Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-10213 State: PUBLISHED Published: 2020-03-07T00:29:46 Last Updated: 2024-08-04T10:58:39.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the wps_sta_enrollee_pin parameter in a set_sta_enrollee_pin.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kuc001/IoTFirmware/blob/master/D-Link/vulnerability3.md - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/Trendnet-TEW-632.pdf
CVE ID: CVE-2020-10214 State: PUBLISHED Published: 2020-03-07T00:30:13 Last Updated: 2024-08-04T10:58:40.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is a stack-based buffer overflow in the httpd binary. It allows an authenticated user to execute arbitrary code via a POST to ntp_sync.cgi with a sufficiently long parameter ntp_server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kuc001/IoTFirmware/blob/master/D-Link/vulnerability4.md
CVE ID: CVE-2020-10215 State: PUBLISHED Published: 2020-03-07T00:30:05 Last Updated: 2024-08-04T10:58:40.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the dns_query_name parameter in a dns_query.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/Trendnet-TEW-632.pdf - https://github.com/kuc001/IoTFirmware/blob/master/D-Link/vulnerability2.md
CVE ID: CVE-2020-10216 State: PUBLISHED Published: 2020-03-07T00:29:54 Last Updated: 2024-08-04T10:58:39.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parameter in a system_time.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/Trendnet-TEW-632.pdf - https://github.com/kuc001/IoTFirmware/blob/master/D-Link/vulnerability1.md
CVE ID: CVE-2020-10218 State: PUBLISHED Published: 2020-03-13T16:22:13 Last Updated: 2024-08-04T10:58:40.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Blind SQL Injection issue was discovered in Sapplica Sentrifugo 3.2 via the index.php/holidaygroups/add id parameter because of the HolidaydatesController.php addAction function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sapplica/sentrifugo/commits/master - https://www.exploit-db.com/exploits/48179
CVE ID: CVE-2020-10220 State: PUBLISHED Published: 2020-03-07T22:37:43 Last Updated: 2024-08-04T10:58:39.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/v1k1ngfr/exploits-rconfig/blob/master/rconfig_sqli.py - http://packetstormsecurity.com/files/156688/rConfig-3.9-SQL-Injection.html - http://packetstormsecurity.com/files/156766/Rconfig-3.x-Chained-Remote-Code-Execution.html - https://github.com/v1k1ngfr/exploits-rconfig/blob/master/rconfig_CVE-2020-10
ig-3.x-Chained-Remote-Code-Execution.html - https://github.com/v1k1ngfr/exploits-rconfig/blob/master/rconfig_CVE-2020-10220.py - http://packetstormsecurity.com/files/156950/rConfig-3.9.4-searchField-Remote-Code-Execution.html
CVE ID: CVE-2020-10221 State: PUBLISHED Published: 2020-03-08T21:03:47.000Z Last Updated: 2025-10-21T23:35:49.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName POST parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cwe.mitre.org/data/definitions/78.html - https://engindemirbilek.github.io/rconfig-3.93-rce - https://github.com/EnginDemirbilek/EnginDemirbilek.github.io/blob/master/rconfig-3.93-rce.html - http://packetstormsecurity.com/files/156687/rConfig-3.93-Authe
nDemirbilek.github.io/blob/master/rconfig-3.93-rce.html - http://packetstormsecurity.com/files/156687/rConfig-3.93-Authenticated-Remote-Code-Execution.html
CVE ID: CVE-2020-10222 State: PUBLISHED Published: 2020-03-08T21:46:26 Last Updated: 2024-08-04T10:58:39.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::get_property+2381 via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://nafiez.github.io/security/vulnerability/corruption/fuzzing/2020/03/05/fuzzing-heap-corruption-nitro-pdf-vulnerability.html - https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2020-03-05-fuzzing-heap-corruption-nitro-pdf-vulnerability.md
CVE ID: CVE-2020-10223 State: PUBLISHED Published: 2020-03-08T21:46:15 Last Updated: 2024-08-04T10:58:39.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::create_popup_for_markup+0x12fbe via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://nafiez.github.io/security/vulnerability/corruption/fuzzing/2020/03/05/fuzzing-heap-corruption-nitro-pdf-vulnerability.html - https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2020-03-05-fuzzing-heap-corruption-nitro-pdf-vulnerability.md
CVE ID: CVE-2020-10224 State: PUBLISHED Published: 2020-03-08T22:11:58 Last Updated: 2024-08-04T10:58:39.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unauthenticated file upload vulnerability has been identified in admin_add.php in PHPGurukul Online Book Store 1.0. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to the server, including PHP files, which could result in command execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47887 - https://tib3rius.com/cves.html
CVE ID: CVE-2020-10225 State: PUBLISHED Published: 2020-03-08T22:11:43 Last Updated: 2024-08-04T10:58:39.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unauthenticated file upload vulnerability has been identified in admin/gallery.php in PHPGurukul Job Portal 1.0. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to the server, including PHP files, which could result in command execution. Additional Analyst Notes: - CVE Program Container: References: - https://tib3rius.com/cves.html - https://www.exploit-db.com/exploits/47881
CVE ID: CVE-2020-10227 State: PUBLISHED Published: 2020-09-14T19:58:33 Last Updated: 2024-08-04T10:58:39.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the messages module of vtecrm vtenext 19 CE allows attackers to inject arbitrary JavaScript code via the From field of an email. Additional Analyst Notes: - CVE Program Container: References: - https://vtenext.com/en/ - https://sourceforge.net/projects/vtecrm/ - https://www.exploit-db.com/exploits/48804
CVE ID: CVE-2020-10228 State: PUBLISHED Published: 2020-09-14T19:56:58 Last Updated: 2024-08-04T10:58:39.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://vtenext.com/en/ - https://sourceforge.net/projects/vtecrm/ - https://www.exploit-db.com/exploits/48804
CVE ID: CVE-2020-10229 State: PUBLISHED Published: 2020-09-14T19:55:07 Last Updated: 2024-08-04T10:58:40.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, adding users, and deleting accounts. Additional Analyst Notes: - CVE Program Container: References: - https://vtenext.com/en/ - https://sourceforge.net/projects/vtecrm/ - https://www.exploit-db.com/exploits/48804
CVE ID: CVE-2020-10230 State: PUBLISHED Published: 2020-03-16T15:34:23 Last Updated: 2024-08-04T10:58:39.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: CentOS-WebPanel.com (aka CWP) CentOS Web Panel (for CentOS 6 and 7) allows SQL Injection via the /cwp_{SESSION_HASH}/admin/loader_ajax.php term parameter. Additional Analyst Notes: - CVE Program Container: References: - https://centos-webpanel.com/changelog-cwp7 - https://www.exploit-db.com/exploits/48212
CVE ID: CVE-2020-10231 State: PUBLISHED Published: 2020-04-01T13:57:21 Last Updated: 2024-08-04T10:58:39.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link NC200 through 2.1.8_Build_171109, NC210 through 1.0.9_Build_171214, NC220 through 1.3.0_Build_180105, NC230 through 1.3.0_Build_171205, NC250 through 1.3.0_Build_171205, NC260 through 1.5.1_Build_190805, and NC450 through 1.5.0_Build_181022 devices allow a remote NULL Pointer Dereference. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2020/Mar/54 - http://packetstormsecurity.com/files/157048/TP-LINK-Cloud-Cameras-NCXXX-Remote-NULL-Pointer-Dereference.html - http://s
http://packetstormsecurity.com/files/157048/TP-LINK-Cloud-Cameras-NCXXX-Remote-NULL-Pointer-Dereference.html - http://seclists.org/fulldisclosure/2020/Apr/5
CVE ID: CVE-2020-10232 State: PUBLISHED Published: 2020-03-08T23:52:55 Last Updated: 2024-08-04T10:58:39.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sleuthkit/sleuthkit/commit/459ae818fc8dae717549810150de4d191ce158f1 - https://lists.debian.org/debian-lts-announce/2020/03/msg00011.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5EY53OYU7UZLAJWNIVVNR3EX2RNCCFTB/
ts.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5EY53OYU7UZLAJWNIVVNR3EX2RNCCFTB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQR2QY3IAF2IG6HGBSKGL66VUDOTC3OA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFQKIE5U3LS5U7POPGS7YHLUSW2URWGJ/ - https://lists.debian.org/debian-lts-announce/2022/06/msg00015.html
CVE ID: CVE-2020-10233 State: PUBLISHED Published: 2020-03-08T23:52:43 Last Updated: 2024-08-04T10:58:39.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a heap-based buffer over-read in ntfs_dinode_lookup in fs/ntfs.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sleuthkit/sleuthkit/issues/1829 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5EY53OYU7UZLAJWNIVVNR3EX2RNCCFTB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQR2QY3IAF2IG6HGBSKGL66VUDOTC3OA/ - https://lists.fedo
/archives/list/package-announce%40lists.fedoraproject.org/message/AQR2QY3IAF2IG6HGBSKGL66VUDOTC3OA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFQKIE5U3LS5U7POPGS7YHLUSW2URWGJ/
CVE ID: CVE-2020-10234 State: PUBLISHED Published: 2021-02-05T18:58:10 Last Updated: 2024-08-04T10:58:39.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AscRegistryFilter.sys kernel driver in IObit Advanced SystemCare 13.2 allows an unprivileged user to send an IOCTL to the device driver. If the user provides a NULL entry for the dwIoControlCode parameter, a kernel panic (aka BSOD) follows. The IOCTL codes can be found in the dispatch function: 0x8001E000, 0x8001E004, 0x8001E008, 0x8001E00C, 0x8001E010, 0x8001E014, 0x8001E020, 0x8001E024, 0x8001E040, 0x8001E044, and 0x8001E048. \DosDevices\AscRegistryFilter and \Device\AscRegistryFilter are affected. Additional Analyst No
001E044, and 0x8001E048. \DosDevices\AscRegistryFilter and \Device\AscRegistryFilter are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.iobit.com/en/advancedsystemcarefree.php - https://github.com/FULLSHADE/Kernel-exploits - https://github.com/FULLSHADE/Kernel-exploits/tree/master/AscRegistryFilter.sys
CVE ID: CVE-2020-10235 State: PUBLISHED Published: 2020-03-09T15:04:46 Last Updated: 2024-08-04T10:58:39.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Froxlor before 0.10.14. Remote attackers with access to the installation routine could have executed arbitrary code via the database configuration options that were passed unescaped to exec, because of _backupExistingDatabase in install/lib/class.FroxlorInstall.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Froxlor/Froxlor/commit/7e361274c5bf687b6a42dd1871f6d75506c5d207 - https://github.com/Froxlor/Froxlor/commit/62ce21c9ec393f9962515c88f0c489ace42bf656 - ht
bf687b6a42dd1871f6d75506c5d207 - https://github.com/Froxlor/Froxlor/commit/62ce21c9ec393f9962515c88f0c489ace42bf656 - https://bugzilla.suse.com/show_bug.cgi?id=1165721 - https://github.com/Froxlor/Froxlor/compare/0.10.13...0.10.14
CVE ID: CVE-2020-10236 State: PUBLISHED Published: 2020-03-09T15:04:23 Last Updated: 2024-08-04T10:58:40.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Froxlor before 0.10.14. It created files with static names in /tmp during installation if the installation directory was not writable. This allowed local attackers to cause DoS or disclose information out of the config files, because of _createUserdataConf in install/lib/class.FroxlorInstall.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Froxlor/Froxlor/compare/0.10.13...0.10.14 - https://bugzilla.suse.com/show_bug.cgi?id=1165718 - https://github.com/Froxlor
oxlor/Froxlor/compare/0.10.13...0.10.14 - https://bugzilla.suse.com/show_bug.cgi?id=1165718 - https://github.com/Froxlor/Froxlor/commit/6b09720ef8a1cc008751dd0ca0140a0597fedce5
CVE ID: CVE-2020-10237 State: PUBLISHED Published: 2020-03-09T15:04:32 Last Updated: 2024-08-04T10:58:39.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Froxlor through 0.10.15. The installer wrote configuration parameters including passwords into files in /tmp, setting proper permissions only after writing the sensitive data. A local attacker could have disclosed the information if he read the file at the right time, because of _createUserdataConf in install/lib/class.FroxlorInstall.php. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1165719
CVE ID: CVE-2020-10238 State: PUBLISHED Published: 2020-03-16T15:44:48 Last Updated: 2024-08-04T10:58:40.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.16. Various actions in com_templates lack the required ACL checks, leading to various potential attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/804-20200303-core-incorrect-access-control-in-com-templates
CVE ID: CVE-2020-10239 State: PUBLISHED Published: 2020-03-16T15:45:49 Last Updated: 2024-08-04T10:58:39.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.16. Incorrect Access Control in the SQL fieldtype of com_fields allows access for non-superadmin users. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/806-20200305-core-incorrect-access-control-in-com-fields-sql-field
CVE ID: CVE-2020-10240 State: PUBLISHED Published: 2020-03-16T15:46:34 Last Updated: 2024-08-04T10:58:39.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.16. Missing length checks in the user table can lead to the creation of users with duplicate usernames and/or email addresses. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/805-20200304-core-identifier-collisions-in-com-users
CVE ID: CVE-2020-10241 State: PUBLISHED Published: 2020-03-16T15:47:31 Last Updated: 2024-08-04T10:58:39.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.16. Missing token checks in the image actions of com_templates lead to CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/802-20200301-core-csrf-in-com-templates-image-actions
CVE ID: CVE-2020-10242 State: PUBLISHED Published: 2020-03-16T15:48:15 Last Updated: 2024-08-04T10:58:39.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.16. Inadequate handling of CSS selectors in the Protostar and Beez3 JavaScript allows XSS attacks. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/803-20200302-core-xss-in-protostar-and-beez3
CVE ID: CVE-2020-10243 State: PUBLISHED Published: 2020-03-16T15:50:50 Last Updated: 2024-08-04T10:58:40.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.16. The lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Featured Articles frontend menutype. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/807-20200306-core-sql-injection-in-featured-articles-menu-parameters
CVE ID: CVE-2020-10244 State: PUBLISHED Published: 2020-03-09T18:54:01 Last Updated: 2024-08-04T10:58:39.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: JPaseto before 0.3.0 generates weak hashes when using v2.local tokens. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/paseto-toolkit/jpaseto/releases/tag/jpaseto-0.3.0
CVE ID: CVE-2020-10245 State: PUBLISHED Published: 2020-03-26T03:45:20 Last Updated: 2024-08-04T10:58:39.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-16 - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=13078&token=de344ca65252463cc581ef144e0c53bd97b8f211&download=
CVE ID: CVE-2020-10246 State: PUBLISHED Published: 2020-03-09T18:32:10 Last Updated: 2024-08-04T10:58:39.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: MISP 2.4.122 has reflected XSS via unsanitized URL parameters. This is related to app/View/Users/statistics_orgs.ctp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/43a0757fb33769d9ad4ca09e8f2ac572f9f6a491 - https://github.com/MISP/MISP/releases/tag/v2.4.123
CVE ID: CVE-2020-10247 State: PUBLISHED Published: 2020-03-09T18:31:59 Last Updated: 2024-08-04T10:58:40.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: MISP 2.4.122 has Persistent XSS in the sighting popover tool. This is related to app/View/Elements/Events/View/sighting_field.ctp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/e24a9eb44c1306adb02c1508e8f266ac6b95b4ed - https://github.com/MISP/MISP/releases/tag/v2.4.123
CVE ID: CVE-2020-10248 State: PUBLISHED Published: 2020-03-09T18:56:17 Last Updated: 2024-08-04T10:58:39.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: BWA DiREX-Pro 1.2181 devices allow remote attackers to discover passwords via a direct request to val_users.php3. Additional Analyst Notes: - CVE Program Container: References: - https://sku11army.blogspot.com/2020/03/bwa-multiple-vulnerabilities-in-direx.html
CVE ID: CVE-2020-10249 State: PUBLISHED Published: 2020-03-09T18:56:08 Last Updated: 2024-08-04T10:58:40.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: BWA DiREX-Pro 1.2181 devices allow full path disclosure via an invalid name array parameter to val_soft.php3. Additional Analyst Notes: - CVE Program Container: References: - https://sku11army.blogspot.com/2020/03/bwa-multiple-vulnerabilities-in-direx.html
CVE ID: CVE-2020-10250 State: PUBLISHED Published: 2020-03-09T18:55:59 Last Updated: 2024-08-04T10:58:40.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to uninstall.php3. Additional Analyst Notes: - CVE Program Container: References: - https://sku11army.blogspot.com/2020/03/bwa-multiple-vulnerabilities-in-direx.html
CVE ID: CVE-2020-10251 State: PUBLISHED Published: 2020-03-10T03:58:33 Last Updated: 2024-08-04T10:58:39.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.9, an out-of-bounds read vulnerability exists within the ReadHEICImageByID function in coders\heic.c. It can be triggered via an image with a width or height value that exceeds the actual size of the image. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1859
CVE ID: CVE-2020-10252 State: PUBLISHED Published: 2021-02-19T06:12:52 Last Updated: 2024-08-04T10:58:39.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ownCloud before 10.4. Because of an SSRF issue (via the apps/files_sharing/external remote parameter), an authenticated attacker can interact with local services blindly (aka Blind SSRF) or conduct a Denial Of Service attack. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.org/changelog/server/ - https://blog.hacktivesecurity.com/index.php?controller=post&action=view&id_post=44 - https://owncloud.com/security-advisories/ssrf-in-add-to-your-owncloud-functionality/
CVE ID: CVE-2020-10254 State: PUBLISHED Published: 2021-02-19T06:02:12 Last Updated: 2024-08-04T10:58:40.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ownCloud before 10.4. An attacker can bypass authentication on a password-protected image by displaying its preview. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.org/changelog/server/ - https://blog.hacktivesecurity.com/index.php?controller=post&action=view&id_post=44 - https://owncloud.com/security-advisories/public-link-password-bypass-via-image-previews/
CVE ID: CVE-2020-10255 State: PUBLISHED Published: 2020-03-10T15:59:59 Last Updated: 2024-08-04T10:58:40.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Modern DRAM chips (DDR4 and LPDDR4 after 2015) are affected by a vulnerability in deployment of internal mitigations against RowHammer attacks known as Target Row Refresh (TRR), aka the TRRespass issue. To exploit this vulnerability, the attacker needs to create certain access patterns to trigger bit flips on affected memory modules, aka a Many-sided RowHammer attack. This means that, even when chips advertised as RowHammer-free are used, attackers may still be able to conduct privilege-escalation attacks against the kernel,