Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
aah/commit/881dc9f71d1f7a4e8a9a39df9c5c081d3a2da1ec - https://github.com/go-aah/aah/issues/266 - https://pkg.go.dev/vuln/GO-2020-0033
CVE ID: CVE-2020-36560 State: PUBLISHED Published: 2022-12-27T21:13:20.828Z Last Updated: 2025-04-11T16:37:12.055Z Vendors: github.com/artdarek/go-unzip Products: github.com/artdarek/go-unzip Problem Types: CWE 29: Path Traversal: "\..\filename" Description: Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/artdarek/go-unzip/pull/2 - https://github.com/artdarek/go-unzip/commit/4975cbe0a719dc50b12da8585f1f207c82f7dfe0 - https://snyk.io/research/zip-slip-vulnerability - https://pkg.g
-unzip/commit/4975cbe0a719dc50b12da8585f1f207c82f7dfe0 - https://snyk.io/research/zip-slip-vulnerability - https://pkg.go.dev/vuln/GO-2020-0034
CVE ID: CVE-2020-36561 State: PUBLISHED Published: 2022-12-27T21:13:22.650Z Last Updated: 2025-04-11T16:38:20.416Z Vendors: github.com/yi-ge/unzip Products: github.com/yi-ge/unzip Problem Types: CWE 29: Path Traversal: "\..\filename" Description: Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yi-ge/unzip/pull/1 - https://github.com/yi-ge/unzip/commit/2adbaa4891b9690853ef10216189189f5ad7dc73 - https://snyk.io/research/zip-slip-vulnerability - https://pkg.go.dev/vuln/GO-2020-0035
CVE ID: CVE-2020-36562 State: PUBLISHED Published: 2022-12-27T21:13:25.749Z Last Updated: 2025-04-11T16:44:32.294Z Vendors: github.com/shiyanhui/dht Products: github.com/shiyanhui/dht Problem Types: CWE-400: Uncontrolled Resource Consumption Description: Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/shiyanhui/dht/issues/57 - https://pkg.go.dev/vuln/GO-2020-0040
CVE ID: CVE-2020-36563 State: PUBLISHED Published: 2022-12-27T21:13:29.296Z Last Updated: 2025-04-11T16:37:19.193Z Vendors: github.com/RobotsAndPencils/go-saml Products: github.com/RobotsAndPencils/go-saml Problem Types: CWE 328: Use of Weak Hash Description: XML Digital Signatures generated and validated using this package use SHA-1, which may allow an attacker to craft inputs which cause hash collisions depending on their control over the input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/RobotsAndPencils/go-saml/pull/38 - https://pkg.go.dev/vuln/GO-2020-0047
CVE ID: CVE-2020-36564 State: PUBLISHED Published: 2022-12-27T21:13:31.590Z Last Updated: 2025-04-11T16:26:19.344Z Vendors: github.com/justinas/nosurf Products: github.com/justinas/nosurf Problem Types: CWE 345: Insufficient Verification of Data Authenticity Description: Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed, causing any user supplied token to be considered valid. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/justinas/nosurf/pull/60 - https://github.com/justinas/nosurf/commit/4d86df7a4affa1fa50ab39fb09aac56c3ce9c314 - https://pkg.go.dev/vuln/GO-2020
0 - https://github.com/justinas/nosurf/commit/4d86df7a4affa1fa50ab39fb09aac56c3ce9c314 - https://pkg.go.dev/vuln/GO-2020-0049
CVE ID: CVE-2020-36565 State: PUBLISHED Published: 2022-12-07T16:14:43.946Z Last Updated: 2025-04-23T15:38:30.467Z Vendors: github.com/labstack/echo/v4 Products: github.com/labstack/echo/v4 Problem Types: CWE 22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: Due to improper sanitization of user input on Windows, the static file handler allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/labstack/echo/pull/1718 - https://github.com/labstack/echo/commit/44
ADP Vulnrichment: References: - https://github.com/labstack/echo/pull/1718 - https://github.com/labstack/echo/commit/4422e3b66b9fd498ed1ae1d0242d660d0ed3faaa - https://pkg.go.dev/vuln/GO-2021-0051
CVE ID: CVE-2020-36566 State: PUBLISHED Published: 2022-12-27T21:13:44.009Z Last Updated: 2025-04-11T16:22:21.352Z Vendors: github.com/whyrusleeping/tar-utils Products: github.com/whyrusleeping/tar-utils Problem Types: CWE 22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/whyrusleeping/tar-utils/commit/20a61371de5b51380bbdb0c7935b30b0625ac227 - https://snyk.io/research/zip-slip-vulnerabi
om/whyrusleeping/tar-utils/commit/20a61371de5b51380bbdb0c7935b30b0625ac227 - https://snyk.io/research/zip-slip-vulnerability - https://pkg.go.dev/vuln/GO-2021-0106
CVE ID: CVE-2020-36567 State: PUBLISHED Published: 2022-12-27T20:58:14.400Z Last Updated: 2025-04-11T16:45:40.135Z Vendors: github.com/gin-gonic/gin Products: github.com/gin-gonic/gin Problem Types: CWE-117 Improper Output Neutralization for Logs Description: Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gin-gonic/gin/pull/2237 - https://github.com/gin-gonic/gin/commit/a71af9c144f9579f6dbe945341c1df37aaf09c0d - https://pkg.go.dev/vuln/GO-2020-0001
CVE ID: CVE-2020-36568 State: PUBLISHED Published: 2022-12-27T21:12:40.154Z Last Updated: 2025-04-11T23:04:53.092Z Vendors: github.com/revel/revel Products: github.com/revel/revel Problem Types: CWE-400: Uncontrolled Resource Consumption Description: Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/revel/revel/pull/1427 - https://github.com/revel/revel/commit/d160ecb72207824005b19778594cbdc272e8a605 - https://github.com/revel/revel/issues/1424 - https://pkg.go.dev/vuln/GO-2020-0003
CVE ID: CVE-2020-36569 State: PUBLISHED Published: 2022-12-27T21:12:58.427Z Last Updated: 2025-04-11T23:03:20.527Z Vendors: github.com/nanobox-io/golang-nanoauth Products: github.com/nanobox-io/golang-nanoauth Problem Types: CWE-305: Authentication Bypass by Primary Weakness Description: Authentication is globally bypassed in github.com/nanobox-io/golang-nanoauth between v0.0.0-20160722212129-ac0cc4484ad4 and v0.0.0-20200131131040-063a3fb69896 if ListenAndServe is called with an empty token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nanobox-io/golang-nanoauth/pull/5 - https://github.com/nanobox-io/golang-nanoauth/commit/063a3
ces: - https://github.com/nanobox-io/golang-nanoauth/pull/5 - https://github.com/nanobox-io/golang-nanoauth/commit/063a3fb69896acf985759f0fe3851f15973993f3 - https://pkg.go.dev/vuln/GO-2020-0004
CVE ID: CVE-2020-36599 State: PUBLISHED Published: 2022-08-18T22:48:07 Last Updated: 2024-08-04T17:30:08.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/omniauth/failure_endpoint.rb in OmniAuth before 1.9.2 (and before 2.0) does not escape the message_key value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/omniauth/omniauth/commit/43a396f181ef7d0ed2ec8291c939c95e3ed3ff00#diff-575abda9deb9b1a77bf534e898a923029b9a61e991d626db88dc6e8b34260aa2 - https://rubygems.org/gems/omniauth/versions/1.9.2
CVE ID: CVE-2020-36600 State: PUBLISHED Published: 2022-09-16T17:58:09 Last Updated: 2024-08-04T17:30:08.525Z Vendors: Huawei Products: EMUI, Magic UI Problem Types: Out-of-bounds write vulnerability Description: Out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this vulnerability may cause the system to restart. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2020-36601 State: PUBLISHED Published: 2022-09-16T17:58:12 Last Updated: 2024-08-04T17:30:08.424Z Vendors: Huawei Products: EMUI, Magic UI Problem Types: Out-of-bounds write vulnerability Description: Out-of-bounds write vulnerability in the kernel modules. Successful exploitation of this vulnerability may cause a panic reboot. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE ID: CVE-2020-36602 State: PUBLISHED Published: 2022-09-20T19:42:39.000Z Last Updated: 2025-05-28T16:04:39.495Z Vendors: n/a Products: 576up005 HOTA-CM-H-Shark-BD;577HOTA-CM-H-Shark-BD;581up-HOTA-CM-H-Shark-BD;586-HOTA-CM-H-Shark-BD;588-HOTA-CM-H-Shark-BD;606-HOTA-CM-H-Shark-BD;BI-ACC-REPORT;CM-H-Shark-BD Problem Types: Out-of-bounds Read and Write Description: There is an out-of-bounds read and write vulnerability in some headset products. An unauthenticated attacker gets the device physically and crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be exploited to cause out-of-bounds read an
the affected products. Due to insufficient validation of message, which may be exploited to cause out-of-bounds read and write. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220826-01-outofboundread-en
CVE ID: CVE-2020-36603 State: PUBLISHED Published: 2022-09-14T21:33:26.064Z Last Updated: 2025-06-04T14:59:38.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HoYoVerse (formerly miHoYo) Genshin Impact mhyprot2.sys 1.0.0.0 anti-cheat driver does not adequately restrict unprivileged function calls, allowing local, unprivileged users to execute arbitrary code with SYSTEM privileges on Microsoft Windows systems. The mhyprot2.sys driver must first be installed by a user with administrative privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kkent030315/evil-mhyprot-cli - https://www.trendmicro.com/en_us/resea
ADP Vulnrichment: References: - https://github.com/kkent030315/evil-mhyprot-cli - https://www.trendmicro.com/en_us/research/22/h/ransomware-actor-abuses-genshin-impact-anti-cheat-driver-to-kill-antivirus.html - https://www.vice.com/en/article/y3p35w/hackers-are-using-anti-cheat-in-genshin-impact-to-ransom-victims - https://github.com/kagurazakasanae/Mhyprot2DrvControl - https://web.archive.org/web/20211204031301/https://www.godeye.club/2021/05/20/001-disclosure-mhyprot.html
CVE ID: CVE-2020-36604 State: PUBLISHED Published: 2022-09-23T05:28:11.000Z Last Updated: 2025-05-27T14:48:14.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hapijs/hoek/issues/352 - https://security.snyk.io/vuln/SNYK-JS-HAPIHOEK-548452%29
CVE ID: CVE-2020-36605 State: PUBLISHED Published: 2022-11-01T02:07:14.263Z Last Updated: 2025-05-05T14:12:27.827Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: Hitachi Products: Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer, Hitachi Ops Center Viewpoint Problem Types: CWE-276 Description: Incorrect Default Permissions vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component), Hitachi Ops Center Viewpoint on Linux (Viewpoint RAID Agent component) allows local users to read and write specific files. This issue affects Hitachi Infrast
(Viewpoint RAID Agent component) allows local users to read and write specific files. This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.0-00; Hitachi Ops Center Viewpoint: from 10.8.0-00 before 10.9.0-00. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2022-134/index.html
CVE ID: CVE-2020-36607 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-21T19:19:51.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liufee/cms/issues/45
CVE ID: CVE-2020-36608 State: PUBLISHED Published: 2022-11-02T00:00:00.000Z Last Updated: 2025-04-15T13:18:03.081Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Tribal Systems Products: Zenario CMS Problem Types: CWE-707 Description: A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file admin_organizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is dfd0afacb26c3682a847bea7b49ea440b63f3baa. It is recommended to apply a patch to fix this issue. The iden
of the patch is dfd0afacb26c3682a847bea7b49ea440b63f3baa. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-212816. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/TribalSystems/Zenario/commit/dfd0afacb26c3682a847bea7b49ea440b63f3baa - https://vuldb.com/?id.212816
CVE ID: CVE-2020-36609 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-15T13:08:01.791Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: annyshow Products: DuxCMS Problem Types: CWE-707 Description: A vulnerability was found in annyshow DuxCMS 2.1. It has been classified as problematic. This affects an unknown part of the file admin.php&r=article/AdminContent/edit of the component Article Handler. The manipulation of the argument content leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-21511
e exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-215115. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/annyshow/DuxCMS2.1/issues/I183GG - https://vuldb.com/?id.215115
CVE ID: CVE-2020-36610 State: PUBLISHED Published: 2022-12-08T00:00:00.000Z Last Updated: 2025-04-15T13:07:52.006Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: annyshow Products: DuxCMS Problem Types: CWE-863 Description: A vulnerability was found in annyshow DuxCMS 2.1. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-215116. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com
VDB-215116. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/annyshow/DuxCMS2.1/issues/I183GG - https://vuldb.com/?id.215116
CVE ID: CVE-2020-36611 State: PUBLISHED Published: 2023-01-17T01:21:48.024Z Last Updated: 2025-04-03T19:23:50.919Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: Hitachi Products: Hitachi Tuning Manager Problem Types: CWE-276 Description: Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Linux (Hitachi Tuning Manager server, Hitachi Tuning Manager - Agent for RAID, Hitachi Tuning Manager - Agent for NAS, Hitachi Tuning Manager - Agent for SAN Switch components) allows local users to read and write specific files.This issue affects Hitachi Tuning Manager: before 8.8.5-00. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vu
issue affects Hitachi Tuning Manager: before 8.8.5-00. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-101/index.html
CVE ID: CVE-2020-36615 State: PUBLISHED Published: 2023-08-14T22:40:48.142Z Last Updated: 2024-10-08T20:49:16.063Z Vendors: Apple Products: macOS Problem Types: Processing a maliciously crafted font may lead to arbitrary code execution Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1. Processing a maliciously crafted font may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT211931
CVE ID: CVE-2020-36617 State: PUBLISHED Published: 2022-12-18T00:00:00.000Z Last Updated: 2025-04-15T13:00:32.815Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: ewxrjk Products: sftpserver Problem Types: CWE-908 Description: A vulnerability was found in ewxrjk sftpserver. It has been declared as problematic. Affected by this vulnerability is the function sftp_parse_path of the file parse.c. The manipulation leads to uninitialized pointer. The real existence of this vulnerability is still doubted at the moment. The name of the patch is bf4032f34832ee11d79aa60a226cc018e7ec5eed. It is recommended to apply a patch to fix this issue. The identifier VDB-216205 w
032f34832ee11d79aa60a226cc018e7ec5eed. It is recommended to apply a patch to fix this issue. The identifier VDB-216205 was assigned to this vulnerability. NOTE: In some deployment models this would be a vulnerability. README specifically warns about avoiding such deployment models. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ewxrjk/sftpserver/commit/bf4032f34832ee11d79aa60a226cc018e7ec5eed - https://vuldb.com/?id.216205
CVE ID: CVE-2020-36618 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-15T12:57:46.612Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Furqan Products: node-whois Problem Types: CWE-74 Description: A vulnerability classified as critical has been found in Furqan node-whois. Affected is an unknown function of the file index.coffee. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). It is possible to launch the attack remotely. The name of the patch is 46ccc2aee8d063c7b6b4dee2c2834113b7286076. It is recommended to apply a patch to fix this issue. The identifier of this
s 46ccc2aee8d063c7b6b4dee2c2834113b7286076. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216252. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FurqanSoftware/node-whois/pull/105 - https://github.com/FurqanSoftware/node-whois/commit/46ccc2aee8d063c7b6b4dee2c2834113b7286076 - https://vuldb.com/?id.216252
CVE ID: CVE-2020-36619 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-15T12:57:38.469Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: multimon-ng Problem Types: CWE-119 Description: A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function add_ch of the file demod_flex.c. The manipulation of the argument ch leads to format string. Upgrading to version 1.2.0 is able to address this issue. The name of the patch is e5a51c508ef952e81a6da25b43034dd1ed023c07. It is recommended to upgrade the affected component. The identifier VDB-216269 was assigned to this vulnerabil
ed023c07. It is recommended to upgrade the affected component. The identifier VDB-216269 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/EliasOenal/multimon-ng/pull/160 - https://github.com/EliasOenal/multimon-ng/releases/tag/1.2.0 - https://github.com/EliasOenal/multimon-ng/commit/e5a51c508ef952e81a6da25b43034dd1ed023c07 - https://vuldb.com/?id.216269
CVE ID: CVE-2020-36620 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-15T12:56:13.797Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Brondahl Products: EnumStringValues Problem Types: CWE-400 Description: A vulnerability was found in Brondahl EnumStringValues up to 4.0.0. It has been declared as problematic. This vulnerability affects the function GetStringValuesWithPreferences_Uncache of the file EnumStringValues/EnumExtensions.cs. The manipulation leads to resource consumption. Upgrading to version 4.0.1 is able to address this issue. The name of the patch is c0fc7806beb24883cc2f9543ebc50c0820297307. It is recommended to upgrade
to address this issue. The name of the patch is c0fc7806beb24883cc2f9543ebc50c0820297307. It is recommended to upgrade the affected component. VDB-216466 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.216466 - https://github.com/Brondahl/EnumStringValues/commit/c0fc7806beb24883cc2f9543ebc50c0820297307 - https://github.com/Brondahl/EnumStringValues/releases/tag/4.0.1
CVE ID: CVE-2020-36621 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-15T12:56:07.231Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: chedabob Products: whatismyudid Problem Types: CWE-707 Description: A vulnerability, which was classified as problematic, has been found in chedabob whatismyudid. Affected by this issue is the function exports.enrollment of the file routes/mobileconfig.js. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is bb33d4325fba80e7ea68b79121dba025caf6f45f. It is recommended to apply a patch to fix this issue. VDB-216470 is the identifier assigned to th
8b79121dba025caf6f45f. It is recommended to apply a patch to fix this issue. VDB-216470 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chedabob/whatismyudid/commit/bb33d4325fba80e7ea68b79121dba025caf6f45f - https://vuldb.com/?id.216470
CVE ID: CVE-2020-36622 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-15T12:55:58.072Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: sah-comp Products: bienlein Problem Types: CWE-863 Description: A vulnerability was found in sah-comp bienlein and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The name of the patch is d7836a4f2b241e4745ede194f0f6fb47199cab6b. It is recommended to apply a patch to fix this issue. The identifier VDB-216473 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Co