Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-21723 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T20:05:42.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attackers to cause a denial of service (crash) via opening of crafted ogg file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/oggvideotools/bugs/10/ - https://github.com/xiaoxiongwang/security/tree/master/oggvideotools#segv-occurs-in-function-streamserializerextractstreams-in-streamserializercpp
CVE ID: CVE-2020-21724 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T20:03:19.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/oggvideotools/bugs/9/ - https://github.com/xiaoxiongwang/security/tree/master/oggvideotools#segv-and-heap-overflow-detected-in-line-17-of-streamextractorcpp
CVE ID: CVE-2020-21725 State: PUBLISHED Published: 2021-10-07T21:28:02 Last Updated: 2024-08-04T14:30:33.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the pid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CoColizdf/CVE/issues/1
CVE ID: CVE-2020-21726 State: PUBLISHED Published: 2021-10-07T21:28:03 Last Updated: 2024-08-04T14:30:33.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CoColizdf/CVE/issues/2
CVE ID: CVE-2020-21729 State: PUBLISHED Published: 2021-10-07T21:28:04 Last Updated: 2024-08-04T14:30:33.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: JEECMS x1.1 contains a stored cross-site scripting (XSS) vulnerability in the component of /member-vipcenter.htm, which allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CoColizdf/CVE/issues/3
CVE ID: CVE-2020-21731 State: PUBLISHED Published: 2020-09-14T11:45:40 Last Updated: 2024-08-04T14:30:33.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gazie 7.29 is affected by: Cross Site Scripting (XSS) via http://192.168.100.7/gazie/modules/config/admin_utente.php?user_name=amministratore&Update. An attacker can inject JavaScript code, and the webapplication stores the injected code. Additional Analyst Notes: - CVE Program Container: References: - http://gazie.com - http://gazie.devincentiis.it/ - https://github.com/Gr3gPr1est/BugReport/blob/master/CVE-2020-21731
CVE ID: CVE-2020-21732 State: PUBLISHED Published: 2020-09-14T11:46:47 Last Updated: 2024-08-04T14:30:33.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rukovoditel Project Management app 2.6 is affected by: Cross Site Scripting (XSS). An attacker can add JavaScript code to the filename. Additional Analyst Notes: - CVE Program Container: References: - http://rukovoditel.com - https://www.rukovoditel.net - https://github.com/Gr3gPr1est/BugReport/blob/master/CVE-2020-21732
CVE ID: CVE-2020-21733 State: PUBLISHED Published: 2020-09-14T11:50:29 Last Updated: 2024-08-04T14:30:33.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sagemcom F@ST3686 v1.0 HUN 3.97.0 has XSS via RgDiagnostics.asp, RgDdns.asp, RgFirewallEL.asp, RgVpnL2tpPptp.asp. Additional Analyst Notes: - CVE Program Container: References: - http://sagemcom.com - http://sagemcomfst3686v10hun3970.com - https://github.com/Gr3gPr1est/BugReport/blob/master/SAGEM_F%40ST3686_v1.0_HUN_3.97.0_XSS_Vuln..pdf - https://github.com/Gr3gPr1est/BugReport/blob/master/CVE-2020-21733
CVE ID: CVE-2020-21783 State: PUBLISHED Published: 2021-06-24T15:19:29 Last Updated: 2024-08-04T14:30:33.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IBOS 4.5.4 the email function has a cross site scripting (XSS) vulnerability in emailbody[content] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/ibos/IBOS/issues/I189ZF
CVE ID: CVE-2020-21784 State: PUBLISHED Published: 2021-06-24T15:29:13 Last Updated: 2024-08-04T14:30:33.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpwcms 1.9.13 is vulnerable to Code Injection via /phpwcms/setup/setup.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slackero/phpwcms/issues/286 - https://cwe.mitre.org/data/definitions/96.html
CVE ID: CVE-2020-21785 State: PUBLISHED Published: 2021-06-24T15:24:56 Last Updated: 2024-08-04T14:30:33.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/ibos/IBOS/issues/I18IIV
CVE ID: CVE-2020-21786 State: PUBLISHED Published: 2021-06-24T15:22:58 Last Updated: 2024-08-04T14:30:33.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/ibos/IBOS/issues/I18JRG
CVE ID: CVE-2020-21787 State: PUBLISHED Published: 2021-06-24T14:51:50 Last Updated: 2024-08-04T14:30:33.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/ZhongBangKeJi/CRMEB/issues/I18MGD
CVE ID: CVE-2020-21788 State: PUBLISHED Published: 2021-06-24T14:48:17 Last Updated: 2024-08-04T14:30:33.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CRMEB 3.1.0+ strict domain name filtering leads to SSRF(Server-Side Request Forgery). The vulnerable code is in file /crmeb/app/admin/controller/store/CopyTaobao.php. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/ZhongBangKeJi/CRMEB/issues/I18MKC
CVE ID: CVE-2020-21806 State: PUBLISHED Published: 2021-07-27T16:20:16 Last Updated: 2024-08-04T14:30:33.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php.. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ectouch/ectouch/issues/5
CVE ID: CVE-2020-21808 State: PUBLISHED Published: 2021-07-29T15:04:59 Last Updated: 2024-08-04T14:30:33.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in NukeViet CMS 4.0.10 - 4.3.07 via:the topicsid parameter in modules/news/admin/addtotopics.php. Additional Analyst Notes: - CVE Program Container: References: - https://whitehub.net/submissions/1516 - https://nukeviet.vn/vi/news/Tin-an-ninh/huong-dan-fix-loi-bao-mat-nukeviet-4-va-module-shops-612.html - https://github.com/nukeviet/nukeviet/blob/4.3.08/CHANGELOG.txt#L11
CVE ID: CVE-2020-21809 State: PUBLISHED Published: 2021-07-29T15:36:52 Last Updated: 2024-08-04T14:30:33.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in NukeViet CMS module Shops 4.0.29 and 4.3 via the (1) listid parameter in detail.php and the (2) group_price or groupid parameters in search_result.php. Additional Analyst Notes: - CVE Program Container: References: - https://nukeviet.vn/vi/news/Tin-an-ninh/huong-dan-fix-loi-bao-mat-nukeviet-4-va-module-shops-612.html - https://whitehub.net/submissions/1517 - https://whitehub.net/submissions/1518 - https://github.com/nukeviet/module-shops/commit/742c0e0f74364f7250c2a69f0a957d4e6317be68
CVE ID: CVE-2020-21813 State: PUBLISHED Published: 2021-05-17T17:58:46 Last Updated: 2024-08-04T14:30:33.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114. Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - http://libredwg.com - https://github.com/LibreDWG/libredwg/issues/182#issuecomment-572890969
CVE ID: CVE-2020-21814 State: PUBLISHED Published: 2021-05-17T18:13:18 Last Updated: 2024-08-04T14:30:33.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlwescape ../../programs/escape.c:97. Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - https://github.com/LibreDWG/libredwg/issues/182#issuecomment-572891083
CVE ID: CVE-2020-21815 State: PUBLISHED Published: 2021-05-17T18:45:34 Last Updated: 2024-08-04T14:30:33.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: A null pointer deference issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114, which causes a denial of service (application crash). Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - https://github.com/LibreDWG/libredwg/issues/182#issuecomment-572890932
CVE ID: CVE-2020-21816 State: PUBLISHED Published: 2021-05-17T18:41:30 Last Updated: 2024-08-04T14:30:33.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heab based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:46. Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - https://github.com/LibreDWG/libredwg/issues/182#issuecomment-572890865
CVE ID: CVE-2020-21817 State: PUBLISHED Published: 2021-05-17T18:47:24 Last Updated: 2024-08-04T14:30:33.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: A null pointer dereference issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:29. which causes a denial of service (application crash). Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - https://github.com/LibreDWG/libredwg/issues/182#issue-547887727
CVE ID: CVE-2020-21818 State: PUBLISHED Published: 2021-05-17T18:50:01 Last Updated: 2024-08-04T14:30:33.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:48. Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - https://github.com/LibreDWG/libredwg/issues/182#issuecomment-572891053
CVE ID: CVE-2020-21819 State: PUBLISHED Published: 2021-05-17T18:55:50 Last Updated: 2024-08-04T14:30:33.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641via htmlescape ../../programs/escape.c:51. Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - https://github.com/LibreDWG/libredwg/issues/182#issuecomment-572890901
CVE ID: CVE-2020-21827 State: PUBLISHED Published: 2021-05-17T19:46:16 Last Updated: 2024-08-04T14:30:33.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2379. Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - https://github.com/LibreDWG/libredwg/issues/183 - https://cwe.mitre.org/data/definitions/122.html
CVE ID: CVE-2020-21830 State: PUBLISHED Published: 2021-05-17T20:09:58 Last Updated: 2024-08-04T14:30:33.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap based buffer overflow vulneraibility exists in GNU LibreDWG 0.10 via bit_calc_CRC ../../src/bits.c:2213. Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493134
CVE ID: CVE-2020-21831 State: PUBLISHED Published: 2021-05-17T21:08:33 Last Updated: 2024-08-04T14:30:33.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_handles ../../src/decode.c:2637. Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493267
CVE ID: CVE-2020-21832 State: PUBLISHED Published: 2021-05-17T20:20:55 Last Updated: 2024-08-04T14:30:33.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2417. Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574492612
CVE ID: CVE-2020-21833 State: PUBLISHED Published: 2021-05-17T20:23:18 Last Updated: 2024-08-04T14:30:33.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_classes ../../src/decode.c:2440. Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - http://libredwg.com - https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493364
CVE ID: CVE-2020-21834 State: PUBLISHED Published: 2021-05-17T20:25:09 Last Updated: 2024-08-04T14:30:33.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: A null pointer deference issue exists in GNU LibreDWG 0.10 via get_bmp ../../programs/dwgbmp.c:164. Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574492468
CVE ID: CVE-2020-21835 State: PUBLISHED Published: 2021-05-17T20:28:36 Last Updated: 2024-08-04T14:30:33.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: A null pointer deference issue exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2337. Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493046
CVE ID: CVE-2020-21836 State: PUBLISHED Published: 2021-05-17T20:33:07 Last Updated: 2024-08-04T14:30:33.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_preview ../../src/decode.c:3175. Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493437
CVE ID: CVE-2020-21838 State: PUBLISHED Published: 2021-05-17T20:41:46 Last Updated: 2024-08-04T14:30:33.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_appinfo ../../src/decode.c:2842. Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - http://libredwg.com - https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574492816
CVE ID: CVE-2020-21839 State: PUBLISHED Published: 2021-05-17T20:55:29 Last Updated: 2024-08-04T14:30:33.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU LibreDWG 0.10. Crafted input will lead to an memory leak in dwg_decode_eed ../../src/decode.c:3638. Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574492707 - https://cwe.mitre.org/data/definitions/401.html
CVE ID: CVE-2020-21840 State: PUBLISHED Published: 2021-05-17T20:58:09 Last Updated: 2024-08-04T14:30:33.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_search_sentinel ../../src/bits.c:1985. Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - http://libredwg.com - https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493513
CVE ID: CVE-2020-21841 State: PUBLISHED Published: 2021-05-17T20:59:57 Last Updated: 2024-08-04T14:30:33.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_B ../../src/bits.c:135. Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - http://libredwg.com - https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493775
CVE ID: CVE-2020-21842 State: PUBLISHED Published: 2021-05-17T21:01:32 Last Updated: 2024-08-04T14:30:33.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_revhistory ../../src/decode.c:3051. Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493684
CVE ID: CVE-2020-21843 State: PUBLISHED Published: 2021-05-17T21:03:29 Last Updated: 2024-08-04T14:30:33.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_RC ../../src/bits.c:318. Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493857
CVE ID: CVE-2020-21844 State: PUBLISHED Published: 2021-05-17T21:06:57 Last Updated: 2024-08-04T14:30:33.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU LibreDWG 0.10 is affected by: memcpy-param-overlap. The impact is: execute arbitrary code (remote). The component is: read_2004_section_header ../../src/decode.c:2580. Additional Analyst Notes: - CVE Program Container: References: - http://gnu.com - https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493607
CVE ID: CVE-2020-21845 State: PUBLISHED Published: 2020-09-14T17:42:43 Last Updated: 2024-08-04T14:30:33.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Codoforum 4.8.3 allows HTML Injection in the 'admin dashboard Manage users Section.' Additional Analyst Notes: - CVE Program Container: References: - https://vyshnavvizz.blogspot.com/2020/01/html-injection-in-codoforum-v483.html - https://codoforum.com/
CVE ID: CVE-2020-21854 State: PUBLISHED Published: 2021-07-28T17:50:54 Last Updated: 2024-08-04T14:30:33.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerabiity exists in WDScanner 1.1 in the system management page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TideSec/WDScanner/issues/41
CVE ID: CVE-2020-21861 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-21T14:49:56.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/annyshow/DuxCMS2.1/issues/I182Y4
CVE ID: CVE-2020-21862 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-21T14:14:27.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/annyshow/DuxCMS2.1/issues/I182Z5
CVE ID: CVE-2020-21865 State: PUBLISHED Published: 2021-10-07T20:05:17 Last Updated: 2024-08-04T14:30:33.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: ThinkPHP50-CMS v1.0 contains a remote code execution (RCE) vulnerability in the component /public/?s=captcha. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nnngu/ThinkPHP50-CMS/issues/1
CVE ID: CVE-2020-21881 State: PUBLISHED Published: 2023-07-31T00:00:00 Last Updated: 2024-10-22T19:36:32.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/content/add. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/annyshow/DuxCMS2.1/issues/I183GG
CVE ID: CVE-2020-21883 State: PUBLISHED Published: 2021-04-09T12:19:12 Last Updated: 2024-08-04T14:30:33.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerability in /tools/ping, which can leads to complete device takeover. Additional Analyst Notes: - CVE Program Container: References: - http://wifi-soft.com - https://s3curityb3ast.github.io/KSA-Dev-009.txt - https://www.mail-archive.com/fulldisclosure%40seclists.org/msg07140.html
CVE ID: CVE-2020-21884 State: PUBLISHED Published: 2021-04-09T12:19:18 Last Updated: 2024-08-04T14:30:33.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unibox SMB 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a cross-site request forgery (CSRF) vulnerability in /tools/network-trace, /list_users, /list_byod?usertype=raduser, /dhcp_leases, /go?rid=202 in which a specially crafted HTTP request may reconfigure the device. Additional Analyst Notes: - CVE Program Container: References: - http://wifi-soft.com - https://s3curityb3ast.github.io/KSA-Dev-008.txt - https://www.mail-archive.com/fulldisclosure%40seclists.org/msg07139.html
CVE ID: CVE-2020-21890 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-04T16:14:42.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service or other unspecified impact(s) via opening of crafted PDF document. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701846 - https://lists.debian.org/debian-lts-announce/2023/09/msg00029.html
CVE ID: CVE-2020-21896 State: PUBLISHED Published: 2023-08-22T00:00:00.000Z Last Updated: 2025-11-03T18:07:56.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Use After Free vulnerability in svg_dev_text_span_as_paths_defs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers to cause a denial of service via opening of a crafted PDF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701294 - http://www.ghostscript.com/cgi-bin/findgit.cgi?8719e07834d6a72b6b4131539e49ed1e8e2ff79e
CVE ID: CVE-2020-21913 State: PUBLISHED Published: 2021-09-20T13:55:28 Last Updated: 2024-08-04T14:30:33.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://unicode-org.atlassian.net/browse/ICU-20850 - https://github.com/unicode-org/icu/pull/886 - https://lists.debian.org/debian-lts-announce/2021/10/msg00008.html - https://www.debian.org/security/2021/dsa-5014
CVE ID: CVE-2020-21929 State: PUBLISHED Published: 2021-08-10T21:18:16 Last Updated: 2024-08-04T14:30:33.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in the web_copyright field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eyoucms/eyoucms/issues/8