Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-6572 State: PUBLISHED Published: 2021-01-14T20:55:23.000Z Last Updated: 2025-10-21T23:35:29.895Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://crbug.com/1066893 - https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html
CVE ID: CVE-2020-6573 State: PUBLISHED Published: 2020-09-21T19:06:54 Last Updated: 2024-08-04T09:11:04.530Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html - https://crbug.com/1116304 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html - http://lists.opensuse.org/opensuse-security-announc
ists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html - https://www.debian.org/security/2021/dsa-4824 - https://security.gentoo.org/glsa/202101-30
CVE ID: CVE-2020-6574 State: PUBLISHED Published: 2020-09-21T19:06:55 Last Updated: 2024-08-04T09:11:04.696Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in installer in Google Chrome on OS X prior to 85.0.4183.102 allowed a local attacker to potentially achieve privilege escalation via a crafted binary. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html - https://crbug.com/1102196 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2020
pensuse.org/opensuse-security-announce/2020-09/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html - https://www.debian.org/security/2021/dsa-4824
CVE ID: CVE-2020-6575 State: PUBLISHED Published: 2020-09-21T19:06:55 Last Updated: 2024-08-04T09:11:04.682Z Vendors: Google Products: Chrome Problem Types: Race Description: Race in Mojo in Google Chrome prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html - https://crbug.com/1081874 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html - http:/
ity-announce/2020-09/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html - https://www.debian.org/security/2021/dsa-4824 - https://security.gentoo.org/glsa/202101-30
CVE ID: CVE-2020-6576 State: PUBLISHED Published: 2020-09-21T19:06:56 Last Updated: 2024-08-04T09:11:04.909Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html - https://crbug.com/1111737 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html - http://lists.ope
ce/2020-09/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html - https://www.debian.org/security/2021/dsa-4824 - https://security.gentoo.org/glsa/202101-30
CVE ID: CVE-2020-6577 State: PUBLISHED Published: 2021-03-19T03:25:37 Last Updated: 2024-08-04T09:11:04.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IT-Recht Kanzlei plugin in Zen Cart 1.5.6c (German edition) allows itrk-api.php rechtstext_language SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/security-advisories/ - https://herolab.usd.de/security-advisories/usd-2019-0072/
CVE ID: CVE-2020-6578 State: PUBLISHED Published: 2021-03-19T03:29:09 Last Updated: 2024-08-04T09:11:04.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zen Cart 1.5.6d allows reflected XSS via the main_page parameter to includes/templates/template_default/common/tpl_main_page.php or includes/templates/responsive_classic/common/tpl_main_page.php. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/security-advisories/ - https://herolab.usd.de/security-advisories/usd-2019-0069/
CVE ID: CVE-2020-6579 State: PUBLISHED Published: 2020-04-30T13:22:22 Last Updated: 2024-08-04T09:11:04.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mailhive/cloudbeez/cloudloader.php and mailhive/cloudbeez/cloudloader_core.php in the MailBeez plugin for ZenCart before 3.9.22 allows remote attackers to inject arbitrary web script or HTML via the cloudloader_mode parameter. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/security-advisories/usd-2019-0070/
CVE ID: CVE-2020-6581 State: PUBLISHED Published: 2020-03-16T17:13:00 Last Updated: 2024-08-04T09:11:04.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios NRPE 3.2.1 has Insufficient Filtering because, for example, nasty_metachars interprets \n as the character \ and the character n (not as the \n newline sequence). This can cause command injection. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/security-advisories/ - https://herolab.usd.de/security-advisories/usd-2020-0002/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DNGKXVDB43E3KQRA6W5QZT3Z46XZLQM/
CVE ID: CVE-2020-6582 State: PUBLISHED Published: 2020-03-16T17:13:56 Last Updated: 2024-08-04T09:11:04.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small negative number as a large positive number during a bzero call. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/security-advisories/ - https://herolab.usd.de/security-advisories/usd-2020-0001/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DNGKXVDB43E3KQRA6W5QZT3Z46XZLQM/
CVE ID: CVE-2020-6583 State: PUBLISHED Published: 2020-01-08T19:06:46 Last Updated: 2024-08-04T09:11:04.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: BigProf Online Invoicing System (OIS) through 2.6 has XSS that can be leveraged for session hijacking. An attacker can exploit the XSS vulnerability, retrieve the session cookie from the administrator login, and take over the administrator account via the Name field in an Add New Client action. Additional Analyst Notes: - CVE Program Container: References: - https://www.sevenlayers.com/index.php/282-online-invoicing-system-2-6-xss-session-hijack
CVE ID: CVE-2020-6584 State: PUBLISHED Published: 2020-03-16T15:33:06 Last Updated: 2024-08-04T09:11:04.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios Log Server 2.1.3 has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/products/nagios-log-server/ - https://medium.com/%40fixitt6/multiple-vulnerabilities-in-nagios-log-server-2-1-3-af7c160edc60 - https://assets.nagios.com/downloads/nagios-log-server/CHANGES.TXT
CVE ID: CVE-2020-6585 State: PUBLISHED Published: 2020-03-16T15:31:53 Last Updated: 2024-08-04T09:11:04.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios Log Server 2.1.3 has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/products/nagios-log-server/ - https://medium.com/%40fixitt6/multiple-vulnerabilities-in-nagios-log-server-2-1-3-af7c160edc60 - https://assets.nagios.com/downloads/nagios-log-server/CHANGES.TXT
CVE ID: CVE-2020-6586 State: PUBLISHED Published: 2020-03-16T15:30:57 Last Updated: 2024-08-04T09:11:04.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is mishandled on the /admin/users page. Any malicious user with limited access can store an XSS payload in his Name. When any admin views this, the XSS is triggered. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/products/nagios-log-server/ - https://medium.com/%40fixitt6/multiple-vulnerabilities-in-nagios-log-server-2-1-3-af7c160edc60 - https://assets.nagios.com/downloads/nagios-log-server/CH
tiple-vulnerabilities-in-nagios-log-server-2-1-3-af7c160edc60 - https://assets.nagios.com/downloads/nagios-log-server/CHANGES.TXT
CVE ID: CVE-2020-6589 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2020-6590 State: PUBLISHED Published: 2021-04-08T21:32:59 Last Updated: 2024-08-04T09:11:04.867Z Vendors: n/a Products: Forcepoint Web Security Content Gateway Problem Types: CWE-611 Description: Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input, leading to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://help.forcepoint.com/security/CVE/CVE-2020-6590.html
CVE ID: CVE-2020-6591 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2020-6592 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2020-6593 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2020-6594 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2020-6595 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2020-6596 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2020-6597 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2020-6598 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2020-6599 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2020-6600 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2020-6601 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2020-6602 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2020-6603 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2020-6604 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2020-6605 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2020-6606 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2020-6607 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2020-6608 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2020-6609 State: PUBLISHED Published: 2020-01-08T20:44:00 Last Updated: 2024-08-04T09:11:04.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/179#issue-544834443 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00046.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00052.html
CVE ID: CVE-2020-6610 State: PUBLISHED Published: 2020-01-08T20:43:51 Last Updated: 2024-08-04T09:11:04.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in decode_r2007.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/179#issuecomment-570447120 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00046.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00052.html
CVE ID: CVE-2020-6611 State: PUBLISHED Published: 2020-01-08T20:43:41 Last Updated: 2024-08-04T09:11:05.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/179#issuecomment-570447190 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00046.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00052.html
CVE ID: CVE-2020-6612 State: PUBLISHED Published: 2020-01-08T20:43:32 Last Updated: 2024-08-04T09:11:04.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/179#issuecomment-570447169 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00046.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00052.html
CVE ID: CVE-2020-6613 State: PUBLISHED Published: 2020-01-08T20:43:24 Last Updated: 2024-08-04T09:11:04.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/179#issuecomment-570447025 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00046.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00052.html
CVE ID: CVE-2020-6614 State: PUBLISHED Published: 2020-01-08T20:43:13 Last Updated: 2024-08-04T09:11:05.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/179#issuecomment-570447068 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00046.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00052.html
CVE ID: CVE-2020-6615 State: PUBLISHED Published: 2020-01-08T20:43:04 Last Updated: 2024-08-04T09:11:04.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c (dynapi.c is generated by gen-dynapi.pl). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/179#issuecomment-570447223 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00046.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00052.html
CVE ID: CVE-2020-6616 State: PUBLISHED Published: 2020-05-08T19:50:28 Last Updated: 2024-08-04T09:11:04.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (PRNG) is used in situations where a Hardware Random Number Generator (HRNG) should have been used to prevent spoofing. This affects, for example, Samsung Galaxy S8, S8+, and Note8 devices with the BCM4361 chipset. The Samsung ID is SVE-2020-16882 (May 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://support.apple.com/kb/HT2
ogram Container: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://support.apple.com/kb/HT211100 - http://bluetooth.lol - https://media.ccc.de/v/DiVOC-6-finding_eastereggs_in_broadcom_s_bluetooth_random_number_generator - https://twitter.com/naehrdine/status/1255981245147877377 - https://github.com/seemoo-lab/internalblue/blob/master/doc/rng.md - https://twitter.com/naehrdine/status/1255980443368919045 - https://support.apple.com/kb/HT211168 - http://seclists.org/fulldisclosure/2020/May/49 - https://support.apple.com/HT211168
CVE ID: CVE-2020-6617 State: PUBLISHED Published: 2020-01-08T22:52:39 Last Updated: 2024-08-04T09:11:04.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nothings/stb/issues/864
CVE ID: CVE-2020-6618 State: PUBLISHED Published: 2020-01-08T22:52:28 Last Updated: 2024-08-04T09:11:04.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nothings/stb/issues/866
CVE ID: CVE-2020-6619 State: PUBLISHED Published: 2020-01-08T22:52:20 Last Updated: 2024-08-04T09:11:04.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nothings/stb/issues/863
CVE ID: CVE-2020-6620 State: PUBLISHED Published: 2020-01-08T22:51:46 Last Updated: 2024-08-04T09:11:04.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nothings/stb/issues/868
CVE ID: CVE-2020-6621 State: PUBLISHED Published: 2020-01-08T22:51:37 Last Updated: 2024-08-04T09:11:04.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nothings/stb/issues/867
CVE ID: CVE-2020-6622 State: PUBLISHED Published: 2020-01-08T22:51:30 Last Updated: 2024-08-04T09:11:04.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nothings/stb/issues/869
CVE ID: CVE-2020-6623 State: PUBLISHED Published: 2020-01-08T22:51:00 Last Updated: 2024-08-04T09:11:04.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nothings/stb/issues/865
CVE ID: CVE-2020-6624 State: PUBLISHED Published: 2020-01-09T00:00:00 Last Updated: 2024-08-04T09:11:04.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744 - https://security.gentoo.org/glsa/202007-17 - https://bugs.gentoo.org/711220#c3 - https://bugs.gentoo.org/876247#c0
CVE ID: CVE-2020-6625 State: PUBLISHED Published: 2020-01-09T00:00:00 Last Updated: 2024-08-04T09:11:04.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858746 - https://security.gentoo.org/glsa/202007-17 - https://bugs.gentoo.org/711220#c3 - https://bugs.gentoo.org/876247#c0
CVE ID: CVE-2020-6627 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T14:51:26.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-management application on Seagate Central NAS STCG2000300, STCG3000300, and STCG4000300 devices allows OS command injection via mv_backend_launch in cirrus/application/helpers/mv_backend_helper.php by leveraging the "start" state and sending a check_device_name request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.invictuseurope.com/blog/ - https://github.com/rapid7/metasploit-framework/pull/12844 - https://pentest.blog/advisory-seagate-central-storage-remot
https://github.com/rapid7/metasploit-framework/pull/12844 - https://pentest.blog/advisory-seagate-central-storage-remote-code-execution/ - http://packetstormsecurity.com/files/172590/Seagate-Central-Storage-2015.0916-User-Creation-Command-Execution.html
CVE ID: CVE-2020-6628 State: PUBLISHED Published: 2020-01-09T01:04:36 Last Updated: 2024-08-04T09:11:04.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ming (aka libming) 0.4.8 has a heap-based buffer over-read in the function decompile_SWITCH() in decompile.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/191
CVE ID: CVE-2020-6629 State: PUBLISHED Published: 2020-01-09T01:04:25 Last Updated: 2024-08-04T09:11:04.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ming (aka libming) 0.4.8 has z NULL pointer dereference in the function decompileGETURL2() in decompile.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libming/libming/issues/190