:21.908Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OS4Ed Problem Types: CWE-89 Description: SQL injection vulnerabilities exist in the ID parameters of OS4Ed openSIS 7.3 pages. The id parameter in the page MassDropModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1077
CVE ID: CVE-2020-6135 State: PUBLISHED Published: 2020-09-01T16:20:09 Last Updated: 2024-08-04T08:55:21.526Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OS4Ed Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in the Validator.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1078
CVE ID: CVE-2020-6136 State: PUBLISHED Published: 2020-09-01T17:11:22 Last Updated: 2024-08-04T08:55:21.642Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: OS4Ed Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in the DownloadWindow.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1079
CVE ID: CVE-2020-6137 State: PUBLISHED Published: 2020-09-01T20:03:32 Last Updated: 2024-08-04T08:55:21.523Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: OS4Ed Problem Types: CWE-89 Description: SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The password_stf_email parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1080
CVE ID: CVE-2020-6138 State: PUBLISHED Published: 2020-09-01T20:03:49 Last Updated: 2024-08-04T08:55:21.461Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: OS4Ed Problem Types: CWE-89 Description: SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The uname parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1080
CVE ID: CVE-2020-6139 State: PUBLISHED Published: 2020-09-01T20:04:42 Last Updated: 2024-08-04T08:55:21.385Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: OS4Ed Problem Types: CWE-89 Description: SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The username_stf_email parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1080
CVE ID: CVE-2020-6140 State: PUBLISHED Published: 2020-09-01T20:04:55 Last Updated: 2024-08-04T08:55:21.858Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: OS4Ed Problem Types: CWE-89 Description: SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The password_stf_email parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1080
CVE ID: CVE-2020-6141 State: PUBLISHED Published: 2020-09-01T17:31:10 Last Updated: 2024-08-04T08:55:21.663Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: OS4Ed Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in the login functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1081
CVE ID: CVE-2020-6142 State: PUBLISHED Published: 2020-09-01T20:12:08 Last Updated: 2024-08-04T08:55:21.837Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: OS4Ed Problem Types: CWE-22 Description: A remote code execution vulnerability exists in the Modules.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can cause local file inclusion. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1082
CVE ID: CVE-2020-6143 State: PUBLISHED Published: 2020-09-01T20:15:25 Last Updated: 2024-08-04T08:55:21.316Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: OS4Ed Problem Types: CWE-96 Description: A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The password variable which is set at line 122 in install/Step5.php allows for injection of PHP code into the Data.php file that it writes. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1083
CVE ID: CVE-2020-6144 State: PUBLISHED Published: 2020-09-01T20:15:36 Last Updated: 2024-08-04T08:55:21.430Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: OS4Ed Problem Types: CWE-96 Description: A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The username variable which is set at line 121 in install/Step5.php allows for injection of PHP code into the Data.php file that it writes. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1083
CVE ID: CVE-2020-6145 State: PUBLISHED Published: 2020-08-10T13:10:24 Last Updated: 2024-08-04T08:55:21.489Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: ERPNext Problem Types: CWE-89 Description: An SQL injection vulnerability exists in the frappe.desk.reportview.get functionality of ERPNext 11.1.38. A specially crafted HTTP request can cause an SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1091
CVE ID: CVE-2020-6146 State: PUBLISHED Published: 2020-09-16T18:48:51 Last Updated: 2024-08-04T08:55:21.961Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Nitro Pro Problem Types: CWE-122 Description: An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. When drawing the contents of a page and selecting the stroke color from an 'ICCBased' colorspace, the application will read a length from the file and use it as a loop sentinel when writing data into the member of an object. Due to the object member being a buffer of a static size allocated on the heap, this can result in a h
ber of an object. Due to the object member being a buffer of a static size allocated on the heap, this can result in a heap-based buffer overflow. A specially crafted document must be loaded by a victim in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1084
CVE ID: CVE-2020-6147 State: PUBLISHED Published: 2020-11-13T14:43:29 Last Updated: 2024-08-04T08:55:21.890Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Pixar Problem Types: CWE-122 Description: A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. This instance exists in the USDC file format FIELDS section decompression heap overflow. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1094 - http://seclists.org/fulldisclosure/2020/Nov/20
CVE ID: CVE-2020-6148 State: PUBLISHED Published: 2020-11-13T14:43:52 Last Updated: 2024-08-04T08:55:22.336Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Pixar Problem Types: CWE-122 Description: A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. An instance exists in USDC file format FIELDSETS section decompression heap overflow. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1094
CVE ID: CVE-2020-6149 State: PUBLISHED Published: 2020-11-13T14:44:00 Last Updated: 2024-08-04T08:55:21.608Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Pixar Problem Types: CWE-122 Description: A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file in an instance in USDC file format PATHS section. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1094
CVE ID: CVE-2020-6150 State: PUBLISHED Published: 2020-11-13T14:24:58 Last Updated: 2024-08-04T08:55:21.924Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Pixar Problem Types: CWE-122 Description: A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software USDC file format SPECS section decompression heap overflow. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1094
CVE ID: CVE-2020-6151 State: PUBLISHED Published: 2020-09-01T20:52:36 Last Updated: 2024-08-04T08:55:22.076Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Accusoft Problem Types: CWE-704 Description: A memory corruption vulnerability exists in the TIFF handle_COMPRESSION_PACKBITS functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause a memory corruption. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1095
CVE ID: CVE-2020-6152 State: PUBLISHED Published: 2020-09-01T20:54:52 Last Updated: 2024-08-04T08:55:22.023Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Accusoft Problem Types: CWE-252 Description: A code execution vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause an out-of-bounds write. An attacker can trigger this vulnerability by providing a victim with a malicious DICOM file. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1096
CVE ID: CVE-2020-6153 State: REJECTED Published: 2020-09-24T14:15:58 Last Updated: 2020-09-29T20:26:03 Description: No description available.
CVE ID: CVE-2020-6155 State: PUBLISHED Published: 2020-11-13T14:38:51 Last Updated: 2024-08-04T08:55:21.917Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Pixar Problem Types: CWE-122 Description: A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD files. A specially crafted malformed file can trigger a heap overflow, which can result in remote code execution. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-202
onal Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1101
CVE ID: CVE-2020-6156 State: PUBLISHED Published: 2020-11-13T14:41:58 Last Updated: 2024-08-04T08:55:21.518Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Pixar Problem Types: CWE-122 Description: A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file in an instance USDC file format path element token index. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1094
CVE ID: CVE-2020-6157 State: PUBLISHED Published: 2020-11-13T19:26:16 Last Updated: 2024-08-04T08:55:22.083Z Vendors: n/a Products: Opera Touch for iOS Problem Types: Address bar spoofing Description: Opera Touch for iOS before version 2.4.5 is vulnerable to an address bar spoofing attack. The vulnerability allows a malicious page to trick the browser into showing an address of a different page. This may allow the malicious page to impersonate another page and trick a user into providing sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://security.opera.com/address-bar-spoofing-in-opera-touch-for-ios-opera-security-advisories/
CVE ID: CVE-2020-6158 State: PUBLISHED Published: 2025-02-21T13:30:31.434Z Last Updated: 2025-02-21T18:41:43.721Z Vendors: n/a Products: Opera Mini for Android Problem Types: Address bar spoofing (CWE-451) Description: Opera Mini for Android before version 52.2 is vulnerable to an address bar spoofing attack. The vulnerability allows a malicious page to trick the browser into showing an address of a different page. This may allow the malicious page to impersonate another page and trick a user into providing sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.opera.com/en/address-bar-spoofing-in-opera-mini-for-android-opera-security-advisories/
CVE ID: CVE-2020-6159 State: PUBLISHED Published: 2020-12-23T15:08:58 Last Updated: 2024-08-04T08:55:21.884Z Vendors: n/a Products: Opera for Android Problem Types: CWE-79 Description: URLs using “javascript:” have the protocol removed when pasted into the address bar to protect users from cross-site scripting (XSS) attacks, but in certain circumstances this removal was not performed. This could allow users to be socially engineered to run an XSS attack against themselves. This vulnerability affects Opera for Android versions below 61.0.3076.56532. Additional Analyst Notes: - CVE Program Container: References: - https://security.opera.com/cross-site-scripting-in-ofa-opera-security-advisories
- CVE Program Container: References: - https://security.opera.com/cross-site-scripting-in-ofa-opera-security-advisories/
CVE ID: CVE-2020-6162 State: PUBLISHED Published: 2020-01-10T16:43:13 Last Updated: 2024-08-04T08:55:22.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bftpd 5.3. Under certain circumstances, an out-of-bounds read is triggered due to an uninitialized value. The daemon crashes at startup in the hidegroups_init function in dirlist.c. Additional Analyst Notes: - CVE Program Container: References: - http://bftpd.sourceforge.net/news.html - https://fossies.org/linux/bftpd/CHANGELOG