Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-24978 State: PUBLISHED Published: 2020-09-03T23:20:23 Last Updated: 2024-08-04T15:26:09.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: In NASM 2.15.04rc3, there is a double-free vulnerability in pp_tokline asm/preproc.c. This is fixed in commit 8806c3ca007b84accac21dd88b900fb03614ceb7. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392712
CVE ID: CVE-2020-24979 State: REJECTED Published: 2020-09-03T23:20:13 Last Updated: 2020-09-14T13:06:23 Description: No description available.
CVE ID: CVE-2020-24980 State: REJECTED Published: 2020-09-03T23:20:01 Last Updated: 2020-09-14T13:04:19 Description: No description available.
CVE ID: CVE-2020-24981 State: PUBLISHED Published: 2020-09-04T19:45:25 Last Updated: 2024-08-04T15:26:08.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an error message caused by directly accessing the website built by UCMS. Additional Analyst Notes: - CVE Program Container: References: - https://sunian.top/2020/08/26/ucms-Incorrect%20Access%20Control/
CVE ID: CVE-2020-24982 State: PUBLISHED Published: 2021-03-15T17:39:38 Last Updated: 2024-08-04T15:26:09.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Quadbase ExpressDashboard (EDAB) 7 Update 9. It allows CSRF. An attacker may be able to trick an authenticated user into changing the email address associated with their account. Additional Analyst Notes: - CVE Program Container: References: - https://c41nc.co.uk/cve-2020-24982/
CVE ID: CVE-2020-24983 State: PUBLISHED Published: 2021-03-11T21:40:37 Last Updated: 2024-08-04T15:26:09.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Quadbase EspressReports ES 7 Update 9. An unauthenticated attacker can create a malicious HTML file that houses a POST request made to the DashboardBuilder within the target web application. This request will utilise the target admin session and perform the authenticated request (to change the Dashboard name) as if the victim had done so themselves, aka CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://c41nc.co.uk/cve-2020-24983/
CVE ID: CVE-2020-24984 State: PUBLISHED Published: 2021-03-11T21:11:28 Last Updated: 2024-08-04T15:26:09.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Quadbase EspressReports ES 7 Update 9. It allows CSRF, whereby an attacker may be able to trick an authenticated admin level user into uploading malicious files to the web server. Additional Analyst Notes: - CVE Program Container: References: - https://c41nc.co.uk/cve-2020-24984/
CVE ID: CVE-2020-24985 State: PUBLISHED Published: 2021-03-15T17:51:47 Last Updated: 2024-08-04T15:26:09.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Quadbase EspressReports ES 7 Update 9. An authenticated user is able to navigate to the MenuPage section of the application, and change the frmsrc parameter value to retrieve and execute external files or payloads. Additional Analyst Notes: - CVE Program Container: References: - https://c41nc.co.uk/cve-2020-24985/
CVE ID: CVE-2020-24986 State: PUBLISHED Published: 2020-09-04T19:29:19 Last Updated: 2024-08-04T15:26:09.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Concrete5 up to and including 8.5.2 allows Unrestricted Upload of File with Dangerous Type such as a .php file via File Manager. It is possible to modify site configuration to upload the PHP file and execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/768322
CVE ID: CVE-2020-24987 State: PUBLISHED Published: 2020-09-04T19:24:39 Last Updated: 2024-08-04T15:26:09.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 Router through V15.03.05.05_EN and through V15.03.05.19(6318) CN devices could cause a remote code execution due to incorrect authentication handling of vulnerable logincheck() function in /usr/lib/lua/ngx_authserver/ngx_wdas.lua file if the administrator UI Interface is set to "radius". Additional Analyst Notes: - CVE Program Container: References: - https://www.tendacn.com/en/product/AC18.html - https://drive.google.com/file/d/1iqpr0EofOBC6kCq2USTOBPRlJu_naFjQ/view?usp=sharing - https://cwe.mitre.org/data/definit
https://drive.google.com/file/d/1iqpr0EofOBC6kCq2USTOBPRlJu_naFjQ/view?usp=sharing - https://cwe.mitre.org/data/definitions/287.html
CVE ID: CVE-2020-24990 State: PUBLISHED Published: 2020-10-28T18:49:24 Last Updated: 2024-08-04T15:26:09.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version. Additional Analyst Notes: - CVE Program Container: References: - https://q-syshelp.qsc.com/Content/Core_Manager/CoreManager_Overview.htm - http://seclists.org/fulldisclosure/2020/Oct/30 - http://packetstormsecurity.com/files/159699/QSC-Q-SYS-Core-Manage
htm - http://seclists.org/fulldisclosure/2020/Oct/30 - http://packetstormsecurity.com/files/159699/QSC-Q-SYS-Core-Manager-8.2.1-Directory-Traversal.html
CVE ID: CVE-2020-24992 State: PUBLISHED Published: 2021-05-17T18:44:08 Last Updated: 2024-08-04T15:26:08.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when an administrator accesses the content management module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/arterli/CmsWing/issues/54
CVE ID: CVE-2020-24993 State: PUBLISHED Published: 2021-05-17T18:44:59 Last Updated: 2024-08-04T15:26:08.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when visitors access the article module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/arterli/CmsWing/issues/54
CVE ID: CVE-2020-24994 State: PUBLISHED Published: 2021-03-23T19:32:27 Last Updated: 2024-08-04T15:26:08.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libass/libass/issues/422 - https://github.com/libass/libass/issues/423 - https://github.com/libass/libass/issues/422#issuecomment-806002919 - https://github.com/libass/libass/commit/6835731c2fe4164a0c50bc91d12c43b2a2b4e
CVE ID: CVE-2020-24995 State: PUBLISHED Published: 2021-03-30T21:19:48 Last Updated: 2024-08-04T15:26:08.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in sniff_channel_order function in aacdec_template.c in ffmpeg 3.1.2, allows attackers to execute arbitrary code (local). Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8845 - https://trac.ffmpeg.org/ticket/8859 - https://trac.ffmpeg.org/ticket/8860 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=d6f293353c94c7ce200f6e0975ae3de49787f91f
CVE ID: CVE-2020-24996 State: PUBLISHED Published: 2020-09-03T22:17:33 Last Updated: 2024-08-04T15:26:09.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftohtml binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=42028
CVE ID: CVE-2020-24999 State: PUBLISHED Published: 2020-09-03T22:17:24 Last Updated: 2024-08-04T15:26:08.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2. It can be triggered by sending a crafted PDF file to the pdftohtml binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=42029
CVE ID: CVE-2020-25004 State: PUBLISHED Published: 2020-09-03T21:07:12 Last Updated: 2024-08-04T15:26:09.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heybbs v1.2 has a SQL injection vulnerability in user.php file via the ID parameter which may allow a remote attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/ - https://www.jazzsec.com/2020/08/27/heybbs-has-three-file-sql-injection-vulnerabilities/
CVE ID: CVE-2020-25005 State: PUBLISHED Published: 2020-09-03T21:07:08 Last Updated: 2024-08-04T15:26:09.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heybbs v1.2 has a SQL injection vulnerability in msg.php file via the ID parameter which may allow a remote attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/ - https://www.jazzsec.com/2020/08/27/heybbs-has-three-file-sql-injection-vulnerabilities/
CVE ID: CVE-2020-25006 State: PUBLISHED Published: 2020-09-03T21:07:05 Last Updated: 2024-08-04T15:26:09.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a remote attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/ - https://www.jazzsec.com/2020/08/27/heybbs-has-three-file-sql-injection-vulnerabilities/
CVE ID: CVE-2020-25010 State: PUBLISHED Published: 2020-12-17T03:37:37 Last Updated: 2024-08-04T15:26:09.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary code execution vulnerability in Kyland KPS2204 6 Port Managed Din-Rail Programmable Serial Device Servers Software Version:R0002.P05 allows remote attackers to upload a malicious script file by constructing a POST type request and writing a payload in the request parameters as an instruction to write a file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AnfieldQi/CVE_list/blob/master/CVE-2020-25010.md - https://www.cnvd.org.cn/flaw/show/CNVD-2020-55990
CVE ID: CVE-2020-25011 State: PUBLISHED Published: 2020-12-17T03:37:49 Last Updated: 2024-08-04T15:26:09.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: A sensitive information disclosure vulnerability in Kyland KPS2204 6 Port Managed Din-Rail Programmable Serial Device Servers Software Version:R0002.P05 allows remote attackers to get username and password by request /cgi-bin/webadminget.cgi script via the browser. Additional Analyst Notes: - CVE Program Container: References: - https://www.cnvd.org.cn/flaw/show/CNVD-2020-55988 - https://github.com/AnfieldQi/CVE_list/blob/master/CVE-2020-25011.md
CVE ID: CVE-2020-25013 State: PUBLISHED Published: 2020-11-16T15:00:24 Last Updated: 2024-08-04T15:26:09.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/2020/11/16/jetbrains-security-bulletin-q3-2020/
CVE ID: CVE-2020-25014 State: PUBLISHED Published: 2020-11-27T17:18:30 Last Updated: 2024-08-04T15:26:09.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attackers to execute arbitrary code via a crafted http packet. Additional Analyst Notes: - CVE Program Container: References: - https://businessforum.zyxel.com/categories/security-news-and-release - https://www.zyxel.com/support/Zyxel-security-advisory-for-buffer-overflow-vulnerability.shtml
CVE ID: CVE-2020-25015 State: PUBLISHED Published: 2020-09-16T17:34:23 Last Updated: 2024-08-04T15:26:09.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: A specific router allows changing the Wi-Fi password remotely. Genexis Platinum 4410 V2-1.28, a compact router generally used at homes and offices was found to be vulnerable to Broken Access Control and CSRF which could be combined to remotely change the WIFI access point’s password. Additional Analyst Notes: - CVE Program Container: References: - https://www.getastra.com/blog/911/csrf-broken-access-control-in-genexis-platinum-4410/ - https://www.jinsonvarghese.com/broken-access-control-csrf-in-genexis-platinum-4410/ - http:/
in-genexis-platinum-4410/ - https://www.jinsonvarghese.com/broken-access-control-csrf-in-genexis-platinum-4410/ - http://packetstormsecurity.com/files/159936/Genexis-Platinum-4410-P4410-V2-1.28-Missing-Access-Control-CSRF.html
CVE ID: CVE-2020-25016 State: PUBLISHED Published: 2020-08-29T15:05:00 Last Updated: 2024-08-04T15:26:09.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: A safety violation was discovered in the rgb crate before 0.8.20 for Rust, leading to (for example) dereferencing of arbitrary pointers or disclosure of uninitialized memory. This occurs because structs can be treated as bytes for read and write operations. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0029.html - https://github.com/kornelski/rust-rgb/issues/35
CVE ID: CVE-2020-25017 State: PUBLISHED Published: 2020-10-01T16:39:40 Last Updated: 2024-08-04T15:26:09.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy’s setCopy() header map API does not replace all existing occurences of a non-inline header. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21forum/envoy-security-announce - https://github.com/envoyproxy/envoy/security/advisories/GHSA-2v25-cjjq-5f4w
CVE ID: CVE-2020-25018 State: PUBLISHED Published: 2020-10-01T16:46:06 Last Updated: 2024-08-04T15:26:09.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Envoy master between 2d69e30 and 3b5acb2 may fail to parse request URL that requires host canonicalization. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21forum/envoy-security-announce - https://github.com/envoyproxy/envoy/security/advisories/GHSA-fwwh-fc9w-9673
CVE ID: CVE-2020-25019 State: PUBLISHED Published: 2020-08-29T16:07:29.000Z Last Updated: 2025-11-17T19:13:58.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: jitsi-meet-electron (aka Jitsi Meet Electron) before 2.3.0 calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jitsi/jitsi-meet-electron/commit/ca1eb702507fdc4400fe21c905a9f85702f92a14 - https://github.com/jitsi/jitsi-meet-electron/releases/tag/v2.3.0 - https://security.stackexchange.com/questions/225799 - https://github.com/jitsi/security-advisories/blob/m
s/tag/v2.3.0 - https://security.stackexchange.com/questions/225799 - https://github.com/jitsi/security-advisories/blob/master/advisories/JSA-2020-0001.md - https://github.com/jitsi/jitsi-meet-electron/security/advisories/GHSA-x4h8-fhrp-pm3p
CVE ID: CVE-2020-25020 State: PUBLISHED Published: 2020-08-29T18:31:48.000Z Last Updated: 2025-05-05T17:07:49.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: MPXJ through 8.1.3 allows XXE attacks. This affects the GanttProjectReader and PhoenixReader components. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/joniles/mpxj/pull/178/commits/c3e457f7a16facfe563eade82b0fa8736a8c96f9 - https://www.oracle.com/security-alerts/cpujan2021.html
CVE ID: CVE-2020-25021 State: PUBLISHED Published: 2020-09-04T03:34:10 Last Updated: 2024-08-04T15:26:09.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Noise-Java through 2020-08-27. ChaChaPolyCipherState.encryptWithAd() allows out-of-bounds access. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rweather/noise-java/commit/18e86b6f8bea7326934109aa9ffa705ebf4bde90 - https://github.com/rweather/noise-java/pull/12 - http://seclists.org/fulldisclosure/2020/Sep/14 - http://packetstormsecurity.com/files/159057/Noise-Java-ChaChaPolyCipherState.encryptWithAd-Insufficient-Boundary-Checks.html
CVE ID: CVE-2020-25022 State: PUBLISHED Published: 2020-09-04T03:34:30 Last Updated: 2024-08-04T15:26:09.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Noise-Java through 2020-08-27. AESGCMFallbackCipherState.encryptWithAd() allows out-of-bounds access. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rweather/noise-java/commit/18e86b6f8bea7326934109aa9ffa705ebf4bde90 - https://github.com/rweather/noise-java/pull/12 - http://seclists.org/fulldisclosure/2020/Sep/11 - http://packetstormsecurity.com/files/159055/Noise-Java-AESGCMFallbackCipherState.encryptWithAd-Insufficient-Boundary-Checks.html
CVE ID: CVE-2020-25023 State: PUBLISHED Published: 2020-09-04T03:35:09 Last Updated: 2024-08-04T15:26:09.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Noise-Java through 2020-08-27. AESGCMOnCtrCipherState.encryptWithAd() allows out-of-bounds access. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rweather/noise-java/commit/18e86b6f8bea7326934109aa9ffa705ebf4bde90 - https://github.com/rweather/noise-java/pull/12 - http://seclists.org/fulldisclosure/2020/Sep/13 - http://packetstormsecurity.com/files/159056/Noise-Java-AESGCMOnCtrCipherState.encryptWithAd-Insufficient-Boundary-Checks.html
CVE ID: CVE-2020-25025 State: PUBLISHED Published: 2020-09-02T16:19:02 Last Updated: 2024-08-04T15:26:09.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: The l10nmgr (aka Localization Manager) extension before 7.4.0, 8.x before 8.7.0, and 9.x before 9.2.0 for TYPO3 allows Information Disclosure (translatable fields). Additional Analyst Notes: - CVE Program Container: References: - https://typo3.org/help/security-advisories - https://typo3.org/security/advisory/typo3-ext-sa-2020-016
CVE ID: CVE-2020-25026 State: PUBLISHED Published: 2020-09-02T16:17:34 Last Updated: 2024-08-04T15:26:09.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sf_event_mgt (aka Event management and registration) extension before 4.3.1 and 5.x before 5.1.1 for TYPO3 allows Information Disclosure (participant data, and event data via email) because of Broken Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://typo3.org/help/security-advisories - https://typo3.org/security/advisory/typo3-ext-sa-2020-017
CVE ID: CVE-2020-25031 State: PUBLISHED Published: 2020-08-31T03:43:45 Last Updated: 2024-08-04T15:26:09.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: checkinstall 1.6.2, when used to create a package that contains a symlink, may trigger the creation of a mode 0777 executable file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/checkinstall/+bug/1861281
CVE ID: CVE-2020-25032 State: PUBLISHED Published: 2020-08-31T03:57:28 Last Updated: 2024-08-04T15:26:09.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/corydolphin/flask-cors/releases/tag/3.0.9 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00032.html - http://lists.opensu
2020-09/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00039.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00048.html - https://www.debian.org/security/2020/dsa-4775
CVE ID: CVE-2020-25033 State: PUBLISHED Published: 2020-08-31T04:06:14 Last Updated: 2024-08-04T15:26:09.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Blubrry subscribe-sidebar (aka Subscribe Sidebar) plugin 1.3.1 for WordPress allows subscribe_sidebar.php&status= reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://zeroaptitude.com/pitticus/subscribe-sidebar-plugin-by-blubrry-v1-3-1-reflected-xss-20-jun-2020/ - https://wordpress.org/plugins/subscribe-sidebar/#developers
CVE ID: CVE-2020-25034 State: PUBLISHED Published: 2020-10-26T18:42:31 Last Updated: 2024-08-04T15:26:09.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: eMPS prior to eMPS 9.0 FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort, sort_by, search{URL], or search[attachment] parameter to the email search feature. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-031.txt
CVE ID: CVE-2020-25035 State: PUBLISHED Published: 2021-02-02T05:04:16 Last Updated: 2024-08-04T15:26:09.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with root privileges using chroothole_client's PHP call, a related issue to CVE-2017-11322. Additional Analyst Notes: - CVE Program Container: References: - https://ucopia.com/en/solutions/product-line-wifi/ - https://blog.globadis.com/blog/ucopia-v6-multiple-cves-root/
CVE ID: CVE-2020-25036 State: PUBLISHED Published: 2021-02-02T05:02:19 Last Updated: 2024-08-04T15:26:09.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: UCOPIA Wi-Fi appliances 6.0.5 allow authenticated remote attackers to escape the restricted administration shell CLI, and access a shell with admin user rights, via an unprotected less command. Additional Analyst Notes: - CVE Program Container: References: - https://ucopia.com/en/solutions/product-line-wifi/ - https://blog.globadis.com/blog/ucopia-v6-multiple-cves-root/
CVE ID: CVE-2020-25037 State: PUBLISHED Published: 2021-02-02T04:57:47 Last Updated: 2024-08-04T15:26:09.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with admin user privileges via an escape from a restricted command. Additional Analyst Notes: - CVE Program Container: References: - https://ucopia.com/en/solutions/product-line-wifi/ - https://blog.globadis.com/blog/ucopia-v6-multiple-cves-root/