Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-23878 State: PUBLISHED Published: 2021-11-10T21:25:52 Last Updated: 2024-08-04T15:05:11.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: pdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flexpaper/pdf2json/issues/45 - https://github.com/Aurorainfinity/Poc/tree/master/pdf2json
CVE ID: CVE-2020-23879 State: PUBLISHED Published: 2021-11-10T21:25:53 Last Updated: 2024-08-04T15:05:11.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: pdf2json v0.71 was discovered to contain a NULL pointer dereference in the component ObjectStream::getObject. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Aurorainfinity/Poc/tree/master/pdf2json - https://github.com/flexpaper/pdf2json/issues/44
CVE ID: CVE-2020-23884 State: PUBLISHED Published: 2021-11-10T21:25:54 Last Updated: 2024-08-04T15:05:11.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in Nomacs v3.15.0 allows attackers to cause a denial of service (DoS) via a crafted MNG file. Additional Analyst Notes: - CVE Program Container: References: - https://nomacs.org/ - https://github.com/nomacs/nomacs/issues/516 - https://github.com/Aurorainfinity/vulnerabilities/blob/master/nomacs/readme.md
CVE ID: CVE-2020-23886 State: PUBLISHED Published: 2021-11-10T21:25:58 Last Updated: 2024-08-04T15:05:11.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted pict file. Related to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/122.html - https://github.com/Aurorainfinity/vulnerabilities/tree/master/xnviewmp - https://www.xnview.com/en/xnviewmp/
CVE ID: CVE-2020-23887 State: PUBLISHED Published: 2021-11-10T21:25:59 Last Updated: 2024-08-04T15:05:11.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted ico file. Related to a Read Access Violation starting at USER32!SmartStretchDIBits+0x33. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Aurorainfinity/vulnerabilities/tree/master/xnviewmp - https://www.xnview.com/en/xnviewmp/
CVE ID: CVE-2020-23888 State: PUBLISHED Published: 2021-11-10T21:25:59 Last Updated: 2024-08-04T15:05:11.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: A User Mode Write AV in Editor!TMethodImplementationIntercept+0x53f6c3 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted psd file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Aurorainfinity/vulnerabilities/blob/master/WildBit_Viewer/psd_file_format.md - https://www.wildbit-soft.fi/software.html
CVE ID: CVE-2020-23889 State: PUBLISHED Published: 2021-11-10T21:26:00 Last Updated: 2024-08-04T15:05:11.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: A User Mode Write AV starting at Editor!TMethodImplementationIntercept+0x4189c6 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted ico file. Additional Analyst Notes: - CVE Program Container: References: - https://www.wildbit-soft.fi/software.html - https://github.com/Aurorainfinity/vulnerabilities/blob/master/WildBit_Viewer/ico_file_format.md
CVE ID: CVE-2020-23890 State: PUBLISHED Published: 2021-11-10T21:26:01 Last Updated: 2024-08-04T15:05:11.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted JPG file. Related to Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at JPGCodec+0x753648. Additional Analyst Notes: - CVE Program Container: References: - https://www.wildbit-soft.fi/software.html - https://github.com/Aurorainfinity/vulnerabilities/blob/master/WildBit_Viewer/jpg_file_format.md
CVE ID: CVE-2020-23891 State: PUBLISHED Published: 2021-11-10T21:26:01 Last Updated: 2024-08-04T15:05:11.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: A User Mode Write AV in Editor+0x5cd7 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file. Additional Analyst Notes: - CVE Program Container: References: - https://www.wildbit-soft.fi/software.html - https://github.com/Aurorainfinity/vulnerabilities/blob/master/WildBit_Viewer/tiff_file_format.md
CVE ID: CVE-2020-23893 State: PUBLISHED Published: 2021-11-10T21:26:02 Last Updated: 2024-08-04T15:05:11.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: A User Mode Write AV in Editor!TMethodImplementationIntercept+0x3c3682 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file. Additional Analyst Notes: - CVE Program Container: References: - https://www.wildbit-soft.fi/software.html - https://github.com/Aurorainfinity/vulnerabilities/blob/master/WildBit_Viewer/tiff_file_format.md
CVE ID: CVE-2020-23894 State: PUBLISHED Published: 2021-11-10T21:26:03 Last Updated: 2024-08-04T15:05:11.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: A User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file. Additional Analyst Notes: - CVE Program Container: References: - https://www.wildbit-soft.fi/software.html - https://github.com/Aurorainfinity/vulnerabilities/blob/master/WildBit_Viewer/tiff_file_format.md
CVE ID: CVE-2020-23895 State: PUBLISHED Published: 2021-11-10T21:26:04 Last Updated: 2024-08-04T15:05:11.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: A User Mode Write AV in Editor+0x76af of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file. Additional Analyst Notes: - CVE Program Container: References: - https://www.wildbit-soft.fi/software.html - https://github.com/Aurorainfinity/vulnerabilities/blob/master/WildBit_Viewer/tiff_file_format.md
CVE ID: CVE-2020-23896 State: PUBLISHED Published: 2021-11-10T21:26:05 Last Updated: 2024-08-04T15:05:11.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: A User Mode Write AV in Editor+0x576b of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file. Additional Analyst Notes: - CVE Program Container: References: - https://www.wildbit-soft.fi/software.html - https://github.com/Aurorainfinity/vulnerabilities/blob/master/WildBit_Viewer/tiff_file_format.md
CVE ID: CVE-2020-23897 State: PUBLISHED Published: 2021-11-10T21:26:06 Last Updated: 2024-08-04T15:05:11.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: A User Mode Write AV in Editor!TMethodImplementationIntercept+0x54dcec of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file. Additional Analyst Notes: - CVE Program Container: References: - https://www.wildbit-soft.fi/software.html - https://github.com/Aurorainfinity/vulnerabilities/blob/master/WildBit_Viewer/tga_file_format.md
CVE ID: CVE-2020-23898 State: PUBLISHED Published: 2021-11-10T21:26:07 Last Updated: 2024-08-04T15:05:11.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: A User Mode Write AV in Editor+0x5ea2 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file. Additional Analyst Notes: - CVE Program Container: References: - https://www.wildbit-soft.fi/software.html - https://github.com/Aurorainfinity/vulnerabilities/blob/master/WildBit_Viewer/tga_file_format.md
CVE ID: CVE-2020-23899 State: PUBLISHED Published: 2021-11-10T21:26:08 Last Updated: 2024-08-04T15:05:11.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: A User Mode Write AV in Editor+0x5f91 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file. Additional Analyst Notes: - CVE Program Container: References: - https://www.wildbit-soft.fi/software.html - https://github.com/Aurorainfinity/vulnerabilities/blob/master/WildBit_Viewer/tga_file_format.md
CVE ID: CVE-2020-23900 State: PUBLISHED Published: 2021-11-10T21:26:09 Last Updated: 2024-08-04T15:05:11.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file. Related to Data from Faulting Address controls Code Flow starting at Editor!TMethodImplementationIntercept+0x57a3b. Additional Analyst Notes: - CVE Program Container: References: - https://www.wildbit-soft.fi/software.html - https://github.com/Aurorainfinity/vulnerabilities/blob/master/WildBit_Viewer/tga_file_format.md
CVE ID: CVE-2020-23901 State: PUBLISHED Published: 2021-11-10T21:26:10 Last Updated: 2024-08-04T15:05:11.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: A User Mode Write AV in Editor+0x5d15 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file. Additional Analyst Notes: - CVE Program Container: References: - https://www.wildbit-soft.fi/software.html - https://github.com/Aurorainfinity/vulnerabilities/blob/master/WildBit_Viewer/tga_file_format.md
CVE ID: CVE-2020-23902 State: PUBLISHED Published: 2021-11-10T21:26:11 Last Updated: 2024-08-04T15:05:11.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file. Related to Data from Faulting Address may be used as a return value starting at Editor!TMethodImplementationIntercept+0x528a3. Additional Analyst Notes: - CVE Program Container: References: - https://www.wildbit-soft.fi/software.html - https://github.com/Aurorainfinity/vulnerabilities/blob/master/WildBit_Viewer/tga_file_format.md
CVE ID: CVE-2020-23903 State: PUBLISHED Published: 2021-11-10T21:26:12 Last Updated: 2024-08-04T15:05:11.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xiph/speex/issues/13 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3SEV2ZRR47GSD3M7O5PH4XEJMKJJNG2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LXCRAYNW5ESCE2PIGTUXZNZHNYFLJ6PX/
CVE ID: CVE-2020-23904 State: PUBLISHED Published: 2021-11-10T21:26:13 Last Updated: 2024-08-04T15:05:11.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file. NOTE: the vendor states "I cannot reproduce it" and it "is a demo program. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xiph/speex/issues/14
CVE ID: CVE-2020-23906 State: PUBLISHED Published: 2021-11-10T21:26:14 Last Updated: 2024-08-04T15:05:11.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted audio file due to insufficient verification of data authenticity. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8782
CVE ID: CVE-2020-23907 State: PUBLISHED Published: 2021-04-21T17:41:06 Last Updated: 2024-08-04T15:05:11.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in retdec v3.3. In function canSplitFunctionOn() of ir_modifications.cpp, there is a possible out of bounds read due to a heap buffer overflow. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/avast/retdec/issues/637 - https://github.com/avast/retdec/commit/517298bafaaff0a8e3dd60dd055a67c41b545807
CVE ID: CVE-2020-23909 State: PUBLISHED Published: 2023-07-18T00:00:00 Last Updated: 2024-10-28T18:37:07.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer over-read in function png_convert_4 in file pngex.cc in AdvanceMAME through 2.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/advancemame/bugs/285/
CVE ID: CVE-2020-23910 State: PUBLISHED Published: 2023-07-18T00:00:00 Last Updated: 2024-10-28T18:25:41.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow vulnerability in asn1c through v0.9.28 via function genhash_get in genhash.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vlm/asn1c/issues/396
CVE ID: CVE-2020-23911 State: PUBLISHED Published: 2023-07-18T00:00:00 Last Updated: 2024-10-28T18:25:06.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in asn1c through v0.9.28. A NULL pointer dereference exists in the function _default_error_logger() located in asn1fix.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vlm/asn1c/issues/394
CVE ID: CVE-2020-23912 State: PUBLISHED Published: 2021-04-21T17:41:06 Last Updated: 2024-08-04T15:05:11.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 through v1.6.0-637. A NULL pointer dereference exists in the function AP4_StszAtom::GetSampleSize() located in Ap4StszAtom.cpp. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/540
CVE ID: CVE-2020-23914 State: PUBLISHED Published: 2021-04-21T17:41:06 Last Updated: 2024-08-04T15:05:11.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in cpp-peglib through v0.1.12. A NULL pointer dereference exists in the peg::AstOptimizer::optimize() located in peglib.h. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yhirose/cpp-peglib/issues/121 - https://github.com/yhirose/cpp-peglib/commit/0061f393de54cf0326621c079dc2988336d1ebb3
CVE ID: CVE-2020-23915 State: PUBLISHED Published: 2021-04-21T17:41:06 Last Updated: 2024-08-04T15:05:11.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in cpp-peglib through v0.1.12. peg::resolve_escape_sequence() in peglib.h has a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yhirose/cpp-peglib/issues/122 - https://github.com/yhirose/cpp-peglib/commit/b3b29ce8f3acf3a32733d930105a17d7b0ba347e - https://cwe.mitre.org/data/definitions/126.html
CVE ID: CVE-2020-23921 State: PUBLISHED Published: 2021-04-21T17:41:06 Last Updated: 2024-08-04T15:05:11.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in fast_ber through v0.4. yy::yylex() in asn_compiler.hpp has a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Samuel-Tyler/fast_ber/issues/30 - https://cwe.mitre.org/data/definitions/126.html
CVE ID: CVE-2020-23922 State: PUBLISHED Published: 2021-04-21T17:41:06 Last Updated: 2024-08-04T15:05:11.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/giflib/bugs/151/ - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E - https://cwe.mitre.org/data/definitions/12
7e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E - https://cwe.mitre.org/data/definitions/126.html
CVE ID: CVE-2020-23928 State: PUBLISHED Published: 2021-04-21T17:41:06 Last Updated: 2024-08-04T15:05:11.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1569 - https://github.com/gpac/gpac/issues/1568 - https://github.com/gpac/gpac/commit/8e05648d6b4459facbc783025c5c42d301fef5c3 - https://cwe.mitre.org/data/definitions/126.html
CVE ID: CVE-2020-23930 State: PUBLISHED Published: 2021-04-21T17:41:07 Last Updated: 2024-08-04T15:05:11.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function nhmldump_send_header located in write_nhml.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1565 - https://github.com/gpac/gpac/commit/9eeac00b38348c664dfeae2525bba0cf1bc32349
CVE ID: CVE-2020-23931 State: PUBLISHED Published: 2021-04-21T17:41:07 Last Updated: 2024-08-04T15:05:11.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1567 - https://github.com/gpac/gpac/issues/1564 - https://github.com/gpac/gpac/commit/093283e727f396130651280609e687cd4778e0d1 - https://cwe.mitre.org/data/definitions/126.html
CVE ID: CVE-2020-23932 State: PUBLISHED Published: 2021-04-21T17:41:07 Last Updated: 2024-08-04T15:05:11.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in gpac before 1.0.1. A NULL pointer dereference exists in the function dump_isom_sdp located in filedump.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1566 - https://github.com/gpac/gpac/commit/ce01bd15f711d4575b7424b54b3a395ec64c1784
CVE ID: CVE-2020-23933 State: REJECTED Published: 2020-08-18T17:19:02 Last Updated: 2020-08-18T17:19:02 Description: No description available.
CVE ID: CVE-2020-23934 State: PUBLISHED Published: 2020-08-18T21:01:58 Last Updated: 2024-08-04T15:05:11.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system commands by uploading a php web shell in the "Filemanager" section. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/48636 - https://github.com/enesozeser/Vulnerabilities/blob/master/CVE-2020-23934
CVE ID: CVE-2020-23935 State: PUBLISHED Published: 2020-08-20T14:09:20 Last Updated: 2024-08-04T15:05:11.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'# && Password: (Write Something)". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/enesozeser/Vulnerabilities/blob/master/CVE-2020-23935 - http://packetstormsecurity.com/files/165215/Kabir-Alhasan-Student-Management-System-1.0-SQL-Injection.html
CVE ID: CVE-2020-23936 State: PUBLISHED Published: 2020-08-20T14:01:37 Last Updated: 2024-08-04T15:05:11.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Vehicle Parking Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'# && Password: (Write Something)". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/enesozeser/Vulnerabilities/blob/master/CVE-2020-23936
CVE ID: CVE-2020-23938 State: REJECTED Published: 2020-08-18T16:48:02 Last Updated: 2020-09-03T17:43:11 Description: No description available.
CVE ID: CVE-2020-23945 State: PUBLISHED Published: 2020-10-27T14:12:52 Last Updated: 2024-08-04T15:05:11.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in Victor CMS V1.0 in the cat_id parameter of the category.php file. This parameter can be used by sqlmap to obtain data information in the database. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VictorAlagwu/CMSsite/issues/14
CVE ID: CVE-2020-23957 State: PUBLISHED Published: 2020-12-15T20:31:17 Last Updated: 2024-08-04T15:05:11.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pega Platform through 8.4.x is affected by Cross Site Scripting (XSS) via the ConnectionID parameter, as demonstrated by a pyActivity=Data-TRACERSettings.pzStartTracerSession request to a PRAuth URI. Additional Analyst Notes: - CVE Program Container: References: - https://jayaramyalla.medium.com/cross-site-scripting-in-pega-cve-2020-23957-16d1c417da5f
CVE ID: CVE-2020-23960 State: PUBLISHED Published: 2021-01-11T15:54:01 Last Updated: 2024-08-04T15:05:11.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Fork before 5.8.3 allows remote attackers to perform unauthorized actions as administrator to (1) approve the mass of the user's comments, (2) restoring a deleted user, (3) installing or running modules, (4) resetting the analytics, (5) pinging the mailmotor api, (6) uploading things to the media library, (7) exporting locale. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/forkcms/forkcms/pull/3123 - https:/
Additional Analyst Notes: - CVE Program Container: References: - https://github.com/forkcms/forkcms/pull/3123 - https://www.fork-cms.com/blog/detail/fork-5.8.3-released
CVE ID: CVE-2020-23962 State: PUBLISHED Published: 2021-06-23T18:06:07 Last Updated: 2024-08-04T15:05:11.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross site scripting (XSS) vulnerability in Catfish CMS 4.9.90 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "announcement_gonggao" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xwlrbh/Catfish/issues/7
CVE ID: CVE-2020-23966 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:34:07.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafted GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/VictorAlagwu/CMSsite/issues/15 - https://github.com/VictorAlagwu/CMSsite/
CVE ID: CVE-2020-23967 State: PUBLISHED Published: 2021-03-08T14:34:09 Last Updated: 2024-08-04T15:05:11.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dr.Web Security Space versions 11 and 12 allow elevation of privilege for local users without administrative privileges to NT AUTHORITY\SYSTEM due to insufficient control during autoupdate. Additional Analyst Notes: - CVE Program Container: References: - https://amonitoring.ru/article/drweb/ - https://habr.com/ru/company/pm/blog/509592/ - https://www.youtube.com/watch?v=q7Kqi7kE59U