Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-21468 State: PUBLISHED Published: 2021-09-20T15:11:37 Last Updated: 2024-08-04T14:30:33.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service (DOS). NOTE: the vendor cannot reproduce this issue in a released version, such as 5.0.7 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://redis.com - https://github.com/antirez/redis/issues/6633
CVE ID: CVE-2020-21469 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-08-04T14:30:32.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals. NOTE: this is disputed by the vendor because untrusted users cannot send SIGHUP signals; they can only be sent by a PostgreSQL superuser, a user with pg_reload_conf access, or a user with sufficient privileges at the OS level (the postgres account or the root account). Additional Analyst Notes: - CVE Program Container: References: - https://www.postgresql.org/support/security/ - https://www.postgresq
alyst Notes: - CVE Program Container: References: - https://www.postgresql.org/support/security/ - https://www.postgresql.org/message-id/CAA8ZSMqAHDCgo07hqKoM5XJaoQy6Vv76O7966agez4ffyQktkA%40mail.gmail.com - https://www.postgresql.org/message-id/flat/CAA8ZSMqAHDCgo07hqKoM5XJaoQy6Vv76O7966agez4ffyQktkA%40mail.gmail.com
CVE ID: CVE-2020-21474 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-10T15:31:03.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in NucleusCMS v.3.71 allows a remote attacker to execute arbitrary code via the /nucleus/plugins/skinfiles/?dir=rsd parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/NucleusCMS/NucleusCMS/issues/95
CVE ID: CVE-2020-21480 State: PUBLISHED Published: 2021-09-15T21:43:55 Last Updated: 2024-08-04T14:30:32.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file write vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://www.porlockz.com/A-arbitrary-file-write-vulnerability-in-RGCMS-V1-06/
CVE ID: CVE-2020-21481 State: PUBLISHED Published: 2021-09-15T21:43:56 Last Updated: 2024-08-04T14:30:32.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted .txt file which is later changed to a PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://www.porlockz.com/A-arbitrary-file-upload-vulnerability-in-RGCMS-V1-06/
CVE ID: CVE-2020-21482 State: PUBLISHED Published: 2021-09-15T21:43:57 Last Updated: 2024-08-04T14:30:32.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in RGCMS v1.06 allows attackers to obtain the administrator's cookie via a crafted payload in the Name field under the Message Board module Additional Analyst Notes: - CVE Program Container: References: - https://www.porlockz.com/A-xss-vulnerability-in-RGCMS-V1-06/
CVE ID: CVE-2020-21483 State: PUBLISHED Published: 2021-09-15T21:43:58 Last Updated: 2024-08-04T14:30:33.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in Jizhicms v1.5 allows attackers to execute arbitrary code via a crafted .jpg file which is later changed to a PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://www.porlockz.com/A-arbitrary-file-upload-vulnerability-in-jizhicms-v1-5/
CVE ID: CVE-2020-21485 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-09T21:21:47.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Alluxio v.1.8.1 allows a remote attacker to executea arbitrary code via the path parameter in the browse board component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Alluxio/alluxio/issues/10552
CVE ID: CVE-2020-21486 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-09T21:20:56.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the _userlist function in framerwork/phpok_call.php file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/qinggan/phpok/issues/8
CVE ID: CVE-2020-21487 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T16:36:13.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFolder field of acme_certificates.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pfsense/FreeBSD-ports/commit/a6f443cde51e7fcf17e51f16014d3589253284d8 - https://redmine.pfsense.org/issues/9888
CVE ID: CVE-2020-21489 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-09T21:17:14.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liufee/cms/issues/46
CVE ID: CVE-2020-21490 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-04T16:16:46.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU Binutils 2.34. It is a memory leak when process microblaze-dis.c. This one will consume memory on each insn disassembled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=25249 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=378fd436405b3051df34ac995b2e03fe1f3d1907 - https://security.netapp.com/advisory/ntap-20230929-0007/
CVE ID: CVE-2020-21493 State: PUBLISHED Published: 2021-10-04T21:00:35 Last Updated: 2024-08-04T14:30:33.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wanghaiwei/xiuno-docker/issues/3 - https://gitee.com/xiuno/xiunobbs/issues/I1690W
CVE ID: CVE-2020-21494 State: PUBLISHED Published: 2021-10-04T21:00:36 Last Updated: 2024-08-04T14:30:33.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via changing the doctype value to 0. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/xiuno/xiunobbs/issues/I16BHH - https://github.com/wanghaiwei/xiuno-docker/issues/4
CVE ID: CVE-2020-21495 State: PUBLISHED Published: 2021-10-04T21:00:36 Last Updated: 2024-08-04T14:30:32.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitename parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wanghaiwei/xiuno-docker/issues/5 - https://gitee.com/xiuno/xiunobbs/issues/I16BI3
CVE ID: CVE-2020-21496 State: PUBLISHED Published: 2021-10-04T21:00:37 Last Updated: 2024-08-04T14:30:32.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wanghaiwei/xiuno-docker/issues/5 - https://gitee.com/xiuno/xiunobbs/issues/I16BI3
CVE ID: CVE-2020-21503 State: PUBLISHED Published: 2021-10-05T21:32:34 Last Updated: 2024-08-04T14:30:32.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/caokang/waimai/issues/15
CVE ID: CVE-2020-21504 State: PUBLISHED Published: 2021-10-05T21:32:35 Last Updated: 2024-08-04T14:30:33.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?&m=Public&a=login. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/caokang/waimai/issues/16
CVE ID: CVE-2020-21505 State: PUBLISHED Published: 2021-10-05T21:32:36 Last Updated: 2024-08-04T14:30:33.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Link/addsave. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/caokang/waimai/issues/16
CVE ID: CVE-2020-21506 State: PUBLISHED Published: 2021-10-05T21:32:37 Last Updated: 2024-08-04T14:30:32.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?m=Config&a=add. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/caokang/waimai/issues/16
CVE ID: CVE-2020-21514 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-06-09T14:00:49.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fluent/fluentd/issues/2722 - https://github.com/fluent/fluentd-ui/issues/295
CVE ID: CVE-2020-21516 State: PUBLISHED Published: 2022-09-06T18:08:44 Last Updated: 2024-08-04T14:30:32.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/liufee/cms/issues/46
CVE ID: CVE-2020-21517 State: PUBLISHED Published: 2021-06-21T14:55:02 Last Updated: 2024-08-04T14:30:33.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 via the gourl parameter in login.php. Additional Analyst Notes: - CVE Program Container: References: - http://metinfo.com - https://github.com/lvyyevd/cms/blob/master/metinfo/metinfo7.0.0.md - https://u.mituo.cn/api/metinfo/download/7.0.0
CVE ID: CVE-2020-21522 State: PUBLISHED Published: 2020-09-30T14:26:14 Last Updated: 2024-08-04T14:30:33.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in halo V1.1.3. A Zip Slip Directory Traversal Vulnerability in the backend,the attacker can overwrite some files, such as ftl files, .bashrc files in the user directory, and finally get the permissions of the operating system. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/halo-dev/halo/issues/418
CVE ID: CVE-2020-21523 State: PUBLISHED Published: 2020-09-30T14:29:51 Last Updated: 2024-08-04T14:30:33.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Server-Side Freemarker template injection vulnerability in halo CMS v1.1.3 In the Edit Theme File function. The ftl file can be edited. This is the Freemarker template file. This file can cause arbitrary code execution when it is rendered in the background. exp: <#assign test="freemarker.template.utility.Execute"?new()> ${test("touch /tmp/freemarkerPwned")} Additional Analyst Notes: - CVE Program Container: References: - https://github.com/halo-dev/halo/issues/419
CVE ID: CVE-2020-21524 State: PUBLISHED Published: 2020-09-30T14:34:09 Last Updated: 2024-08-04T14:30:32.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a XML external entity (XXE) vulnerability in halo v1.1.3, The function of importing other blogs in the background(/api/admin/migrations/wordpress) needs to parse the xml file, but it is not used for security defense, This vulnerability can detect the intranet, read files, enable ddos attacks, etc. exp:https://github.com/halo-dev/halo/issues/423 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/halo-dev/halo/issues/423
CVE ID: CVE-2020-21525 State: PUBLISHED Published: 2020-09-30T14:38:01 Last Updated: 2024-08-04T14:30:33.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Halo V1.1.3 is affected by: Arbitrary File reading. In an interface that reads files in halo v1.1.3, a directory traversal check is performed on the input path parameter, but the startsWith function can be used to bypass it. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/halo-dev/halo/issues/420
CVE ID: CVE-2020-21526 State: PUBLISHED Published: 2020-09-30T14:43:02 Last Updated: 2024-08-04T14:30:33.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Arbitrary file writing vulnerability in halo v1.1.3. In an interface to write files in the background, a directory traversal check is performed on the input path parameter, but the startsWith function can be used to bypass it. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/halo-dev/halo/issues/421
CVE ID: CVE-2020-21527 State: PUBLISHED Published: 2020-09-30T14:47:24 Last Updated: 2024-08-04T14:30:33.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an Arbitrary file deletion vulnerability in halo v1.1.3. A backup function in the background allows a user, when deleting their backup files, to delete any files on the system through directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/halo-dev/halo/issues/422
CVE ID: CVE-2020-21528 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-08-04T14:30:33.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392637 - https://security.gentoo.org/glsa/202312-09
CVE ID: CVE-2020-21529 State: PUBLISHED Published: 2021-09-16T00:00:00 Last Updated: 2024-08-04T14:30:33.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/65/ - https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html - https://lists.debian.org/debian-lts-announce/2023/01/msg00044.html
CVE ID: CVE-2020-21530 State: PUBLISHED Published: 2021-09-16T20:27:54 Last Updated: 2024-08-04T14:30:33.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/61/ - https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html
CVE ID: CVE-2020-21531 State: PUBLISHED Published: 2021-09-16T00:00:00 Last Updated: 2024-08-04T14:30:33.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/63/ - https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html - https://lists.debian.org/debian-lts-announce/2023/01/msg00044.html
CVE ID: CVE-2020-21532 State: PUBLISHED Published: 2021-09-16T00:00:00 Last Updated: 2024-08-04T14:30:32.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/64/ - https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html - https://lists.debian.org/debian-lts-announce/2023/01/msg00044.html
CVE ID: CVE-2020-21533 State: PUBLISHED Published: 2021-09-16T20:27:57 Last Updated: 2024-08-04T14:30:33.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/59/ - https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html
CVE ID: CVE-2020-21534 State: PUBLISHED Published: 2021-09-16T20:27:59 Last Updated: 2024-08-04T14:30:33.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/58/ - https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html
CVE ID: CVE-2020-21535 State: PUBLISHED Published: 2021-09-16T20:28:00 Last Updated: 2024-08-04T14:30:33.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/125.html - https://sourceforge.net/p/mcj/tickets/62/ - https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html
CVE ID: CVE-2020-21547 State: PUBLISHED Published: 2021-09-17T20:34:24 Last Updated: 2024-08-04T14:30:33.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libsixel 1.8.2 contains a heap-based buffer overflow in the dither_func_fs function in tosixel.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/114
CVE ID: CVE-2020-21548 State: PUBLISHED Published: 2021-09-17T20:34:25 Last Updated: 2024-08-04T14:30:33.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libsixel 1.8.3 contains a heap-based buffer overflow in the sixel_encode_highcolor function in tosixel.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/116
CVE ID: CVE-2020-21554 State: PUBLISHED Published: 2022-03-25T15:38:58 Last Updated: 2024-08-04T14:30:33.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: A File Deletion vulnerability exists in TinyShop 3.1.1 in the back_list parameter in controllers\admin.php, which could let a malicious user delete any file such as install.lock to reinstall cms. Additional Analyst Notes: - CVE Program Container: References: - http://tinyrise.com/ - http://tinyrise.com/down.html - https://imgur.com/dg1DM5T - https://imgur.com/pA8OWxa
CVE ID: CVE-2020-21564 State: PUBLISHED Published: 2020-09-30T15:39:44 Last Updated: 2024-08-04T14:30:33.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Pluck CMS 4.7.10-dev2 and 4.7.11. There is a file upload vulnerability that can cause a remote command execution via admin.php?action=files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pluck-cms/pluck/issues/83 - https://github.com/pluck-cms/pluck/issues/91
CVE ID: CVE-2020-21572 State: PUBLISHED Published: 2021-11-02T17:45:03 Last Updated: 2024-08-04T14:30:33.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in function src_parser_trans_stage_1_2_3 trgil gilcc before commit 803969389ca9c06237075a7f8eeb1a19e6651759, allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/trgil/gilcc/issues/1 - https://github.com/trgil/gilcc/commit/803969389ca9c06237075a7f8eeb1a19e6651759
CVE ID: CVE-2020-21573 State: PUBLISHED Published: 2021-11-02T17:45:04 Last Updated: 2024-08-04T14:30:33.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discoverered in in abhijitnathwani image-processing v0.1.0, allows local attackers to cause a denial of service via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/abhijitnathwani/image-processing/issues/3
CVE ID: CVE-2020-21574 State: PUBLISHED Published: 2021-11-02T17:45:06 Last Updated: 2024-08-04T14:30:32.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in YotsuyaNight c-http v0.1.0, allows attackers to cause a denial of service via a long url request which is passed to the delimitedread function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/YotsuyaNight/c-http/issues/1
CVE ID: CVE-2020-21583 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-12-20T13:06:39.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path parameter when setting the date. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=786804 - https://packetstormsecurity.com/files/132061/hwclock-Privilege-Escalation.html
CVE ID: CVE-2020-21585 State: PUBLISHED Published: 2021-04-02T19:58:22 Last Updated: 2024-08-04T14:30:33.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/emlog/emlog/issues/54 - https://github.com/pwnninja/emlog/issues/1
CVE ID: CVE-2020-21588 State: PUBLISHED Published: 2021-04-02T19:58:28 Last Updated: 2024-08-04T14:30:33.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Core FTP LE v2.2 allows local attackers to cause a denial or service (crash) via a long string in the Setup->Users->Username editbox. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lonely-explorer/CoreFTP/issues/1 - https://github.com/pwnninja/CoreFTP/issues/1
CVE ID: CVE-2020-21590 State: PUBLISHED Published: 2021-04-02T19:58:32 Last Updated: 2024-08-04T14:30:33.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbitrary directories via the dir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/190 - https://github.com/pwnninja/wuzhicms/issues/1
CVE ID: CVE-2020-21594 State: PUBLISHED Published: 2021-09-16T00:00:00 Last Updated: 2024-08-04T14:30:33.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: libde265 v1.0.4 contains a heap buffer overflow in the put_epel_hv_fallback function, which can be exploited via a crafted a file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libde265/issues/233 - https://www.debian.org/security/2023/dsa-5346