Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-18648 State: PUBLISHED Published: 2021-06-22T14:25:45 Last Updated: 2024-08-04T14:00:49.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) in JuQingCMS v1.0 allows remote attackers to gain local privileges via the component "JuQingCMS_v1.0/admin/index.php?c=administrator&a=add". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GodEpic/JuQingCMS/issues/1 - https://github.com/PearlyNautilus/Security-Code-Review/issues/7
CVE ID: CVE-2020-18651 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-04T16:45:13.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted audio file with ID3V2 frame. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.freedesktop.org/libopenraw/exempi/issues/13 - https://gitlab.freedesktop.org/libopenraw/exempi/commit/fdd4765a699f9700850098b43b9798b933acb32f - https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html
CVE ID: CVE-2020-18652 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-04T16:41:19.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.freedesktop.org/libopenraw/exempi/issues/12 - https://gitlab.freedesktop.org/libopenraw/exempi/commit/acee2894ceb91616543927c2a6e45050c60f98f7 - https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html
CVE ID: CVE-2020-18654 State: PUBLISHED Published: 2021-06-22T15:08:35 Last Updated: 2024-08-04T14:00:49.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in Wuzhi CMS v4.1.0 allows remote attackers to execute arbitrary code via the "Title" parameter in the component "/coreframe/app/guestbook/myissue.php". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/174
CVE ID: CVE-2020-18657 State: PUBLISHED Published: 2021-06-23T18:43:59 Last Updated: 2024-08-04T14:00:49.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in GetSimpleCMS <= 3.3.15 in admin/changedata.php via the redirect_url parameter and the headers_sent function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1310 - https://github.com/LoRexxar/CVE_Request/blob/master/getsimplecms%20v3.3.15/getsimplecms_before_v3.3.15.md - https://www.seebug.org/vuldb/ssvid-97929
CVE ID: CVE-2020-18658 State: PUBLISHED Published: 2021-06-23T18:54:41 Last Updated: 2024-08-04T14:00:49.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scriptiong (XSS) vulnerability in GetSimpleCMS <=3.3.15 via the timezone parameter to settings.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1310 - https://github.com/LoRexxar/CVE_Request/blob/master/getsimplecms%20v3.3.15/getsimplecms_before_v3.3.15.md - https://www.seebug.org/vuldb/ssvid-97930
CVE ID: CVE-2020-18659 State: PUBLISHED Published: 2021-06-23T18:59:43 Last Updated: 2024-08-04T14:00:49.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in GetSimpleCMS <=3.3.15 via the (1) sitename, (2) username, and (3) email parameters to /admin/setup.php Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1310 - https://github.com/LoRexxar/CVE_Request/blob/master/getsimplecms%20v3.3.15/getsimplecms_before_v3.3.15.md - https://www.seebug.org/vuldb/ssvid-97931
CVE ID: CVE-2020-18660 State: PUBLISHED Published: 2021-06-23T20:19:51 Last Updated: 2024-08-04T14:00:49.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: GetSimpleCMS <=3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1310 - https://github.com/LoRexxar/CVE_Request/blob/master/getsimplecms%20v3.3.15/getsimplecms_before_v3.3.15.md - https://www.seebug.org/vuldb/ssvid-97928
CVE ID: CVE-2020-18661 State: PUBLISHED Published: 2021-06-24T14:54:19 Last Updated: 2024-08-04T14:00:49.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in gnuboard5 <=v5.3.2.8 via the url parameter to bbs/login.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gnuboard/gnuboard5/issues/43 - https://www.seebug.org/vuldb/ssvid-97925 - https://github.com/LoRexxar/CVE_Request/tree/master/gnuboard5%20mul%20vuls%20before%20v5.3.2.8#limited-reflective-xss-in-bbsloginphp
CVE ID: CVE-2020-18662 State: PUBLISHED Published: 2021-06-24T15:01:38 Last Updated: 2024-08-04T14:00:49.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in gnuboard5 <=v5.3.2.8 via the table_prefix parameter in install_db.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gnuboard/gnuboard5/issues/43 - https://www.seebug.org/vuldb/ssvid-97927 - https://github.com/LoRexxar/CVE_Request/tree/master/gnuboard5%20mul%20vuls%20before%20v5.3.2.8#sql-injection-in-install_dbphp
CVE ID: CVE-2020-18663 State: PUBLISHED Published: 2021-06-24T15:03:57 Last Updated: 2024-08-04T14:00:49.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in gnuboard5 <=v5.3.2.8 via the act parameter in bbs/move_update.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gnuboard/gnuboard5/issues/43 - https://www.seebug.org/vuldb/ssvid-97926 - https://github.com/LoRexxar/CVE_Request/tree/master/gnuboard5%20mul%20vuls%20before%20v5.3.2.8#reflective-xss-in-bbsmove_updatephp
CVE ID: CVE-2020-18664 State: PUBLISHED Published: 2021-06-24T15:29:13 Last Updated: 2024-08-04T14:00:49.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in WebPort <=1.19.1via the connection name parameter in type-conn. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LoRexxar/CVE_Request/blob/master/web%20port%20mul%20vuls%20before%20v1.19.1/web%20port%20mul%20vuls%20before%20v1.19.1.md#stored-xss--in-accesssetuptype-conn - https://www.seebug.org/vuldb/ssvid-97994
CVE ID: CVE-2020-18665 State: PUBLISHED Published: 2021-06-24T15:40:11 Last Updated: 2024-08-04T14:00:49.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in WebPort <=1.19.1 in tags of system settings. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LoRexxar/CVE_Request/blob/master/web%20port%20mul%20vuls%20before%20v1.19.1/web%20port%20mul%20vuls%20before%20v1.19.1.md#directory-traversal-in-tags-of-system-settings - https://www.seebug.org/vuldb/ssvid-97995
CVE ID: CVE-2020-18666 State: REJECTED Published: 2021-06-24T15:53:13 Last Updated: 2021-06-24T17:05:50 Description: No description available.
CVE ID: CVE-2020-18667 State: PUBLISHED Published: 2021-06-24T16:07:47 Last Updated: 2024-08-04T14:00:49.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in WebPort <=1.19.1 via the new connection, parameter name in type-conn. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LoRexxar/CVE_Request/blob/master/web%20port%20mul%20vuls%20before%20v1.19.1/web%20port%20mul%20vuls%20before%20v1.19.1.md#post-stored-xss-and-sql-injection-in--logtypeerror - https://www.seebug.org/vuldb/ssvid-97998
CVE ID: CVE-2020-18668 State: PUBLISHED Published: 2021-06-24T17:35:02 Last Updated: 2024-08-04T14:00:49.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerabililty in WebPort <=1.19.1 via the description parameter to script/listcalls. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LoRexxar/CVE_Request/blob/master/web%20port%20mul%20vuls%20before%20v1.19.1/web%20port%20mul%20vuls%20before%20v1.19.1.md#stored-xss--in-scriptlistcalls - https://www.seebug.org/vuldb/ssvid-97996
CVE ID: CVE-2020-18670 State: PUBLISHED Published: 2021-06-24T18:07:54 Last Updated: 2024-08-04T14:00:49.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/roundcube/roundcubemail/issues/7406 - https://roundcube.net/news/2020/06/02/security-updates-1.4.5-and-1.3.12 - https://lorexxar.cn/2020/06/10/roundcube-mail-xss/#Store-Xss-in-installer-test-php
CVE ID: CVE-2020-18671 State: PUBLISHED Published: 2021-06-24T18:14:12 Last Updated: 2024-08-04T14:00:49.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Roundcube Mail <=1.4.4 via smtp config in /installer/test.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/roundcube/roundcubemail/issues/7406 - https://roundcube.net/news/2020/06/02/security-updates-1.4.5-and-1.3.12 - https://lorexxar.cn/2020/06/10/roundcube-mail-xss/#store-xss-in-smtp-config
CVE ID: CVE-2020-18683 State: PUBLISHED Published: 2021-09-30T01:20:15 Last Updated: 2024-08-04T14:00:49.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of undefined fields mishandling. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=15I75JBmFYB9rLm9ZvcFtjHy0e2a-9lyO
CVE ID: CVE-2020-18684 State: PUBLISHED Published: 2021-09-30T01:17:21 Last Updated: 2024-08-04T14:08:29.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Floodlight through 1.2 has an integer overflow in checkFlow in StaticFlowEntryPusherResource.java via priority or port number. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1310MS7djRfF0N2YmmzVTs8x5oJuHQVX5
CVE ID: CVE-2020-18685 State: PUBLISHED Published: 2021-09-30T01:18:43 Last Updated: 2024-08-04T14:08:29.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked prerequisites related to TCP or UDP ports, or group or table IDs. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1oIt6jViGxLALUkLVELsQpC26MJYFZt2U
CVE ID: CVE-2020-18693 State: PUBLISHED Published: 2021-08-06T18:02:18 Last Updated: 2024-08-04T14:08:29.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in MineWebCMS v1.7.0 allows remote attackers to execute arbitrary code by injecting malicious code into the 'Title' field of the component '/admin/news'. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MineWeb/MineWebCMS/issues/123
CVE ID: CVE-2020-18694 State: PUBLISHED Published: 2021-08-06T18:02:34 Last Updated: 2024-11-19T14:21:55.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) in IgnitedCMS v1.0 allows remote attackers to obtain sensitive information and gain privilege via the component "/admin/profile/save_profile". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ignitedcms/ignitedcms/issues/5
CVE ID: CVE-2020-18698 State: PUBLISHED Published: 2021-08-16T17:54:46 Last Updated: 2024-08-04T14:08:29.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TaleLin/lin-cms-flask/issues/27 - https://cwe.mitre.org/data/definitions/307.html
CVE ID: CVE-2020-18699 State: PUBLISHED Published: 2021-08-16T17:55:06 Last Updated: 2024-08-04T14:08:29.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component 'app/api/cms/user.py'. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TaleLin/lin-cms-flask/issues/28
CVE ID: CVE-2020-18701 State: PUBLISHED Published: 2021-08-16T17:55:27 Last Updated: 2024-08-04T14:08:29.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's authentication token upon logout, which allows for replaying packets. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TaleLin/lin-cms-flask/issues/30 - https://cwe.mitre.org/data/definitions/613.html
CVE ID: CVE-2020-18702 State: PUBLISHED Published: 2021-08-16T17:55:35 Last Updated: 2024-08-04T14:08:29.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rochacbruno/quokka/issues/675
CVE ID: CVE-2020-18703 State: PUBLISHED Published: 2021-08-16T17:55:55 Last Updated: 2024-08-04T14:08:29.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rochacbruno/quokka/issues/676
CVE ID: CVE-2020-18704 State: PUBLISHED Published: 2021-08-16T17:56:05 Last Updated: 2024-08-04T14:08:29.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted Upload of File with Dangerous Type in Django-Widgy v0.8.4 allows remote attackers to execute arbitrary code via the 'image' widget in the component 'Change Widgy Page'. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fusionbox/django-widgy/issues/387
CVE ID: CVE-2020-18705 State: PUBLISHED Published: 2021-08-16T17:56:14 Last Updated: 2024-08-04T14:08:29.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rochacbruno/quokka/issues/676
CVE ID: CVE-2020-18713 State: PUBLISHED Published: 2021-02-04T23:01:17 Last Updated: 2024-08-04T14:08:29.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in customerAction.php Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97859
CVE ID: CVE-2020-18714 State: PUBLISHED Published: 2021-02-04T23:06:51 Last Updated: 2024-08-04T14:08:29.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordModel.php's getdata function. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97858
CVE ID: CVE-2020-18715 State: REJECTED Published: 2021-02-04T23:11:46 Last Updated: 2021-02-04T23:11:46 Description: No description available.
CVE ID: CVE-2020-18716 State: PUBLISHED Published: 2021-02-04T23:15:49 Last Updated: 2024-08-04T14:08:29.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordAction.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97867
CVE ID: CVE-2020-18717 State: PUBLISHED Published: 2021-02-04T23:25:45 Last Updated: 2024-08-04T14:08:29.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in ZZZCMS zzzphp 1.7.1 allows remote attackers to execute arbitrary code due to a lack of parameter filtering in inc/zzz_template.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-98031
CVE ID: CVE-2020-18723 State: PUBLISHED Published: 2021-02-03T17:25:14 Last Updated: 2024-08-04T14:08:29.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwarding an email to perform potentially malicious activities. Additional Analyst Notes: - CVE Program Container: References: - http://kailashbohara.com.np/blog/2020/07/15/mdaemon-stored-xss - https://www.altn.com/Support/SecurityUpdate/MD082520_MDaemon_EN/ - http://packetstormsecurity.com/files/161332/Alt-N-MDaemon-Webmail-20.0.0-Cross-Site-Scripting.html
CVE ID: CVE-2020-18724 State: PUBLISHED Published: 2021-02-03T17:27:42 Last Updated: 2024-08-04T14:08:29.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes code and perform a XSS attack while opening a contact list. Additional Analyst Notes: - CVE Program Container: References: - http://kailashbohara.com.np/blog/2020/07/15/mdaemon-stored-xss - https://www.altn.com/Support/SecurityUpdate/MD082520_MDaemon_EN/ - http://packetstormsecurity.com/files/161332/Alt-N-MDaemon-Webmail-20.0.0-Cross-Site-Scripting.html
CVE ID: CVE-2020-18730 State: PUBLISHED Published: 2021-08-23T20:07:12 Last Updated: 2024-08-04T14:08:29.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: A segmentation violation in the Iec104_Deal_I function of IEC104 v1.0 allows attackers to cause a denial of service (DOS). Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/476.html - https://github.com/airpig2011/IEC104/issues/4
CVE ID: CVE-2020-18731 State: PUBLISHED Published: 2021-08-23T20:07:13 Last Updated: 2024-08-04T14:08:29.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: A segmentation violation in the Iec104_Deal_FirmUpdate function of IEC104 v1.0 allows attackers to cause a denial of service (DOS). Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/476.html - https://github.com/airpig2011/IEC104/issues/5
CVE ID: CVE-2020-18734 State: PUBLISHED Published: 2021-08-23T20:07:14 Last Updated: 2024-08-04T14:08:29.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack buffer overflow in /ddsi/q_bitset.h of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eclipse-cyclonedds/cyclonedds/issues/476 - https://github.com/eclipse-cyclonedds/cyclonedds - https://projects.eclipse.org/projects/iot.cyclonedds
CVE ID: CVE-2020-18735 State: PUBLISHED Published: 2021-08-23T20:07:15 Last Updated: 2024-08-04T14:08:29.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap buffer overflow in /src/dds_stream.c of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eclipse-cyclonedds/cyclonedds - https://projects.eclipse.org/projects/iot.cyclonedds - https://github.com/eclipse-cyclonedds/cyclonedds/issues/501
CVE ID: CVE-2020-18737 State: PUBLISHED Published: 2021-02-05T15:17:07 Last Updated: 2024-08-04T14:08:29.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Typora 0.9.67. There is an XSS vulnerability that causes Remote Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/typora/typora-issues/issues/2289
CVE ID: CVE-2020-18741 State: PUBLISHED Published: 2021-07-08T16:29:11 Last Updated: 2024-08-04T14:08:29.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any user's photo via the "photoid%5B%5D" and "photodesc%5B%5D" parameters in the component "index.php?app=photo." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thinksaas/ThinkSAAS/issues/19
CVE ID: CVE-2020-18746 State: PUBLISHED Published: 2021-08-18T14:32:23 Last Updated: 2024-08-04T14:08:29.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in AiteCMS v1.0 allows remote attackers to execute arbitrary code via the component "aitecms/login/diy_list.php". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kk98kk0/exploit/issues/3
CVE ID: CVE-2020-18748 State: PUBLISHED Published: 2021-08-19T16:00:00 Last Updated: 2024-08-04T14:08:30.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in Typora v0.9.65 allows attackers to execute arbitrary code via mathjax syntax due to a mathjax configuration error in the mathematical formula blocks. This is a different vulnerability from CVE-2020-18221. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/typora - https://github.com/typora/typora-issues/issues/2226
CVE ID: CVE-2020-18750 State: PUBLISHED Published: 2021-02-05T18:06:41 Last Updated: 2024-08-04T14:08:29.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flexpaper/pdf2json/issues/22 - https://github.com/flexpaper/pdf2json/commit/80bf71f16c804108fd933e267fe31692aaa509b4
CVE ID: CVE-2020-18753 State: PUBLISHED Published: 2021-08-13T16:08:37 Last Updated: 2024-08-04T14:08:29.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to gain access to the system and escalate privileges via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ni9htMar3/vulnerability/blob/master/PLC/DCCE/DCCE%20MAC1100%20PLC_start-stop.md
CVE ID: CVE-2020-18754 State: PUBLISHED Published: 2021-08-13T16:08:37 Last Updated: 2024-08-04T14:08:29.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information disclosure vulnerability exists within Dut Computer Control Engineering Co.'s PLC MAC1100. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ni9htMar3/vulnerability/blob/master/PLC/DCCE/DCCE%20MAC1100%20PLC_leak.md
CVE ID: CVE-2020-18756 State: PUBLISHED Published: 2021-08-13T16:08:39 Last Updated: 2024-08-04T14:08:30.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary memory access vulnerability in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to read the contents of any variable area. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ni9htMar3/vulnerability/blob/master/PLC/DCCE/DCCE%20MAC1100%20PLC_read.md