Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-23140 State: PUBLISHED Published: 2020-11-09T17:03:59 Last Updated: 2024-08-04T14:58:13.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microweber 1.1.18 is affected by insufficient session expiration. When changing passwords, both sessions for when a user changes email and old sessions in any other browser or device, the session does not expire and remains active. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/virendratiwari03/bddafb3cd82dde8202bd056d340d3e36
CVE ID: CVE-2020-23148 State: PUBLISHED Published: 2021-08-09T22:54:11 Last Updated: 2024-08-04T14:58:14.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: The userLogin parameter in ldap/login.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a LDAP injection and obtain sensitive information via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rconfig/rconfig/blob/7ef8bd8d606bc10835e1b8f6f72a2048094816d3/www/ldap/authenticate.php#L34 - https://cwe.mitre.org/data/definitions/90.html
CVE ID: CVE-2020-23149 State: PUBLISHED Published: 2021-08-09T22:54:13 Last Updated: 2024-08-04T14:58:13.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dbName parameter in ajaxDbInstall.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a SQL injection and access sensitive database information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rconfig/rconfig/blob/7ef8bd8d606bc10835e1b8f6f72a2048094816d3/www/install/lib/ajaxHandlers/ajaxDbInstall.php#L35
CVE ID: CVE-2020-23150 State: PUBLISHED Published: 2021-08-09T22:54:15 Last Updated: 2024-08-04T14:58:13.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in config.inc.php of rConfig 3.9.5 allows attackers to access sensitive database information via a crafted GET request to install/lib/ajaxHandlers/ajaxDbInstall.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rconfig/rconfig/blob/7ef8bd8d606bc10835e1b8f6f72a2048094816d3/www/install/lib/ajaxHandlers/ajaxDbInstall.php#L97
CVE ID: CVE-2020-23151 State: PUBLISHED Published: 2021-08-09T22:54:16 Last Updated: 2024-08-04T14:58:14.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: rConfig 3.9.5 allows command injection by sending a crafted GET request to lib/ajaxHandlers/ajaxArchiveFiles.php since the path parameter is passed directly to the exec function without being escaped. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/78.html - https://github.com/rconfig/rconfig/blob/7ef8bd8d606bc10835e1b8f6f72a2048094816d3/www/lib/ajaxHandlers/ajaxArchiveFiles.php#L13
CVE ID: CVE-2020-23160 State: PUBLISHED Published: 2021-01-22T13:11:13 Last Updated: 2024-08-04T14:58:14.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote code execution in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to arbitrary commands as root on the devices. Additional Analyst Notes: - CVE Program Container: References: - https://pyres.com/en/solutions/termod-4/ - https://github.com/Outpost24/Pyrescom-Termod-PoC - https://outpost24.com/blog/multiple-vulnerabilities-discovered-in-Pyrescom-Termod4-smart-device
CVE ID: CVE-2020-23161 State: PUBLISHED Published: 2021-01-22T13:11:37 Last Updated: 2024-08-04T14:58:14.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Local file inclusion in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to traverse directories and read sensitive files via the Maintenance > Logs menu and manipulating the file-path in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://pyres.com/en/solutions/termod-4/ - https://github.com/Outpost24/Pyrescom-Termod-PoC - https://outpost24.com/blog/multiple-vulnerabilities-discovered-in-Pyrescom-Termod4-smart-device
CVE ID: CVE-2020-23162 State: PUBLISHED Published: 2021-01-22T13:11:57 Last Updated: 2024-08-04T14:58:13.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sensitive information disclosure and weak encryption in Pyrescom Termod4 time management devices before 10.04k allows remote attackers to read a session-file and obtain plain-text user credentials. Additional Analyst Notes: - CVE Program Container: References: - https://pyres.com/en/solutions/termod-4/ - https://github.com/Outpost24/Pyrescom-Termod-PoC - https://outpost24.com/blog/multiple-vulnerabilities-discovered-in-Pyrescom-Termod4-smart-device
CVE ID: CVE-2020-23171 State: PUBLISHED Published: 2021-08-10T15:06:18 Last Updated: 2024-08-04T14:58:13.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash characters included in the name of the crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nim-lang/zip/issues/54
CVE ID: CVE-2020-23172 State: PUBLISHED Published: 2021-08-10T15:06:20 Last Updated: 2024-08-04T14:58:14.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in all versions of Kuba allows attackers to overwrite arbitrary files in arbitrary directories with crafted Zip files due to improper validation of file paths in .zip archives. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kuba--/zip/issues/123
CVE ID: CVE-2020-23178 State: PUBLISHED Published: 2021-07-02T17:51:05 Last Updated: 2024-08-04T14:58:14.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue exists in PHP-Fusion 9.03.50 where session cookies are not deleted once a user logs out, allowing for an attacker to perform a session replay attack and impersonate the victim user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PHPFusion/PHPFusion/issues/2314
CVE ID: CVE-2020-23179 State: PUBLISHED Published: 2021-07-02T17:51:07 Last Updated: 2024-08-04T14:58:14.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in administration/settings_main.php of PHP-Fusion 9.03.50 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Site footer" field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PHPFusion/PHPFusion/issues/2320
CVE ID: CVE-2020-23181 State: PUBLISHED Published: 2021-07-02T17:51:09 Last Updated: 2024-08-04T14:58:14.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross site scripting (XSS) vulnerability in /administration/theme.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Manage Theme" field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpfusion/PHPFusion/issues/2326
CVE ID: CVE-2020-23182 State: PUBLISHED Published: 2021-07-02T17:51:11 Last Updated: 2024-08-04T14:58:15.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: The component /php-fusion/infusions/shoutbox_panel/shoutbox_archive.php in PHP-Fusion 9.03.60 allows attackers to redirect victim users to malicious websites via a crafted payload entered into the Shoutbox message panel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpfusion/PHPFusion/issues/2329
CVE ID: CVE-2020-23184 State: PUBLISHED Published: 2021-07-02T17:51:14 Last Updated: 2024-08-04T14:58:14.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in /administration/settings_registration.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Registration" field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpfusion/PHPFusion/issues/2323
CVE ID: CVE-2020-23185 State: PUBLISHED Published: 2021-07-02T17:51:16 Last Updated: 2024-08-04T14:58:14.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in /administration/setting_security.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpfusion/PHPFusion/issues/2331
CVE ID: CVE-2020-23190 State: PUBLISHED Published: 2021-07-02T17:51:18 Last Updated: 2024-08-04T14:58:14.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in the "Import emails" module in phplist 3.5.4 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpList/phplist3/issues/667
CVE ID: CVE-2020-23192 State: PUBLISHED Published: 2021-07-02T17:51:20 Last Updated: 2024-08-04T14:58:14.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in phplist 3.5.4 and below allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload in the "admin" parameter under the "Manage administrators" module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpList/phplist3/issues/671
CVE ID: CVE-2020-23194 State: PUBLISHED Published: 2021-07-02T17:51:23 Last Updated: 2024-08-04T14:58:14.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in the "Import Subscribers" feature in phplist 3.5.4 and below allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpList/phplist3/issues/678
CVE ID: CVE-2020-23205 State: PUBLISHED Published: 2021-07-01T20:09:10 Last Updated: 2024-08-04T14:58:14.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in Monstra CMS version 3.0.4 allows attackers to execute arbitrary web scripts or HTML via crafted a payload entered into the "Site Name" field under the "Site Settings" module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monstra-cms/monstra/issues/465
CVE ID: CVE-2020-23207 State: PUBLISHED Published: 2021-07-01T20:09:53 Last Updated: 2024-08-04T14:58:14.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Edit Values" field under the "Configure Attributes" module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpList/phplist3/issues/664
CVE ID: CVE-2020-23208 State: PUBLISHED Published: 2021-07-01T20:10:45 Last Updated: 2024-08-04T14:58:14.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Send test" field under the "Start or continue campaign" module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpList/phplist3/issues/665
CVE ID: CVE-2020-23209 State: PUBLISHED Published: 2021-07-01T20:12:03 Last Updated: 2024-08-04T14:58:14.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "List Description" field under the "Edit A List" module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpList/phplist3/issues/666
CVE ID: CVE-2020-23214 State: PUBLISHED Published: 2021-07-01T20:12:51 Last Updated: 2024-08-04T14:58:14.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Configure categories" field under the "Categorise Lists" module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpList/phplist3/issues/669
CVE ID: CVE-2020-23217 State: PUBLISHED Published: 2021-07-01T20:13:55 Last Updated: 2024-08-04T14:58:14.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add a list" field under the "Import Emails" module. Additional Analyst Notes: - CVE Program Container: References: - https://www.phplist.org/newslist/phplist-3-5-4-release-notes/ - https://github.com/phpList/phplist3/issues/672
CVE ID: CVE-2020-23219 State: PUBLISHED Published: 2021-07-01T20:40:56 Last Updated: 2024-08-04T14:58:14.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monstra CMS 3.0.4 allows attackers to execute arbitrary code via a crafted payload entered into the "Snippet content" field under the "Edit Snippet" module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monstra-cms/monstra/issues/466
CVE ID: CVE-2020-23226 State: PUBLISHED Published: 2021-08-27T00:00:00 Last Updated: 2024-08-04T14:58:14.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross Site Scripting (XSS) vulneratiblities exist in Cacti 1.2.12 in (1) reports_admin.php, (2) data_queries.php, (3) data_input.php, (4) graph_templates.php, (5) graphs.php, (6) reports_admin.php, and (7) data_input.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cacti/cacti/issues/3549 - https://lists.debian.org/debian-lts-announce/2022/03/msg00038.html - https://lists.debian.org/debian-lts-announce/2022/12/msg00039.html
CVE ID: CVE-2020-23234 State: PUBLISHED Published: 2021-07-26T19:12:02 Last Updated: 2024-08-04T14:58:14.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks feature, which can be bypassed by using HTML event handlers, such as "ontoggle,". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LavaLite/cms/issues/320
CVE ID: CVE-2020-23238 State: PUBLISHED Published: 2021-07-26T19:41:50 Last Updated: 2024-08-04T14:58:14.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Evolution CMS 2.0.2 via the Document Manager feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/evolution-cms/evolution/issues/1473
CVE ID: CVE-2020-23239 State: PUBLISHED Published: 2021-07-26T19:49:32 Last Updated: 2024-08-04T14:58:14.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu Preferences feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/textpattern/textpattern/issues/1495
CVE ID: CVE-2020-23240 State: PUBLISHED Published: 2021-07-26T20:06:58 Last Updated: 2024-08-04T14:58:14.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerablity in CMS Made Simple 2.2.14 via the Logic field in the Content Manager feature. Additional Analyst Notes: - CVE Program Container: References: - http://dev.cmsmadesimple.org/bug/view/12321
CVE ID: CVE-2020-23241 State: PUBLISHED Published: 2021-07-26T20:12:55 Last Updated: 2024-08-04T14:58:14.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in CMS Made Simple 2.2.14 in "Extra" via 'News > Article" feature. Additional Analyst Notes: - CVE Program Container: References: - http://dev.cmsmadesimple.org/bug/view/12322
CVE ID: CVE-2020-23242 State: PUBLISHED Published: 2021-07-26T20:19:43 Last Updated: 2024-08-04T14:58:14.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in NavigateCMS 2.9 when performing a Create or Edit via the Tools feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NavigateCMS/Navigate-CMS/issues/16
CVE ID: CVE-2020-23243 State: PUBLISHED Published: 2021-07-26T20:23:26 Last Updated: 2024-08-04T14:58:14.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in NavigateCMS NavigateCMS 2.9 via the name="wrong_path_redirect" feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NavigateCMS/Navigate-CMS/issues/18
CVE ID: CVE-2020-23249 State: PUBLISHED Published: 2021-01-05T21:47:48 Last Updated: 2024-08-04T14:58:14.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: GigaVUE-OS (GVOS) 5.4 - 5.9 stores a Redis database password in plaintext. Additional Analyst Notes: - CVE Program Container: References: - https://community.gigamon.com/gigamoncp/s/article/Field-Notice-Gigamon-addressing-multiple-vulnerabilities-in-GigaVUE-OS
CVE ID: CVE-2020-23250 State: PUBLISHED Published: 2021-01-05T21:47:44 Last Updated: 2024-08-04T14:58:14.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: GigaVUE-OS (GVOS) 5.4 - 5.9 uses a weak algorithm for a hash stored in internal database. Additional Analyst Notes: - CVE Program Container: References: - https://community.gigamon.com/gigamoncp/s/article/Field-Notice-Gigamon-addressing-multiple-vulnerabilities-in-GigaVUE-OS
CVE ID: CVE-2020-23255 State: REJECTED Published: N/A Last Updated: 2022-10-31T00:00:00 Description: No description available.
CVE ID: CVE-2020-23256 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T17:50:04.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/electerm/electerm/issues/1686
CVE ID: CVE-2020-23257 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T16:28:32.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability found in Espruino 2v05.41 allows an attacker to cause a denial of service via the function jsvGarbageCollectMarkUsed in file src/jsvar.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/espruino/Espruino/issues/1820 - http://www.espruino.com/
CVE ID: CVE-2020-23258 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T16:26:35.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the Jsi_ValueIsNumber function in ./src/jsiValue.c file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pcmacdon/jsish/issues/12 - https://jsish.org/fossil/jsi2/tktview?name=2ba1d89d32
CVE ID: CVE-2020-23259 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-14T18:40:27.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the Jsi_Strlen function in the src/jsiChar.c file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pcmacdon/jsish/issues/13 - https://jsish.org/fossil/jsi2/tktview?name=b6bb078e00
CVE ID: CVE-2020-23260 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-18T17:07:38.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pcmacdon/jsish/issues/14 - https://jsish.org/fossil/jsi2/tktview?name=3e211e44b1
CVE ID: CVE-2020-23262 State: PUBLISHED Published: 2021-01-22T15:35:58 Last Updated: 2024-08-04T14:58:14.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ming-soft/MCMS/issues/45
CVE ID: CVE-2020-23263 State: PUBLISHED Published: 2021-05-06T21:42:08 Last Updated: 2024-08-04T14:58:14.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Persistent Cross-site scripting vulnerability on Fork CMS version 5.8.2 allows remote attackers to inject arbitrary Javascript code via the "navigation_title" parameter and the "title" parameter in /private/en/pages/add. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/forkcms/forkcms/pull/3093
CVE ID: CVE-2020-23264 State: PUBLISHED Published: 2021-05-06T21:46:39 Last Updated: 2024-08-04T14:58:14.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) in Fork-CMS before 5.8.2 allow remote attackers to hijack the authentication of logged administrators. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/forkcms/forkcms/pull/3123
CVE ID: CVE-2020-23266 State: PUBLISHED Published: 2021-09-21T23:04:26 Last Updated: 2024-08-04T14:58:14.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in gpac 0.8.0. The OD_ReadUTF8String function in odf_code.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted media file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1481
CVE ID: CVE-2020-23267 State: PUBLISHED Published: 2021-09-21T23:04:26 Last Updated: 2024-08-04T14:58:14.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in gpac 0.8.0. The gf_hinter_track_process function in isom_hinter_track_process.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted media file Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1479
CVE ID: CVE-2020-23269 State: PUBLISHED Published: 2021-09-21T23:04:27 Last Updated: 2024-08-04T14:58:14.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in gpac 0.8.0. The stbl_GetSampleSize function in isomedia/stbl_read.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted media file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1482
CVE ID: CVE-2020-23273 State: PUBLISHED Published: 2021-09-21T23:04:28 Last Updated: 2024-08-04T14:58:14.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-buffer overflow in the randomize_iparp function in edit_packet.c. of Tcpreplay v4.3.2 allows attackers to cause a denial of service (DOS) via a crafted pcap. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/appneta/tcpreplay/issues/579