Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-19361 State: PUBLISHED Published: 2021-01-20T00:42:27 Last Updated: 2024-08-04T14:08:30.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected XSS in Medintux v2.16.000 CCAM.php by manipulating the mot1 parameter can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EmreOvunc/Medintux-V2.16.000-Reflected-XSS-Vulnerability - https://emreovunc.com/blog/en/Medintux-v2.16.000-Reflected-XSS-02.png - https://emreovunc.com/blog/en/Medintux-v2.16.000-Reflected-XSS-01.png
CVE ID: CVE-2020-19362 State: PUBLISHED Published: 2021-01-20T00:42:56 Last Updated: 2024-08-04T14:08:30.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected XSS in Vtiger CRM v7.2.0 in vtigercrm/index.php? through the view parameter can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EmreOvunc/Vtiger-CRM-Vulnerabilities/ - https://emreovunc.com/blog/en/vtiger_crm_xss_03.png
CVE ID: CVE-2020-19363 State: PUBLISHED Published: 2021-01-20T00:43:54 Last Updated: 2024-08-04T14:08:30.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vtiger CRM v7.2.0 allows an attacker to display hidden files, list directories by using /libraries and /layout directories. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EmreOvunc/Vtiger-CRM-Vulnerabilities/ - https://emreovunc.com/blog/en/vtiger_crm_directorylisting_02.png - https://emreovunc.com/blog/en/vtiger_crm_directorylisting_01.png
CVE ID: CVE-2020-19364 State: PUBLISHED Published: 2021-01-20T00:44:32 Last Updated: 2024-08-04T14:08:30.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious PHP scripts through /controller.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EmreOvunc/OpenEMR_Vulnerabilities
CVE ID: CVE-2020-19417 State: PUBLISHED Published: 2021-03-10T17:15:39 Last Updated: 2024-08-04T14:08:30.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emerson Smart Wireless Gateway 1420 4.6.59 allows non-privileged users (such as the default account 'maint') to perform administrative tasks by sending specially crafted HTTP requests to the application. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/161700/Emerson-Smart-Wireless-Gateway-1420-4.6.59-Privilege-Escalation.html
CVE ID: CVE-2020-19419 State: PUBLISHED Published: 2021-03-10T17:17:52 Last Updated: 2024-08-04T14:08:30.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 allows remote attackers to obtain sensitive device information from the administrator console without authentication. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/161701/Emerson-Smart-Wireless-Gateway-1420-4.6.59-Missing-Authentication.html - https://cwe.mitre.org/data/definitions/306.html
CVE ID: CVE-2020-19447 State: PUBLISHED Published: 2020-09-24T18:02:34 Last Updated: 2024-08-04T14:08:30.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection exists in the jdownloads 3.2.63 component for Joomla! com_jdownloads/models/send.php via the f_marked_files_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.cnvd.org.cn/flaw/show/CNVD-2019-09870
CVE ID: CVE-2020-19450 State: PUBLISHED Published: 2020-09-25T14:16:38 Last Updated: 2024-08-04T14:08:30.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, getUserLimits function in the list parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.cnvd.org.cn/flaw/show/CNVD-2019-09869
CVE ID: CVE-2020-19451 State: PUBLISHED Published: 2020-09-25T14:26:42 Last Updated: 2024-08-04T14:08:30.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, updateLog function via the X-forwarded-for Header parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.cnvd.org.cn/flaw/show/CNVD-2019-09871
CVE ID: CVE-2020-19455 State: PUBLISHED Published: 2020-09-25T15:17:19 Last Updated: 2024-08-04T14:08:30.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection exists in the jdownloads 3.2.63 component for Joomla! via components/com_jdownloads/helpers/categories.php, order function via the filter_order parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.cnvd.org.cn/flaw/show/CNVD-2019-09868
CVE ID: CVE-2020-19463 State: PUBLISHED Published: 2021-07-21T17:09:30 Last Updated: 2024-08-04T14:08:30.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in function vfprintf in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flexpaper/pdf2json/issues/24 - https://cwe.mitre.org/data/definitions/770.html
CVE ID: CVE-2020-19464 State: PUBLISHED Published: 2021-07-21T17:09:39 Last Updated: 2024-08-04T14:08:30.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in function XRef::fetch in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flexpaper/pdf2json/issues/25 - https://cwe.mitre.org/data/definitions/770.html
CVE ID: CVE-2020-19465 State: PUBLISHED Published: 2021-07-21T17:09:49 Last Updated: 2024-08-04T14:08:30.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in function ObjectStream::getObject in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4 . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flexpaper/pdf2json/issues/26
CVE ID: CVE-2020-19466 State: PUBLISHED Published: 2021-07-21T17:09:58 Last Updated: 2024-08-04T14:08:30.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 1 . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flexpaper/pdf2json/issues/27
CVE ID: CVE-2020-19467 State: PUBLISHED Published: 2021-07-21T17:10:08 Last Updated: 2024-08-04T14:08:30.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Illegal Use After Free . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flexpaper/pdf2json/issues/28
CVE ID: CVE-2020-19468 State: PUBLISHED Published: 2021-07-21T17:10:17 Last Updated: 2024-08-04T14:08:30.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in function EmbedStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a null pointer derefenrece (invalid read of size 8) . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flexpaper/pdf2json/issues/29
CVE ID: CVE-2020-19469 State: PUBLISHED Published: 2021-07-21T17:10:27 Last Updated: 2024-08-04T14:08:30.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in function DCTStream::reset in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 8 . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flexpaper/pdf2json/issues/30
CVE ID: CVE-2020-19470 State: PUBLISHED Published: 2021-07-21T17:10:36 Last Updated: 2024-08-04T14:08:30.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in function DCTStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a NULL pointer dereference (invalid read of size 1) . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flexpaper/pdf2json/issues/31
CVE ID: CVE-2020-19471 State: PUBLISHED Published: 2021-07-21T17:10:46 Last Updated: 2024-08-04T14:08:30.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4 . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flexpaper/pdf2json/issues/32
CVE ID: CVE-2020-19472 State: PUBLISHED Published: 2021-07-21T17:10:55 Last Updated: 2024-08-04T14:08:30.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in function DCTStream::readHuffSym in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 2 . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flexpaper/pdf2json/issues/33
CVE ID: CVE-2020-19473 State: PUBLISHED Published: 2021-07-21T17:11:04 Last Updated: 2024-08-04T14:08:30.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an uncaught floating point exception. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flexpaper/pdf2json/issues/34
CVE ID: CVE-2020-19474 State: PUBLISHED Published: 2021-07-21T17:11:14 Last Updated: 2024-08-04T14:08:30.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in function Gfx::doShowText in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Use After Free . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flexpaper/pdf2json/issues/35
CVE ID: CVE-2020-19475 State: PUBLISHED Published: 2021-07-21T17:11:23 Last Updated: 2024-08-04T14:08:30.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in function CCITTFaxStream::lookChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 2 . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flexpaper/pdf2json/issues/36
CVE ID: CVE-2020-19481 State: PUBLISHED Published: 2021-07-21T17:14:56 Last Updated: 2024-08-04T14:08:30.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid memory read in gf_m2ts_process_pmt in media_tools/mpegts.c that can cause a denial of service via a crafted MP4 file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/commit/2320eb73afba753b39b7147be91f7be7afc0eeb7 - https://github.com/gpac/gpac/issues/1265 - https://github.com/gpac/gpac/issues/1266 - https://github.com/gpac/gpac/issues/1267
CVE ID: CVE-2020-19488 State: PUBLISHED Published: 2021-07-21T17:15:06 Last Updated: 2024-08-04T14:08:30.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in box_code_apple.c:119 in Gpac MP4Box 0.8.0, allows attackers to cause a Denial of Service due to an invalid read on function ilst_item_Read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1263 - https://github.com/gpac/gpac/commit/6170024568f4dda310e98ef7508477b425c58d09
CVE ID: CVE-2020-19490 State: PUBLISHED Published: 2021-07-21T17:15:15 Last Updated: 2024-08-04T14:08:30.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/syoyo/tinyexr/issues/124 - https://github.com/syoyo/tinyexr/commit/a685e3332f61cd4e59324bf3f669d36973d64270
CVE ID: CVE-2020-19491 State: PUBLISHED Published: 2021-07-21T17:17:01 Last Updated: 2024-08-04T14:08:30.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pts/sam2p/issues/67 - https://github.com/pts/sam2p/commit/1d62cf8964bfcafa6561c4c3bb66d4aa4c529a73
CVE ID: CVE-2020-19492 State: PUBLISHED Published: 2021-07-21T17:18:33 Last Updated: 2024-08-04T14:08:30.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a floating point exception in ReadImage that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pts/sam2p/issues/66 - https://github.com/pts/sam2p/commit/b953f63307c4a83fa4615a4863e3fb250205cd98
CVE ID: CVE-2020-19497 State: PUBLISHED Published: 2021-07-21T17:19:57 Last Updated: 2024-08-04T14:08:30.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.17, allows attackers to cause a Denial of Service or possibly other unspecified impacts. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tbeu/matio/issues/121 - https://github.com/tbeu/matio/commit/5fa49ef9fc4368fe3d19b5fdaa36d8fa5e7f4606
CVE ID: CVE-2020-19498 State: PUBLISHED Published: 2021-07-21T17:20:10 Last Updated: 2024-08-04T14:08:30.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Floating point exception in function Fraction in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impacts. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libheif/issues/139 - https://github.com/strukturag/libheif/commit/2710c930918609caaf0a664e9c7bc3dce05d5b58
CVE ID: CVE-2020-19499 State: PUBLISHED Published: 2021-07-21T17:21:50 Last Updated: 2024-08-04T14:15:27.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in heif::Box_iref::get_references in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impact due to an invalid memory read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libheif/issues/138 - https://github.com/strukturag/libheif/commit/f7399b62d7fbc596f1b2871578c1d2053bedf1dd
CVE ID: CVE-2020-19500 State: REJECTED Published: N/A Last Updated: 2023-08-22T16:50:07.118920 Description: No description available.
CVE ID: CVE-2020-19510 State: PUBLISHED Published: 2021-06-21T18:04:08 Last Updated: 2024-08-04T14:15:27.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Textpattern 4.7.3 contains an aribtrary file load via the file_insert function in include/txp_file.php. Additional Analyst Notes: - CVE Program Container: References: - http://blog.topsec.com.cn/textpattern-background-any-file-upload/
CVE ID: CVE-2020-19511 State: PUBLISHED Published: 2021-06-21T18:12:47 Last Updated: 2024-08-04T14:15:27.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1) className and !2) Description fields in index.php/Admin/Classes, Additional Analyst Notes: - CVE Program Container: References: - http://www.typesettercms.com - http://blog.topsec.com.cn/typesetter-5-1-storage-type-cross-site-script/
CVE ID: CVE-2020-19513 State: PUBLISHED Published: 2021-02-18T23:11:19 Last Updated: 2024-08-04T14:15:27.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in FinalWire Ltd AIDA64 Engineer 6.00.5100 allows attackers to execute arbitrary code by creating a crafted input that will overwrite the SEH handler. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46991
CVE ID: CVE-2020-19515 State: PUBLISHED Published: 2021-09-09T14:37:35 Last Updated: 2024-08-04T14:15:27.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: qdPM V9.1 is vulnerable to Cross Site Scripting (XSS) via qdPM\install\modules\database_config.php. Additional Analyst Notes: - CVE Program Container: References: - https://topsecalphalab.github.io/CVE/qdPM9.1-Installer-Cross-Site-Scripting
CVE ID: CVE-2020-19527 State: PUBLISHED Published: 2020-12-10T21:06:25 Last Updated: 2024-08-04T14:15:27.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DB_NAME parameter to install/install.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/idreamsoft/iCMS/issues/66
CVE ID: CVE-2020-19547 State: PUBLISHED Published: 2021-08-25T19:18:28 Last Updated: 2024-08-04T14:15:27.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability exists in PopojiCMS 2.0.1 via the id parameter in admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PopojiCMS/PopojiCMS/issues/19
CVE ID: CVE-2020-19551 State: PUBLISHED Published: 2021-09-21T18:31:29 Last Updated: 2024-08-04T14:15:27.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blacklist bypass issue exists in WUZHI CMS up to and including 4.1.0 in common.func.php, which when uploaded can cause remote code executiong. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/177
CVE ID: CVE-2020-19553 State: PUBLISHED Published: 2021-09-21T18:51:02 Last Updated: 2024-08-04T14:15:27.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vlnerability exists in WUZHI CMS up to and including 4.1.0 in the config function in coreframe/app/attachment/libs/class/ckditor.class.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/179
CVE ID: CVE-2020-19554 State: PUBLISHED Published: 2021-09-21T19:07:47 Last Updated: 2024-08-04T14:15:27.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability exists in ManageEngine OPManager <=12.5.174 when the API key contains an XML-based XSS payload. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125177
CVE ID: CVE-2020-19559 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T15:36:13.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary code via a crafted payload to the ResolveMethod() parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/nightst0rm/t%E1%BA%A3n-m%E1%BA%A1n-v%E1%BB%81-l%E1%BB%97-h%E1%BB%95ng-trong-atm-diebold-f1040a70f2c9
CVE ID: CVE-2020-19586 State: PUBLISHED Published: 2022-09-14T02:48:10 Last Updated: 2024-08-04T14:15:27.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4 Admin UI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Deepak983/CVE-2020-19586/blob/main/Stored%20XSS%20in%20MIAdminStyles.i4%20through%20privileges%20escalation.pdf
CVE ID: CVE-2020-19587 State: PUBLISHED Published: 2022-09-14T02:54:44 Last Updated: 2024-08-04T14:15:27.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbitrary code via MIAdminStyles.i4 Admin UI. Additional Analyst Notes: - CVE Program Container: References: - https://www.linkedin.com/in/deepak-sharma-72a044b4/ - https://github.com/Deepak983/CVE-2020-19587/blob/main/_Stored%20XSS%20in%20MIAdminStyles.i4%20through%20privileges%20escalation.pdf
CVE ID: CVE-2020-19595 State: PUBLISHED Published: 2021-04-05T20:37:03 Last Updated: 2024-08-04T14:15:27.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in Core FTP Server v2 Build 697, via a crafted username. Additional Analyst Notes: - CVE Program Container: References: - https://www.0x90.zone/binary/reverse/exploitation/2020/08/16/CoreFTPServerRCE.html
CVE ID: CVE-2020-19596 State: PUBLISHED Published: 2021-04-05T20:33:51 Last Updated: 2024-08-04T14:15:27.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in Core FTP Server v1.2 Build 583, via a crafted username. Additional Analyst Notes: - CVE Program Container: References: - https://www.0x90.zone/binary/reverse/exploitation/2020/08/16/CoreFTPServerRCE.html
CVE ID: CVE-2020-19609 State: PUBLISHED Published: 2021-07-21T14:10:23 Last Updated: 2024-08-04T14:15:27.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff_expand_colormap() function when parsing TIFF files allowing attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701176 - http://git.ghostscript.com/?p=mupdf.git%3Bh=b7892cdc7fae62aa57d63ae62144e1f11b5f9275 - https://bugs.ghostscript.com/show_bug.cgi?id=703076 - https://lists.debian.org/debian-lts-announce/2021/09/msg00013.html
CVE ID: CVE-2020-19611 State: PUBLISHED Published: 2021-12-07T15:49:48 Last Updated: 2024-08-04T14:15:27.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in redirect module of Racktables version 0.21.2, allows an attacker to inject arbitrary web script or HTML via the op parameter. Additional Analyst Notes: - CVE Program Container: References: - http://racktables.com - https://github.com/RackTables/racktables/commit/2ce35adeaa47f60dc51875b2339725db3b23e827
CVE ID: CVE-2020-19613 State: PUBLISHED Published: 2021-04-01T18:51:03 Last Updated: 2024-08-04T14:15:28.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sunkaifei/FlyCms/issues/1
CVE ID: CVE-2020-19616 State: PUBLISHED Published: 2021-04-01T18:56:08 Last Updated: 2024-08-04T14:15:27.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post header field to /post/editing. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/langhsu/mblog/issues/27
CVE ID: CVE-2020-19617 State: PUBLISHED Published: 2021-04-01T18:59:07 Last Updated: 2024-08-04T14:15:27.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the nickname field to /settings/profile. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/langhsu/mblog/issues/27