Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-11668 State: PUBLISHED Published: 2020-04-09T20:13:02 Last Updated: 2024-08-04T11:35:13.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors, aka CID-a246b4d54770. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.1 - https://github.com/torvalds/linux/commit/a246b4d547708f33ff4d4b9a7a5dbac741dc89d8 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a246b4d547708f33ff4d4b9a7a5dbac741dc89d8 - https://security.netapp.com/advisory/nt
nel/git/torvalds/linux.git/commit/?id=a246b4d547708f33ff4d4b9a7a5dbac741dc89d8 - https://security.netapp.com/advisory/ntap-20200430-0004/ - https://usn.ubuntu.com/4345-1/ - https://usn.ubuntu.com/4364-1/ - https://usn.ubuntu.com/4368-1/ - https://usn.ubuntu.com/4369-1/ - https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html - https://www.debian.org/security/2020/dsa-4698
CVE ID: CVE-2020-11669 State: PUBLISHED Published: 2020-04-10T14:40:19 Last Updated: 2024-08-04T11:35:13.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.2 on the powerpc platform. arch/powerpc/kernel/idle_book3s.S does not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR, aka CID-53a712bae5dd. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2019:3517 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2 - https://lists.ozlabs.org/pipermail/linuxppc-dev/2020-April/208663.html - https://lists.ozlabs.org/pipermail/li
Log-5.2 - https://lists.ozlabs.org/pipermail/linuxppc-dev/2020-April/208663.html - https://lists.ozlabs.org/pipermail/linuxppc-dev/2020-April/208660.html - https://lists.ozlabs.org/pipermail/linuxppc-dev/2020-April/208661.html - https://github.com/torvalds/linux/commit/53a712bae5dd919521a58d7bad773b949358add0 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=53a712bae5dd919521a58d7bad773b949358add0 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00035.html - https://security.netapp.com/advisory/ntap-20200430-0001/ - https://usn.ubuntu.com/4368-1/ - https://usn.ubuntu.com/4363-1/
CVE ID: CVE-2020-11671 State: PUBLISHED Published: 2020-05-04T13:27:36 Last Updated: 2024-08-04T11:35:13.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lack of authorization controls in REST API functions in TeamPass through 2.1.27.36 allows any TeamPass user with a valid API token to become a TeamPass administrator and read/modify all passwords via authenticated api/index.php REST API calls. NOTE: the API is not available by default. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nilsteampassnet/TeamPass/issues/2765
CVE ID: CVE-2020-11673 State: PUBLISHED Published: 2020-04-13T15:01:12 Last Updated: 2024-08-04T11:35:13.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Responsive Poll through 1.3.4 for Wordpress. It allows an unauthenticated user to manipulate polls, e.g., delete, clone, or view a hidden poll. This is due to the usage of the callback wp_ajax_nopriv function in Includes/Total-Soft-Poll-Ajax.php for sensitive operations. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/poll-wp/#developers - https://gist.github.com/pak0s/05a0e517aeff4b1422d1a93f59718459
CVE ID: CVE-2020-11674 State: PUBLISHED Published: 2020-04-29T13:50:09 Last Updated: 2024-08-04T11:35:13.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cerner medico 26.00 allows variable reuse, possibly causing data corruption. Additional Analyst Notes: - CVE Program Container: References: - https://www.x41-dsec.de/lab/advisories/x41-2019-008-medico/
CVE ID: CVE-2020-11675 State: PUBLISHED Published: 2020-04-29T13:51:49 Last Updated: 2024-08-04T11:35:13.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cerner medico 26.00 has a Local Buffer Overflow (issue 1 of 3). Additional Analyst Notes: - CVE Program Container: References: - https://www.x41-dsec.de/lab/advisories/x41-2019-008-medico/
CVE ID: CVE-2020-11676 State: PUBLISHED Published: 2020-04-29T13:53:34 Last Updated: 2024-08-04T11:35:13.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cerner medico 26.00 has a Local Buffer Overflow (issue 2 of 3). Additional Analyst Notes: - CVE Program Container: References: - https://www.x41-dsec.de/lab/advisories/x41-2019-008-medico/
CVE ID: CVE-2020-11677 State: PUBLISHED Published: 2020-04-29T13:54:54 Last Updated: 2024-08-04T11:35:13.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cerner medico 26.00 has a Local Buffer Overflow (issue 3 of 3). Additional Analyst Notes: - CVE Program Container: References: - https://www.x41-dsec.de/lab/advisories/x41-2019-008-medico/
CVE ID: CVE-2020-11679 State: PUBLISHED Published: 2020-06-04T18:31:28 Last Updated: 2024-08-04T11:35:13.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Castel NextGen DVR v1.0.0 is vulnerable to privilege escalation through the Adminstrator/Users/Edit/:UserId functionality. Adminstrator/Users/Edit/:UserId fails to check that the request was submitted by an Administrator. This allows a normal user to escalate their privileges by adding additional roles to their account. Additional Analyst Notes: - CVE Program Container: References: - https://www.securitymetrics.com/blog/attackers-known-unknown-authorization-bypass - http://seclists.org/fulldisclosure/2020/Jun/8 - http://packe
ics.com/blog/attackers-known-unknown-authorization-bypass - http://seclists.org/fulldisclosure/2020/Jun/8 - http://packetstormsecurity.com/files/157954/Castel-NextGen-DVR-1.0.0-Bypass-CSRF-Disclosure.html
CVE ID: CVE-2020-11680 State: PUBLISHED Published: 2020-06-04T18:38:21 Last Updated: 2024-08-04T11:35:13.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Castel NextGen DVR v1.0.0 is vulnerable to authorization bypass on all administrator functionality. The application fails to check that a request was submitted by an administrator. Consequently, a normal user can perform actions including, but not limited to, creating/modifying the file store, creating/modifying alerts, creating/modifying users, etc. Additional Analyst Notes: - CVE Program Container: References: - https://www.securitymetrics.com/blog/attackers-known-unknown-authorization-bypass - http://seclists.org/fulldiscl
ces: - https://www.securitymetrics.com/blog/attackers-known-unknown-authorization-bypass - http://seclists.org/fulldisclosure/2020/Jun/8 - http://packetstormsecurity.com/files/157954/Castel-NextGen-DVR-1.0.0-Bypass-CSRF-Disclosure.html
CVE ID: CVE-2020-11681 State: PUBLISHED Published: 2020-06-04T18:40:52 Last Updated: 2024-08-04T11:35:13.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Castel NextGen DVR v1.0.0 stores and displays credentials for the associated SMTP server in cleartext. Low privileged users can exploit this to create an administrator user and obtain the SMTP credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.securitymetrics.com/blog/attackers-known-unknown-authorization-bypass - http://seclists.org/fulldisclosure/2020/Jun/8 - http://packetstormsecurity.com/files/157954/Castel-NextGen-DVR-1.0.0-Bypass-CSRF-Disclosure.html
CVE ID: CVE-2020-11682 State: PUBLISHED Published: 2020-06-04T19:10:00 Last Updated: 2024-08-04T11:35:13.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Castel NextGen DVR v1.0.0 is vulnerable to CSRF in all state-changing request. A __RequestVerificationToken is set by the web interface, and included in requests sent by web interface. However, this token is not verified by the application: the token can be removed from all requests and the request will succeed. Additional Analyst Notes: - CVE Program Container: References: - https://www.securitymetrics.com/blog/where-did-request-come-from-cross-site-request-forgery-csrf - http://seclists.org/fulldisclosure/2020/Jun/8 - http:
blog/where-did-request-come-from-cross-site-request-forgery-csrf - http://seclists.org/fulldisclosure/2020/Jun/8 - http://packetstormsecurity.com/files/157954/Castel-NextGen-DVR-1.0.0-Bypass-CSRF-Disclosure.html
CVE ID: CVE-2020-11683 State: PUBLISHED Published: 2020-09-14T13:31:58 Last Updated: 2024-08-04T11:35:13.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: A timing side channel was discovered in AT91bootstrap before 3.9.2. It can be exploited by attackers with physical access to forge CMAC values and subsequently boot arbitrary code on an affected system. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/linux4sam/at91bootstrap/commit/7753914c9a622c245f3a3cf2af5e24b6a9904213 - https://labs.f-secure.com/advisories/microchip-at91bootstrap/
CVE ID: CVE-2020-11684 State: PUBLISHED Published: 2020-09-14T13:32:01 Last Updated: 2024-08-04T11:35:13.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: AT91bootstrap before 3.9.2 does not properly wipe encryption and authentication keys from memory before passing control to a less privileged software component. This can be exploited to disclose these keys and subsequently encrypt and sign the next boot stage (such as the bootloader). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/linux4sam/at91bootstrap/commit/45419497309ffbf27c17ea7938499aca99168927 - https://labs.f-secure.com/advisories/microchip-at91bootstrap/
CVE ID: CVE-2020-11685 State: PUBLISHED Published: 2020-04-22T13:52:31 Last Updated: 2024-08-04T11:35:13.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2020/04/22/jetbrains-security-bulletin-q1-2020/
CVE ID: CVE-2020-11686 State: PUBLISHED Published: 2020-04-22T13:52:33 Last Updated: 2024-08-04T11:35:13.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity server settings. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2020/04/22/jetbrains-security-bulletin-q1-2020/
CVE ID: CVE-2020-11687 State: PUBLISHED Published: 2020-04-22T13:52:34 Last Updated: 2024-08-04T11:35:13.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2020/04/22/jetbrains-security-bulletin-q1-2020/
CVE ID: CVE-2020-11688 State: PUBLISHED Published: 2020-04-22T13:52:36 Last Updated: 2024-08-04T11:35:13.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his session. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2020/04/22/jetbrains-security-bulletin-q1-2020/
CVE ID: CVE-2020-11689 State: PUBLISHED Published: 2020-04-22T13:52:38 Last Updated: 2024-08-04T11:35:13.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2019.2.1, a user without appropriate permissions was able to import settings from the settings.kts file. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2020/04/22/jetbrains-security-bulletin-q1-2020/
CVE ID: CVE-2020-11690 State: PUBLISHED Published: 2020-04-22T13:52:39 Last Updated: 2024-08-04T11:35:13.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains IntelliJ IDEA before 2020.1, the license server could be resolved to an untrusted host in some cases. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2020/04/22/jetbrains-security-bulletin-q1-2020/
CVE ID: CVE-2020-11691 State: PUBLISHED Published: 2020-04-22T13:52:41 Last Updated: 2024-08-04T11:35:13.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains Hub before 2020.1.12099, content spoofing in the Hub OAuth error message was possible. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2020/04/22/jetbrains-security-bulletin-q1-2020/
CVE ID: CVE-2020-11692 State: PUBLISHED Published: 2020-04-22T13:52:43 Last Updated: 2024-08-04T11:35:13.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains YouTrack before 2020.1.659, DB export was accessible to read-only administrators. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2020/04/22/jetbrains-security-bulletin-q1-2020/
CVE ID: CVE-2020-11693 State: PUBLISHED Published: 2020-04-22T13:52:44 Last Updated: 2024-08-04T11:35:13.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2020/04/22/jetbrains-security-bulletin-q1-2020/
CVE ID: CVE-2020-11694 State: PUBLISHED Published: 2020-04-10T20:46:27 Last Updated: 2024-08-04T11:35:13.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included. This is fixed in 2019.2.6 and 2019.3.3. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/_ruby/status/1234457530790600704 - https://gist.github.com/rubyroobs/5d273895512df5b86d5e7e1a703c8028 - https://blog.jetbrains.com/blog/2020/04/22/jetbrains-security-bulletin-q1-2020/
CVE ID: CVE-2020-11696 State: PUBLISHED Published: 2020-06-05T21:12:55 Last Updated: 2024-08-04T11:35:13.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Combodo iTop a menu shortcut name can be exploited with a stored XSS payload. This is fixed in all iTop packages (community, essential, professional) in version 2.7.0 and iTop essential and iTop professional in version 2.6.4. Additional Analyst Notes: - CVE Program Container: References: - https://www.itophub.io/wiki/page?id=2_7_0%3Arelease%3Achange_log - https://github.com/Combodo/iTop/security/advisories/GHSA-4h6p-jghj-8qxm
CVE ID: CVE-2020-11697 State: PUBLISHED Published: 2020-06-05T21:01:27 Last Updated: 2024-08-04T11:35:13.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Combodo iTop, dashboard ids can be exploited with a reflective XSS payload. This is fixed in all iTop packages (community, essential, professional) for version 2.7.0 and in iTop essential and iTop professional packages for version 2.6.4. Additional Analyst Notes: - CVE Program Container: References: - https://www.itophub.io/wiki/page?id=2_7_0%3Arelease%3A2_7_whats_new - https://github.com/Combodo/iTop/security/advisories/GHSA-xfh9-5632-hxmv
CVE ID: CVE-2020-11698 State: PUBLISHED Published: 2020-09-17T16:28:20 Last Updated: 2024-08-04T11:35:13.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snmp-x.php would allow a remote attacker to inject commands into the file snmpd.conf that would allow executing commands on the target server. Additional Analyst Notes: - CVE Program Container: References: - https://www.spamtitan.com/ - https://github.com/felmoltor - https://twitter.com/felmoltor - https://sensepost.com/blog/2020/clash-of-the-spamtitan/ - http://packetstormsecurity.com/files/159470/SpamTitan-7.0
or - https://sensepost.com/blog/2020/clash-of-the-spamtitan/ - http://packetstormsecurity.com/files/159470/SpamTitan-7.07-Remote-Code-Execution.html - http://packetstormsecurity.com/files/160809/SpamTitan-7.07-Command-Injection.html
CVE ID: CVE-2020-11699 State: PUBLISHED Published: 2020-09-17T16:31:05 Last Updated: 2024-08-04T11:35:13.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Titan SpamTitan 7.07. Improper validation of the parameter fname on the page certs-x.php would allow an attacker to execute remote code on the target server. The user has to be authenticated before interacting with this page. Additional Analyst Notes: - CVE Program Container: References: - https://www.spamtitan.com/ - https://github.com/felmoltor - https://twitter.com/felmoltor - https://sensepost.com/blog/2020/clash-of-the-spamtitan/ - http://packetstormsecurity.com/files/159218/SpamTitan-7.07-Remo
ttps://sensepost.com/blog/2020/clash-of-the-spamtitan/ - http://packetstormsecurity.com/files/159218/SpamTitan-7.07-Remote-Code-Execution.html
CVE ID: CVE-2020-11700 State: PUBLISHED Published: 2020-09-17T16:34:18 Last Updated: 2024-08-04T11:35:13.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter fname, used on the page certs-x.php, would allow an attacker to retrieve the contents of arbitrary files. The user has to be authenticated before interacting with this page. Additional Analyst Notes: - CVE Program Container: References: - https://www.spamtitan.com/ - https://github.com/felmoltor - https://twitter.com/felmoltor - https://sensepost.com/blog/2020/clash-of-the-spamtitan/ - http://packetstormsecurity.com/files/159218/SpamTitan-
oltor - https://sensepost.com/blog/2020/clash-of-the-spamtitan/ - http://packetstormsecurity.com/files/159218/SpamTitan-7.07-Remote-Code-Execution.html
CVE ID: CVE-2020-11701 State: PUBLISHED Published: 2020-04-12T02:44:27 Last Updated: 2024-08-04T11:35:13.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ProVide (formerly zFTPServer) through 13.1. CSRF exists in the User Web Interface, as demonstrated by granting filesystem access to the public for uploading and deleting files and directories. Additional Analyst Notes: - CVE Program Container: References: - https://www.provideserver.com/security/ - https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20User%20Interface%20-%20Cross-Site%20Request%20Forgery
CVE ID: CVE-2020-11702 State: PUBLISHED Published: 2020-04-12T02:44:14 Last Updated: 2024-08-04T11:35:13.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The User Web Interface has Multiple Stored and Reflected XSS issues. Collaborate is Reflected via the filename parameter. Collaborate is Stored via the displayname parameter. Deletemultiple is Reflected via the files parameter. Share is Reflected via the target parameter. Share is Stored via the displayname parameter. Waitedit is Reflected via the Host header. Additional Analyst Notes: - CVE Program Container: References: - https://www.provideserver.com/se
d via the Host header. Additional Analyst Notes: - CVE Program Container: References: - https://www.provideserver.com/security/ - https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20User%20Interface%20-%20Multiple%20Cross-Site-Scripting
CVE ID: CVE-2020-11703 State: PUBLISHED Published: 2020-04-12T02:44:06 Last Updated: 2024-08-04T11:35:13.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/GetInheritedProperties allows HTTP Response Splitting via the language parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.provideserver.com/security/ - https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20User%20Interface%20-%20HTTP%20Response%20Splitting
CVE ID: CVE-2020-11704 State: PUBLISHED Published: 2020-04-12T02:43:57 Last Updated: 2024-08-04T11:35:13.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Web Interface has Multiple Stored and Reflected XSS. GetInheritedProperties is Reflected via the groups parameter. GetUserInfo is Reflected via POST data. SetUserInfo is Stored via the general parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.provideserver.com/security/ - https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20Admin%20Interface%20-%20Multiple%20Cross-Site-Scripting
CVE ID: CVE-2020-11705 State: PUBLISHED Published: 2020-04-12T02:43:48 Last Updated: 2024-08-04T11:35:13.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/ImportCertificate allows an attacker to load an arbitrary certificate in .pfx format or overwrite arbitrary files via the fileName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.provideserver.com/security/ - https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20Admin%20Interface%20-%20Authenticated%20Arbitrary%20File%20Overwrite
CVE ID: CVE-2020-11706 State: PUBLISHED Published: 2020-04-12T02:43:29 Last Updated: 2024-08-04T11:35:13.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Interface allows CSRF for actions such as: Change any username and password, admin ones included; Create/Delete users; Enable/Disable Services; Set a rogue update proxy; and Shutdown the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.provideserver.com/security/ - https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20Admin%20Interface%20-%20Cross-Site-Request-Forgery
CVE ID: CVE-2020-11707 State: PUBLISHED Published: 2020-04-12T02:42:41 Last Updated: 2024-08-04T11:35:13.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ProVide (formerly zFTPServer) through 13.1. It doesn't enforce permission over Windows Symlinks or Junctions. As a result, a low-privileged user (non-admin) can craft a Junction Link in a directory he has full control of, breaking out of the sandbox. Additional Analyst Notes: - CVE Program Container: References: - https://www.provideserver.com/security/ - https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Sandbox%20Escape%20via%20Symlink%20or%20Junction
CVE ID: CVE-2020-11708 State: PUBLISHED Published: 2020-04-12T02:42:30 Last Updated: 2024-08-04T11:35:13.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ProVide (formerly zFTPServer) through 13.1. Privilege escalation can occur via the /ajax/SetUserInfo messages parameter because of the EXECUTE() feature, which is for executing programs when certain events are triggered. Additional Analyst Notes: - CVE Program Container: References: - https://www.provideserver.com/security/ - https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20Admin%20Interface%20-%20Privilege%20Escalation%20via%20EXECUTE%28%29
CVE ID: CVE-2020-11709 State: PUBLISHED Published: 2020-04-12T13:30:29 Last Updated: 2024-08-04T11:35:13.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect and set_header functions, which creates possibilities for CRLF injection and HTTP response splitting in some specific contexts. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yhirose/cpp-httplib/issues/425 - https://gist.github.com/shouc/a9330df817128bc4c4132abf3de09495