Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-7994 State: PUBLISHED Published: 2020-01-26T22:44:29 Last Updated: 2024-08-04T09:48:25.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 10.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) label[libelle] parameter to the /htdocs/admin/dict.php?id=3 page; the (2) name[constname] parameter to the /htdocs/admin/const.php?mainmenu=home page; the (3) note[note] parameter to the /htdocs/admin/dict.php?id=10 page; the (4) zip[MAIN_INFO_SOCIETE_ZIP] or email[mail] parameter to the /htdocs/admin/company.php page; the (5) url[defaulturl], field[defaultkey], or value[defaultvalue]
ail] parameter to the /htdocs/admin/company.php page; the (5) url[defaulturl], field[defaultkey], or value[defaultvalue] parameter to the /htdocs/admin/defaultvalues.php page; the (6) key[transkey] or key[transvalue] parameter to the /htdocs/admin/translation.php page; or the (7) [main_motd] or [main_home] parameter to the /htdocs/admin/ihm.php page. Additional Analyst Notes: - CVE Program Container: References: - https://tufangungor.github.io/0days - https://github.com/tufangungor/tufangungor.github.io/blob/master/0days.md
CVE ID: CVE-2020-7995 State: PUBLISHED Published: 2020-01-26T22:44:16 Last Updated: 2024-08-04T09:48:24.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: The htdocs/index.php?mainmenu=home login page in Dolibarr 10.0.6 allows an unlimited rate of failed authentication attempts. Additional Analyst Notes: - CVE Program Container: References: - https://tufangungor.github.io/exploit/2020/01/18/dolibarr-10.0.6-brute-force.html - https://github.com/tufangungor/tufangungor.github.io/blob/master/_posts/2020-01-19-dolibarr-10.0.6-brute-force.md - http://packetstormsecurity.com/files/163541/Dolibarr-ERP-CRM-10.0.6-Login-Brute-Forcer.html
CVE ID: CVE-2020-7996 State: PUBLISHED Published: 2020-01-26T22:44:02 Last Updated: 2024-08-04T09:48:25.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: htdocs/user/passwordforgotten.php in Dolibarr 10.0.6 allows XSS via the Referer HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://tufangungor.github.io/exploit/2020/01/18/dolibarr-10.0.6-xss-in-http-header.html - https://github.com/tufangungor/tufangungor.github.io/blob/master/_posts/2020-01-19-dolibarr-10.0.6-xss-in-http-header.md
CVE ID: CVE-2020-7997 State: PUBLISHED Published: 2020-01-28T04:33:24 Last Updated: 2024-08-04T09:48:25.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASUS WRT-AC66U 3 RT 3.0.0.4.372_67 devices allow XSS via the Client Name field to the Parental Control feature. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/adeshkolte/983bcadd82cc1fd60333098eb646ef68
CVE ID: CVE-2020-7998 State: PUBLISHED Published: 2020-01-28T04:36:52 Last Updated: 2024-08-04T09:48:25.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability has been discovered in the Super File Explorer app 1.0.1 for iOS. The vulnerability is located in the developer path that is accessible and hidden next to the root path. By default, there is no password set for the FTP or Web UI service. Additional Analyst Notes: - CVE Program Container: References: - https://apps.apple.com/us/app/super-file-explorer-file-viewer-file-manager/id1101973946 - https://gist.github.com/adeshkolte/9e60b2483d2f20d1951beac0fc917c6f
CVE ID: CVE-2020-7999 State: PUBLISHED Published: 2020-01-27T00:36:56 Last Updated: 2024-08-04T09:48:25.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Intellian Aptus application 1.0.2 for Android has hardcoded values for DOWNLOAD_API_KEY and FILE_DOWNLOAD_API_KEY. Additional Analyst Notes: - CVE Program Container: References: - https://sku11army.blogspot.com/2020/01/intellian-multiple-vulnerabilities-in.html
CVE ID: CVE-2020-8000 State: PUBLISHED Published: 2020-01-27T00:37:15 Last Updated: 2024-08-04T09:48:24.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intellian Aptus Web 1.24 has a hardcoded password of 12345678 for the intellian account. Additional Analyst Notes: - CVE Program Container: References: - https://sku11army.blogspot.com/2020/01/intellian-multiple-vulnerabilities-in.html
CVE ID: CVE-2020-8001 State: PUBLISHED Published: 2020-01-27T00:37:06 Last Updated: 2024-08-04T09:48:25.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Intellian Aptus application 1.0.2 for Android has a hardcoded password of intellian for the masteruser FTP account. Additional Analyst Notes: - CVE Program Container: References: - https://sku11army.blogspot.com/2020/01/intellian-multiple-vulnerabilities-in.html
CVE ID: CVE-2020-8002 State: PUBLISHED Published: 2020-01-27T00:00:00 Last Updated: 2024-08-04T09:48:24.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service via commands that attempt to launch a grid without previously providing a Compute Shader (CS). Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/virgl/virglrenderer/merge_requests/340/diffs?commit_id=572a36879701598fa727f50313508be99865b58f - https://gitlab.freedesktop.org/virgl/virglrenderer/merge_requests/340/diffs?commit_id=725e12beba4a41934f0ab62d399b5d4de
https://gitlab.freedesktop.org/virgl/virglrenderer/merge_requests/340/diffs?commit_id=725e12beba4a41934f0ab62d399b5d4de2d13190 - https://gitlab.freedesktop.org/virgl/virglrenderer/merge_requests/340 - https://lists.debian.org/debian-lts-announce/2022/12/msg00017.html
CVE ID: CVE-2020-8003 State: PUBLISHED Published: 2020-01-27T00:00:00 Last Updated: 2024-08-04T09:48:25.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: A double-free vulnerability in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrend_renderer_resource_allocated_texture is not an appropriate place for a free. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/virgl/virglrenderer/merge_requests/340 - https://gitlab.freedesktop.org/virgl/virglrenderer/commit/f9b079ccc319c98499111f66bd654fc9b56cf15f?merge_request_iid=340 - https://gitlab.
edesktop.org/virgl/virglrenderer/commit/f9b079ccc319c98499111f66bd654fc9b56cf15f?merge_request_iid=340 - https://gitlab.freedesktop.org/virgl/virglrenderer/merge_requests/340/diffs?commit_id=f9b079ccc319c98499111f66bd654fc9b56cf15f - https://gitlab.freedesktop.org/virgl/virglrenderer/merge_requests/340/diffs?commit_id=3320973c9f2068f60cf6613c2811a8824781878a - https://lists.debian.org/debian-lts-announce/2022/12/msg00017.html
CVE ID: CVE-2020-8004 State: PUBLISHED Published: 2020-04-06T12:44:31 Last Updated: 2024-08-04T09:48:24.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: STMicroelectronics STM32F1 devices have Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zapb.de/stm32f1-exceptional-failure/
CVE ID: CVE-2020-8006 State: PUBLISHED Published: 2024-04-12T00:00:00.000Z Last Updated: 2025-11-04T18:14:15.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in Circontrol Raption through 5.11.2 has a pre-authentication stack-based buffer overflow that can be exploited to gain run-time control of the device as root. The ocpp1.5 and pwrstudio binaries on the charging station do not use a number of common exploitation mitigations. In particular, there are no stack canaries and they do not use the Position Independent Executable (PIE) format. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://circontrol.com/intelligent-cha
al Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://circontrol.com/intelligent-charging-solutions/dc-chargers-series/raption-150/ - https://seclists.org/fulldisclosure/2024/Mar/33
CVE ID: CVE-2020-8007 State: PUBLISHED Published: 2024-11-08T00:00:00.000Z Last Updated: 2025-11-04T18:14:16.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pwrstudio web application of EV Charger (in the server in Circontrol Raption through 5.6.2) is vulnerable to OS command injection via three fields of the configuration menu for ntpserver0, ntpserver1, and pingip. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://circontrol.com/intelligent-charging-solutions/dc-chargers-series/raption-150/ - https://seclists.org/fulldisclosure/2024/Mar/33
CVE ID: CVE-2020-8009 State: PUBLISHED Published: 2020-01-27T13:33:14 Last Updated: 2024-08-04T09:48:24.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: AVB MOTU devices through 2020-01-22 allow /.. Directory Traversal, as demonstrated by reading the /etc/passwd file. Additional Analyst Notes: - CVE Program Container: References: - https://www.securenetworkinc.com/news/2020/1/22/new-vulnerability-motu-avb-directory-traversal
CVE ID: CVE-2020-8010 State: PUBLISHED Published: 2020-02-18T03:11:43 Last Updated: 2024-08-04T09:48:24.961Z Vendors: CA Technologies - A Broadcom Company Products: CA Unified Infrastructure Management (Nimsoft/UIM) Problem Types: improper ACL handling RCE Description: CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system. Additional Analyst Notes: - CVE Program Container: References: - https://techdocs.broadcom.com/us/product-content/status/announcement-documents/2019/ca20200205-01-security-notice-
es: - https://techdocs.broadcom.com/us/product-content/status/announcement-documents/2019/ca20200205-01-security-notice-for-ca-unified-infrastructure-management.html - http://packetstormsecurity.com/files/158693/CA-Unified-Infrastructure-Management-Nimsoft-7.80-Buffer-Overflow.html - https://support.broadcom.com/external/content/security-advisories/CA20200205-01-Security-Notice-for-CA-Unified-Infrastructure-Management/7832
CVE ID: CVE-2020-8011 State: PUBLISHED Published: 2020-02-18T03:11:32 Last Updated: 2024-08-04T09:48:25.134Z Vendors: CA Technologies - A Broadcom Company Products: CA Unified Infrastructure Management (Nimsoft/UIM) Problem Types: null pointer dereference DoS Description: CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a null pointer dereference vulnerability in the robot (controller) component. A remote attacker can crash the Controller service. Additional Analyst Notes: - CVE Program Container: References: - https://techdocs.broadcom.com/us/product-content/status/announcement-documents/2019/ca20200205-01-security-notice-for-ca-unified-infrastruc
oadcom.com/us/product-content/status/announcement-documents/2019/ca20200205-01-security-notice-for-ca-unified-infrastructure-management.html - https://support.broadcom.com/external/content/security-advisories/CA20200205-01-Security-Notice-for-CA-Unified-Infrastructure-Management/7832
CVE ID: CVE-2020-8012 State: PUBLISHED Published: 2020-02-18T03:12:16 Last Updated: 2024-08-04T09:48:25.609Z Vendors: CA Technologies - A Broadcom Company Products: CA Unified Infrastructure Management (Nimsoft/UIM) Problem Types: buffer overflow RCE Description: CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component. A remote attacker can execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://techdocs.broadcom.com/us/product-content/status/announcement-documents/2019/ca20200205-01-security-notice-for-ca-unified-infrastructure-management.html - h
ntent/status/announcement-documents/2019/ca20200205-01-security-notice-for-ca-unified-infrastructure-management.html - http://packetstormsecurity.com/files/156577/Nimsoft-nimcontroller-7.80-Remote-Code-Execution.html - http://packetstormsecurity.com/files/158693/CA-Unified-Infrastructure-Management-Nimsoft-7.80-Buffer-Overflow.html - https://support.broadcom.com/external/content/security-advisories/CA20200205-01-Security-Notice-for-CA-Unified-Infrastructure-Management/7832
CVE ID: CVE-2020-8013 State: PUBLISHED Published: 2020-03-02T16:35:13.188904Z Last Updated: 2024-09-16T17:23:50.476Z Severity: LOW (CVSS 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SUSE Products: SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 Problem Types: CWE-59 Description: A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries on other binaries because it erroneously followed symlinks. The symlinks can't be controlled by attackers on default systems, so exploitation
use it erroneously followed symlinks. The symlinks can't be controlled by attackers on default systems, so exploitation is difficult. This issue affects: SUSE Linux Enterprise Server 12 permissions versions prior to 2015.09.28.1626-17.27.1. SUSE Linux Enterprise Server 15 permissions versions prior to 20181116-9.23.1. SUSE Linux Enterprise Server 11 permissions versions prior to 2013.1.7-0.6.12.1. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00010.html - https://bugzilla.suse.com/show_bug.cgi?id=1163922
CVE ID: CVE-2020-8014 State: PUBLISHED Published: 2020-06-29T12:00:23.054584Z Last Updated: 2024-09-17T03:13:57.674Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: openSUSE Products: openSUSE Leap 15.1, openSUSE Tumbleweed Problem Types: CWE-61 Description: A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of kopano-spamd of openSUSE Leap 15.1, openSUSE Tumbleweed allowed local attackers with the privileges of the kopano user to escalate to root. This issue affects: openSUSE Leap 15.1 kopano-spamd versions prior to 10.0.5-lp151.4.1. openSUSE Tumbleweed kopano-spamd versions prior to 10.0.5-1.1. Additional Analyst Notes: - CVE Program Con
.5-lp151.4.1. openSUSE Tumbleweed kopano-spamd versions prior to 10.0.5-1.1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1164131
CVE ID: CVE-2020-8015 State: PUBLISHED Published: 2020-04-02T07:55:13.216384Z Last Updated: 2024-09-16T19:46:31.907Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: openSUSE Products: Factory Problem Types: CWE-59 Description: A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00010.html - https://bugzilla.suse.com/show_bug.cgi?id=1154183
CVE ID: CVE-2020-8016 State: PUBLISHED Published: 2020-04-02T14:05:17.952167Z Last Updated: 2024-09-16T19:30:49.212Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SUSE, openSUSE Products: SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5, openSUSE Leap 15.1 Problem Types: CWE-367 Description: A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Deve
Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users to corrupt files or potentially escalate privileges. This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1. Additional Analyst Notes: - CVE Program Con
penSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00021.html - https://bugzilla.suse.com/show_bug.cgi?id=1159740
CVE ID: CVE-2020-8017 State: PUBLISHED Published: 2020-04-02T14:05:18.643959Z Last Updated: 2024-09-17T01:50:50.369Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: SUSE, openSUSE Products: SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5, openSUSE Leap 15.1 Problem Types: CWE-367 Description: A Race Condition Enabling Link Following vulnerability in the cron job shipped with texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Soft
odule for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users in group mktex to delete arbitrary files on the system This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1. Additional Analyst Notes: - CVE
4-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00021.html - https://bugzilla.suse.com/show_bug.cgi?id=1158910
CVE ID: CVE-2020-8018 State: PUBLISHED Published: 2020-05-04T11:35:12.257455Z Last Updated: 2024-09-16T20:47:16.896Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SUSE Products: SUSE Linux Enterprise Server 15 SP1 Problem Types: CWE-276 Description: A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1 allows local attackers with the UID 1000 to escalate to root due to a /etc directory owned by the user This issue affects: SUSE Linux Enterprise Server 15 SP1 SLES15-SP1-CAP-Deployment-BYOS version 1.0.1 and prior versions; SLES15-SP1-CHOST-BYOS versions prior
rise Server 15 SP1 SLES15-SP1-CAP-Deployment-BYOS version 1.0.1 and prior versions; SLES15-SP1-CHOST-BYOS versions prior to 1.0.3 and prior versions; Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1163813
CVE ID: CVE-2020-8019 State: PUBLISHED Published: 2020-06-29T11:30:14.396575Z Last Updated: 2024-09-17T03:43:09.266Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: SUSE, openSUSE Products: SUSE Linux Enterprise Debuginfo 11-SP3, SUSE Linux Enterprise Debuginfo 11-SP4, SUSE Linux Enterprise Module for Legacy Software 12, SUSE Linux Enterprise Point of Sale 11-SP3, SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Linux Enterprise Server for SAP 12-SP1, openSUSE Backports SLE-15-SP1, openSUSE Leap 15.1 Problem Types: CWE-61 Description: A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of syslog-ng of SUSE Linux Enterprise Debuginfo 11-SP3, S
mbolic Link (Symlink) Following vulnerability in the packaging of syslog-ng of SUSE Linux Enterprise Debuginfo 11-SP3, SUSE Linux Enterprise Debuginfo 11-SP4, SUSE Linux Enterprise Module for Legacy Software 12, SUSE Linux Enterprise Point of Sale 11-SP3, SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Linux Enterprise Server for SAP 12-SP1; openSUSE Backports SLE-15-SP1, openSUSE Leap 15.1 allowed local attackers controlling the user news to escalate their privileges to root. This issue affects: SUSE Linux Enterprise Debuginfo 11-SP3 syslog-ng versions prior to 2.0.9-27.34.40.5.1. SUSE Linux Enterprise Debuginfo 11-SP4 syslog-ng versions prior to 2.0.9-27.34.40.5.1. SUSE Linux Enterprise Mod
40.5.1. SUSE Linux Enterprise Debuginfo 11-SP4 syslog-ng versions prior to 2.0.9-27.34.40.5.1. SUSE Linux Enterprise Module for Legacy Software 12 syslog-ng versions prior to 3.6.4-12.8.1. SUSE Linux Enterprise Point of Sale 11-SP3 syslog-ng versions prior to 2.0.9-27.34.40.5.1. SUSE Linux Enterprise Server 11-SP4-LTSS syslog-ng versions prior to 2.0.9-27.34.40.5.1. SUSE Linux Enterprise Server for SAP 12-SP1 syslog-ng versions prior to 3.6.4-12.8.1. openSUSE Backports SLE-15-SP1 syslog-ng versions prior to 3.19.1-bp151.4.6.1. openSUSE Leap 15.1 syslog-ng versions prior to 3.19.1-lp151.3.6.1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.
3.19.1-lp151.3.6.1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1169385
CVE ID: CVE-2020-8020 State: PUBLISHED Published: 2020-05-13T14:50:13.224014Z Last Updated: 2024-09-16T17:42:38.552Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: openSUSE Products: open-build-service Problem Types: CWE-79 Description: A Improper Neutralization of Input During Web Page Generation vulnerability in open-build-service allows remote attackers to store arbitrary JS code to cause XSS. This issue affects: openSUSE open-build-service versions prior to 7cc32c8e2ff7290698e101d9a80a9dc29a5500fb. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1171439 - https://lists.debian.org/debian-lts-anno
am Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1171439 - https://lists.debian.org/debian-lts-announce/2021/02/msg00006.html
CVE ID: CVE-2020-8021 State: PUBLISHED Published: 2020-05-19T14:25:18.710943Z Last Updated: 2024-09-16T16:22:43.780Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: openSUSE Products: Open Build Service Problem Types: CWE-269 Description: a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceaccess/access is disabled This issue affects: Open Build Service versions prior to 2.10.5. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1171649 - https://lists.debian.org/debian-lts-announce/2021/02/msg00006.html
CVE ID: CVE-2020-8022 State: PUBLISHED Published: 2020-06-29T08:20:12.619393Z Last Updated: 2024-09-17T00:16:49.694Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: SUSE Products: SUSE Enterprise Storage 5, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Server 12-SP3-BCL, SUSE Linux Enterprise Server 12-SP3-LTSS, SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Linux Enterprise Server for SAP 12-SP3, SUSE Linux Enterprise Server for SAP 15, SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE