Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-25039 State: PUBLISHED Published: 2020-09-16T17:42:44 Last Updated: 2024-08-04T15:26:09.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container execution. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/sylabs - https://github.com/hpcng/singularity/security/advisories/GHSA-w6v2-qchm-grj7 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00070.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00088.html
CVE ID: CVE-2020-25040 State: PUBLISHED Published: 2020-09-16T17:47:17 Last Updated: 2024-08-04T15:26:09.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used in explicit and implicit container build operations, a different vulnerability than CVE-2020-25039. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/sylabs - https://github.com/hpcng/singularity/security/advisories/GHSA-jv9c-w74q-6762 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00070.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00088.html
CVE ID: CVE-2020-25042 State: PUBLISHED Published: 2020-09-03T14:23:13 Last Updated: 2024-08-04T15:26:09.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authenticated (admin/manager) session and make a codebase/dir.php?type=filenew request to upload PHP code to codebase/handler.php. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/maracms/ - https://www.exploit-db.com/exploits/48780 - http://packetstormsecurity.com/files/159304/MaraCMS-7.5-Remote-Code-Execution.html
CVE ID: CVE-2020-25043 State: PUBLISHED Published: 2020-09-02T19:28:24 Last Updated: 2024-08-04T15:26:09.421Z Vendors: n/a Products: Kaspersky VPN Secure Connection Problem Types: Denial of Service (DoS) Description: The installer of Kaspersky VPN Secure Connection prior to 5.0 was vulnerable to arbitrary file deletion that could allow an attacker to delete any file in the system. Additional Analyst Notes: - CVE Program Container: References: - https://support.kaspersky.com/general/vulnerability.aspx?el=12430#290720
CVE ID: CVE-2020-25044 State: PUBLISHED Published: 2020-09-02T19:29:54 Last Updated: 2024-08-04T15:26:09.552Z Vendors: n/a Products: Kaspersky Virus Removal Tool Problem Types: Denial of Service (DoS) Description: Kaspersky Virus Removal Tool (KVRT) prior to 15.0.23.0 was vulnerable to arbitrary file corruption that could provide an attacker with the opportunity to eliminate content of any file in the system. Additional Analyst Notes: - CVE Program Container: References: - https://support.kaspersky.com/general/vulnerability.aspx?el=12430#290720
CVE ID: CVE-2020-25045 State: PUBLISHED Published: 2020-09-02T19:25:10 Last Updated: 2024-08-04T15:26:09.307Z Vendors: n/a Products: Kaspersky Security Center & Kaspersky Security Center Web Console Problem Types: Local Privilege Escalation (LPE) Description: Installers of Kaspersky Security Center and Kaspersky Security Center Web Console prior to 12 & prior to 12 Patch A were vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges in the system. Additional Analyst Notes: - CVE Program Container: References: - https://support.kaspersky.com/general/vulnerability.aspx?el=12430#290720
CVE ID: CVE-2020-25046 State: PUBLISHED Published: 2020-08-31T20:26:25 Last Updated: 2024-08-04T15:26:09.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The USB driver leaks address information via kernel logging. The Samsung IDs are SVE-2020-17602, SVE-2020-17603, SVE-2020-17604 (August 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-25047 State: PUBLISHED Published: 2020-08-31T20:26:12 Last Updated: 2024-08-04T15:26:09.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (released in China and India) software. The S Secure application does not enforce the intended password requirement for a locked application. The Samsung IDs are SVE-2020-16746, SVE-2020-16764 (August 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-25048 State: PUBLISHED Published: 2020-08-31T20:25:45 Last Updated: 2024-08-04T15:26:09.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with Q(10.0) (with ONEUI 2.1) software. In the Lockscreen state, the Quick Share feature allows unauthenticated downloads, aka file injection. The Samsung ID is SVE-2020-17760 (August 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-25049 State: PUBLISHED Published: 2020-08-31T20:25:20 Last Updated: 2024-08-04T15:26:09.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. StatusBarService has insufficient DEX access control. The Samsung ID is SVE-2020-17797 (August 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-25050 State: PUBLISHED Published: 2020-08-31T20:25:10 Last Updated: 2024-08-04T15:26:09.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. The CMC service allows attackers to obtain sensitive information. The Samsung ID is SVE-2020-17288 (August 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-25051 State: PUBLISHED Published: 2020-08-31T20:25:01 Last Updated: 2024-08-04T15:26:09.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can bypass Factory Reset Protection (FRP) via AppInfo. The Samsung ID is SVE-2020-17758 (August 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-25052 State: PUBLISHED Published: 2020-08-31T20:24:52 Last Updated: 2024-08-04T15:26:09.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software. H-Arx allows attackers to execute arbitrary code or cause a denial of service (memory corruption) because indexes are mishandled. The Samsung ID is SVE-2020-17426 (August 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-25053 State: PUBLISHED Published: 2020-08-31T20:23:52 Last Updated: 2024-08-04T15:26:09.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with Q(10.0) (exynos9830 chipsets) software. RKP allows arbitrary code execution. The Samsung ID is SVE-2020-17435 (August 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-25054 State: PUBLISHED Published: 2020-08-31T20:24:37 Last Updated: 2024-08-04T15:26:09.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with software through 2020-04-02 (Exynos modem chipsets). There is a heap-based buffer over-read in the Shannon baseband. The Samsung ID is SVE-2020-17239 (August 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-25055 State: PUBLISHED Published: 2020-08-31T20:24:26 Last Updated: 2024-08-04T15:26:09.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The persona service allows attackers (who control an unprivileged SecureFolder process) to bypass admin restrictions in KnoxContainer. The Samsung ID is SVE-2020-18133 (August 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-25056 State: PUBLISHED Published: 2020-08-31T20:24:14 Last Updated: 2024-08-04T15:26:09.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with Q(10.0) (Galaxy S20) software. Because HAL improperly checks versions, bootloading by the S.LSI NFC chipset is mishandled. The Samsung ID is SVE-2020-16169 (August 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-25057 State: PUBLISHED Published: 2020-08-31T20:47:37 Last Updated: 2024-08-04T15:26:09.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS 10 software. MDMService does not properly restrict APK installations. The LG ID is LVE-SMP-200011 (July 2020). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/
CVE ID: CVE-2020-25058 State: PUBLISHED Published: 2020-08-31T20:45:29 Last Updated: 2024-08-04T15:26:09.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software. The network_management service does not properly restrict configuration changes. The LG ID is LVE-SMP-200012 (July 2020). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/
CVE ID: CVE-2020-25059 State: PUBLISHED Published: 2020-08-31T20:47:24 Last Updated: 2024-08-04T15:26:09.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A service crash may occur because of incorrect input validation. The LG ID is LVE-SMP-200013 (July 2020). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/
CVE ID: CVE-2020-25060 State: PUBLISHED Published: 2020-08-31T20:47:13 Last Updated: 2024-08-04T15:26:09.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. Local users can gain privileges because of LAF and SBL1 flaws. The LG ID is LVE-SMP-200015 (July 2020). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/
CVE ID: CVE-2020-25061 State: PUBLISHED Published: 2020-08-31T20:46:59 Last Updated: 2024-08-04T15:26:09.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network. lge_property allows property overwrites. The LG ID is LVE-SMP-200016 (July 2020). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/
CVE ID: CVE-2020-25062 State: PUBLISHED Published: 2020-08-31T20:46:32 Last Updated: 2024-08-04T15:26:09.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS 9 and 10 software. LGTelephonyProvider allows a bypass of intended privilege restrictions. The LG ID is LVE-SMP-200017 (July 2020). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/
CVE ID: CVE-2020-25063 State: PUBLISHED Published: 2020-08-31T20:46:20 Last Updated: 2024-08-04T15:26:09.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. An application crash can occur because of incorrect application-level input validation. The LG ID is LVE-SMP-200018 (July 2020). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/
CVE ID: CVE-2020-25064 State: PUBLISHED Published: 2020-08-31T20:45:58 Last Updated: 2024-08-04T15:26:09.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software. Certain automated testing is mishandled. The LG ID is LVE-SMP-200019 (August 2020). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/
CVE ID: CVE-2020-25065 State: PUBLISHED Published: 2020-08-31T20:45:47 Last Updated: 2024-08-04T15:26:09.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software. Key logging may occur because of an obsolete API. The LG ID is LVE-SMP-170010 (August 2020). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/
CVE ID: CVE-2020-25066 State: PUBLISHED Published: 2020-12-22T21:04:06 Last Updated: 2024-08-04T15:26:09.240Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service (crash/reset) or to possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://treck.com/vulnerability-response-information/ - https://security.netapp.com/advisory/ntap-20210201-0003/
CVE ID: CVE-2020-25067 State: PUBLISHED Published: 2020-09-01T03:22:10 Last Updated: 2024-08-04T15:26:09.315Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062158/Security-Advisory-for-Pre-Authentication-Command-Injection-on-R8300-PSV-2020-0211
CVE ID: CVE-2020-25068 State: PUBLISHED Published: 2020-09-03T14:30:27 Last Updated: 2024-08-04T15:26:09.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote unauthenticated attacker to read internal files on the server via an http:IP:PORT/../../path/file_to_disclose Directory Traversal URI. NOTE: The manufacturer indicated that the affected version does not exist. Furthermore, they indicated that they detected this problem in an internal audit more than 3 years ago and fixed it in 2017. Additional Analyst Notes: - CVE Program Container: References: - https://www.you
than 3 years ago and fixed it in 2017. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=CLAHE0qUHXs - http://setelsa-security.es/productos/control-de-acceso/ - https://github.com/bryanroma/CVE-2020-25068
CVE ID: CVE-2020-25069 State: PUBLISHED Published: 2020-09-01T20:14:39 Last Updated: 2024-08-04T15:26:09.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: USVN (aka User-friendly SVN) before 1.0.10 allows attackers to execute arbitrary code in the commit view. Additional Analyst Notes: - CVE Program Container: References: - https://www.usvn.info/2020/08/02/usvn-1.0.10
CVE ID: CVE-2020-25070 State: PUBLISHED Published: 2020-09-01T20:14:29 Last Updated: 2024-08-04T15:26:09.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: USVN (aka User-friendly SVN) before 1.0.10 allows CSRF, related to the lack of the SameSite Strict feature. Additional Analyst Notes: - CVE Program Container: References: - https://www.usvn.info/2020/08/02/usvn-1.0.10
CVE ID: CVE-2020-25071 State: PUBLISHED Published: 2020-09-15T17:17:02 Last Updated: 2024-08-04T15:26:09.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nifty Project Management Web Application 2020-08-26 allows XSS, via Add Task, that is rendered upon a Project Home visit. Note: It has been argued that this is not reproducible. "The original issue was that the task would be created and an alert would be shown on the screen. Now the task would be created, but the alert won't be executed as those attributes are now stripped. Additional Analyst Notes: - CVE Program Container: References: - https://niftypm.com/security - https://medium.com/%40muffydium/a-tale-of-reflected-xss-to
ogram Container: References: - https://niftypm.com/security - https://medium.com/%40muffydium/a-tale-of-reflected-xss-to-stored-which-ultimately-resulted-into-a-cve-82981f8648d7
CVE ID: CVE-2020-25073 State: PUBLISHED Published: 2020-09-02T01:26:28 Last Updated: 2024-08-04T15:26:09.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreedomBox through 20.13 allows remote attackers to obtain sensitive information from the /server-status page of the Apache HTTP Server, because a connection from the Tor onion service (or from PageKite) is considered a local connection. This affects both the freedombox and plinth packages of some Linux distributions, but only if the Apache mod_status module is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://salsa.debian.org/freedombox-team/freedombox/-/issues/1935
CVE ID: CVE-2020-25074 State: PUBLISHED Published: 2020-11-10T16:48:21 Last Updated: 2024-08-04T15:26:09.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. An attacker who can upload attachments to the wiki can use this to achieve remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://moinmo.in/SecurityFixes - https://www.debian.org/security/2020/dsa-4787 - https://github.com/moinwiki/moin-1.9/security/advisories/GHSA-52q8-877j-gghq - https://lists.debian.org/debian-lts-announce/2020/11/msg00020.html
CVE ID: CVE-2020-25078 State: PUBLISHED Published: 2020-09-02T15:33:18.000Z Last Updated: 2025-10-21T23:35:36.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for remote administrator password disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10180 - https://twitter.com/Dogonsecurity/status/1273251236167516161
CVE ID: CVE-2020-25079 State: PUBLISHED Published: 2020-09-02T15:33:07.000Z Last Updated: 2025-10-21T23:35:37.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddns_enc.cgi allows authenticated command injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10180 - https://twitter.com/Dogonsecurity/status/1271265152118259712
CVE ID: CVE-2020-25082 State: PUBLISHED Published: 2021-08-10T15:28:05 Last Updated: 2024-08-04T15:26:09.290Z Severity: LOW (CVSS 3.8 CVSS:3.1/AC:H/AV:P/A:N/C:H/I:N/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An attacker with physical access to Nuvoton Trusted Platform Module (NPCT75x 7.2.x before 7.2.2.0) could extract an Elliptic Curve Cryptography (ECC) private key via a side-channel attack against ECDSA, because of an Observable Timing Discrepancy. Additional Analyst Notes: - CVE Program Container: References: - https://www.nuvoton.com/support/product-related-information/security-advisories/sa-002/
CVE ID: CVE-2020-25084 State: PUBLISHED Published: 2020-09-25T04:06:51 Last Updated: 2024-08-04T15:26:09.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is not checked. Additional Analyst Notes: - CVE Program Container: References: - https://lists.nongnu.org/archive/html/qemu-devel/2020-08/msg08050.html - http://www.openwall.com/lists/oss-security/2020/09/16/5 - https://security.netapp.com/advisory/ntap-20201009-0005/ - https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html - https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE ID: CVE-2020-25085 State: PUBLISHED Published: 2020-09-25T04:09:43 Last Updated: 2024-08-04T15:26:09.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHC_BLKSIZE case. Additional Analyst Notes: - CVE Program Container: References: - https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg00733.html - https://bugs.launchpad.net/qemu/+bug/1892960 - http://www.openwall.com/lists/oss-security/2020/09/16/6 - https://security.netapp.com/advisory/ntap-20201009-0005/ - https://lists.debian.org/debian-lts-announce/2020/11/msg00047.html - htt
urity.netapp.com/advisory/ntap-20201009-0005/ - https://lists.debian.org/debian-lts-announce/2020/11/msg00047.html - http://www.openwall.com/lists/oss-security/2021/03/09/1 - https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE ID: CVE-2020-25086 State: PUBLISHED Published: 2020-09-03T01:41:18 Last Updated: 2024-08-04T15:26:09.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/advanced_settings/adminUsers.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22
CVE ID: CVE-2020-25087 State: PUBLISHED Published: 2020-09-03T01:41:10 Last Updated: 2024-08-04T15:26:09.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/advanced_settings/languages.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22
CVE ID: CVE-2020-25088 State: PUBLISHED Published: 2020-09-03T01:41:03 Last Updated: 2024-08-04T15:26:09.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/blog/blogpublish.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22
CVE ID: CVE-2020-25089 State: PUBLISHED Published: 2020-09-03T01:40:56 Last Updated: 2024-08-04T15:26:09.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/ecommerce/discounts.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22
CVE ID: CVE-2020-25090 State: PUBLISHED Published: 2020-09-03T01:40:49 Last Updated: 2024-08-04T15:26:09.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/ecommerce/publish.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22