Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-11769 State: PUBLISHED Published: 2020-04-15T13:45:45 Last Updated: 2024-08-04T11:42:00.166Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK40 before 2.3.5.30, RBK50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.1
30, RBK50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061761/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0518
CVE ID: CVE-2020-11770 State: PUBLISHED Published: 2020-04-15T13:47:36 Last Updated: 2024-08-04T11:42:00.232Z Severity: HIGH (CVSS 8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7000v2 before 1.0.0.53, D8500 before 1.0.3.44, R6220 before 1.1.0.80, R6250 before 1.0.4.34, R6260 before 1.1.0.64, R6400 before 1.0.1.46, R6400v2 before 1.0.2.66, R6700 before 1.0.2.6, R6700v2 before 1.2.0.36, R6700v3 before 1.0.2.66, R6800 before 1.2.0.36, R6900 before 1.0.2.4, R6900P before 1.3.1.64, R6900v2 befor
re 1.2.0.36, R6700v3 before 1.0.2.66, R6800 before 1.2.0.36, R6900 before 1.0.2.4, R6900P before 1.3.1.64, R6900v2 before 1.2.0.36, R7000 before 1.0.9.42, R7000P before 1.3.1.64, R7100LG before 1.0.0.50, R7300DST before 1.0.0.70, R7800 before 1.0.2.60, R7900 before 1.0.3.8, R7900P before 1.4.1.30, R8000 before 1.0.4.28, R8000P before 1.4.1.30, R8300 before 1.0.2.128, R8500 before 1.0.2.128, R8900 before 1.0.4.12, R9000 before 1.0.4.12, and XR500 before 2.3.2.32. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061760/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-Gateways-PSV-2018-0352
CVE ID: CVE-2020-11771 State: PUBLISHED Published: 2020-04-15T13:48:51 Last Updated: 2024-08-04T11:41:58.847Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061759/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2018-0519
CVE ID: CVE-2020-11772 State: PUBLISHED Published: 2020-04-15T13:50:02 Last Updated: 2024-08-04T11:41:59.793Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061758/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2018-0520
CVE ID: CVE-2020-11773 State: PUBLISHED Published: 2020-04-15T13:51:12 Last Updated: 2024-08-04T11:42:01.086Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061757/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2018-0521
CVE ID: CVE-2020-11774 State: PUBLISHED Published: 2020-04-15T13:52:12 Last Updated: 2024-08-04T11:41:59.795Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061756/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2018-0522
CVE ID: CVE-2020-11775 State: PUBLISHED Published: 2020-04-15T13:53:12 Last Updated: 2024-08-04T11:41:59.792Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK40 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.1
30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061755/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0523
CVE ID: CVE-2020-11776 State: PUBLISHED Published: 2020-04-15T13:54:07 Last Updated: 2024-08-04T11:41:59.923Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061754/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2018-0524
CVE ID: CVE-2020-11777 State: PUBLISHED Published: 2020-04-15T13:55:47 Last Updated: 2024-08-04T11:41:59.971Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by Stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061753/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateway-PSV-2018-0525
CVE ID: CVE-2020-11778 State: PUBLISHED Published: 2020-04-15T13:56:36 Last Updated: 2024-08-04T11:42:00.190Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061752/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2018-0526
CVE ID: CVE-2020-11779 State: PUBLISHED Published: 2020-04-15T15:04:21 Last Updated: 2024-08-04T11:41:59.858Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061751/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2018-0527
CVE ID: CVE-2020-11780 State: PUBLISHED Published: 2020-04-15T15:08:28 Last Updated: 2024-08-04T11:42:00.612Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061750/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2018-0528
CVE ID: CVE-2020-11781 State: PUBLISHED Published: 2020-04-15T15:09:40 Last Updated: 2024-08-04T11:42:00.823Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061749/Security-Advisory-for-Stored-Cross-Si
yst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061749/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0529
CVE ID: CVE-2020-11782 State: PUBLISHED Published: 2020-04-15T15:10:46 Last Updated: 2024-08-04T11:42:00.508Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061748/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2018-0530
CVE ID: CVE-2020-11783 State: PUBLISHED Published: 2020-04-15T15:11:50 Last Updated: 2024-08-04T11:42:00.598Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061747/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-and-Gateways-PSV-2018-0531
CVE ID: CVE-2020-11784 State: PUBLISHED Published: 2020-04-15T16:06:37 Last Updated: 2024-08-04T11:42:00.130Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061746/Security-Advisory-for-Stored-Cross-Si
yst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061746/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0532
CVE ID: CVE-2020-11785 State: PUBLISHED Published: 2020-04-15T16:07:37 Last Updated: 2024-08-04T11:41:59.563Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061745/Security-Advisory-for-Stored-Cross-Si
yst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061745/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0534
CVE ID: CVE-2020-11786 State: PUBLISHED Published: 2020-04-15T17:01:57 Last Updated: 2024-08-04T11:41:59.419Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061744/Security-Advisory-for-Stored-Cross-Si
yst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061744/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0535
CVE ID: CVE-2020-11787 State: PUBLISHED Published: 2020-04-15T17:04:05 Last Updated: 2024-08-04T11:41:59.452Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK40 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.1
30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, RBK50 before 2.3.5.30, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061743/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-Gateways-and-WiFi-Systems-PSV-2018-0553
CVE ID: CVE-2020-11788 State: PUBLISHED Published: 2020-04-15T17:05:25 Last Updated: 2024-08-04T11:41:59.358Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AC:L/AV:A/A:N/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.34, D7000 before 1.0.1.68, PR2000 before 1.0.0.28, R6050 before 1.0.1.18, JR6150 before 1.0.1.18, R6120 before 1.0.0.46, R6220 before 1.1.0.80, R6230 before 1.1.0.80, R6260 before 1.1.0.64, R6700v2 before 1.2.0.36, R6800 before 1.2.0.36, and R6900v2 before 1.2.0.36. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/0000617
R6900v2 before 1.2.0.36. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061742/Security-Advisory-for-Authentication-Bypass-on-Some-Gateways-and-Routers-PSV-2018-0570
CVE ID: CVE-2020-11789 State: PUBLISHED Published: 2020-04-15T17:06:26 Last Updated: 2024-08-04T11:41:59.999Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R6400v2 before 1.0.4.84, R6700 before 1.0.2.8, R6700v3 before 1.0.4.84, R6900 before 1.0.2.8, and R7900 before 1.0.3.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061741/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-PSV-2019-0051
CVE ID: CVE-2020-11790 State: PUBLISHED Published: 2020-04-15T17:07:22 Last Updated: 2024-08-04T11:41:59.923Z Severity: CRITICAL (CVSS 9.4 CVSS:3.0/AC:L/AV:N/A:L/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R7800 devices before 1.0.2.68 are affected by remote code execution by unauthenticated attackers. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061740/Security-Advisory-for-Unauthenticated-Remote-Code-Execution-on-R7800-PSV-2019-0076
CVE ID: CVE-2020-11791 State: PUBLISHED Published: 2020-04-15T17:08:24 Last Updated: 2024-08-04T11:41:59.794Z Severity: MEDIUM (CVSS 5.2 CVSS:3.0/AC:L/AV:A/A:N/C:L/I:L/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR JGS516PE devices before 2.6.0.43 are affected by reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061739/Security-Advisory-for-Reflected-Cross-Site-Scripting-on-JGS516PE-PSV-2019-0194
CVE ID: CVE-2020-11792 State: PUBLISHED Published: 2020-04-15T17:09:29 Last Updated: 2024-08-04T11:41:59.857Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R8900, R9000, RAX120, and XR700 devices before 2020-01-20 are affected by Transport Layer Security (TLS) certificate private key disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061582/Security-Advisory-for-Signed-TLS-Certificate-Private-Key-Disclosure-on-Some-Routers-PSV-2020-0105
CVE ID: CVE-2020-11793 State: PUBLISHED Published: 2020-04-17T12:40:21 Last Updated: 2024-08-04T11:42:00.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash). Additional Analyst Notes: - CVE Program Container: References: - https://webkitgtk.org/security/WSA-2020-0004.html - https://wpewebkit.org/security/WSA-2020-0004.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3P4YISPE5QX4YD54GDRZIH2X5RCH
://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3P4YISPE5QX4YD54GDRZIH2X5RCH3QGW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UTKY2MWP6PB6TE3ZKOOMKX7HZUCQNYF6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3MQTRC6ITFTVS5R5Z24PMJS6FXJKGRD/ - https://usn.ubuntu.com/4331-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00008.html - https://security.gentoo.org/glsa/202006-08
CVE ID: CVE-2020-11795 State: PUBLISHED Published: 2020-04-22T13:52:48 Last Updated: 2024-08-04T11:41:59.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains Space through 2020-04-22, the session timeout period was configured improperly. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2020/04/22/jetbrains-security-bulletin-q1-2020/
CVE ID: CVE-2020-11796 State: PUBLISHED Published: 2020-04-22T13:52:50 Last Updated: 2024-08-04T11:41:59.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains Space through 2020-04-22, the password authentication implementation was insecure. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2020/04/22/jetbrains-security-bulletin-q1-2020/
CVE ID: CVE-2020-11797 State: PUBLISHED Published: 2020-08-26T18:15:24 Last Updated: 2024-08-04T11:42:00.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Authentication Bypass vulnerability in the Published Area of the web conferencing component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an unauthenticated attacker to gain access to unauthorized information due to insufficient access validation. A successful exploit could allow an attacker to access sensitive shared files. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-prod
nces: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0005
CVE ID: CVE-2020-11798 State: PUBLISHED Published: 2020-06-10T00:00:00 Last Updated: 2024-08-04T11:42:00.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. A successful exploit could allow an attacker to access sensitive information from the restricted directories. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories/mitel-product-security-advisor
- CVE Program Container: References: - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0005 - https://www.mitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin-20-0005-01.pdf - http://packetstormsecurity.com/files/171751/Mitel-MiCollab-AWV-8.1.2.4-9.1.3-Directory-Traversal-LFI.html
CVE ID: CVE-2020-11799 State: PUBLISHED Published: 2020-04-15T18:11:17 Last Updated: 2024-08-04T11:42:01.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Z-Cron 5.6 Build 04 allows an unprivileged attacker to elevate privileges by modifying a privileged user's task. This can also affect all users who are signed in on the system if a shell is placed in a location that other unprivileged users have access to. Additional Analyst Notes: - CVE Program Container: References: - https://blog.spookysec.net/zcron/
CVE ID: CVE-2020-11800 State: PUBLISHED Published: 2020-10-07T15:02:53 Last Updated: 2024-08-04T11:41:59.916Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://support.zabbix.com/browse/DEV-1538 - https://support.zabbix.com/browse/ZBXSEC-30 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00007.html - https://support.zabbix.com/browse/ZBX-17600 - https://lists.debian.org/debian-lts-announce/2020/11/msg00039.html