Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-25139 State: PUBLISHED Published: 2020-09-25T16:31:59 Last Updated: 2024-08-04T15:26:10.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via la_id to the /syslog_rules URI for delete_syslog_rule, because of syslog_rules.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/mariuszpoplawski/1e7526027aec7a89e78950e5e57d007d
CVE ID: CVE-2020-25140 State: PUBLISHED Published: 2020-09-25T16:33:30 Last Updated: 2024-08-04T15:26:09.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur in pages/contacts.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://docs.observium.org/changelog/
CVE ID: CVE-2020-25141 State: PUBLISHED Published: 2020-09-25T17:31:16 Last Updated: 2024-08-04T15:26:10.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via a /device/device=140/tab=wifi/view= URI. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/ahpaleus/da50a83eb286cc64ddffa4a0aa9adda5
CVE ID: CVE-2020-25142 State: PUBLISHED Published: 2020-09-25T17:33:29 Last Updated: 2024-08-04T15:26:10.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable if any links and forms lack an unpredictable CSRF token. Without such a token, attackers can forge malicious requests, such as for adding Device Settings via the /addsrv URI. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/ahpaleus/76aa81ec82644a89c2088ab3ea99f07c
CVE ID: CVE-2020-25143 State: PUBLISHED Published: 2020-09-25T17:35:52 Last Updated: 2024-08-04T15:26:10.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to SQL Injection due to the fact that it is possible to inject malicious SQL statements in malformed parameter types. This can occur via /ajax/device_entities.php?entity_type=netscalervsvr&device_id[]= because of /ajax/device_entities.php. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/ahpaleus/e75388086061ce52616967ba9ec63820
CVE ID: CVE-2020-25144 State: PUBLISHED Published: 2020-09-25T17:38:37 Last Updated: 2024-08-04T15:26:09.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to the fact that there is an unrestricted possibility of loading any file with an inc.php extension. Inclusion of other files (even though limited to the mentioned extension) can lead to Remote Code Execution. This can occur via /apps/?app=../ URIs. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/ahpaleus/f2843deea7f90e5b371e5c0370fb
onal Analyst Notes: - CVE Program Container: References: - https://gist.github.com/ahpaleus/f2843deea7f90e5b371e5c0370fb7775
CVE ID: CVE-2020-25145 State: PUBLISHED Published: 2020-09-25T17:42:47 Last Updated: 2024-08-04T15:26:09.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to the fact that there is an unrestricted possibility of loading any file with an inc.php extension. Inclusion of other files (even though limited to the mentioned extension) can lead to Remote Code Execution. This can occur via /device/device=345/?tab=ports&view=../ URIs because of device/port.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https:
ts&view=../ URIs because of device/port.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/ahpaleus/578186667e18607bb37bab9b0f66ad99
CVE ID: CVE-2020-25146 State: PUBLISHED Published: 2020-09-25T17:44:58 Last Updated: 2024-08-04T15:26:09.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via la_id to the /syslog_rules URI for edit_syslog_rule. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/ahpaleus/7f6360e112e79539feb166660bbb7193
CVE ID: CVE-2020-25147 State: PUBLISHED Published: 2020-09-25T17:47:11 Last Updated: 2024-08-04T15:26:10.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to SQL Injection due to the fact that it is possible to inject malicious SQL statements in malformed parameter types. This can occur via username[0] to the default URI, because of includes/authenticate.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/ahpaleus/c9ee1108d146a94470f191fc423bee10
CVE ID: CVE-2020-25148 State: PUBLISHED Published: 2020-09-25T17:50:15 Last Updated: 2024-08-04T15:26:09.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious JavaScript code within it. this can occur via /iftype/type= because of pages/iftype.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/ahpaleus/fde01d1a944fe237010a1e524dd19180
CVE ID: CVE-2020-25149 State: PUBLISHED Published: 2020-09-25T17:53:25 Last Updated: 2024-08-04T15:26:09.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to the fact that there is an unrestricted possibility of loading any file with an inc.php extension. Inclusion of other files (even though limited to the mentioned extension) can lead to Remote Code Execution. This can occur via /device/device=345/?tab=health&metric=../ because of device/health.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https:
lth&metric=../ because of device/health.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/ahpaleus/cfa6dd1c3bf6924b268f1ca38198b40d
CVE ID: CVE-2020-25150 State: PUBLISHED Published: 2022-04-14T20:05:52.000Z Last Updated: 2025-04-16T16:30:32.103Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: B. Braun Melsungen AG Products: SpaceCom, Battery pack with Wi-Fi, Data module compactplus Problem Types: CWE-23 Description: A relative path traversal attack in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with service user privileges to upload arbitrary files. By uploading a specially crafted tar file an attacker can execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnr
tar file an attacker can execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 - https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
CVE ID: CVE-2020-25151 State: PUBLISHED Published: 2020-11-13T15:35:58 Last Updated: 2024-08-04T15:26:09.567Z Vendors: n/a Products: NIO 50 Problem Types: CWE-20 Description: The affected product does not properly validate input, which may allow an attacker to execute a denial-of-service attack on the NIO 50 (all versions). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-308-02
CVE ID: CVE-2020-25152 State: PUBLISHED Published: 2022-04-14T20:05:55.000Z Last Updated: 2025-04-16T16:30:24.443Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: B. Braun Melsungen AG Products: SpaceCom, Battery pack with Wi-Fi, Data module compactplus Problem Types: CWE-384 Description: A session fixation vulnerability in the B. Braun Melsungen AG SpaceCom administrative interface Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to hijack web sessions and escalate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advi
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 - https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
CVE ID: CVE-2020-25153 State: PUBLISHED Published: 2020-12-23T14:08:34.327193Z Last Updated: 2024-09-16T19:35:37.248Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: MOXA Products: NPort IAW5000A-I/O Problem Types: CWE-521 Description: The built-in web service for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower does not require users to have strong passwords. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-287-01
CVE ID: CVE-2020-25154 State: PUBLISHED Published: 2022-04-14T20:05:58.000Z Last Updated: 2025-04-16T16:29:52.798Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: B. Braun Melsungen AG Products: SpaceCom, Battery pack with Wi-Fi, Data module compactplus Problem Types: CWE-601 Description: An open redirect vulnerability in the administrative interface of the B. Braun Melsungen AG SpaceCom device Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to redirect users to malicious websites. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/adviso
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 - https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
CVE ID: CVE-2020-25155 State: PUBLISHED Published: 2020-11-13T15:32:55 Last Updated: 2024-08-04T15:26:09.595Z Vendors: n/a Products: NIO 50 Problem Types: CWE-319 Description: The affected product transmits unencrypted sensitive information, which may allow an attacker to access this information on the NIO 50 (all versions). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-308-02
CVE ID: CVE-2020-25156 State: PUBLISHED Published: 2022-04-14T20:05:53.000Z Last Updated: 2025-04-16T17:55:34.722Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: B. Braun Melsungen AG Products: SpaceCom, Battery pack with Wi-Fi, Data module compactplus Problem Types: CWE-489 Description: Active debug code in the B. Braun Melsungen AG SpaceCom Version L8/U61, and the Data module compactplus Versions A10 and A11 and earlier enables attackers in possession of cryptographic material to access the device as root. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 - ht
rogram Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 - https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
CVE ID: CVE-2020-25157 State: PUBLISHED Published: 2020-10-20T21:40:26 Last Updated: 2024-08-04T15:26:10.164Z Vendors: n/a Products: Advantech R-SeeNet Problem Types: IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS USE IN AN SQL COMMAND ('SQL INJECTION') Description: The R-SeeNet webpage (1.5.1 through 2.4.10) suffers from SQL injection, which allows a remote attacker to invoke queries on the database and retrieve sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-289-02
CVE ID: CVE-2020-25158 State: PUBLISHED Published: 2022-04-14T20:05:56.000Z Last Updated: 2025-04-16T16:30:09.180Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L) Vendors: B. Braun Melsungen AG Products: SpaceCom, Battery pack with Wi-Fi, Data module compactplus Problem Types: CWE-79 Description: A reflected cross-site scripting (XSS) vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to inject arbitrary web script or HTML into various locations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/i
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 - https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
CVE ID: CVE-2020-25159 State: PUBLISHED Published: 2020-11-24T19:12:51.664342Z Last Updated: 2024-09-16T18:09:26.549Z Vendors: Real Time Automation Products: 499ES EtherNet/IP (ENIP) Adaptor Source Code Problem Types: CWE-121 Description: 499ES EtherNet/IP (ENIP) Adaptor Source Code is vulnerable to a stack-based buffer overflow, which may allow an attacker to send a specially crafted packet that may result in a denial-of-service condition or code execution. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-324-03
CVE ID: CVE-2020-25160 State: PUBLISHED Published: 2022-04-14T20:05:55.000Z Last Updated: 2025-04-16T16:30:17.021Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: B. Braun Melsungen AG Products: SpaceCom, Battery pack with Wi-Fi, Data module compactplus Problem Types: CWE-284 Description: Improper access controls in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 enables attackers to extract and tamper with the devices network configuration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 -
Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 - https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
CVE ID: CVE-2020-25161 State: PUBLISHED Published: 2021-02-23T16:14:20 Last Updated: 2024-08-04T15:26:09.779Z Vendors: n/a Products: Advantech WebAccess/SCADA Problem Types: CWE-73 Description: The WADashboard component of WebAccess/SCADA Versions 9.0 and prior may allow an attacker to control or influence a path used in an operation on the filesystem and remotely execute code as an administrator. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-289-01
CVE ID: CVE-2020-25162 State: PUBLISHED Published: 2022-04-14T20:05:57.000Z Last Updated: 2025-04-16T16:29:59.860Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: B. Braun Melsungen AG Products: SpaceCom, Battery pack with Wi-Fi, Data module compactplus Problem Types: CWE-643 Description: A XPath injection vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows unauthenticated remote attackers to access sensitive information and escalate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisor
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 - https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
CVE ID: CVE-2020-25163 State: PUBLISHED Published: 2022-04-18T16:20:45.000Z Last Updated: 2025-04-16T17:55:26.780Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: OSIsoft Products: PI Vision Problem Types: CWE-79 Description: A remote attacker with write access to PI ProcessBook files could inject code that is imported into OSIsoft PI Vision 2020 versions prior to 3.5.0. Unauthorized information disclosure, modification, or deletion is also possible if a victim views or interacts with the infected display. This vulnerability affects PI System data and other data accessible with victim’s user permissions. Additional Analyst Notes: - CVE Program Container: - CIS
data and other data accessible with victim’s user permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-20-315-02
CVE ID: CVE-2020-25164 State: PUBLISHED Published: 2022-04-14T20:06:00.000Z Last Updated: 2025-04-16T16:29:36.723Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: B. Braun Melsungen AG Products: SpaceCom, Battery pack with Wi-Fi, Data module compactplus Problem Types: CWE-759 Description: A vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to recover user credentials of the administrative interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 - https://www
ntainer: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 - https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
CVE ID: CVE-2020-25165 State: PUBLISHED Published: 2020-11-13T15:06:08 Last Updated: 2024-08-04T15:26:09.484Z Vendors: n/a Products: BD Alaris PC Unit and BD Alaris Systems Manager Problem Types: CWE-287 Description: BD Alaris PC Unit, Model 8015, Versions 9.33.1 and earlier and BD Alaris Systems Manager, Versions 4.33 and earlier The affected products are vulnerable to a network session authentication vulnerability within the authentication process between specified versions of the BD Alaris PC Unit and the BD Alaris Systems Manager. If exploited, an attacker could perform a denial-of-service attack on the BD Alaris PC Unit by modifying the configuration headers of data in transit. A denial
a denial-of-service attack on the BD Alaris PC Unit by modifying the configuration headers of data in transit. A denial-of-service attack could lead to a drop in the wireless capability of the BD Alaris PC Unit, resulting in manual operation of the PC Unit. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-20-317-01
CVE ID: CVE-2020-25166 State: PUBLISHED Published: 2022-04-14T20:05:59.000Z Last Updated: 2025-04-16T16:29:44.744Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: B. Braun Melsungen AG Products: SpaceCom, Battery pack with Wi-Fi, Data module compactplus Problem Types: CWE-347 Description: An improper verification of the cryptographic signature of firmware updates of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to generate valid firmware updates with arbitrary content that can be used to tamper with devices. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
rary content that can be used to tamper with devices. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 - https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
CVE ID: CVE-2020-25167 State: PUBLISHED Published: 2022-04-18T16:20:46.000Z Last Updated: 2025-04-16T16:29:22.799Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: OSIsoft Products: PI Vision Problem Types: CWE-863 Description: OSIsoft PI Vision 2020 versions prior to 3.5.0 could disclose information to a user with insufficient privileges for an AF attribute. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-20-315-02
CVE ID: CVE-2020-25168 State: PUBLISHED Published: 2022-04-14T20:06:00.000Z Last Updated: 2025-04-16T16:29:29.444Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: B. Braun Melsungen AG Products: SpaceCom, Battery pack with Wi-Fi, Data module compactplus Problem Types: CWE-798 Description: Hard-coded credentials in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 enable attackers with command line access to access the device’s Wi-Fi module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 - https:
am Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-20-296-02 - https://www.bbraun.com/en/products-and-therapies/services/b-braun-vulnerability-disclosure-policy/security-advisory.html
CVE ID: CVE-2020-25169 State: PUBLISHED Published: 2021-01-26T12:46:09.208478Z Last Updated: 2024-09-16T22:15:58.929Z Vendors: Reolink Products: RLC-4XX series, RLC-5XX series, RLN-X10 series Problem Types: CWE-319 Description: The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-019-02
CVE ID: CVE-2020-25170 State: PUBLISHED Published: 2020-11-06T16:08:07.525834Z Last Updated: 2024-09-17T00:56:57.848Z Vendors: B. Braun Melsungen AG Products: OnlineSuite Problem Types: CWE-1236 Description: An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are mishandled in an Excel export. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-20-296-01
CVE ID: CVE-2020-25171 State: PUBLISHED Published: 2021-02-19T17:06:18 Last Updated: 2024-08-04T15:26:10.248Z Vendors: Fuji Electric Products: V-Server Lite Problem Types: CWE-787 Description: The affected Fuji Electric V-Server Lite versions prior to 3.3.24.0 are vulnerable to an out-of-bounds write, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-329-02