Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-11740 State: PUBLISHED Published: 2020-04-14T12:18:35 Last Updated: 2024-08-04T11:41:59.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (without active profiling) to obtain sensitive information about other guests. Unprivileged guests can request to map xenoprof buffers, even if profiling has not been enabled for those guests. These buffers were not scrubbed. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-313.html - http://xenbits.xen.org/xsa/advisory-313.html - http://www.openwall.com/lists/oss-security/2020/04/14/1 - http
313.html - http://xenbits.xen.org/xsa/advisory-313.html - http://www.openwall.com/lists/oss-security/2020/04/14/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YMAW7D2MP6RE4BFI5BZWOBBWGY3VSOFN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5M2XRNCHOGGTJQBZQJ7DCV6ZNAKN3LE2/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00006.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NVTP4OYHCTRU3ONFJOFJQVNDFB25KLLG/ - https://security.gentoo.org/glsa/202005-08 - https://www.debian.org/security/2020/dsa-4723
CVE ID: CVE-2020-11741 State: PUBLISHED Published: 2020-04-14T12:18:52 Last Updated: 2024-08-04T11:41:58.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (with active profiling) to obtain sensitive information about other guests, cause a denial of service, or possibly gain privileges. For guests for which "active" profiling was enabled by the administrator, the xenoprof code uses the standard Xen shared ring structure. Unfortunately, this code did not treat the guest as a potential adversary: it trusts the guest not to modify buffer size information or modify head / tail pointers in unexpected w
tial adversary: it trusts the guest not to modify buffer size information or modify head / tail pointers in unexpected ways. This can crash the host (DoS). Privilege escalation cannot be ruled out. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-313.html - http://xenbits.xen.org/xsa/advisory-313.html - http://www.openwall.com/lists/oss-security/2020/04/14/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YMAW7D2MP6RE4BFI5BZWOBBWGY3VSOFN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5M2XRNCHOGGTJQBZQJ7DCV6ZNAKN3LE2/ - http://lists.opens
/archives/list/package-announce%40lists.fedoraproject.org/message/5M2XRNCHOGGTJQBZQJ7DCV6ZNAKN3LE2/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00006.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NVTP4OYHCTRU3ONFJOFJQVNDFB25KLLG/ - https://security.gentoo.org/glsa/202005-08 - https://www.debian.org/security/2020/dsa-4723
CVE ID: CVE-2020-11742 State: PUBLISHED Published: 2020-04-14T12:19:36 Last Updated: 2024-08-04T11:41:59.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of bad continuation handling in GNTTABOP_copy. Grant table operations are expected to return 0 for success, and a negative number for errors. The fix for CVE-2017-12135 introduced a path through grant copy handling where success may be returned to the caller without any action taken. In particular, the status fields of individual operations are left uninitialised, and may result in errant behaviour in the caller of GNTT
status fields of individual operations are left uninitialised, and may result in errant behaviour in the caller of GNTTABOP_copy. A buggy or malicious guest can construct its grant table in such a way that, when a backend domain tries to copy a grant, it hits the incorrect exit path. This returns success to the caller without doing anything, which may cause crashes or other incorrect behaviour. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-318.html - http://xenbits.xen.org/xsa/advisory-318.html - http://www.openwall.com/lists/oss-security/2020/04/14/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraprojec
om/lists/oss-security/2020/04/14/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YMAW7D2MP6RE4BFI5BZWOBBWGY3VSOFN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5M2XRNCHOGGTJQBZQJ7DCV6ZNAKN3LE2/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00006.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NVTP4OYHCTRU3ONFJOFJQVNDFB25KLLG/ - https://security.gentoo.org/glsa/202005-08 - https://www.debian.org/security/2020/dsa-4723
CVE ID: CVE-2020-11743 State: PUBLISHED Published: 2020-04-14T12:20:24 Last Updated: 2024-08-04T11:41:58.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of a bad error path in GNTTABOP_map_grant. Grant table operations are expected to return 0 for success, and a negative number for errors. Some misplaced brackets cause one error path to return 1 instead of a negative value. The grant table code in Linux treats this condition as success, and proceeds with incorrectly initialised state. A buggy or malicious guest can construct its grant table in such a way that, when a ba
th incorrectly initialised state. A buggy or malicious guest can construct its grant table in such a way that, when a backend domain tries to map a grant, it hits the incorrect error path. This will crash a Linux based dom0 or backend domain. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-316.html - http://xenbits.xen.org/xsa/advisory-316.html - http://www.openwall.com/lists/oss-security/2020/04/14/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YMAW7D2MP6RE4BFI5BZWOBBWGY3VSOFN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5M2XRNCHO
BWGY3VSOFN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5M2XRNCHOGGTJQBZQJ7DCV6ZNAKN3LE2/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00006.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NVTP4OYHCTRU3ONFJOFJQVNDFB25KLLG/ - https://security.gentoo.org/glsa/202005-08 - https://www.debian.org/security/2020/dsa-4723
CVE ID: CVE-2020-11747 State: REJECTED Published: 2020-04-15T14:58:55 Last Updated: 2020-04-15T14:58:55 Description: No description available.
CVE ID: CVE-2020-11749 State: PUBLISHED Published: 2020-07-13T14:11:58 Last Updated: 2024-08-04T11:41:59.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views. A network administrator scanning a SNMP device can trigger a Cross Site Scripting (XSS), which can run arbitrary code to allow Remote Code Execution as root or apache2. Additional Analyst Notes: - CVE Program Container: References: - https://pandorafms.com/downloads/whats-new-747-EN.pdf - https://medium.com/%40tehwinsam/multiple-xss-on-pandorafms-7-0-ng-744-64b244b8523c - https://packetstormsecurity.com/files/158389/Pandora-FMS-7.0
winsam/multiple-xss-on-pandorafms-7-0-ng-744-64b244b8523c - https://packetstormsecurity.com/files/158389/Pandora-FMS-7.0-NG-746-Script-Insertion-Code-Execution.htmlPoC - https://www.exploit-db.com/exploits/48707
CVE ID: CVE-2020-11753 State: PUBLISHED Published: 2020-04-20T18:49:22 Last Updated: 2024-08-04T11:42:00.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0. It is possible for a user with appropriate privileges to create, modify, and execute scripting tasks without use of the UI or API. NOTE: in 3.22.0, scripting is disabled by default (making this not exploitable). Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/284.html - https://support.sonatype.com/hc/en-us/articles/360046233714
CVE ID: CVE-2020-11758 State: PUBLISHED Published: 2020-04-14T22:43:18 Last Updated: 2024-08-04T11:41:59.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1 - https://github.com/AcademySoftwareFoundation/openexr/blob/master/CHANGES.md#version-241-february-11-2020 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1987 - https://usn.ubuntu.com/4339-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedo
l?id=1987 - https://usn.ubuntu.com/4339-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4KFGDQG5PVYAU7TS5MZ7XCS6EMPVII3/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00051.html - https://support.apple.com/kb/HT211288 - https://support.apple.com/kb/HT211290 - https://support.apple.com/kb/HT211289 - https://support.apple.com/kb/HT211291 - https://support.apple.com/kb/HT211293 - https://support.apple.com/kb/HT211295 - https://support.apple.com/kb/HT211294 - https://www.debian.org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html - https://security.gentoo.org/glsa/202107-27
CVE ID: CVE-2020-11759 State: PUBLISHED Published: 2020-04-14T22:43:08 Last Updated: 2024-08-04T11:41:59.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock, an attacker can write to an out-of-bounds pointer. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1 - https://github.com/AcademySoftwareFoundation/openexr/blob/master/CHANGES.md#version-241-february-11-2020 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1987 - htt
ob/master/CHANGES.md#version-241-february-11-2020 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1987 - https://usn.ubuntu.com/4339-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4KFGDQG5PVYAU7TS5MZ7XCS6EMPVII3/ - https://support.apple.com/kb/HT211288 - https://support.apple.com/kb/HT211290 - https://support.apple.com/kb/HT211289 - https://support.apple.com/kb/HT211291 - https://support.apple.com/kb/HT211293 - https://support.apple.com/kb/HT211295 - https://support.apple.com/kb/HT211294 - https://www.debian.org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html - https://security.gen
n.org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html - https://security.gentoo.org/glsa/202107-27
CVE ID: CVE-2020-11760 State: PUBLISHED Published: 2020-04-14T22:42:50 Last Updated: 2024-08-04T11:41:59.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1 - https://github.com/AcademySoftwareFoundation/openexr/blob/master/CHANGES.md#version-241-february-11-2020 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1987 - https://usn.ubuntu.com/4339-1/ - https://lists.fedoraproject.org/archives/list/pac
/project-zero/issues/detail?id=1987 - https://usn.ubuntu.com/4339-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4KFGDQG5PVYAU7TS5MZ7XCS6EMPVII3/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00051.html - https://support.apple.com/kb/HT211288 - https://support.apple.com/kb/HT211290 - https://support.apple.com/kb/HT211289 - https://support.apple.com/kb/HT211291 - https://support.apple.com/kb/HT211293 - https://support.apple.com/kb/HT211295 - https://support.apple.com/kb/HT211294 - https://www.debian.org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html - https://security.gento
org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html - https://security.gentoo.org/glsa/202107-27
CVE ID: CVE-2020-11761 State: PUBLISHED Published: 2020-04-14T22:42:31 Last Updated: 2024-08-04T11:42:00.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHuf.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1 - https://github.com/AcademySoftwareFoundation/openexr/blob/master/CHANGES.md#version-241-february-11-2020 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1987 - https://usn.ubuntu.com/4339-1/ - https://lists.f
2020 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1987 - https://usn.ubuntu.com/4339-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4KFGDQG5PVYAU7TS5MZ7XCS6EMPVII3/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00051.html - https://support.apple.com/kb/HT211288 - https://support.apple.com/kb/HT211290 - https://support.apple.com/kb/HT211289 - https://support.apple.com/kb/HT211291 - https://support.apple.com/kb/HT211293 - https://support.apple.com/kb/HT211295 - https://support.apple.com/kb/HT211294 - https://www.debian.org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-announce/2020/08/msg0
/kb/HT211294 - https://www.debian.org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html - https://security.gentoo.org/glsa/202107-27
CVE ID: CVE-2020-11762 State: PUBLISHED Published: 2020-04-14T22:42:13 Last Updated: 2024-08-04T11:41:59.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1 - https://github.com/AcademySoftwareFoundation/openexr/blob/master/CHANGES.md#version-241-february-11-2020 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1987 - https://usn.ubuntu.com/4339-1/ -
241-february-11-2020 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1987 - https://usn.ubuntu.com/4339-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4KFGDQG5PVYAU7TS5MZ7XCS6EMPVII3/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00051.html - https://support.apple.com/kb/HT211288 - https://support.apple.com/kb/HT211290 - https://support.apple.com/kb/HT211289 - https://support.apple.com/kb/HT211291 - https://support.apple.com/kb/HT211293 - https://support.apple.com/kb/HT211295 - https://support.apple.com/kb/HT211294 - https://www.debian.org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-annou
upport.apple.com/kb/HT211294 - https://www.debian.org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html - https://security.gentoo.org/glsa/202107-27
CVE ID: CVE-2020-11763 State: PUBLISHED Published: 2020-04-14T22:41:51 Last Updated: 2024-08-04T11:42:00.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1 - https://github.com/AcademySoftwareFoundation/openexr/blob/master/CHANGES.md#version-241-february-11-2020 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1987 - https://usn.ubuntu.com/4339-1/ - https://lists.fedoraproject.org/archives/lis
org/p/project-zero/issues/detail?id=1987 - https://usn.ubuntu.com/4339-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4KFGDQG5PVYAU7TS5MZ7XCS6EMPVII3/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00051.html - https://support.apple.com/kb/HT211288 - https://support.apple.com/kb/HT211290 - https://support.apple.com/kb/HT211289 - https://support.apple.com/kb/HT211291 - https://support.apple.com/kb/HT211293 - https://support.apple.com/kb/HT211295 - https://support.apple.com/kb/HT211294 - https://www.debian.org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html - https://security.
bian.org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html - https://security.gentoo.org/glsa/202107-27
CVE ID: CVE-2020-11764 State: PUBLISHED Published: 2020-04-14T22:41:32 Last Updated: 2024-08-04T11:41:58.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1 - https://github.com/AcademySoftwareFoundation/openexr/blob/master/CHANGES.md#version-241-february-11-2020 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1987 - https://usn.ubuntu.com/4339-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40l
ues/detail?id=1987 - https://usn.ubuntu.com/4339-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4KFGDQG5PVYAU7TS5MZ7XCS6EMPVII3/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00051.html - https://support.apple.com/kb/HT211288 - https://support.apple.com/kb/HT211290 - https://support.apple.com/kb/HT211289 - https://support.apple.com/kb/HT211291 - https://support.apple.com/kb/HT211293 - https://support.apple.com/kb/HT211295 - https://support.apple.com/kb/HT211294 - https://www.debian.org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html - https://security.gentoo.org/glsa/202107
/dsa-4755 - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html - https://security.gentoo.org/glsa/202107-27
CVE ID: CVE-2020-11765 State: PUBLISHED Published: 2020-04-14T22:41:03 Last Updated: 2024-08-04T11:41:59.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the ImfXdr.h read function by DwaCompressor::Classifier::Classifier, leading to an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1 - https://github.com/AcademySoftwareFoundation/openexr/blob/master/CHANGES.md#version-241-february-11-2020 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1987 - https://usn.ubuntu.com/4339-
ion-241-february-11-2020 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1987 - https://usn.ubuntu.com/4339-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4KFGDQG5PVYAU7TS5MZ7XCS6EMPVII3/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00051.html - https://support.apple.com/kb/HT211288 - https://support.apple.com/kb/HT211290 - https://support.apple.com/kb/HT211289 - https://support.apple.com/kb/HT211291 - https://support.apple.com/kb/HT211293 - https://support.apple.com/kb/HT211295 - https://support.apple.com/kb/HT211294 - https://www.debian.org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-a
://support.apple.com/kb/HT211294 - https://www.debian.org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html - https://security.gentoo.org/glsa/202107-27
CVE ID: CVE-2020-11766 State: PUBLISHED Published: 2020-05-19T19:27:47 Last Updated: 2024-08-04T11:41:59.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.ifax.com/security/CVE-2020-11766.html
CVE ID: CVE-2020-11767 State: PUBLISHED Published: 2020-04-15T01:05:38 Last Updated: 2024-08-04T11:41:59.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Istio through 1.5.1 and Envoy through 1.14.1 have a data-leak issue. If there is a TCP connection (negotiated with SNI over HTTPS) to *.example.com, a request for a domain concurrently configured explicitly (e.g., abc.example.com) is sent to the server(s) listening behind *.example.com. The outcome should instead be 421 Misdirected Request. Imagine a shared caching forward proxy re-using an HTTP/2 connection for a large subnet with many users. If a victim is interacting with abc.example.com, and a server (for abc.example.com)
for a large subnet with many users. If a victim is interacting with abc.example.com, and a server (for abc.example.com) recycles the TCP connection to the forward proxy, the victim's browser may suddenly start sending sensitive data to a *.example.com server. This occurs because the forward proxy between the victim and the origin server reuses connections (which obeys the specification), but neither Istio nor Envoy corrects this by sending a 421 error. Similarly, this behavior voids the security model browsers have put in place between domains. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/chromium/issues/detail?id=954160#c5 - https://github.co
CVE Program Container: References: - https://bugs.chromium.org/p/chromium/issues/detail?id=954160#c5 - https://github.com/envoyproxy/envoy/issues/6767 - https://github.com/istio/istio/issues/9429 - https://github.com/istio/istio/issues/13589
CVE ID: CVE-2020-11768 State: PUBLISHED Published: 2020-04-15T13:44:21 Last Updated: 2024-08-04T11:42:00.663Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by Stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK40 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.1
30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061762/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0533