Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-5492 State: REJECTED Published: 2021-01-25T17:53:47 Last Updated: 2021-01-25T17:53:47 Description: No description available.
CVE ID: CVE-2020-5493 State: REJECTED Published: 2021-01-25T17:53:47 Last Updated: 2021-01-25T17:53:47 Description: No description available.
CVE ID: CVE-2020-5494 State: REJECTED Published: 2021-01-25T17:53:47 Last Updated: 2021-01-25T17:53:47 Description: No description available.
CVE ID: CVE-2020-5495 State: REJECTED Published: 2021-01-25T17:53:47 Last Updated: 2021-01-25T17:53:47 Description: No description available.
CVE ID: CVE-2020-5496 State: PUBLISHED Published: 2020-01-03T00:00:00 Last Updated: 2024-08-04T08:30:24.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fontforge/fontforge/issues/4085 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00041.html - https://security.gentoo.org/glsa/202004-14 - https://lists.debian.org/debian-lts-announce/2024/03/msg00007.html
CVE ID: CVE-2020-5497 State: PUBLISHED Published: 2020-01-04T02:07:34 Last Updated: 2024-08-04T08:30:24.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson being included in the page unsanitized. This is related to header.tag. The issue can be exploited to execute arbitrary JavaScript. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/issues/1521 - https://www.securitymetrics.com/blog/MITREid-Connect-cross-site-scripting-CVE-2020-5497 - http://seclists.org/fulldisclosure/2020/Feb/25 - http:
ics.com/blog/MITREid-Connect-cross-site-scripting-CVE-2020-5497 - http://seclists.org/fulldisclosure/2020/Feb/25 - http://packetstormsecurity.com/files/156574/MITREid-1.3.3-Cross-Site-Scripting.html
CVE ID: CVE-2020-5498 State: REJECTED Published: 2020-01-21T20:03:03 Last Updated: 2020-01-21T20:03:03 Description: No description available.
CVE ID: CVE-2020-5499 State: PUBLISHED Published: 2020-01-04T06:05:05 Last Updated: 2024-08-04T08:30:24.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wssgcsc58/CVEs/tree/master/baidurustsgxsdk_enclaveid_race
CVE ID: CVE-2020-5501 State: PUBLISHED Published: 2020-01-14T23:57:43 Last Updated: 2024-08-04T08:30:24.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpBB 3.2.8 allows a CSRF attack that can modify a group avatar. Additional Analyst Notes: - CVE Program Container: References: - https://blog.phpbb.com/category/security/ - https://www.phpbb.com/community/viewtopic.php?f=14&t=2534536
CVE ID: CVE-2020-5502 State: PUBLISHED Published: 2020-01-14T23:59:00 Last Updated: 2024-08-04T08:30:24.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpBB 3.2.8 allows a CSRF attack that can approve pending group memberships. Additional Analyst Notes: - CVE Program Container: References: - https://blog.phpbb.com/category/security/ - https://www.phpbb.com/community/viewtopic.php?f=14&t=2534536
CVE ID: CVE-2020-5504 State: PUBLISHED Published: 2020-01-09T21:56:22.000Z Last Updated: 2025-04-16T14:13:38.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.phpmyadmin.net/security/PMASA-2020-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00024.html - https://lists.debian.org/debian-lts-announce/2020/01/msg00011.
se.org/opensuse-security-announce/2020-01/msg00024.html - https://lists.debian.org/debian-lts-announce/2020/01/msg00011.html - https://cybersecurityworks.com/zerodays/cve-2020-5504-phpmyadmin.html - https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2020-5504.md
CVE ID: CVE-2020-5505 State: PUBLISHED Published: 2020-01-14T18:08:02 Last Updated: 2024-08-04T08:30:24.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring (in conjunction with "type":"application/x-php"} to the /api/files/ URI. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/155922/Freelancy-1.0.0-Remote-Code-Execution.html
CVE ID: CVE-2020-5509 State: PUBLISHED Published: 2020-01-14T18:10:02 Last Updated: 2024-08-04T08:30:24.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile image. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/155925/Car-Rental-Project-1.0-Remote-Code-Execution.html
CVE ID: CVE-2020-5510 State: PUBLISHED Published: 2020-01-08T17:32:49.000Z Last Updated: 2025-11-11T18:20:39.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47854 - https://www.exploit-db.com/exploits/48542
CVE ID: CVE-2020-5511 State: PUBLISHED Published: 2020-01-08T17:41:17 Last Updated: 2024-08-04T08:30:24.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47874
CVE ID: CVE-2020-5512 State: PUBLISHED Published: 2020-01-06T19:16:31 Last Updated: 2024-08-04T08:30:24.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gila CMS 1.11.8 allows /admin/media?path=../ Path Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://infosecdb.wordpress.com/2020/01/05/gilacms-1-11-8-admin-mediapath-directory-traversal/
CVE ID: CVE-2020-5513 State: PUBLISHED Published: 2020-01-06T19:06:20 Last Updated: 2024-08-04T08:30:24.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gila CMS 1.11.8 allows /cm/delete?t=../ Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://gilacms.com/blog - https://infosecdb.wordpress.com/2020/01/05/gilacms-1-11-8-cm-deletet-lfi-local-file-inclusion-and-rce/
CVE ID: CVE-2020-5514 State: PUBLISHED Published: 2020-01-06T18:43:47 Last Updated: 2024-08-04T08:30:24.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= URI. Additional Analyst Notes: - CVE Program Container: References: - https://infosecdb.wordpress.com/2020/01/05/gilacms-1-11-8-remote-code-execution/
CVE ID: CVE-2020-5515 State: PUBLISHED Published: 2020-01-06T18:40:10 Last Updated: 2024-08-04T08:30:24.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://infosecdb.wordpress.com/2020/01/05/gilacms-1-11-8-admin-sqlquery-sql-injection/ - http://packetstormsecurity.com/files/158114/Gila-CMS-1.11.8-SQL-Injection.html - http://packetstormsecurity.com/files/158140/Gila-CMS-1.1.18.1-SQL-Injection-Shell-Upload.html
CVE ID: CVE-2020-5517 State: PUBLISHED Published: 2020-05-05T17:05:06 Last Updated: 2024-08-04T08:30:24.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSRF in the /login URI in BlueOnyx 5209R allows an attacker to access the dashboard and perform scraping or other analysis. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4 - https://www.blueonyx.it/news/278/15/5209R5210R-YUM-Updates/ - https://devel.blueonyx.it/trac/changeset/4034/
CVE ID: CVE-2020-5519 State: PUBLISHED Published: 2020-01-06T12:54:20 Last Updated: 2024-08-04T08:30:24.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server Configuration > External App" screen. Additional Analyst Notes: - CVE Program Container: References: - https://forum.openlitespeed.org/threads/openlitespeed-v1-6-5-now-available.4047/ - https://drive.google.com/open?id=1pSciFEfjHp3kN8y5shy_zosJo7dje_fX
CVE ID: CVE-2020-5520 State: PUBLISHED Published: 2020-01-27T09:35:27 Last Updated: 2024-08-04T08:30:24.488Z Vendors: Fuji Xerox Co.,Ltd. Products: netprint App for iOS Problem Types: Fails to verify SSL certificates Description: The netprint App for iOS 3.2.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://www.printing.ne.jp/support/information/AppVulnerability.html - http://jvn.jp/en/jp/JVN66435380/index.html
CVE ID: CVE-2020-5521 State: PUBLISHED Published: 2020-01-27T09:35:27 Last Updated: 2024-08-04T08:30:24.506Z Vendors: Fuji Xerox Co.,Ltd. Products: kantan netprint App for iOS Problem Types: Fails to verify SSL certificates Description: The kantan netprint App for iOS 2.0.2 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://www.printing.ne.jp/support/information/AppVulnerability.html - http://jvn.jp/en/jp/JVN66435380/index.html
CVE ID: CVE-2020-5522 State: PUBLISHED Published: 2020-01-27T09:35:27 Last Updated: 2024-08-04T08:30:24.586Z Vendors: Fuji Xerox Co.,Ltd. Products: kantan netprint App for Android Problem Types: Fails to verify SSL certificates Description: The kantan netprint App for Android 2.0.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://www.printing.ne.jp/support/information/AppVulnerability.html - http://jvn.jp/en/jp/JVN66435380/index.html
CVE ID: CVE-2020-5523 State: PUBLISHED Published: 2020-01-28T05:25:48 Last Updated: 2024-08-04T08:30:24.582Z Vendors: NTT Data Corporation Products: 'MyPallete' and some of the Android banking applications that use 'MyPallete' Problem Types: Fails to verify SSL certificates Description: Android App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not verify X.509 certificates from servers, and also do not properly validate certificates with host-mismatch, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.dokodemobank.n
on via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.dokodemobank.ne.jp/info_20200128_bankingapp.html - https://www.ashikagabank.co.jp/appbanking/pdf/oshirase.pdf - https://www.sihd-bk.jp/common_v2/pdf/20200127.pdf - https://www.shikokubank.co.jp/info/apps20200128.html - https://www.tohoku-bank.co.jp/news/topics/200128_applissl.html - https://www.naganobank.co.jp/soshiki/2/app-ssl.html - https://www.77bank.co.jp/pdf/oshirase/20012801_appvulnerability.pdf - https://www.hokkaidobank.co.jp/common/dat/2020/0120/15795047141946146699.pdf - https://www.hokugin.co.jp/info/archives/personal/2020/1913.html - http://jvn.jp/en/jp/JVN28845872/index.htm
146699.pdf - https://www.hokugin.co.jp/info/archives/personal/2020/1913.html - http://jvn.jp/en/jp/JVN28845872/index.html
CVE ID: CVE-2020-5524 State: PUBLISHED Published: 2020-02-21T09:15:19 Last Updated: 2024-08-04T08:30:24.503Z Vendors: NEC Corporation Products: Aterm series Problem Types: OS Command Injection Description: Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via UPnP function. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN49410695/index.html - https://jpn.nec.com/security-info/secinfo/nv20-003.html
CVE ID: CVE-2020-5525 State: PUBLISHED Published: 2020-02-21T09:15:19 Last Updated: 2024-08-04T08:30:24.540Z Vendors: NEC Corporation Products: Aterm series Problem Types: OS Command Injection Description: Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via management screen. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN49410695/index.html - https://jpn.nec.com/security-info/secinfo/nv20-003.html
CVE ID: CVE-2020-5526 State: PUBLISHED Published: 2020-01-31T03:35:17 Last Updated: 2024-08-04T08:30:24.547Z Vendors: Fuji Xerox Co.,Ltd. Products: AWMS Mobile App Problem Types: Fails to verify SSL certificates Description: The AWMS Mobile App for Android 2.0.0 to 2.0.5 and for iOS 2.0.0 to 2.0.8 does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://onlinesupport.fujixerox.com/processDriverForm.do?ctry_code=SG&lang_code=en&d_lang=en&corp_pid=AWMS2&rts=null&model=ApeosWare+Management+Suite+2&type_id=7&oslist=W
orm.do?ctry_code=SG&lang_code=en&d_lang=en&corp_pid=AWMS2&rts=null&model=ApeosWare+Management+Suite+2&type_id=7&oslist=Windows+10+64bit&lang_list=en - http://jvn.jp/en/jp/JVN00014057/index.html
CVE ID: CVE-2020-5527 State: PUBLISHED Published: 2020-03-30T07:10:14 Last Updated: 2024-08-04T08:30:24.568Z Vendors: Mitsubishi Electric Corporation Products: MELSOFT transmission port (UDP/IP) of multiple Mitsubishi Electric MELSEC series Problem Types: Denial-of-service (DoS) Description: When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), and MELSEC F series (all versions) receives massive amount of data via unspecified vectors, resource consumption occurs and the port does not process the data properly. As a result, it may fall into a denial-of
, resource consumption occurs and the port does not process the data properly. As a result, it may fall into a denial-of-service (DoS) condition. The vendor states this vulnerability only affects Ethernet communication functions. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2019-005_en.pdf - https://jvn.jp/en/vu/JVNVU91553662/index.html
CVE ID: CVE-2020-5528 State: PUBLISHED Published: 2020-02-06T09:30:14 Last Updated: 2024-08-04T08:30:24.560Z Vendors: Six Apart Ltd Products: Movable Type series Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4603 and earlier (Movable Type 7), Movable Type 6.5.2 and earlier (Movable Type 6.5), Movable Type Advanced 7 r.4603 and earlier (Movable Type Advanced 7), Movable Type Advanced 6.5.2 and earlier (Movable Type Advanced 6.5), Movable Type Premium 1.26 and earlier (Movable Type Premium), and Movable Type Premium Advanced 1.26 and earlier (Movable Type Premium Advanced)) allows remote attackers to inject arbitrar
vable Type Premium Advanced 1.26 and earlier (Movable Type Premium Advanced)) allows remote attackers to inject arbitrary web script or HTML in the block editor and the rich text editor via a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://movabletype.org/news/2020/02/movable_type_r4605_v720_v653_and_v6311_released.html - http://jvn.jp/en/jp/JVN94435544/index.html
CVE ID: CVE-2020-5529 State: PUBLISHED Published: 2020-02-11T08:35:12 Last Updated: 2024-10-15T18:35:29.255Z Vendors: HtmlUnit Project Products: HtmlUnit Problem Types: Remote code execution Description: HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specific initialization of Rhino engine is done in an improper way, hence a malicious JavaScript code can execute arbitrary Java code on the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
Java code on the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HtmlUnit/htmlunit/releases/tag/2.37.0 - https://jvn.jp/en/jp/JVN34535327/ - https://lists.apache.org/thread.html/ra2cd7f8e61dc6b8a2d9065094cd1f46aa63ad10f237ee363e26e8563%40%3Ccommits.camel.apache.org%3E - https://lists.debian.org/debian-lts-announce/2020/08/msg00023.html - https://usn.ubuntu.com/4584-1/
CVE ID: CVE-2020-5530 State: PUBLISHED Published: 2020-02-18T05:30:16 Last Updated: 2024-08-04T08:30:24.549Z Vendors: Merv Barrett Products: Easy Property Listings Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/easy-property-listings/#developers - https://jvn.jp/en/jp/JVN89259622/index.html - https://wpvulndb.com/vulnerabilities/10075
CVE ID: CVE-2020-5531 State: PUBLISHED Published: 2020-02-17T06:55:15 Last Updated: 2024-08-04T08:30:24.566Z Vendors: Mitsubishi Electric Corporation Products: Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 Problem Types: Denial-of-service (DoS) and malware execution Description: Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 MELSEC-Q Series C Controller Module(Q24DHCCPU-V, Q24DHCCPU-VG User Ethernet port (CH1, CH2): First 5 digits of serial number 21121 or before), MELSEC iQ-R Series C Controller Module / C Intelligent Function Module(R12CCPU-V Ethernet port (CH1, CH2): First 2 digits of serial number 11 or before, and RD55UP06-V Ethernet po
tion Module(R12CCPU-V Ethernet port (CH1, CH2): First 2 digits of serial number 11 or before, and RD55UP06-V Ethernet port: First 2 digits of serial number 08 or before), and MELIPC Series MI5000(MI5122-VW Ethernet port (CH1): First 2 digits of serial number 03 or before, or the firmware version 03 or before) allow remote attackers to cause a denial of service and/or malware being executed via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2019-003_en.pdf - https://jvn.jp/en/vu/JVNVU95424547/index.html
CVE ID: CVE-2020-5532 State: PUBLISHED Published: 2020-02-14T08:40:14 Last Updated: 2024-08-04T08:30:24.537Z Vendors: EXTRUN Ltd. Products: ilbo App Problem Types: Authentication bypass Description: ilbo App (ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.01) allows an attacker on the same network segment to bypass authentication and to view the images which were recorded by the other ilbo user's device via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN35496038/index.html - https://play.google.com/store/apps/details?id=jp.extrun.ilbo&hl=en - https://apps.apple.com/us/app/ilbo/id1116864683
CVE ID: CVE-2020-5533 State: PUBLISHED Published: 2020-02-21T09:15:20 Last Updated: 2024-08-04T08:30:24.581Z Vendors: NEC Corporation Products: Aterm WG2600HS Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN49410695/index.html - https://jpn.nec.com/security-info/secinfo/nv20-003.html
CVE ID: CVE-2020-5534 State: PUBLISHED Published: 2020-02-21T09:15:20 Last Updated: 2024-08-04T08:30:24.549Z Vendors: NEC Corporation Products: Aterm WG2600HS Problem Types: OS Command Injection Description: Aterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN49410695/index.html - https://jpn.nec.com/security-info/secinfo/nv20-003.html
CVE ID: CVE-2020-5535 State: PUBLISHED Published: 2020-03-04T01:35:19 Last Updated: 2024-08-04T08:30:24.607Z Vendors: Plat'Home Co.,Ltd. Products: OpenBlocks IoT VX2 Problem Types: OS Command Injection Description: OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN19666251/index.html - https://www.plathome.co.jp/software/vx2-v4-0-0/
CVE ID: CVE-2020-5536 State: PUBLISHED Published: 2020-03-04T01:35:19 Last Updated: 2024-08-04T08:30:24.494Z Vendors: Plat'Home Co.,Ltd. Products: OpenBlocks IoT VX2 Problem Types: Authentication bypass Description: OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to bypass authentication and to initialize the device via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN19666251/index.html - https://www.plathome.co.jp/software/vx2-v4-0-0/
CVE ID: CVE-2020-5537 State: PUBLISHED Published: 2020-05-25T05:00:17 Last Updated: 2024-08-04T08:30:24.547Z Vendors: Cybozu, Inc. Products: Cybozu Desktop for Windows Problem Types: Remote code execution Description: Cybozu Desktop for Windows 2.0.23 to 2.2.40 allows remote code execution via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.cybozu.support/article/36329/ - https://jvn.jp/en/jp/JVN59552136/index.html - http://jvn.jp/en/jp/JVN59552136/index.html
CVE ID: CVE-2020-5538 State: PUBLISHED Published: 2020-05-11T04:40:14 Last Updated: 2024-08-04T08:30:24.604Z Vendors: JAL Information Technology Co., Ltd. Products: PALLET CONTROL Problem Types: Improper Access Control Description: Improper Access Control in PALLET CONTROL Ver. 6.3 and earlier allows authenticated attackers to execute arbitrary code with the SYSTEM privilege on the computer where PALLET CONTROL is installed via unspecified vectors. PalletControl 7 to 9.1 are not affected by this vulnerability, however under the environment where PLS Management Add-on Module is used, all versions are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.jalinf
is used, all versions are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.jalinfotec.co.jp/product/pallet/support/Info/notices.html - https://jvn.jp/en/jp/JVN61849442/index.html