Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
msecurity.com/files/159185/ModSecurity-3.0.x-Denial-Of-Service.html - http://seclists.org/fulldisclosure/2020/Sep/32 - https://www.debian.org/security/2020/dsa-4765 - https://coreruleset.org/20200914/cve-2020-15598/
CVE ID: CVE-2020-15599 State: PUBLISHED Published: 2020-07-07T20:58:26 Last Updated: 2024-08-04T13:22:30.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Victor CMS through 2019-02-28 allows XSS via the register.php user_firstname or user_lastname field. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/48626
CVE ID: CVE-2020-15600 State: PUBLISHED Published: 2020-07-07T21:17:06 Last Updated: 2024-08-04T13:22:30.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CMSUno before 1.6.1. uno.php allows CSRF to change the admin password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/boiteasite/cmsuno/issues/15 - http://packetstormsecurity.com/files/158455/CMSUno-1.6-Cross-Site-Request-Forgery.html
CVE ID: CVE-2020-15601 State: PUBLISHED Published: 2020-08-27T20:35:18 Last Updated: 2024-08-04T13:22:30.378Z Vendors: Trend Micro Products: Trend Micro Deep Security Problem Types: Authentication Bypass Description: If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Deep Security 10.x-12.x could allow an unauthenticated attacker with prior knowledge of the targeted organization to bypass manager authentication. Enabling multi-factor authentication prevents this attack. Installations using manager native authentication or SAML authentication are not impacted by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http
entication are not impacted by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000252039 - https://www.zerodayinitiative.com/advisories/ZDI-20-1077/
CVE ID: CVE-2020-15602 State: PUBLISHED Published: 2020-07-15T19:15:15 Last Updated: 2024-08-04T13:22:29.985Z Vendors: Trend Micro Products: Trend Micro Security (Consumer) Problem Types: Untrusted Search Patch RCE Description: An untrusted search path remote code execution (RCE) vulnerability in the Trend Micro Secuity 2020 (v16.0.0.1146 and below) consumer family of products could allow an attacker to run arbitrary code on a vulnerable system. As the Trend Micro installer tries to load DLL files from its current directory, an arbitrary DLL could also be loaded with the same privileges as the installer if run as Administrator. User interaction is required to exploit the vulnerbaility in tha
me privileges as the installer if run as Administrator. User interaction is required to exploit the vulnerbaility in that the target must open a malicious directory or device. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-09644
CVE ID: CVE-2020-15603 State: PUBLISHED Published: 2020-07-15T19:15:16 Last Updated: 2024-08-04T13:22:30.145Z Vendors: Trend Micro Products: Trend Micro Security (Consumer) Problem Types: Invalid Memory Read Description: An invalid memory read vulnerability in a Trend Micro Secuity 2020 (v16.0.0.1302 and below) consumer family of products' driver could allow an attacker to manipulate the specific driver to do a system call operation with an invalid address, resulting in a potential system crash. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-09645
CVE ID: CVE-2020-15604 State: PUBLISHED Published: 2020-09-24T01:50:21 Last Updated: 2024-08-04T13:22:30.611Z Vendors: Trend Micro Products: Trend Micro Security (Consumer) Problem Types: Update files not properly verified Description: An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another attack to trick an affected client into downloading a malicious update instead of the expected one. CWE-494: Update files are not properly verified. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA
d. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-09890 - https://helpcenter.trendmicro.com/ja-jp/article/TMKA-09673 - https://jvn.jp/en/jp/JVN60093979/ - https://jvn.jp/jp/JVN60093979/
CVE ID: CVE-2020-15605 State: PUBLISHED Published: 2020-08-27T20:35:19 Last Updated: 2024-08-04T13:22:30.177Z Vendors: Trend Micro Products: Trend Micro Vulnerability Protection Problem Types: Authentication Bypass Description: If LDAP authentication is enabled, an LDAP authentication bypass vulnerability in Trend Micro Vulnerability Protection 2.0 SP2 could allow an unauthenticated attacker with prior knowledge of the targeted organization to bypass manager authentication. Enabling multi-factor authentication prevents this attack. Installations using manager native authentication or SAML authentication are not impacted by this vulnerability. Additional Analyst Notes: - CVE Program Container
ication or SAML authentication are not impacted by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000252039 - https://www.zerodayinitiative.com/advisories/ZDI-20-1083/
CVE ID: CVE-2020-15606 State: PUBLISHED Published: 2020-07-28T17:01:13 Last Updated: 2024-08-04T13:22:30.034Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_admin_apis.php. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute co
user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9720. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-753/
CVE ID: CVE-2020-15607 State: PUBLISHED Published: 2020-07-28T17:01:13 Last Updated: 2024-08-04T13:22:30.382Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_admin_apis.php. When parsing the line parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerabili
erly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9721. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-754/
CVE ID: CVE-2020-15608 State: PUBLISHED Published: 2020-07-28T17:01:14 Last Updated: 2024-08-04T13:22:30.564Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the ai_service parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulner
properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9724. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-755/
CVE ID: CVE-2020-15609 State: PUBLISHED Published: 2020-07-28T17:01:14 Last Updated: 2024-08-04T13:22:30.035Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the service_stop parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vuln
ot properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9726. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-756/
CVE ID: CVE-2020-15610 State: PUBLISHED Published: 2020-07-28T17:01:15 Last Updated: 2024-08-04T13:22:30.547Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_php_pecl.php. When parsing the modulo parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerabili
erly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9728. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-757/
CVE ID: CVE-2020-15611 State: PUBLISHED Published: 2020-07-28T17:01:15 Last Updated: 2024-08-04T13:22:30.665Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_dashboard.php. When parsing the service_restart parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this v
s not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9734. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-758/
CVE ID: CVE-2020-15612 State: PUBLISHED Published: 2020-07-28T17:01:16 Last Updated: 2024-08-04T13:22:30.512Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_ftp_manager.php. When parsing the userLogin parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulne
t properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9737. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-759/
CVE ID: CVE-2020-15613 State: PUBLISHED Published: 2020-07-28T17:01:16 Last Updated: 2024-08-04T13:22:30.400Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_admin_apis.php. When parsing the line parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerabili
erly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9739. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-760/
CVE ID: CVE-2020-15614 State: PUBLISHED Published: 2020-07-28T17:01:17 Last Updated: 2024-08-04T13:22:30.227Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_php_pecl.php. When parsing the cha parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability
y validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9718. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-761/
CVE ID: CVE-2020-15615 State: PUBLISHED Published: 2020-07-28T17:01:17 Last Updated: 2024-08-04T13:22:30.222Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_ftp_manager.php. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute c
user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9746. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-762/
CVE ID: CVE-2020-15616 State: PUBLISHED Published: 2020-07-28T17:01:18 Last Updated: 2024-08-04T13:22:30.518Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-89 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the package parameter, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this v
s not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose information in the context of root. Was ZDI-CAN-9706. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-763/
CVE ID: CVE-2020-15617 State: PUBLISHED Published: 2020-07-28T17:01:18 Last Updated: 2024-08-04T13:22:30.523Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-89 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the status parameter, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vu
not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose information in the context of root. Was ZDI-CAN-9708. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-764/
CVE ID: CVE-2020-15618 State: PUBLISHED Published: 2020-07-28T17:01:18 Last Updated: 2024-08-04T13:22:30.152Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-89 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the username parameter, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this
es not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose information in the context of root. Was ZDI-CAN-9717. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-765/
CVE ID: CVE-2020-15619 State: PUBLISHED Published: 2020-07-28T17:01:19 Last Updated: 2024-08-04T13:22:30.077Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-89 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the type parameter, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vuln
ot properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose information in the context of root. Was ZDI-CAN-9723. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-766/
CVE ID: CVE-2020-15620 State: PUBLISHED Published: 2020-07-28T17:01:19 Last Updated: 2024-08-04T13:22:30.351Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-89 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_list_accounts.php. When parsing the id parameter, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulner
properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose information in the context of root. Was ZDI-CAN-9741. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-767/
CVE ID: CVE-2020-15621 State: PUBLISHED Published: 2020-07-28T17:01:20 Last Updated: 2024-08-04T13:22:30.514Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-89 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the email parameter, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vu
not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose information in the context of root. Was ZDI-CAN-9711. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-768/
CVE ID: CVE-2020-15622 State: PUBLISHED Published: 2020-07-28T17:01:20 Last Updated: 2024-08-04T13:22:30.101Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-89 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mail_autoreply.php. When parsing the search parameter, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this v
s not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose information in the context of root. Was ZDI-CAN-9712. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-769/
CVE ID: CVE-2020-15623 State: PUBLISHED Published: 2020-07-28T17:01:21 Last Updated: 2024-08-04T13:22:30.522Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-749 Description: This vulnerability allows remote attackers to write arbitrary files on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the archivo parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerabilit
properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9722. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-770/
CVE ID: CVE-2020-15624 State: PUBLISHED Published: 2020-07-28T17:01:21 Last Updated: 2024-08-04T13:22:30.226Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-89 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_new_account.php. When parsing the domain parameter, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vuln