Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
-security-announce/2020-08/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00005.html - https://security.gentoo.org/glsa/202008-22
CVE ID: CVE-2020-13868 State: PUBLISHED Published: 2020-06-05T18:35:06 Last Updated: 2024-08-04T12:32:14.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. CSRF affects comment integrity. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/verbb/comments/blob/craft-3/CHANGELOG.md#155---2020-05-28-critical
CVE ID: CVE-2020-13869 State: PUBLISHED Published: 2020-06-05T18:34:45 Last Updated: 2024-08-04T12:32:13.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Comments plugin before 1.5.6 for Craft CMS. There is stored XSS via a guest name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/verbb/comments/blob/craft-3/CHANGELOG.md#155---2020-05-28-critical
CVE ID: CVE-2020-13870 State: PUBLISHED Published: 2020-06-05T18:34:35 Last Updated: 2024-08-04T12:32:14.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. There is stored XSS via an asset volume name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/verbb/comments/blob/craft-3/CHANGELOG.md#155---2020-05-28-critical
CVE ID: CVE-2020-13871 State: PUBLISHED Published: 2020-06-06T15:37:37 Last Updated: 2024-08-04T12:32:14.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/202007-26 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BN32AGQPMHZRNM6P6L5GZPETOWTGXOKP/ - https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html - https://www.oracle.com/security-alerts/cpujan2021.html - https://www.sqlite.org/src/inf
announce/2020/08/msg00037.html - https://www.oracle.com/security-alerts/cpujan2021.html - https://www.sqlite.org/src/info/cd708fa84d2aaaea - https://www.sqlite.org/src/info/c8d3b9f0a750a529 - https://www.sqlite.org/src/info/79eff1d0383179c4 - https://security.netapp.com/advisory/ntap-20200619-0002/ - https://www.oracle.com/security-alerts/cpuApr2021.html - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
CVE ID: CVE-2020-13872 State: PUBLISHED Published: 2020-06-09T18:32:59 Last Updated: 2024-08-04T12:32:14.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Royal TS before 5 has a 0.0.0.0 listener, which makes it easier for attackers to bypass tunnel authentication via a brute-force approach. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2020/Jun/14 - https://hacktips.it/royalts-ssh-tunnel-authentication-bypass/ - http://packetstormsecurity.com/files/158000/RoyalTS-SSH-Tunnel-Authentication-Bypass.html
CVE ID: CVE-2020-13873 State: PUBLISHED Published: 2021-05-12T11:42:29 Last Updated: 2024-08-04T12:32:14.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability in get_topic_info() in sys/CODOF/Forum/Topic.php in Codoforum before 4.9 allows remote attackers (pre-authentication) to bypass the admin page via a leaked password-reset token of the admin. (As an admin, an attacker can upload a PHP shell and execute remote code on the operating system.) Additional Analyst Notes: - CVE Program Container: References: - https://community.sonarsource.com/c/announce/stories/23 - https://github.com/SmashITs - http://codologic.com/forum/ - https://community.sonarsourc
rce.com/c/announce/stories/23 - https://github.com/SmashITs - http://codologic.com/forum/ - https://community.sonarsource.com/t/codoforum-4-8-7-critical-code-vulnerabilities-explained/28297 - https://blog.sonarsource.com/codoforum-4.8.7-critical-code-vulnerabilities-explained - https://twitter.com/sonarsource/status/1300818196090384384
CVE ID: CVE-2020-13877 State: PUBLISHED Published: 2020-11-12T20:22:18 Last Updated: 2024-08-04T12:32:14.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.resourcexpress.com/news/ - https://resourcexpress.atlassian.net/wiki/spaces/RSG/pages/807698439/v1.8+HF+1+2+3+OnPrem+v5.3
CVE ID: CVE-2020-13878 State: PUBLISHED Published: 2024-01-05T00:00:00.000Z Last Updated: 2025-06-17T14:10:32.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+27ef heap-based out-of-bounds write. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/oicu0619/2b0eb7dd447aca8f4ab398a99f47488b
CVE ID: CVE-2020-13879 State: PUBLISHED Published: 2024-01-05T00:00:00.000Z Last Updated: 2025-04-17T18:16:27.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+214f heap-based out-of-bounds write. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/oicu0619/878b8c37f238f4de5ff543973ef083f5
CVE ID: CVE-2020-13880 State: PUBLISHED Published: 2024-01-05T00:00:00.000Z Last Updated: 2025-06-18T15:44:35.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+1cbf heap-based out-of-bounds write. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/oicu0619/2de8f91ddc6b06b516475d5d67d7efba
CVE ID: CVE-2020-13881 State: PUBLISHED Published: 2020-06-06T18:18:36 Last Updated: 2024-08-04T12:32:14.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: In support.c in pam_tacplus 1.3.8 through 1.5.1, the TACACS+ shared secret gets logged via syslog if the DEBUG loglevel and journald are used. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kravietz/pam_tacplus/issues/149 - https://github.com/kravietz/pam_tacplus/commit/4a9852c31c2fd0c0e72fbb689a586aabcfb11cb0 - http://www.openwall.com/lists/oss-security/2020/06/08/1 - https://lists.debian.org/debian-lts-announce/2020/06/msg00007.html - https://www.arista.com/en/support/advisories-notices/
tps://lists.debian.org/debian-lts-announce/2020/06/msg00007.html - https://www.arista.com/en/support/advisories-notices/security-advisories/11705-security-advisory-50 - https://usn.ubuntu.com/4521-1/ - https://lists.debian.org/debian-lts-announce/2021/08/msg00006.html
CVE ID: CVE-2020-13882 State: PUBLISHED Published: 2020-06-18T17:35:35 Last Updated: 2024-08-04T12:32:14.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The routine to check the log and report file permissions was not working as intended and could be bypassed locally. Because of the race, an unprivileged attacker can set up a log and report file, and control that up to the point where the specific routine is doing its check. After that, the file can be removed, recreated, and used for additional attacks. Additional Analyst Notes: - CVE Program Container: References: - https://cisofy.com
ed, and used for additional attacks. Additional Analyst Notes: - CVE Program Container: References: - https://cisofy.com/security/cve/cve-2020-13882/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDCHEKNR3HPJRNHE5PYKFH5GNBADTPA7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBFHIX6RTHCK37FXMAAXP4KGAMLUFDUD/ - https://cwe.mitre.org/data/definitions/367.html
CVE ID: CVE-2020-13883 State: PUBLISHED Published: 2020-06-06T18:49:13 Last Updated: 2024-08-04T12:32:14.244Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AC:L/AV:N/A:H/C:L/I:N/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In WSO2 API Manager 3.0.0 and earlier, WSO2 API Microgateway 2.2.0, and WSO2 IS as Key Manager 5.9.0 and earlier, Management Console allows XXE during addition or update of a Lifecycle. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0727
CVE ID: CVE-2020-13884 State: PUBLISHED Published: 2020-06-08T18:37:26 Last Updated: 2024-08-04T12:32:14.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows local users to gain privileges during the uninstallation of the application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hessandrew/CVE-2020-13884 - https://support.citrix.com/article/CTX275460
CVE ID: CVE-2020-13885 State: PUBLISHED Published: 2020-06-08T18:24:48 Last Updated: 2024-08-04T12:32:14.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix Workspace App before 1912 on Windows has Insecure Permissions which allows local users to gain privileges during the uninstallation of the application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hessandrew/CVE-2020-13885 - https://support.citrix.com/article/CTX275460
CVE ID: CVE-2020-13886 State: PUBLISHED Published: 2020-11-26T16:55:37 Last Updated: 2024-08-04T12:32:14.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intelbras TIP 200 60.61.75.15, TIP 200 LITE 60.61.75.15, and TIP 300 65.61.75.22 devices allow cgi-bin/cgiServer.exx?page=../ Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=nNKBRx8IglI - https://github.com/lucxssouza/CVE-2020-13886 - https://lucxs.medium.com/cve-2020-13886-lfi-voip-intelbras-d30f27a39b22
CVE ID: CVE-2020-13887 State: PUBLISHED Published: 2020-06-22T15:27:42 Last Updated: 2024-08-04T12:32:14.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: documents_add.php in Kordil EDMS through 2.2.60rc3 allows Remote Command Execution because .php files can be uploaded to the documents folder. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/kordiledms/files/ - http://hidden-one.co.in/2020/06/17/cve-2020-13887-kordil-edms-through-2-2-60rc3-allows-remote-command-execution/
CVE ID: CVE-2020-13888 State: PUBLISHED Published: 2020-06-22T14:23:16 Last Updated: 2024-08-04T12:32:14.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kordil EDMS through 2.2.60rc3 allows stored XSS in users_edit.php, users_management_edit.php, and user_management.php. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/kordiledms/files/ - http://hidden-one.co.in/2020/06/17/cve-2020-13888-kordil-edms-through-2-2-60rc3-allows-stored-xss/
CVE ID: CVE-2020-13889 State: PUBLISHED Published: 2020-06-06T19:55:01 Last Updated: 2024-08-04T12:32:14.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: showAlert() in the administration panel in Bludit 3.12.0 allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bludit/bludit/issues/1205
CVE ID: CVE-2020-13890 State: PUBLISHED Published: 2020-06-06T20:02:55 Last Updated: 2024-08-04T12:32:14.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Neon theme 2.0 before 2020-06-03 for Bootstrap allows XSS via an Add Task Input operation in a dashboard. Additional Analyst Notes: - CVE Program Container: References: - https://jizen0x01.blogspot.com/2020/06/neon-dashboard-xss.html
CVE ID: CVE-2020-13891 State: PUBLISHED Published: 2020-06-26T16:14:29 Last Updated: 2024-08-04T12:32:14.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Mobile Apps before 1.31.2 on iOS. Unintended third-party servers could sometimes obtain authorization tokens, aka MMSA-2020-0022. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2020-13892 State: PUBLISHED Published: 2020-06-09T17:40:32 Last Updated: 2024-08-04T12:32:14.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SportsPress plugin before 2.7.2 for WordPress allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/10257
CVE ID: CVE-2020-13893 State: PUBLISHED Published: 2020-10-18T18:55:24 Last Updated: 2024-08-04T12:32:14.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stored cross-site scripting (XSS) vulnerabilities in Sage EasyPay 10.7.5.10 allow authenticated attackers to inject arbitrary web script or HTML via multiple parameters through Unicode Transformations (Best-fit Mapping), as demonstrated by the full-width variants of the less-than sign (%EF%BC%9C) and greater-than sign (%EF%BC%9E). Additional Analyst Notes: - CVE Program Container: References: - https://www.sage.com/en-sg/products/sage-easypay/ - https://gist.github.com/picar0jsu/4532a6d15e8f8d7597b7dca5136ad655
CVE ID: CVE-2020-13894 State: PUBLISHED Published: 2020-06-07T00:33:54 Last Updated: 2024-08-04T12:32:14.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: handler/upload_handler.jsp in DEXT5 Editor through 3.5.1402961 allows an attacker to download arbitrary files via the savefilepath field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kbgsft/vuln-dext5editor/wiki/File-Download-vulnerability-in-DEXT5Editor-3.5.1402961-by-xcuter
CVE ID: CVE-2020-13895 State: PUBLISHED Published: 2020-06-07T00:56:57 Last Updated: 2024-08-04T12:32:14.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crypt::Perl::ECDSA in the Crypt::Perl (aka p5-Crypt-Perl) module before 0.32 for Perl fails to verify correct ECDSA signatures when r and s are small and when s = 1. This happens when using the curve secp256r1 (prime256v1). This could conceivably have a security-relevant impact if an attacker wishes to use public r and s values when guessing whether signature verification will fail. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FGasper/p5-Crypt-Perl/issues/14 - https://github.com/FGasper/
- CVE Program Container: References: - https://github.com/FGasper/p5-Crypt-Perl/issues/14 - https://github.com/FGasper/p5-Crypt-Perl/commit/f960ce75502acf7404187231a706672f8369acb2
CVE ID: CVE-2020-13896 State: PUBLISHED Published: 2020-06-29T17:11:36 Last Updated: 2024-08-04T12:32:14.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface of Maipu MP1800X-50 7.5.3.14(R) devices allows remote attackers to obtain sensitive information via the form/formDeviceVerGet URI, such as system id, hardware model, hardware version, bootloader version, software version, software image file, compilation time, and system uptime. This is similar to CVE-2019-1653. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/Saket-taneja/9576573122be1cb0d6dc9d9a73db5631
CVE ID: CVE-2020-13897 State: PUBLISHED Published: 2020-06-07T01:18:58 Last Updated: 2024-08-04T12:32:14.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: HESK before 3.1.10 allows reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.hesk.com/demo/docs/changelog.html
CVE ID: CVE-2020-13898 State: PUBLISHED Published: 2020-06-10T21:03:32 Last Updated: 2024-08-04T12:32:14.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_process in sdp.c has a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/meetecho/janus-gateway/blob/v0.10.0/sdp.c#L120 - https://github.com/meetecho/janus-gateway/blob/v0.10.0/sdp.c#L123 - https://github.com/meetecho/janus-gateway/pull/2214 - https://github.com/merrychap/CVEs/tree/master/janus-webrtc/CVE-2020-13898
CVE ID: CVE-2020-13899 State: PUBLISHED Published: 2020-06-10T21:05:17 Last Updated: 2024-08-04T12:32:13.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_process_incoming_request in janus.c discloses information from uninitialized stack memory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/meetecho/janus-gateway/blob/v0.10.0/janus.c#L1326 - https://github.com/meetecho/janus-gateway/pull/2214 - https://github.com/merrychap/poc_exploits/tree/master/janus-webrtc/CVE-2020-13899
CVE ID: CVE-2020-13900 State: PUBLISHED Published: 2020-06-10T21:07:34 Last Updated: 2024-08-04T12:32:14.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_preparse in sdp.c has a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/meetecho/janus-gateway/blob/v0.10.0/sdp.c#L64 - https://github.com/meetecho/janus-gateway/blob/v0.10.0/sdp.c#L74 - https://github.com/meetecho/janus-gateway/pull/2214 - https://github.com/merrychap/poc_exploits/tree/master/janus-webrtc/CVE-2020-13900
CVE ID: CVE-2020-13901 State: PUBLISHED Published: 2020-06-10T21:09:35 Last Updated: 2024-08-04T12:32:14.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_merge in sdp.c has a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/meetecho/janus-gateway/blob/v0.10.0/sdp.c#L1248 - https://github.com/meetecho/janus-gateway/pull/2214 - https://github.com/merrychap/poc_exploits/tree/master/janus-webrtc/CVE-2020-13901
CVE ID: CVE-2020-13902 State: PUBLISHED Published: 2020-06-07T17:06:04 Last Updated: 2024-08-04T12:32:14.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20920
CVE ID: CVE-2020-13903 State: REJECTED Published: 2020-10-12T16:50:27 Last Updated: 2020-10-12T16:50:27 Description: No description available.
CVE ID: CVE-2020-13904 State: PUBLISHED Published: 2020-06-07T18:07:08 Last Updated: 2024-08-04T12:32:14.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavformat/format.c. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8673 - https://patchwork.ffmpeg.org/project/ffmpeg/patch/20200529033905.41926-1-lq%40chinaffmpeg.org/ - https://www.debian.org/security/2020/dsa-4722 - https://lists.debian.org/debian-lts-announce/202
lq%40chinaffmpeg.org/ - https://www.debian.org/security/2020/dsa-4722 - https://lists.debian.org/debian-lts-announce/2020/07/msg00022.html - https://usn.ubuntu.com/4431-1/ - https://security.gentoo.org/glsa/202007-58 - https://github.com/FFmpeg/FFmpeg/commit/6959358683c7533f586c07a766acc5fe9544d8b2
CVE ID: CVE-2020-13905 State: PUBLISHED Published: 2020-06-10T18:27:08 Last Updated: 2024-08-04T12:32:14.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038ed4. Additional Analyst Notes: - CVE Program Container: References: - https://www.irfanview.com/plugins.htm - https://github.com/nhiephon/Research/blob/master/README.md
CVE ID: CVE-2020-13906 State: PUBLISHED Published: 2020-06-10T18:29:48 Last Updated: 2024-08-04T12:32:14.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038eb7. Additional Analyst Notes: - CVE Program Container: References: - https://www.irfanview.com/plugins.htm - https://github.com/nhiephon/Research/blob/master/README.md
CVE ID: CVE-2020-13909 State: PUBLISHED Published: 2020-06-07T19:26:47 Last Updated: 2024-08-04T12:32:14.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ignition component before 2.0.5 for Laravel mishandles globals, _get, _post, _cookie, and _env. NOTE: in the 1.x series, versions 1.16.15 and later are unaffected as a consequence of the CVE-2021-43996 fix. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facade/ignition/releases/tag/2.0.5 - https://github.com/facade/ignition/compare/2.0.4...2.0.5
CVE ID: CVE-2020-13910 State: PUBLISHED Published: 2020-06-07T19:36:33 Last Updated: 2024-08-04T12:32:14.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pengutronix Barebox through v2020.05.0 has an out-of-bounds read in nfs_read_reply in net/nfs.c because a field of an incoming network packet is directly used as a length field without any bounds check. Additional Analyst Notes: - CVE Program Container: References: - https://git.pengutronix.de/cgit/barebox/commit/net/nfs.c?h=next&id=c0f0cbd1759a6ca6cbda4001dff5764f6633c825
CVE ID: CVE-2020-13911 State: PUBLISHED Published: 2020-06-09T18:11:32 Last Updated: 2024-08-04T12:32:14.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Your Online Shop 1.8.0 allows authenticated users to trigger XSS via a Change Name or Change Surname operation. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/kdrypr/5dac91c2d27c4dc82b1225dffa38f7a8
CVE ID: CVE-2020-13912 State: PUBLISHED Published: 2020-06-07T20:13:37 Last Updated: 2024-08-04T12:32:14.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds Advanced Monitoring Agent before 10.8.9 allows local users to gain privileges via a Trojan horse .exe file, because everyone can write to a certain .exe file. Additional Analyst Notes: - CVE Program Container: References: - https://hansesecure.de/2020/06/vulnerability-in-monitoring-software/?lang=en
CVE ID: CVE-2020-13913 State: PUBLISHED Published: 2020-07-28T14:46:02 Last Updated: 2024-08-04T12:32:14.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue in emfd in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to execute JavaScript code via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices. Additional Analyst Notes: - CVE Program Container: References: - https://support.ruckuswireless.com/security_bulletins/304
CVE ID: CVE-2020-13914 State: PUBLISHED Published: 2020-07-28T14:46:06 Last Updated: 2024-08-04T12:32:14.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to cause a denial of service (Segmentation fault) to the webserver via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices. Additional Analyst Notes: - CVE Program Container: References: - https://support.ruckuswireless.com/security_bulletins/304