Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
from the file into this allocation, a heap-based buffer overflow will occur which can corrupt memory. These types of memory corruptions can allow for code execution under the context of the application. An attacker can entice the victim to open a document to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1190
CVE ID: CVE-2020-13580 State: PUBLISHED Published: 2021-02-04T06:08:53 Last Updated: 2024-08-04T12:25:16.107Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Softmaker Software Problem Types: CWE-787 Description: An exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker application. A specially crafted document can cause the document parser to explicitly trust a length from a particular record type and use it to write a 16-bit null relative to a buffer allocated on the stack. Due to a lack of bounds-checking on this value, this can allow an attacker to write
to a buffer allocated on the stack. Due to a lack of bounds-checking on this value, this can allow an attacker to write to memory outside of the buffer and controllably corrupt memory. This can allow an attacker to earn code execution under the context of the application. An attacker can entice the victim to open a document to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1191
CVE ID: CVE-2020-13581 State: PUBLISHED Published: 2021-02-10T21:39:11 Last Updated: 2024-08-04T12:25:16.110Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: SoftMaker Problem Types: CWE-122 Description: In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted document can cause the document parser to copy data from a particular record type into a buffer that is smaller than the size used for the copy which will cause a heap-based buffer overflow. An attacker can entice the victim to open a document to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosi
document to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1192
CVE ID: CVE-2020-13582 State: PUBLISHED Published: 2021-01-26T18:15:54 Last Updated: 2024-08-04T12:25:16.082Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Micrium Problem Types: CWE-690 Description: A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafted HTTP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1193
CVE ID: CVE-2020-13583 State: PUBLISHED Published: 2021-02-10T21:39:22 Last Updated: 2024-08-04T12:25:16.131Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Micrium Problem Types: CWE-476 Description: A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafted HTTP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1194
CVE ID: CVE-2020-13584 State: PUBLISHED Published: 2020-12-03T17:02:07 Last Updated: 2024-08-04T12:25:16.041Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Webkit Problem Types: use-after free Description: An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64. A specially crafted HTML web page can cause a use-after-free condition, resulting in a remote code execution. The victim needs to visit a malicious web site to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BY2O
ner: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BY2OBQZFMEFZOSWXPXHPEHOJXXILEEX2/ - https://security.gentoo.org/glsa/202012-10 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1195
CVE ID: CVE-2020-13585 State: PUBLISHED Published: 2021-02-10T21:45:01 Last Updated: 2024-08-04T12:25:15.940Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Accusoft Problem Types: CWE-131 Description: An out-of-bounds write vulnerability exists in the PSD Header processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1196
CVE ID: CVE-2020-13586 State: PUBLISHED Published: 2021-02-04T06:40:52 Last Updated: 2024-08-04T12:25:16.108Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Softmaker Problem Types: CWE-122 Description: A memory corruption vulnerability exists in the Excel Document SST Record 0x00fc functionality of SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014). A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1197
CVE ID: CVE-2020-13587 State: PUBLISHED Published: 2021-04-09T17:47:40 Last Updated: 2024-08-04T12:25:16.167Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: Rukovoditel Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in the "forms_fields_rules/rules" page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability, this can be done either with administrator credentials or through cross-site request forgery. Additional Analyst Notes: - CVE Program Container: References: - https://
entials or through cross-site request forgery. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1198
CVE ID: CVE-2020-13588 State: PUBLISHED Published: 2021-08-17T19:14:19 Last Updated: 2024-08-04T12:25:16.108Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: Rukovoditel Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management App 2.7.2. The heading_field_id parameter in ‘‘entities/fields’ page is vulnerable to authenticated SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability, this can be done either with administrator credentials or through cross-site request forgery. Additional Analyst Notes: - CVE Program
ne either with administrator credentials or through cross-site request forgery. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1199
CVE ID: CVE-2020-13589 State: PUBLISHED Published: 2021-08-17T19:14:20 Last Updated: 2024-08-04T12:25:16.113Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: Rukovoditel Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management App 2.7.2. The entities_id parameter in the 'entities/fields page (mulitple_edit or copy_selected or export function) is vulnerable to authenticated SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability, this can be done either with administrator credentials or through cross-site request
sts to trigger this vulnerability, this can be done either with administrator credentials or through cross-site request forgery. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1199
CVE ID: CVE-2020-13590 State: PUBLISHED Published: 2022-04-18T16:15:23.949Z Last Updated: 2025-04-15T19:05:01.381Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: Rukovoditel Products: Project Management App Problem Types: CWE-89 Description: Multiple exploitable SQL injection vulnerabilities exist in the 'entities/fields' page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities, this can be done either with administrator credentials or through cross-site request forgery. Additional Analyst Notes: - CVE Program Container:
with administrator credentials or through cross-site request forgery. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1199
CVE ID: CVE-2020-13591 State: PUBLISHED Published: 2021-04-09T17:45:16 Last Updated: 2024-08-04T12:25:16.311Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: Rukovoditel Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in the "access_rules/rules_form" page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability, this can be done either with administrator credentials or through cross-site request forgery. Additional Analyst Notes: - CVE Program Container: References: - https://t
ntials or through cross-site request forgery. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1200
CVE ID: CVE-2020-13592 State: PUBLISHED Published: 2021-04-09T17:48:02 Last Updated: 2024-08-04T12:25:16.142Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: Rukovoditel Problem Types: CWE-89 Description: An exploitable SQL injection vulnerability exists in "global_lists/choices" page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability, this can be done either with administrator credentials or through cross-site request forgery. Additional Analyst Notes: - CVE Program Container: References: - https://talosint
or through cross-site request forgery. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1201
CVE ID: CVE-2020-13593 State: PUBLISHED Published: 2020-08-31T14:54:16 Last Updated: 2024-08-04T12:25:16.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation in Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK through 2.2.3 allows the Diffie-Hellman check during the Secure Connection pairing to be skipped if the Link Layer encryption setup is performed earlier. An attacker in radio range can achieve arbitrary read/write access to protected GATT service data, cause a denial of service, or possibly control a device's function by establishing an encrypted session with an unauthenticated Long Term Key (LTK). Add
ssibly control a device's function by establishing an encrypted session with an unauthenticated Long Term Key (LTK). Additional Analyst Notes: - CVE Program Container: References: - http://www.ti.com/tool/BLE-STACK - https://asset-group.github.io/disclosures/sweyntooth/ - https://asset-group.github.io/cves.html
CVE ID: CVE-2020-13594 State: PUBLISHED Published: 2020-08-31T14:58:25 Last Updated: 2024-08-04T12:25:16.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.2 and earlier (for ESP32 devices) does not properly restrict the channel map field of the connection request packet on reception, allowing attackers in radio range to cause a denial of service (crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://asset-group.github.io/disclosures/sweyntooth/ - https://asset-group.github.io/cves.html - https://github.com/espressif/esp32-bt-lib
CVE ID: CVE-2020-13595 State: PUBLISHED Published: 2020-08-31T14:59:57 Last Updated: 2024-08-04T12:25:16.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.0 through 4.2 (for ESP32 devices) returns the wrong number of completed BLE packets and triggers a reachable assertion on the host stack when receiving a packet with an MIC failure. An attacker within radio range can silently trigger the assertion (which disables the target's BLE stack) by sending a crafted sequence of BLE packets. Additional Analyst Notes: - CVE Program Container: References: - https://asset-group.github.io/disclosures/sweyntooth
s. Additional Analyst Notes: - CVE Program Container: References: - https://asset-group.github.io/disclosures/sweyntooth/ - https://asset-group.github.io/cves.html - https://github.com/espressif/esp32-bt-lib
CVE ID: CVE-2020-13596 State: PUBLISHED Published: 2020-06-03T13:13:55 Last Updated: 2024-08-04T12:25:16.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. Query parameters generated by the Django admin ForeignKeyRawIdWidget were not properly URL encoded, leading to a possibility of an XSS attack. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/4381-1/ - https://usn.ubuntu.com/4381-2/ - https://www.debian.org/security/2020/dsa-4705 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4A2AP4T7RKPBCLTI2NNQG3T6MINDUUMZ/ - ht
edoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4A2AP4T7RKPBCLTI2NNQG3T6MINDUUMZ/ - https://www.oracle.com/security-alerts/cpujan2021.html - https://docs.djangoproject.com/en/3.0/releases/security/ - https://www.djangoproject.com/weblog/2020/jun/03/security-releases/ - https://security.netapp.com/advisory/ntap-20200611-0002/ - https://groups.google.com/forum/#%21msg/django-announce/pPEmb2ot4Fo/X-SMalYSBAAJ
CVE ID: CVE-2020-13597 State: PUBLISHED Published: 2020-06-03T16:44:38.089338Z Last Updated: 2024-09-16T19:24:54.549Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: Tigera Inc Products: Calico, Calico Enterprise Problem Types: CWE-201 Description: Clusters using Calico (version 3.14.0 and below), Calico Enterprise (version 2.8.2 and below), may be vulnerable to information disclosure if IPv6 is enabled but unused. A compromised pod with sufficient privilege is able to reconfigure the node’s IPv6 interface due to the node accepting route advertisement by default, allowing the attacker to redirect full or partial network traffic from the node to the compromised
rtisement by default, allowing the attacker to redirect full or partial network traffic from the node to the compromised pod. Additional Analyst Notes: - CVE Program Container: References: - https://www.projectcalico.org/security-bulletins/ - https://groups.google.com/forum/#%21topic/kubernetes-security-announce/BMb_6ICCfp8 - https://github.com/kubernetes/kubernetes/issues/91507
CVE ID: CVE-2020-13598 State: PUBLISHED Published: 2021-05-24T21:40:26.773048Z Last Updated: 2024-09-17T03:28:53.484Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-121 Description: FS: Buffer Overflow when enabling Long File Names in FAT_FS and calling fs_stat. Zephyr versions >= v1.14.2, >= v2.3.0 contain Stack-based Buffer Overflow (CWE-121). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7fhv-rgxr-x56h Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7fhv-rgxr-x56h
CVE ID: CVE-2020-13599 State: PUBLISHED Published: 2021-05-24T21:40:27.423754Z Last Updated: 2024-09-17T00:01:53.906Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-276 Description: Security problem with settings and littlefs. Zephyr versions >= 1.14.2, >= 2.3.0 contain Incorrect Default Permissions (CWE-276). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-5qhg-j6wc-4f6q Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-5qhg-j6wc-4f6q - https://www.talosintelligence.com/vulne
//github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-5qhg-j6wc-4f6q - https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1199
CVE ID: CVE-2020-13600 State: PUBLISHED Published: 2021-05-24T21:40:28.051050Z Last Updated: 2024-09-16T16:12:39.920Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-122 Description: Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions >= 1.14.2, >= 2.3.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx4p-j86p-2mhr Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx4p-j86p-2mhr
CVE ID: CVE-2020-13601 State: PUBLISHED Published: 2021-05-24T21:40:28.696374Z Last Updated: 2024-09-17T01:01:29.987Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-125 Description: Possible read out of bounds in dns read. Zephyr versions >= 1.14.2, >= 2.3.0 contain Out-of-bounds Read (CWE-125). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-mm57-9hqw-qh44 Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-mm57-9hqw-qh44
CVE ID: CVE-2020-13602 State: PUBLISHED Published: 2021-05-24T21:40:29.344412Z Last Updated: 2024-09-17T02:56:50.405Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-20, CWE-835 Description: Remote Denial of Service in LwM2M do_write_op_tlv. Zephyr versions >= 1.14.2, >= 2.2.0 contain Improper Input Validation (CWE-20), Loop with Unreachable Exit Condition ('Infinite Loop') (CWE-835). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-g9mg-fj58-6fqh Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/secur
-6fqh Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-g9mg-fj58-6fqh
CVE ID: CVE-2020-13603 State: PUBLISHED Published: 2021-05-24T21:40:30.045607Z Last Updated: 2024-09-16T23:36:24.039Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-190 Description: Integer Overflow in memory allocating functions. Zephyr versions >= 1.14.2, >= 2.4.0 contain Integer Overflow or Wraparound (CWE-190). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-94vp-8gc2-rm45 Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-94vp-8gc2-rm45
CVE ID: CVE-2020-13604 State: REJECTED Published: 2021-03-23T22:30:17 Last Updated: 2021-03-23T22:30:17 Description: No description available.
CVE ID: CVE-2020-13605 State: REJECTED Published: 2021-03-23T22:30:18 Last Updated: 2021-03-23T22:30:18 Description: No description available.
CVE ID: CVE-2020-13606 State: REJECTED Published: 2021-03-23T22:30:19 Last Updated: 2021-03-23T22:30:19 Description: No description available.
CVE ID: CVE-2020-13607 State: REJECTED Published: 2021-03-23T22:30:19 Last Updated: 2021-03-23T22:30:19 Description: No description available.
CVE ID: CVE-2020-13608 State: REJECTED Published: 2021-03-23T22:30:20 Last Updated: 2021-03-23T22:30:20 Description: No description available.
CVE ID: CVE-2020-13609 State: REJECTED Published: 2021-03-23T22:30:20 Last Updated: 2021-03-23T22:30:20 Description: No description available.
CVE ID: CVE-2020-13610 State: REJECTED Published: 2021-03-23T22:30:21 Last Updated: 2021-03-23T22:30:21 Description: No description available.
CVE ID: CVE-2020-13611 State: REJECTED Published: 2021-03-23T22:30:21 Last Updated: 2021-03-23T22:30:21 Description: No description available.
CVE ID: CVE-2020-13612 State: REJECTED Published: 2021-03-23T22:30:22 Last Updated: 2021-03-23T22:30:22 Description: No description available.
CVE ID: CVE-2020-13614 State: PUBLISHED Published: 2020-05-26T22:08:39 Last Updated: 2024-08-04T12:25:16.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axel-download-accelerator/axel/issues/262 - https://github.com/axel-download-accelerator/axel/releases/tag/v2.17.8 - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00010.html - https://lists.fedoraproject.org/archives/list/package-announce%40lis
/opensuse-security-announce/2020-06/msg00010.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LPZUQSDGV5XDBJGHBWBHWJIBE47Q4QIB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S3ECAKIZA2TGBYLUQTLGRMXUFIOGRHG3/
CVE ID: CVE-2020-13615 State: PUBLISHED Published: 2020-05-26T22:08:30 Last Updated: 2024-08-04T12:25:16.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/qorelanguage/qore/issues/3808 - https://github.com/qorelanguage/qore/compare/release-0.9.4.1...release-0.9.4.2
CVE ID: CVE-2020-13616 State: PUBLISHED Published: 2020-05-26T22:08:18 Last Updated: 2024-08-04T12:25:16.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: The boost ASIO wrapper in net/asio.cpp in Pichi before 1.3.0 lacks TLS hostname verification. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pichi-router/pichi/commit/4698664233bc324f26658d2b041bfe6ea022c573 - https://github.com/pichi-router/pichi/releases/tag/1.3.0