Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-23588 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T20:39:07.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to "Enable or Disable Ports" and to "Change port number" through " /rmtacc.asp ". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/huzaifahussain98/CVE-2020-23588
CVE ID: CVE-2020-23589 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-29T15:59:56.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to cause a Denial of Service by Rebooting the router through " /mgm_dev_reboot.asp." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/huzaifahussain98/CVE-2020-23589
CVE ID: CVE-2020-23590 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-29T15:58:53.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated remote attacker to conduct a cross-site request forgery (CSRF) attack to change the Password for "WLAN SSID" through "wlwpa.asp". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/huzaifahussain98/CVE-2020-23590
CVE ID: CVE-2020-23591 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-29T15:57:51.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an attacker to upload arbitrary files through " /mgm_dev_upgrade.asp " which can "delete every file for Denial of Service (using 'rm -rf *.*' in the code), reverse connection (using '.asp' webshell), backdoor. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/huzaifahussain98/CVE-2020-23591
CVE ID: CVE-2020-23592 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-29T15:56:45.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to Reset ONU to Factory Default through ' /mgm_dev_reset.asp.' Resetting to default leads to Escalation of Privileges by logging-in with default credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/huzaifahussain98/CVE-2020-23592
CVE ID: CVE-2020-23593 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-29T16:02:29.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2, Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross site request forgery (CSRF) attack to enable syslog mode through ' /mgm_log_cfg.asp.' The system starts to log events, 'Remote' mode or 'Both' mode on "Syslog -- Configuration page" logs events and sends to remote syslog server IP and Port. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/huzaifahussain9
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/huzaifahussain98/CVE-2020-23593
CVE ID: CVE-2020-23595 State: PUBLISHED Published: 2023-08-11T00:00:00 Last Updated: 2024-10-09T19:26:54.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive information sitemodel/add.html endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yzmcms/yzmcms/issues/47
CVE ID: CVE-2020-23617 State: PUBLISHED Published: 2022-05-02T22:40:29 Last Updated: 2024-08-04T14:58:15.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross site scripting (XSS) vulnerability in the error page of Totolink N200RE and N100RE Routers 2.0 allows attackers to execute arbitrary web scripts or HTML via SCRIPT element. Additional Analyst Notes: - CVE Program Container: References: - http://totolink.net/ - https://gist.github.com/fuzzKitty/8ca2587213874e94e5c0aedf346c18b1
CVE ID: CVE-2020-23618 State: PUBLISHED Published: 2022-05-02T22:40:53 Last Updated: 2024-08-04T14:58:15.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross site scripting (XSS) vulnerability in Xtend Voice Logger 1.0 allows attackers to execute arbitrary web scripts or HTML, via the path of the error page. Additional Analyst Notes: - CVE Program Container: References: - http://www.xtendtech.com/voicelogger/index.htm - https://gist.github.com/fuzzKitty/3f62b37b8fc44ee996d3f07442f9a3a2
CVE ID: CVE-2020-23620 State: PUBLISHED Published: 2022-05-02T22:40:58 Last Updated: 2024-08-04T14:58:15.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Remote Management Interface of all versions of Orlansoft ERP was discovered to contain a vulnerability due to insecure deserialization of user-supplied content, which can allow attackers to execute arbitrary code via a crafted serialized Java object. Additional Analyst Notes: - CVE Program Container: References: - https://orlansoft.com/ - https://github.com/joaomatosf/jexboss - https://gist.github.com/fuzzKitty/95106430aa09760ebdcfa6304777f31f
CVE ID: CVE-2020-23621 State: PUBLISHED Published: 2022-05-02T22:41:14 Last Updated: 2024-08-04T14:58:14.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Remote Management Interface of all versions of SVI MS Management System was discovered to contain a vulnerability due to insecure deserialization of user-supplied content, which can allow attackers to execute arbitrary code via a crafted serialized Java object. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/joaomatosf/jexboss - https://www.squire-technologies.co.uk/ - https://gist.github.com/fuzzKitty/dd1c6fac4f36e70ea64814732726aaea
CVE ID: CVE-2020-23622 State: PUBLISHED Published: 2022-08-15T19:10:38 Last Updated: 2024-08-04T14:58:15.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the UPnP protocol in 4thline cling 2.0.0 through 2.1.2 allows remote attackers to cause a denial of service via an unchecked CALLBACK parameter in the request header Additional Analyst Notes: - CVE Program Container: References: - https://github.com/4thline/cling/issues/253 - https://zh-cn.tenable.com/blog/cve-2020-12695-callstranger-vulnerability-in-universal-plug-and-play-upnp-puts-billions-of?tns_redirect=true
CVE ID: CVE-2020-23630 State: PUBLISHED Published: 2021-01-11T14:18:22 Last Updated: 2024-08-04T14:58:15.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: A blind SQL injection vulnerability exists in zzcms ver201910 based on time (cookie injection). Additional Analyst Notes: - CVE Program Container: References: - http://zzcms.com - https://github.com/Pandora1m2/ - https://github.com/Pandora1m2/zzcms201910/issues/1
CVE ID: CVE-2020-23631 State: PUBLISHED Published: 2021-01-11T19:16:40 Last Updated: 2024-08-04T14:58:15.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) in admin/global/manage.php in WDJA CMS 1.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via the tongji parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shadoweb/wdja/issues/11 - https://www.cnblogs.com/wayne-tao/p/13110663.html
CVE ID: CVE-2020-23639 State: PUBLISHED Published: 2020-11-02T17:39:34 Last Updated: 2024-08-04T14:58:15.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability exists in Moxa Inc VPort 461 Series Firmware Version 3.4 or lower that could allow a remote attacker to execute arbitrary commands in Moxa's VPort 461 Series Industrial Video Servers. Additional Analyst Notes: - CVE Program Container: References: - https://www.moxa.com/en/support/support/security-advisory/vport-461-series-industrial-video-servers-vulnerabilities
CVE ID: CVE-2020-23643 State: PUBLISHED Published: 2021-01-11T13:15:56 Last Updated: 2024-08-04T14:58:15.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in JIZHICMS 1.7.1 via index.php/Wechat/checkWeixin?signature=1&echostr={XSS] to Home/c/WechatController.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cherry-toto/jizhicms/issues/29
CVE ID: CVE-2020-23644 State: PUBLISHED Published: 2021-01-11T13:16:13 Last Updated: 2024-08-04T14:58:15.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in JIZHICMS 1.7.1 via index.php/Error/index?msg={XSS] to Home/c/ErrorController.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cherry-toto/jizhicms/issues/28
CVE ID: CVE-2020-23647 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-01-31T18:00:43.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the message field on the submit new ticket form. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/boxbilling/boxbilling/issues/596
CVE ID: CVE-2020-23648 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T14:56:09.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asus RT-N12E 2.0.0.39 is affected by an incorrect access control vulnerability. Through system.asp / start_apply.htm, an attacker can change the administrator password without any authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.asus.com/Networking/RTN12E/HelpDesk_BIOS/ - https://www.shodan.io/search?query=rt-n12e - https://gist.github.com/ninj4c0d3r/574d2753d469e4ba51dfe555d9c2d4fb
CVE ID: CVE-2020-23653 State: PUBLISHED Published: 2021-01-13T17:47:14 Last Updated: 2024-08-04T14:58:15.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: An insecure unserialize vulnerability was discovered in ThinkAdmin versions 4.x through 6.x in app/admin/controller/api/Update.php and app/wechat/controller/api/Push.php, which may lead to arbitrary remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zoujingli/ThinkAdmin/issues/238
CVE ID: CVE-2020-23654 State: PUBLISHED Published: 2020-08-26T16:42:04 Last Updated: 2024-08-04T14:58:15.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) via the module "Shop." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NavigateCMS/Navigate-CMS/issues/10
CVE ID: CVE-2020-23655 State: PUBLISHED Published: 2020-08-26T16:48:52 Last Updated: 2024-08-04T14:58:15.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NavigateCMS/Navigate-CMS/issues/11
CVE ID: CVE-2020-23656 State: PUBLISHED Published: 2020-08-26T16:53:13 Last Updated: 2024-08-04T14:58:15.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Content." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NavigateCMS/Navigate-CMS/issues/12
CVE ID: CVE-2020-23657 State: PUBLISHED Published: 2020-08-26T16:55:48 Last Updated: 2024-08-04T14:58:15.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NavigateCMS/Navigate-CMS/issues/11
CVE ID: CVE-2020-23658 State: PUBLISHED Published: 2020-08-26T17:11:38 Last Updated: 2024-08-04T14:58:15.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP-Fusion 9.03.60 is affected by Cross Site Scripting (XSS) via infusions/member_poll_panel/poll_admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/php-fusion/PHP-Fusion/issues/2325
CVE ID: CVE-2020-23659 State: PUBLISHED Published: 2020-08-26T17:34:11 Last Updated: 2024-08-04T14:58:15.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebPort-v1.19.17121 is affected by Cross Site Scripting (XSS) on the "connections" feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/r0ck3t1973/xss_payload/issues/1
CVE ID: CVE-2020-23660 State: PUBLISHED Published: 2020-08-26T17:26:12 Last Updated: 2024-08-04T14:58:15.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: webTareas v2.1 is affected by Cross Site Scripting (XSS) on "Search." Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/webtareas/tickets/41/
CVE ID: CVE-2020-23679 State: PUBLISHED Published: 2021-11-03T16:10:00 Last Updated: 2024-08-04T15:05:10.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in Renleilei1992 Linux_Network_Project 1.0, allows attackers to execute arbitrary code, via the password field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Renleilei1992/Linux_Network_Project/issues/1
CVE ID: CVE-2020-23680 State: PUBLISHED Published: 2021-11-03T16:28:43 Last Updated: 2024-08-04T15:05:10.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in function StartPage in text2pdf.c in pdfcorner text2pdf 1.1, allows attackers to cause denial of service or possibly other undisclosed impacts. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/philips/text2pdf/issues/1 - http://www.eprg.org/pdfcorner/text2pdf/
CVE ID: CVE-2020-23685 State: PUBLISHED Published: 2021-11-02T17:45:07 Last Updated: 2024-08-04T15:05:10.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in 188Jianzhan v2.1.0, allows attackers to execute arbitrary code and gain escalated privileges, via the username parameter to login.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vtime-tech/188Jianzhan/issues/2
CVE ID: CVE-2020-23686 State: PUBLISHED Published: 2021-11-02T17:45:09 Last Updated: 2024-08-04T15:05:10.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/loadream/AyaCMS/issues/1
CVE ID: CVE-2020-23689 State: PUBLISHED Published: 2021-05-14T13:57:31 Last Updated: 2024-08-04T15:05:10.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: In YFCMF v2.3.1, there is a stored XSS vulnerability in the comments section of the news page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lxw1844912514/YFCMF/issues/2
CVE ID: CVE-2020-23691 State: PUBLISHED Published: 2021-05-14T14:02:01 Last Updated: 2024-08-04T15:05:10.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: YFCMF v2.3.1 has a Remote Command Execution (RCE) vulnerability in the index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lxw1844912514/YFCMF/issues/1
CVE ID: CVE-2020-23697 State: PUBLISHED Published: 2021-07-06T20:50:22 Last Updated: 2024-08-04T15:05:10.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerabilty in Monstra CMS 3.0.4 via the page feature in admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monstra-cms/monstra/issues/463
CVE ID: CVE-2020-23700 State: PUBLISHED Published: 2021-07-07T18:19:05 Last Updated: 2024-08-04T15:05:11.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LavaLite/cms/issues/319
CVE ID: CVE-2020-23702 State: PUBLISHED Published: 2021-07-07T18:56:55 Last Updated: 2024-08-04T15:05:10.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in PHP-Fusion 9.03.60 via 'New Shout' in /infusions/shoutbox_panel/shoutbox_admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://user-images.githubusercontent.com/62001260/82175522-47169980-98fe-11ea-9a8e-93622aab7cf4.PNG - https://github.com/phpfusion/PHPFusion/issues/2328
CVE ID: CVE-2020-23705 State: PUBLISHED Published: 2021-07-15T21:55:05 Last Updated: 2024-08-04T15:05:10.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: A global buffer overflow vulnerability in jfif_encode at jfif.c:701 of ffjpeg through 2020-06-22 allows attackers to cause a Denial of Service (DOS) via a crafted jpeg file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rockcarry/ffjpeg/issues/25
CVE ID: CVE-2020-23706 State: PUBLISHED Published: 2021-07-15T21:55:07 Last Updated: 2024-08-04T15:05:10.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_subsequent_scan() ok_jpg.c:1102 of ok-file-formats through 2020-06-26 allows attackers to cause a Denial of Service (DOS) via a crafted jpeg file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/brackeen/ok-file-formats/issues/7
CVE ID: CVE-2020-23707 State: PUBLISHED Published: 2021-07-15T21:55:09 Last Updated: 2024-08-04T15:05:10.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_progressive() at ok_jpg.c:1054 of ok-file-formats through 2020-06-26 allows attackers to cause a Denial of Service (DOS) via a crafted jpeg file. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/122.html - https://github.com/brackeen/ok-file-formats/issues/8
CVE ID: CVE-2020-23710 State: PUBLISHED Published: 2021-06-28T15:02:12 Last Updated: 2024-08-04T15:05:10.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulneraiblity in LimeSurvey 4.2.5 on textbox via the Notifications & data feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LimeSurvey/LimeSurvey/pull/1441#partial-pull-merging
CVE ID: CVE-2020-23711 State: PUBLISHED Published: 2021-06-28T16:07:26 Last Updated: 2024-08-04T15:05:11.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in NavigateCMS 2.9 via the URL encoded GET input category in navigate.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NavigateCMS/Navigate-CMS/issues/20
CVE ID: CVE-2020-23715 State: PUBLISHED Published: 2021-06-28T16:55:07 Last Updated: 2024-08-04T15:05:10.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in Webport CMS 1.19.10.17121 via the file parameter to file/download. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/luuthehienhbit/LFI-Vulnerability-Webport-CMS-version-1.19.10.17121/blob/master/README.md
CVE ID: CVE-2020-23718 State: PUBLISHED Published: 2021-11-02T17:45:12 Last Updated: 2024-08-04T15:05:10.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) vulnerability in xujinliang zibbs 1.0, allows attackers to execute arbitrary code via the route parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xujinliang/zibbs/issues/4
CVE ID: CVE-2020-23719 State: PUBLISHED Published: 2021-11-02T17:45:14 Last Updated: 2024-08-04T15:05:10.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) vulnerability in application/controllers/AdminController.php in xujinliang zibbs 1.0, allows attackers to execute arbitrary code via the bbsmeta parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xujinliang/zibbs/issues/5
CVE ID: CVE-2020-23721 State: PUBLISHED Published: 2021-03-10T13:36:35 Last Updated: 2024-08-04T15:05:11.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FUEL CMS V1.4.7. An attacker can use a XSS payload and bypass a filter via /fuelCM/fuel/pages/edit/1?lang=english. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/daylightstudio/FUEL-CMS/issues/559
CVE ID: CVE-2020-23722 State: PUBLISHED Published: 2021-03-10T13:36:54 Last Updated: 2024-08-04T15:05:10.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FUEL CMS 1.4.7. There is a escalation of privilege vulnerability to obtain super admin privilege via the "id" and "fuel_id" parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/daylightstudio/FUEL-CMS/issues/560
CVE ID: CVE-2020-23726 State: PUBLISHED Published: 2020-12-03T17:16:29 Last Updated: 2024-08-04T15:05:10.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a local denial of service vulnerability in Wise Care 365 5.5.4, attackers can cause computer crash (BSOD). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/y5s5k5/POCtemp1 - https://www.wisecleaner.com.cn/ - https://www.wisecleaner.com.cn/download.html - https://github.com/y5s5k5/CVE-2020-23726
CVE ID: CVE-2020-23727 State: PUBLISHED Published: 2020-12-03T17:43:17 Last Updated: 2024-08-04T15:05:10.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a local denial of service vulnerability in the Antiy Zhijia Terminal Defense System 5.0.2.10121559 and an attacker can cause a computer crash (BSOD). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/y5s5k5/POCtemp3 - https://www.antiy.com - https://github.com/y5s5k5/CVE-2020-23727
CVE ID: CVE-2020-23735 State: PUBLISHED Published: 2020-12-03T16:57:07 Last Updated: 2024-08-04T15:05:11.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Saibo Cyber Game Accelerator 3.7.9 there is a local privilege escalation vulnerability. Attackers can use the constructed program to increase user privileges Additional Analyst Notes: - CVE Program Container: References: - http://www.saibo.com - https://github.com/y5s5k5/CVE-2020-23735
CVE ID: CVE-2020-23736 State: PUBLISHED Published: 2020-12-03T18:47:15 Last Updated: 2024-08-04T15:05:10.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a local denial of service vulnerability in DaDa accelerator 5.6.19.816,, attackers can use constructed programs to cause computer crashes (BSOD). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/y5s5k5/POCtemp5 - http://www.dadajiasu.net - https://github.com/y5s5k5/CVE-2020-23736