Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-10814 State: PUBLISHED Published: 2020-04-08T18:14:08 Last Updated: 2024-08-04T11:14:15.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in Code::Blocks 17.12 allows an attacker to execute arbitrary code via a crafted project file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/codeblocks/code/HEAD/tree/trunk/ChangeLog - https://sourceforge.net/p/codeblocks/tickets/934/ - https://www.povonsec.com/codeblocks-security-vulnerability/
CVE ID: CVE-2020-10816 State: PUBLISHED Published: 2020-10-08T16:50:02 Last Updated: 2024-08-04T11:14:15.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Applications Manager 14780 and before allows a remote unauthenticated attacker to register managed servers via AAMRequestProcessor servlet. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/au/products/applications_manager/security-updates/security-updates-cve-2020-10816.html - https://gitlab.com/eLeN3Re/CVE-2020-10816
CVE ID: CVE-2020-10817 State: PUBLISHED Published: 2020-03-27T18:19:48 Last Updated: 2024-08-04T11:14:15.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: The custom-searchable-data-entry-system (aka Custom Searchable Data Entry System) plugin through 1.7.1 for WordPress allows SQL Injection. NOTE: this product is discontinued. Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/log/custom-searchable-data-entry-system/ - http://avveng.com/cve.html
CVE ID: CVE-2020-10818 State: PUBLISHED Published: 2020-03-22T19:53:36 Last Updated: 2024-08-04T11:14:15.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the hostname" field. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2020/03/rce-in-artica-426.html
CVE ID: CVE-2020-10819 State: PUBLISHED Published: 2020-03-22T19:53:28 Last Updated: 2024-08-04T11:14:15.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2020/03/nagios-5611-xssd.html
CVE ID: CVE-2020-10820 State: PUBLISHED Published: 2020-03-22T19:53:20 Last Updated: 2024-08-04T11:14:15.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ password parameter. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2020/03/nagios-5611-xssd.html
CVE ID: CVE-2020-10821 State: PUBLISHED Published: 2020-03-22T19:53:12 Last Updated: 2024-08-04T11:14:15.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2020/03/nagios-5611-xssd.html
CVE ID: CVE-2020-10823 State: PUBLISHED Published: 2020-03-26T16:04:38.000Z Last Updated: 2025-05-05T17:09:19.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow in /cgi-bin/activate.cgi through var parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request (issue 1 of 3). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://slashd.ga/2020/03/draytek-vulnerabilities/ - https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/
CVE ID: CVE-2020-10824 State: PUBLISHED Published: 2020-03-26T16:04:44.000Z Last Updated: 2025-05-05T17:09:08.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow in /cgi-bin/activate.cgi through ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request (issue 2 of 3). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://slashd.ga/2020/03/draytek-vulnerabilities/ - https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/
CVE ID: CVE-2020-10825 State: PUBLISHED Published: 2020-03-26T16:04:57.000Z Last Updated: 2025-05-05T17:08:58.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow in /cgi-bin/activate.cgi while base64 decoding ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request (issue 3 of 3). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://slashd.ga/2020/03/draytek-vulnerabilities/ - https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/
CVE ID: CVE-2020-10826 State: PUBLISHED Published: 2020-03-26T16:05:03.000Z Last Updated: 2025-05-05T17:08:47.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: /cgi-bin/activate.cgi on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve command injection via a remote HTTP request in DEBUG mode. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://slashd.ga/2020/03/draytek-vulnerabilities/ - https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/
CVE ID: CVE-2020-10827 State: PUBLISHED Published: 2020-03-26T16:05:12.000Z Last Updated: 2025-05-05T17:08:37.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow in apmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://slashd.ga/2020/03/draytek-vulnerabilities/ - https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/
CVE ID: CVE-2020-10828 State: PUBLISHED Published: 2020-03-26T16:05:21.000Z Last Updated: 2025-05-05T17:08:28.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow in cvmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://slashd.ga/2020/03/draytek-vulnerabilities/ - https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/
CVE ID: CVE-2020-10829 State: PUBLISHED Published: 2020-03-24T17:01:53 Last Updated: 2024-08-04T11:14:15.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.0), P(9.0), and Q(10.0) (Broadcom chipsets) software. A kernel driver heap overflow leads to arbitrary code execution. The Samsung ID is SVE-2019-15880 (March 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10830 State: PUBLISHED Published: 2020-03-24T17:03:33 Last Updated: 2024-08-04T11:14:15.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can view notifications by entering many PINs in Lockdown mode. The Samsung ID is SVE-2019-16590 (March 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10831 State: PUBLISHED Published: 2020-03-24T17:05:17 Last Updated: 2024-08-04T11:14:15.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can trigger an update to arbitrary touch-screen firmware. The Samsung ID is SVE-2019-16013 (March 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10832 State: PUBLISHED Published: 2020-03-24T17:12:41 Last Updated: 2024-08-04T11:14:15.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software. Kernel Wi-Fi drivers allow out-of-bounds Read or Write operations (e.g., a buffer overflow). The Samsung IDs are SVE-2019-16125, SVE-2019-16134, SVE-2019-16158, SVE-2019-16159, SVE-2019-16319, SVE-2019-16320, SVE-2019-16337, SVE-2019-16464, SVE-2019-16465, SVE-2019-16467 (March 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10833 State: PUBLISHED Published: 2020-03-24T17:14:09 Last Updated: 2024-08-04T11:14:15.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with Q(10.0) software. The DeX Lockscreen allows attackers to access the quick panel and notifications. The Samsung ID is SVE-2019-16532 (March 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10834 State: PUBLISHED Published: 2020-03-24T17:15:25 Last Updated: 2024-08-04T11:14:15.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can view notifications on the lock screen via Routines. The Samsung ID is SVE-2019-15074 (February 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10835 State: PUBLISHED Published: 2020-03-24T17:17:19 Last Updated: 2024-08-04T11:14:15.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with any (before February 2020 for Exynos modem chipsets) software. There is a buffer overflow in baseband CP message decoding. The Samsung IDs are SVE-2019-15816 and SVE-2019-15817 (February 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10836 State: PUBLISHED Published: 2020-03-24T17:18:28 Last Updated: 2024-08-04T11:14:15.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. The Widevine Trustlet allows read and write operations on arbitrary memory locations. The Samsung ID is SVE-2019-15873 (February 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10837 State: PUBLISHED Published: 2020-03-24T17:19:51 Last Updated: 2024-08-04T11:14:15.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (with TEEGRIS) software. The Esecomm Trustlet allows a stack overflow and arbitrary code execution. The Samsung ID is SVE-2019-15984 (February 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10838 State: PUBLISHED Published: 2020-03-24T17:20:45 Last Updated: 2024-08-04T11:14:15.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. PROCA allows a use-after-free and arbitrary code execution. The Samsung ID is SVE-2019-16132 (February 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10839 State: PUBLISHED Published: 2020-03-24T17:21:51 Last Updated: 2024-08-04T11:14:15.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can bypass Factory Reset Protection (FRP) via a SIM card. The Samsung ID is SVE-2019-16193 (February 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10840 State: PUBLISHED Published: 2020-03-24T17:22:48 Last Updated: 2024-08-04T11:14:15.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 9610 chipsets) software. There is a kernel pointer leak in the vipx driver. The Samsung ID is SVE-2019-16293 (February 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10841 State: PUBLISHED Published: 2020-03-24T17:24:09 Last Updated: 2024-08-04T11:14:15.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 9610 chipsets) software. There is an arbitrary kfree in the vipx and vertex drivers. The Samsung ID is SVE-2019-16294 (February 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10842 State: PUBLISHED Published: 2020-03-24T17:25:18 Last Updated: 2024-08-04T11:14:15.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (S.LSI chipsets) software. There is a heap out-of-bounds write in the tsmux driver. The Samsung ID is SVE-2019-16295 (February 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10843 State: PUBLISHED Published: 2020-03-24T17:26:18 Last Updated: 2024-08-04T11:14:15.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (S.LSI chipsets) software. There are race conditions in the hdcp2 driver. The Samsung ID is SVE-2019-16296 (February 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10844 State: PUBLISHED Published: 2020-03-24T17:27:36 Last Updated: 2024-08-04T11:14:15.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.x), and Q(10.0) software. There is an out-of-bounds read vulnerability in media.audio_policy. The Samsung ID is SVE-2019-16333 (February 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10845 State: PUBLISHED Published: 2020-03-24T17:28:29 Last Updated: 2024-08-04T11:14:15.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. There is a race condition leading to a use-after-free in MTP. The Samsung ID is SVE-2019-16520 (February 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10846 State: PUBLISHED Published: 2020-03-24T17:29:21 Last Updated: 2024-08-04T11:14:15.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.x) and Q(10.x) software. Attackers can enable the OEM unlock feature on a KG-enrolled devices, leading to potentially unwanted binaries being downloaded. The Samsung ID is SVE-2019-16554 (February 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10847 State: PUBLISHED Published: 2020-03-24T17:30:10 Last Updated: 2024-08-04T11:14:15.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) (Galaxy S8 and Note8) software. Facial recognition can be spoofed. The Samsung ID is SVE-2019-16614 (February 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10848 State: PUBLISHED Published: 2020-03-24T17:31:15 Last Updated: 2024-08-04T11:14:15.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos 9810 chipsets) software. Arbitrary memory mapping exists in TEE. The Samsung ID is SVE-2019-16665 (February 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10849 State: PUBLISHED Published: 2020-03-24T17:32:38 Last Updated: 2024-08-04T11:14:15.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos7885, Exynos8895, and Exynos9810 chipsets) software. The Gatekeeper trustlet allows a brute-force attack on the screen lock password. The Samsung ID is SVE-2019-14575 (January 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10850 State: PUBLISHED Published: 2020-03-24T17:33:43 Last Updated: 2024-08-04T11:14:15.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. The secure bootloade has a buffer overflow of the USB buffer, leading to arbitrary code execution. The Samsung ID is SVE-2019-15872 (January 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10851 State: PUBLISHED Published: 2020-03-24T17:34:30 Last Updated: 2024-08-04T11:14:15.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. There is a stack overflow in the kperfmon driver. The Samsung ID is SVE-2019-15876 (January 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10852 State: PUBLISHED Published: 2020-03-24T17:35:12 Last Updated: 2024-08-04T11:14:15.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. There is a stack overflow in display driver. The Samsung ID is SVE-2019-15877 (January 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10853 State: PUBLISHED Published: 2020-03-24T17:36:09 Last Updated: 2024-08-04T11:14:15.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) software. Gallery leaks cached data. The Samsung IDs are SVE-2019-16010, SVE-2019-16011, SVE-2019-16012 (January 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10854 State: PUBLISHED Published: 2020-03-24T17:37:02 Last Updated: 2024-08-04T11:14:15.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Kernel stack addresses are leaked to userspace. The Samsung ID is SVE-2019-16161 (January 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10855 State: PUBLISHED Published: 2020-03-24T17:37:50 Last Updated: 2024-08-04T11:14:15.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can bypass Factory Reset Protection (FRP) via AppTray. The Samsung ID is SVE-2019-16192 (January 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-10857 State: PUBLISHED Published: 2021-02-05T19:16:26 Last Updated: 2024-08-04T11:14:15.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zulip.com/2020/04/01/zulip-desktop-5-0-0-security-release/
CVE ID: CVE-2020-10858 State: PUBLISHED Published: 2021-02-05T19:14:23 Last Updated: 2024-08-04T11:14:15.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zulip.com/2020/04/01/zulip-desktop-5-0-0-security-release/
CVE ID: CVE-2020-10859 State: PUBLISHED Published: 2020-05-05T20:16:42 Last Updated: 2024-08-04T11:14:15.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted AppDependency API request. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/desktop-central/arbitrary-file-upload-vulnerability.html
CVE ID: CVE-2020-10860 State: PUBLISHED Published: 2020-04-01T16:49:27 Last Updated: 2024-08-04T11:14:15.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Avast Antivirus before 20. An Arbitrary Memory Address Overwrite vulnerability in the aswAvLog Log Library results in Denial of Service of the Avast Service (AvastSvc.exe). Additional Analyst Notes: - CVE Program Container: References: - https://forum.avast.com/index.php?topic=232420.0 - https://forum.avast.com/index.php?topic=232423.0 - https://github.com/umarfarook882/Avast_Multiple_Vulnerability_Disclosure/blob/master/README.md
CVE ID: CVE-2020-10861 State: PUBLISHED Published: 2020-04-01T16:50:01 Last Updated: 2024-08-04T11:14:15.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to achieve Arbitrary File Deletion from Avast Program Path via RPC, when Self Defense is Enabled. Additional Analyst Notes: - CVE Program Container: References: - https://forum.avast.com/index.php?topic=232420.0 - https://forum.avast.com/index.php?topic=232423.0 - https://github.com/umarfarook882/Avast_Multiple_Vulnerability_Disclosure/blob/master/README.md
CVE ID: CVE-2020-10862 State: PUBLISHED Published: 2020-04-01T16:53:52 Last Updated: 2024-08-04T11:14:15.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to achieve Local Privilege Escalation (LPE) via RPC. Additional Analyst Notes: - CVE Program Container: References: - https://forum.avast.com/index.php?topic=232420.0 - https://forum.avast.com/index.php?topic=232423.0 - https://github.com/umarfarook882/Avast_Multiple_Vulnerability_Disclosure/blob/master/README.md