Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-13825 State: PUBLISHED Published: 2020-08-19T19:41:02 Last Updated: 2024-08-04T12:25:16.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in i-doit 1.14.2 allows remote attackers to inject arbitrary web script or HTML via the viewMode, tvMode, tvType, objID, catgID, objTypeID, or editMode parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-005
CVE ID: CVE-2020-13826 State: PUBLISHED Published: 2020-08-19T19:39:34 Last Updated: 2024-08-04T12:25:16.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSV injection (aka Excel Macro Injection or Formula Injection) issue in i-doit 1.14.2 allows an attacker to execute arbitrary commands via a Title parameter that is mishandled in a CSV export. Additional Analyst Notes: - CVE Program Container: References: - https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-006
CVE ID: CVE-2020-13827 State: PUBLISHED Published: 2020-06-04T14:48:05 Last Updated: 2024-08-04T12:25:16.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpList before 3.5.4 allows XSS via /lists/admin/user.php and /lists/admin/users.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.phplist.org/newslist/phplist-3-5-4-release-notes/ - https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-004
CVE ID: CVE-2020-13828 State: PUBLISHED Published: 2020-08-31T15:14:03 Last Updated: 2024-08-04T12:25:16.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr 11.0.4 is affected by multiple stored Cross-Site Scripting (XSS) vulnerabilities that could allow remote authenticated attackers to inject arbitrary web script or HTML via ticket/card.php?action=create with the subject, message, or address parameter; adherents/card.php with the societe or address parameter; product/card.php with the label or customcode parameter; or societe/card.php with the alias or barcode parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.wizlynxgroup.com/secur
r barcode parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-002
CVE ID: CVE-2020-13829 State: PUBLISHED Published: 2020-06-04T17:09:00 Last Updated: 2024-08-04T12:25:16.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can disable the SEAndroid protection mechanism in the RKP. The Samsung ID is SVE-2019-15998 (June 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-13830 State: PUBLISHED Published: 2020-06-04T17:08:21 Last Updated: 2024-08-04T12:25:16.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) software. One UI HOME logging can leak information. The Samsung ID is SVE-2019-16382 (June 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-13831 State: PUBLISHED Published: 2020-06-04T17:07:34 Last Updated: 2024-08-04T12:25:16.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 7570 chipsets) software. The Trustonic Kinibi component allows arbitrary memory mapping. The Samsung ID is SVE-2019-16665 (June 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-13832 State: PUBLISHED Published: 2020-06-04T17:06:43 Last Updated: 2024-08-04T12:25:16.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with Q(10.0) (with TEEGRIS on Exynos chipsets) software. The Widevine Trustlet allows arbitrary code execution because of memory disclosure, The Samsung IDs are SVE-2020-17117, SVE-2020-17118, SVE-2020-17119, and SVE-2020-17161 (June 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-13833 State: PUBLISHED Published: 2020-06-04T17:05:59 Last Updated: 2024-08-04T12:25:16.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The system area allows arbitrary file overwrites via a symlink attack. The Samsung ID is SVE-2020-17183 (June 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-13834 State: PUBLISHED Published: 2020-06-04T17:05:11 Last Updated: 2024-08-04T12:25:16.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (with TEEGRIS) software. Secure Folder does not properly restrict use of Android Debug Bridge (adb) for arbitrary installations. The Samsung ID is SVE-2020-17369 (June 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-13835 State: PUBLISHED Published: 2020-06-04T17:04:31 Last Updated: 2024-08-04T12:25:16.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x) (with TEEGRIS) software. The Gatekeeper Trustlet allows a brute-force attack on user credentials. The Samsung ID is SVE-2020-16908 (June 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-13836 State: PUBLISHED Published: 2020-06-04T17:03:56 Last Updated: 2024-08-04T12:25:16.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. HWRResProvider allows path traversal for data exposure. The Samsung ID is SVE-2020-16954 (June 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-13837 State: PUBLISHED Published: 2020-06-04T17:03:16 Last Updated: 2024-08-04T12:25:16.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with Q(10.0) software. The Lockscreen feature does not block Quick Panel access to Music Share. The Samsung ID is SVE-2020-17145 (June 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-13838 State: PUBLISHED Published: 2020-06-04T17:01:54 Last Updated: 2024-08-04T12:25:16.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. The DeX Lockscreen feature does not block access to Quick Panel and notifications. The Samsung ID is SVE-2020-17187 (June 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-13839 State: PUBLISHED Published: 2020-06-04T23:24:25 Last Updated: 2024-08-04T12:25:16.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution can occur via a custom AT command handler buffer overflow. The LG ID is LVE-SMP-200007 (June 2020). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/
CVE ID: CVE-2020-13840 State: PUBLISHED Published: 2020-06-04T23:24:40 Last Updated: 2024-08-04T12:25:16.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution can occur via an MTK AT command handler buffer overflow. The LG ID is LVE-SMP-200008 (June 2020). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/
CVE ID: CVE-2020-13841 State: PUBLISHED Published: 2020-06-04T23:24:47 Last Updated: 2024-08-04T12:25:16.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS 9 and 10 (MTK chipsets). An AT command handler allows attackers to bypass intended access restrictions. The LG ID is LVE-SMP-200009 (June 2020). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/
CVE ID: CVE-2020-13842 State: PUBLISHED Published: 2020-06-04T23:24:58 Last Updated: 2024-08-04T12:25:16.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). A dangerous AT command was made available even though it is unused. The LG ID is LVE-SMP-200010 (June 2020). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/
CVE ID: CVE-2020-13843 State: PUBLISHED Published: 2020-06-04T23:25:07 Last Updated: 2024-08-04T12:32:12.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS software before 2020-06-01. Local users can cause a denial of service because checking of the userdata partition is mishandled. The LG ID is LVE-SMP-200014 (June 2020). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/
CVE ID: CVE-2020-13844 State: PUBLISHED Published: 2020-06-08T22:46:03 Last Updated: 2024-08-04T12:32:13.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka "straight-line speculation." Additional Analyst Notes: - CVE Program Container: References: - https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability - https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/frequently-asked-question
y - https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/frequently-asked-questions - https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/downloads/straight-line-speculation - https://gcc.gnu.org/pipermail/gcc-patches/2020-June/547520.html - http://lists.llvm.org/pipermail/llvm-dev/2020-June/142109.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00039.html
CVE ID: CVE-2020-13845 State: PUBLISHED Published: 2020-07-14T17:23:08 Last Updated: 2024-08-04T12:32:13.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value. Image integrity is not validated when an ECL policy is enforced. The fingerprint required by the ECL is compared against the signature object descriptor(s) in the SIF file, rather than to a cryptographically validated signature. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/sylabs - https://github.com/hpcng/singularity/security/advisories/GHSA-pmfr-63c2-jr5c - http://lists.opensuse.org/opensuse-securit
ttps://github.com/hpcng/singularity/security/advisories/GHSA-pmfr-63c2-jr5c - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00046.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00053.html
CVE ID: CVE-2020-13846 State: PUBLISHED Published: 2020-07-14T17:30:09 Last Updated: 2024-08-04T12:32:13.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sylabs Singularity 3.5.0 through 3.5.3 fails to report an error in a Status Code. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/sylabs - https://github.com/hpcng/singularity/security/advisories/GHSA-6w7g-p4jh-rf92 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00046.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00053.html
CVE ID: CVE-2020-13847 State: PUBLISHED Published: 2020-07-14T17:16:03 Last Updated: 2024-08-04T12:32:13.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check. Singularity's sign and verify commands do not sign metadata found in the global header or data object descriptors of a SIF file. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/sylabs - https://github.com/hpcng/singularity/security/advisories/GHSA-m7j2-9565-4h9v - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00046.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.html - htt
curity-announce/2020-07/msg00046.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00053.html
CVE ID: CVE-2020-13848 State: PUBLISHED Published: 2020-06-04T19:55:34 Last Updated: 2024-08-04T12:32:13.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath and FindServiceEventURLPath in genlib/service_table/service_table.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pupnp/pupnp/issues/177 - https://github.com/pupnp/pupnp/commit/c805c1de1141cb22f74c0d94dd5664bda37398e0 - https://lists.debian.org/debian-lts-announce/2020/06/msg
m/pupnp/pupnp/commit/c805c1de1141cb22f74c0d94dd5664bda37398e0 - https://lists.debian.org/debian-lts-announce/2020/06/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00030.html - https://lists.debian.org/debian-lts-announce/2021/03/msg00007.html
CVE ID: CVE-2020-13849 State: PUBLISHED Published: 2020-06-04T20:16:26 Last Updated: 2024-08-04T12:32:13.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MQTT protocol 3.1.1 requires a server to set a timeout value of 1.5 times the Keep-Alive value specified by a client, which allows remote attackers to cause a denial of service (loss of the ability to establish new connections), as demonstrated by SlowITe. Additional Analyst Notes: - CVE Program Container: References: - https://www.mdpi.com/1424-8220/20/10/2932 - https://doi.org/10.3390/s20102932
CVE ID: CVE-2020-13850 State: PUBLISHED Published: 2020-06-11T02:08:24 Last Updated: 2024-08-04T12:32:13.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artica Pandora FMS 7.44 has inadequate access controls on a web folder. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories - https://www.coresecurity.com/core-labs/advisories/pandora-fms-community-multiple-vulnerabilities
CVE ID: CVE-2020-13851 State: PUBLISHED Published: 2020-06-11T02:15:13 Last Updated: 2024-08-04T12:32:13.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artica Pandora FMS 7.44 allows remote command execution via the events feature. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories - https://www.coresecurity.com/core-labs/advisories/pandora-fms-community-multiple-vulnerabilities - http://packetstormsecurity.com/files/158390/Pandora-FMS-7.0-NG-7XX-Remote-Command-Execution.html
CVE ID: CVE-2020-13852 State: PUBLISHED Published: 2020-06-11T02:15:04 Last Updated: 2024-08-04T12:32:13.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Manager feature. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories - https://www.coresecurity.com/core-labs/advisories/pandora-fms-community-multiple-vulnerabilities
CVE ID: CVE-2020-13853 State: PUBLISHED Published: 2020-06-11T02:14:53 Last Updated: 2024-08-04T12:32:14.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artica Pandora FMS 7.44 has persistent XSS in the Messages feature. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories - https://www.coresecurity.com/core-labs/advisories/pandora-fms-community-multiple-vulnerabilities
CVE ID: CVE-2020-13854 State: PUBLISHED Published: 2020-06-11T02:13:21 Last Updated: 2024-08-04T12:32:13.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artica Pandora FMS 7.44 allows privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories - https://www.coresecurity.com/core-labs/advisories/pandora-fms-community-multiple-vulnerabilities
CVE ID: CVE-2020-13855 State: PUBLISHED Published: 2020-06-11T02:13:10 Last Updated: 2024-08-04T12:32:14.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Repository Manager feature. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories - https://www.coresecurity.com/core-labs/advisories/pandora-fms-community-multiple-vulnerabilities
CVE ID: CVE-2020-13856 State: PUBLISHED Published: 2021-02-01T01:18:06 Last Updated: 2024-08-04T12:32:13.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. Authentication is not required to download the support file that contains sensitive information such as cleartext credentials and password hashes. Additional Analyst Notes: - CVE Program Container: References: - https://mofinetwork.com/index.php?main_page=page&id=14 - https://www.criticalstart.com/critical-vulnerabilities-discovered-in-mofi-routers/
CVE ID: CVE-2020-13857 State: PUBLISHED Published: 2021-02-01T01:16:47 Last Updated: 2024-08-04T12:32:14.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They can be rebooted by sending an unauthenticated poof.cgi HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - https://mofinetwork.com/index.php?main_page=page&id=14 - https://www.criticalstart.com/critical-vulnerabilities-discovered-in-mofi-routers/
CVE ID: CVE-2020-13858 State: PUBLISHED Published: 2021-02-01T01:45:44 Last Updated: 2024-08-04T12:32:13.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They contain two undocumented administrator accounts. The sftp and mofidev accounts are defined in /etc/passwd and the password is not unique across installations. Additional Analyst Notes: - CVE Program Container: References: - https://mofinetwork.com/index.php?main_page=page&id=14 - https://www.criticalstart.com/critical-vulnerabilities-discovered-in-mofi-routers/
CVE ID: CVE-2020-13859 State: PUBLISHED Published: 2021-02-01T01:27:07 Last Updated: 2024-08-04T12:32:14.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. A format error in /etc/shadow, coupled with a logic bug in the LuCI - OpenWrt Configuration Interface framework, allows the undocumented system account mofidev to login to the cgi-bin/luci/quick/wizard management interface without a password by abusing a forgotten-password feature. Additional Analyst Notes: - CVE Program Container: References: - https://mofinetwork.com/index.php?main_page=page&id=14 - https://www.criticalstart.com/critical-vulnerabili
eferences: - https://mofinetwork.com/index.php?main_page=page&id=14 - https://www.criticalstart.com/critical-vulnerabilities-discovered-in-mofi-routers/
CVE ID: CVE-2020-13860 State: PUBLISHED Published: 2021-02-01T01:33:35 Last Updated: 2024-08-04T12:32:13.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. The one-time password algorithm for the undocumented system account mofidev generates a predictable six-digit password. Additional Analyst Notes: - CVE Program Container: References: - https://mofinetwork.com/index.php?main_page=page&id=14 - https://www.criticalstart.com/critical-vulnerabilities-discovered-in-mofi-routers/
CVE ID: CVE-2020-13863 State: PUBLISHED Published: 2020-08-26T17:57:23 Last Updated: 2024-08-04T12:32:14.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injection in HTTP responses, due to the improper handling of input parameters. A successful exploit could allow an attacker to access user information. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0008
CVE ID: CVE-2020-13864 State: PUBLISHED Published: 2020-06-05T21:21:29 Last Updated: 2024-08-04T12:32:13.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from a stored XSS vulnerability. An author user can create posts that result in a stored XSS by using a crafted payload in custom links. Additional Analyst Notes: - CVE Program Container: References: - https://www.softwaresecured.com/elementor-page-builder-stored-xss/
CVE ID: CVE-2020-13865 State: PUBLISHED Published: 2020-06-05T21:23:37 Last Updated: 2024-08-04T12:32:13.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from multiple stored XSS vulnerabilities. An author user can create posts that result in stored XSS vulnerabilities, by using a crafted link in the custom URL or by applying custom attributes. Additional Analyst Notes: - CVE Program Container: References: - https://www.softwaresecured.com/elementor-page-builder-stored-xss/
CVE ID: CVE-2020-13866 State: PUBLISHED Published: 2020-06-08T15:58:11 Last Updated: 2024-08-04T12:32:14.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: WinGate v9.4.1.5998 has insecure permissions for the installation directory, which allows local users to gain privileges by replacing an executable file with a Trojan horse. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/157958/WinGate-9.4.1.5998-Insecure-Permissions-Privilege-Escalation.html - http://hyp3rlinx.altervista.org/advisories/WINGATE-INSECURE-PERMISSIONS-LOCAL-PRIVILEGE-ESCALATION.txt - http://seclists.org/fulldisclosure/2020/Jun/11
CVE ID: CVE-2020-13867 State: PUBLISHED Published: 2020-06-05T17:30:40 Last Updated: 2024-08-04T12:32:14.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open-iSCSI targetcli-fb through 2.1.52 has weak permissions for /etc/target (and for the backup directory and backup files). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/open-iscsi/targetcli-fb/pull/172 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LANBGRCCZBPKKBD5ZMJS7C7DYAHYR6B/ - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00005.html -