Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-15289 State: REJECTED Published: 2021-03-17T12:25:58 Last Updated: 2021-03-17T12:25:58 Description: No description available.
CVE ID: CVE-2020-15290 State: REJECTED Published: 2021-03-17T12:25:59 Last Updated: 2021-03-17T12:25:59 Description: No description available.
CVE ID: CVE-2020-15291 State: REJECTED Published: 2021-03-17T12:25:59 Last Updated: 2021-03-17T12:25:59 Description: No description available.
CVE ID: CVE-2020-15292 State: PUBLISHED Published: 2020-12-17T16:45:19.079767Z Last Updated: 2024-09-16T18:19:26.509Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Bitdefender Products: Hypervisor Introspection Problem Types: CWE-20 Description: Lack of validation on data read from guest memory in IntPeGetDirectory, IntPeParseUnwindData, IntLogExceptionRecord, IntKsymExpandSymbol and IntLixTaskDumpTree may lead to out-of-bounds read or it could cause DoS due to integer-overflor (IntPeGetDirectory), TOCTOU (IntPeParseUnwindData) or insufficient validations. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/
cient validations. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/lack-validation-data-read-guest-memory-bitdefender-hvi-va-9333/
CVE ID: CVE-2020-15293 State: PUBLISHED Published: 2020-12-17T16:50:25.096358Z Last Updated: 2024-09-17T03:33:44.369Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: Bitdefender Products: Hypervisor Introspection Problem Types: CWE-20 Description: Memory corruption in IntLixCrashDumpDmesg, IntLixTaskFetchCmdLine, IntLixFileReadDentry and IntLixFileGetPath due to insufficient guest-data input validation may lead to denial of service conditions. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/memory-corruption-bitdefender-hypervisor-introspection-va-9336/
CVE ID: CVE-2020-15294 State: PUBLISHED Published: 2020-12-17T16:50:18.250326Z Last Updated: 2024-09-16T19:40:28.161Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Bitdefender Products: Hypervisor Introspection Problem Types: CWE-733 Description: Compiler Optimization Removal or Modification of Security-critical Code vulnerability in IntPeParseUnwindData() results in multiple dereferences to the same pointer. If the pointer is located in memory-mapped from the guest space, this may cause a race-condition where the generated code would dereference the same address twice, thus obtaining different values, which may lead to arbitrary code execution. This issue a
erence the same address twice, thus obtaining different values, which may lead to arbitrary code execution. This issue affects: Bitdefender Hypervisor Introspection versions prior to 1.132.2. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/compiler-optimization-removal-modification-security-critical-code-vulnerability-bitdefender-hypervisor-introspection-va-9339/
CVE ID: CVE-2020-15295 State: REJECTED Published: 2021-03-17T12:26:00 Last Updated: 2021-03-17T12:26:00 Description: No description available.
CVE ID: CVE-2020-15296 State: REJECTED Published: 2021-03-17T12:26:00 Last Updated: 2021-03-17T12:26:00 Description: No description available.
CVE ID: CVE-2020-15297 State: PUBLISHED Published: 2020-11-09T08:25:15.214525Z Last Updated: 2024-09-16T17:08:15.114Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Bitdefender Products: Bitdefender Update Server Problem Types: CWE-918 Description: Insufficient validation in the Bitdefender Update Server and BEST Relay components of Bitdefender Endpoint Security Tools versions prior to 6.6.20.294 allows an unprivileged attacker to bypass the in-place mitigations and interact with hosts on the network. This issue affects: Bitdefender Update Server versions prior to 6.6.20.294. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefe
erver versions prior to 6.6.20.294. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/server-side-request-forgery-bitdefender-update-server-va-9163/
CVE ID: CVE-2020-15298 State: REJECTED Published: 2021-03-17T12:26:01 Last Updated: 2021-03-17T12:26:01 Description: No description available.
CVE ID: CVE-2020-15299 State: PUBLISHED Published: 2020-07-09T18:13:45 Last Updated: 2024-08-04T13:15:19.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remote attackers to trick a victim into submitting an install_online_preset AJAX request containing base64-encoded JavaScript (in the kc-online-preset-data POST parameter) that is executed in the victim's browser. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2020/07/xss-flaw-impacting-100000-sites-patched-in-kingcomposer/
CVE ID: CVE-2020-15300 State: PUBLISHED Published: 2020-11-18T21:06:19 Last Updated: 2024-08-04T13:15:18.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: SuiteCRM through 7.11.13 has an Open Redirect in the Documents module via a crafted SVG document. Additional Analyst Notes: - CVE Program Container: References: - https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-009
CVE ID: CVE-2020-15301 State: PUBLISHED Published: 2020-11-18T21:00:24 Last Updated: 2024-08-04T13:15:19.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: SuiteCRM through 7.11.13 allows CSV Injection via registration fields in the Accounts, Contacts, Opportunities, and Leads modules. These fields are mishandled during a Download Import File Template operation. Additional Analyst Notes: - CVE Program Container: References: - https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-010
CVE ID: CVE-2020-15302 State: PUBLISHED Published: 2020-06-25T19:58:07 Last Updated: 2024-08-04T13:15:19.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Argent RecoveryManager before 0xdc350d09f71c48c5D22fBE2741e4d6A03970E192, the executeRecovery function does not require any signatures in the zero-guardian case, which allows attackers to cause a denial of service (locking) or a takeover. Additional Analyst Notes: - CVE Program Container: References: - https://blog.openzeppelin.com/argent-vulnerability-report/
CVE ID: CVE-2020-15303 State: PUBLISHED Published: 2021-06-28T12:45:09 Last Updated: 2024-08-04T13:15:20.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Infoblox NIOS before 8.5.2 allows entity expansion during an XML upload operation, a related issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - https://www.infoblox.com/products/nios8/ - https://community.infoblox.com/t5/Security/NIOS-XML-Vulnerability/m-p/22437#M1995
CVE ID: CVE-2020-15304 State: PUBLISHED Published: 2020-06-26T00:38:18 Last Updated: 2024-08-04T13:15:19.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenEXR before 2.5.2. An invalid tiled input file could cause invalid memory access in TiledInputFile::TiledInputFile() in IlmImf/ImfTiledInputFile.cpp, as demonstrated by a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AcademySoftwareFoundation/openexr/pull/727 - https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.5.2 - https://github.com/AcademySoftwareFoundation/openexr/blob/master/CHANGES.md - https://github.com/Aca
leases/tag/v2.5.2 - https://github.com/AcademySoftwareFoundation/openexr/blob/master/CHANGES.md - https://github.com/AcademySoftwareFoundation/openexr/blob/master/SECURITY.md - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKDRVXORM2VLNHRLFKS3JHRABSHZ5W5M/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SHYAKRAUEMYVCV7U5WLDRE2YFGSV5PIT/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00048.html - https://security.gentoo.org/glsa/202107-27
CVE ID: CVE-2020-15305 State: PUBLISHED Published: 2020-06-26T00:38:11 Last Updated: 2024-08-04T13:15:20.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in DeepScanLineInputFile::DeepScanLineInputFile() in IlmImf/ImfDeepScanLineInputFile.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.5.2 - https://github.com/AcademySoftwareFoundation/openexr/blob/master/CHANGES.md - https://github.com/AcademySoftwareFoundation/openexr/blob/master/SECURITY.md - https://github.com/AcademySoftwareFoundation/openexr
hub.com/AcademySoftwareFoundation/openexr/blob/master/SECURITY.md - https://github.com/AcademySoftwareFoundation/openexr/pull/730 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKDRVXORM2VLNHRLFKS3JHRABSHZ5W5M/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SHYAKRAUEMYVCV7U5WLDRE2YFGSV5PIT/ - https://usn.ubuntu.com/4418-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00048.html - https://www.debian.org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html
ml - https://www.debian.org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html - https://security.gentoo.org/glsa/202107-27
CVE ID: CVE-2020-15306 State: PUBLISHED Published: 2020-06-26T00:38:02 Last Updated: 2024-08-04T13:15:20.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize() in IlmImf/ImfMisc.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.5.2 - https://github.com/AcademySoftwareFoundation/openexr/blob/master/CHANGES.md - https://github.com/AcademySoftwareFoundation/openexr/blob/master/SECURITY.md - https://github.com/AcademySoftwareFoundation/openexr/pull/738 - htt
SoftwareFoundation/openexr/blob/master/SECURITY.md - https://github.com/AcademySoftwareFoundation/openexr/pull/738 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKDRVXORM2VLNHRLFKS3JHRABSHZ5W5M/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SHYAKRAUEMYVCV7U5WLDRE2YFGSV5PIT/ - https://usn.ubuntu.com/4418-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00048.html - https://www.debian.org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html - https://secur
w.debian.org/security/2020/dsa-4755 - https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html - https://security.gentoo.org/glsa/202107-27
CVE ID: CVE-2020-15307 State: PUBLISHED Published: 2020-06-30T17:50:02 Last Updated: 2024-08-04T13:15:20.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nozomi Guardian before 19.0.4 allows attackers to achieve stored XSS (in the web front end) by leveraging the ability to create a custom field with a crafted field name. Additional Analyst Notes: - CVE Program Container: References: - https://www2.deloitte.com/de/de/pages/risk/articles/nozomi-stored-xss.html?nc=1
CVE ID: CVE-2020-15308 State: PUBLISHED Published: 2020-06-26T10:15:11 Last Updated: 2024-08-04T13:15:20.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Support Incident Tracker (aka SiT! or SiTracker) 3.67 p2 allows post-authentication SQL injection via the site_edit.php typeid or site parameter, the search_incidents_advanced.php search_title parameter, or the report_qbe.php criteriafield parameter. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2020/06/postauth-sqli-in-sitracker-v367-p2.html
CVE ID: CVE-2020-15309 State: PUBLISHED Published: 2020-08-21T13:16:49 Last Updated: 2024-08-04T13:15:19.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in wolfSSL before 4.5.0, when single precision is not employed. Local attackers can conduct a cache-timing attack against public key operations. These attackers may already have obtained sensitive information if the affected system has been used for private key operations (e.g., signing with a private key). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfssl/releases/tag/v4.5.0-stable - https://arxiv.org/abs/2008.12188
CVE ID: CVE-2020-15311 State: REJECTED Published: 2020-06-26T11:55:57 Last Updated: 2020-12-28T08:54:29 Description: No description available.
CVE ID: CVE-2020-15312 State: PUBLISHED Published: 2020-06-29T14:59:20 Last Updated: 2024-08-04T13:15:20.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml
CVE ID: CVE-2020-15313 State: PUBLISHED Published: 2020-06-29T15:01:16 Last Updated: 2024-08-04T13:15:20.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml
CVE ID: CVE-2020-15314 State: PUBLISHED Published: 2020-06-29T15:02:02 Last Updated: 2024-08-04T13:15:20.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml
CVE ID: CVE-2020-15315 State: PUBLISHED Published: 2020-06-29T15:08:09 Last Updated: 2024-08-04T13:15:20.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within the /opt/axess chroot directory tree. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml
CVE ID: CVE-2020-15316 State: PUBLISHED Published: 2020-06-29T15:08:59 Last Updated: 2024-08-04T13:15:19.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account within the /opt/axess chroot directory tree. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml
CVE ID: CVE-2020-15317 State: PUBLISHED Published: 2020-06-29T15:10:30 Last Updated: 2024-08-04T13:15:20.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/axess chroot directory tree. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml
CVE ID: CVE-2020-15318 State: PUBLISHED Published: 2020-06-29T15:12:23 Last Updated: 2024-08-04T13:15:20.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within the /opt/mysql chroot directory tree. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml
CVE ID: CVE-2020-15319 State: PUBLISHED Published: 2020-06-29T15:14:03 Last Updated: 2024-08-04T13:15:19.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/mysql chroot directory tree. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml
CVE ID: CVE-2020-15320 State: PUBLISHED Published: 2020-06-29T15:16:45 Last Updated: 2024-08-04T13:15:20.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml
CVE ID: CVE-2020-15321 State: PUBLISHED Published: 2020-06-29T15:20:18 Last Updated: 2024-08-04T13:15:20.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password for the livedbuser account. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml
CVE ID: CVE-2020-15322 State: PUBLISHED Published: 2020-06-29T15:23:44 Last Updated: 2024-08-04T13:15:20.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM hardcoded password for the debian-sys-maint account. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml
CVE ID: CVE-2020-15323 State: PUBLISHED Published: 2020-06-29T15:26:46 Last Updated: 2024-08-04T13:15:20.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the cloud1234 password for the a1@chopin account default credentials. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml
CVE ID: CVE-2020-15324 State: PUBLISHED Published: 2020-06-29T15:29:41 Last Updated: 2024-08-04T13:15:19.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a world-readable axess/opt/axXMPPHandler/config/xmpp_config.py file that stores hardcoded credentials. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml
CVE ID: CVE-2020-15325 State: PUBLISHED Published: 2020-06-26T14:50:02 Last Updated: 2024-08-04T13:15:20.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded Erlang cookie for ejabberd replication. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml
CVE ID: CVE-2020-15326 State: PUBLISHED Published: 2020-06-26T14:48:31 Last Updated: 2024-08-04T13:15:19.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded certificate for Ejabberd in ejabberd.pem. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml
CVE ID: CVE-2020-15327 State: PUBLISHED Published: 2020-06-26T14:47:18 Last Updated: 2024-08-04T13:15:19.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 uses ZODB storage without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml
CVE ID: CVE-2020-15328 State: PUBLISHED Published: 2020-06-26T14:46:24 Last Updated: 2024-08-04T13:15:20.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/var/blobstorage/ permissions. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml
CVE ID: CVE-2020-15329 State: PUBLISHED Published: 2020-06-26T14:45:12 Last Updated: 2024-08-04T13:15:19.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak Data.fs permissions. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml
CVE ID: CVE-2020-15330 State: PUBLISHED Published: 2020-06-26T14:41:49 Last Updated: 2024-08-04T13:15:19.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded APP_KEY in /opt/axess/etc/default/axess. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml
CVE ID: CVE-2020-15331 State: PUBLISHED Published: 2020-06-26T14:39:40 Last Updated: 2024-08-04T13:15:20.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded OAUTH_SECRET_KEY in /opt/axess/etc/default/axess. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml
CVE ID: CVE-2020-15332 State: PUBLISHED Published: 2020-06-26T15:04:59 Last Updated: 2024-08-04T13:15:20.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/etc/default/axess permissions. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html - https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml