Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-7850 State: PUBLISHED Published: 2021-03-29T15:45:28 Last Updated: 2024-08-04T09:41:01.869Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: DOUZONE ICT GROUP. Products: NBBDownloader.ocx Problem Types: CWE-88 Description: NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_seq
nalyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35982 - http://help.neobizbox.com/
CVE ID: CVE-2020-7851 State: PUBLISHED Published: 2021-04-19T12:55:36.745960Z Last Updated: 2024-09-17T02:48:07.365Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: INNORIX Products: INNORIX Agent.exe Problem Types: CWE-88 Description: Innorix Web-Based File Transfer Solution versuibs prior to and including 9.2.18.385 contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the internal method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/
icious code infection. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35984 - https://www.innorix.com/ko/
CVE ID: CVE-2020-7852 State: PUBLISHED Published: 2021-03-24T21:10:21.359775Z Last Updated: 2024-09-17T01:36:01.501Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: HumanTalk Products: DaviewIndy Problem Types: CWE-122 Description: DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed ex.j2c format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35940
CVE ID: CVE-2020-7853 State: PUBLISHED Published: 2021-03-24T20:55:32.134202Z Last Updated: 2024-09-16T22:10:14.144Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Tobesoft Products: Xplatform Problem Types: CWE-787, CWE-125 Description: An outbound read/write vulnerability exists in XPLATFORM that does not check offset input ranges, allowing out-of-range data to be read. An attacker can exploit arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35943
CVE ID: CVE-2020-7856 State: PUBLISHED Published: 2021-04-20T12:02:43 Last Updated: 2024-08-04T09:41:01.889Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Cnesty Products: Helpcom Problem Types: CWE-287 Description: A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient authentication validation. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36003
CVE ID: CVE-2020-7857 State: PUBLISHED Published: 2021-04-20T19:56:46 Last Updated: 2024-08-04T09:41:01.893Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Tobesoft Products: XPlatform Problem Types: CWE-470 Description: A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient validation of improper classes. This issue affects: Tobesoft XPlatform versions prior to 9.2.2.280. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36006
CVE ID: CVE-2020-7858 State: PUBLISHED Published: 2021-04-22T17:59:26 Last Updated: 2024-08-04T09:41:01.924Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: cdnetworks Products: AquaNPlayer Problem Types: CWE-548 Description: There is a directory traversing vulnerability in the download page url of AquaNPlayer 2.0.0.92. The IP of the download page url is localhost and an attacker can traverse directories using "dot dot" sequences(../../) to view host file on the system. This vulnerability can cause information leakage. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=360
tes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36014
CVE ID: CVE-2020-7859 State: REJECTED Published: 2021-10-25T13:46:05 Last Updated: 2021-10-25T13:46:05 Description: No description available.
CVE ID: CVE-2020-7860 State: PUBLISHED Published: 2021-06-11T17:36:01.314891Z Last Updated: 2024-09-16T19:05:23.135Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Estsoft Products: UnEGG Problem Types: CWE-190 Description: UnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by UnEGG. Attackers could exploit this and arbitrary code execution. This issue affects: Estsoft UnEGG 0.5 versions prior to 1.0 on linux. Additional Analyst Notes: - CVE Program Container: References: - https://www.altools.co.kr/Download/ALZip.aspx
CVE ID: CVE-2020-7861 State: PUBLISHED Published: 2021-04-22T17:33:16 Last Updated: 2024-08-04T09:41:01.876Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Koino Products: AquaNPlayer Problem Types: CWE-23 Description: AnySupport (Remote support solution) before 2019.3.21.0 allows directory traversing because of swprintf function to copy file from a management PC to a client PC. This can be lead to arbitrary file execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36016
CVE ID: CVE-2020-7862 State: PUBLISHED Published: 2021-06-24T10:15:14.096811Z Last Updated: 2024-09-16T23:06:17.535Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Helpu,inc Products: HelpuViewer.exe, HelpuServer.exe, HelpuFTClient.dll, HelpuFTServer.dll Problem Types: CWE-20, CWE-120 Description: A vulnerability in agent program of HelpU remote control solution could allow an authenticated remote attacker to execute arbitrary commands This vulnerability is due to insufficient input santization when communicating customer process. Additional Analyst Notes: - CVE Program Container: References: - https://krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_seque
nalyst Notes: - CVE Program Container: References: - https://krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36094 - https://helpu.co.kr/customer/download.html
CVE ID: CVE-2020-7863 State: PUBLISHED Published: 2021-08-05T20:24:26 Last Updated: 2024-08-04T09:41:01.888Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Raonwiz,inc Products: RAON K Upload Problem Types: CWE-20 Description: A vulnerability in File Transfer Solution of Raonwiz could allow arbitrary command execution as the result of viewing a specially-crafted web page. This vulnerability is due to insufficient validation of the parameter of the specific method. An attacker could exploit this vulnerability by setting the parameter to the command they want to execute. A successful exploit could allow the attacker to execute arbitrary commands on a target sys
ommand they want to execute. A successful exploit could allow the attacker to execute arbitrary commands on a target system as the user. However, the victim must run the Internet Explorer browser with administrator privileges because of the cross-domain policy. Additional Analyst Notes: - CVE Program Container: References: - https://boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36166 - http://www.raonk.com/page/customs/modify.aspx?pSeq=20&pageno=1
CVE ID: CVE-2020-7864 State: PUBLISHED Published: 2021-06-15T14:47:39.606793Z Last Updated: 2024-09-16T23:20:34.835Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Raonwiz Products: DEXT5Editor Problem Types: CWE-434 Description: Parameter manipulation can bypass authentication to cause file upload and execution. This will execute the remote code. This issue affects: Raonwiz DEXT5Editor versions prior to 3.5.1405747.1100.03. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36085
CVE ID: CVE-2020-7865 State: PUBLISHED Published: 2021-09-07T14:46:16 Last Updated: 2024-08-04T09:41:01.879Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Inoguard Products: ExECM CoreB2B Problem Types: CWE-20 Description: A vulnerability(improper input validation) in the ExECM CoreB2B solution allows an unauthenticated attacker to download and execute an arbitrary file via httpDownload function. A successful exploit could allow the attacker to hijack vulnerable system. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36229
CVE ID: CVE-2020-7866 State: PUBLISHED Published: 2021-07-20T10:12:42 Last Updated: 2024-08-04T09:41:01.891Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Tobesoft Products: XPLATFORM Problem Types: CWE-20 Description: When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation Additional Analyst Notes: - CVE Program Container: References: - http://support.tobesoft.co.kr/Support/index.html - https://krcert.or.kr/data/secNoticeView.do?bulletin_writing_sequence=36082
CVE ID: CVE-2020-7867 State: PUBLISHED Published: 2021-10-27T00:43:35 Last Updated: 2024-08-04T09:41:01.954Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: HelpU Products: HelpuViewer.exe Problem Types: CWE-20 Description: An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and execution without click file transfer menu. It is possible to file in arbitrary directory for user because the viewer program receive the file from agent with privilege of administrator. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=
Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36303
CVE ID: CVE-2020-7868 State: PUBLISHED Published: 2021-06-29T13:39:21 Last Updated: 2024-08-04T09:41:01.988Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: HelpU Products: helpu.ocx Problem Types: CWE-141 Description: A remote code execution vulnerability exists in helpUS(remote administration tool) due to improper validation of parameter of ShellExecutionExA function used for login. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36088
CVE ID: CVE-2020-7869 State: PUBLISHED Published: 2021-06-29T13:48:53 Last Updated: 2024-08-04T09:41:02.005Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: mastersoft Products: ZOOK Problem Types: CWE-20 Description: An improper input validation vulnerability of ZOOK software (remote administration tool) could allow a remote attacker to create arbitrary file. The ZOOK viewer has the "Tight file CMD" function to create file. An attacker could create and execute arbitrary file in the ZOOK agent program using "Tight file CMD" without authority. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulle
y. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36090
CVE ID: CVE-2020-7870 State: PUBLISHED Published: 2021-06-29T13:15:26 Last Updated: 2024-08-04T09:41:01.926Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: UNIDOCS Products: ezPDF Reader, ezPDF Editor Problem Types: CWE-20 Description: A memory corruption vulnerability exists when ezPDF improperly handles the parameter. This vulnerability exists due to insufficient validation of the parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36099
CVE ID: CVE-2020-7871 State: PUBLISHED Published: 2021-06-29T12:51:48 Last Updated: 2024-08-04T09:41:01.876Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Cnesty Products: Helpcom Problem Types: CWE-20 Description: A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient validation of the parameter. This issue affects: Cnesty Helpcom 10.0 versions prior to. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36095
CVE ID: CVE-2020-7872 State: PUBLISHED Published: 2021-07-12T13:40:38 Last Updated: 2024-08-04T09:41:01.893Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: HumanTalk Products: DaviewIndy Problem Types: CWE-190 Description: DaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed format file that is mishandled by DaviewIndy. Attackers could exploit this and arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://datools.kr/zeroboard/view.php?id=datools_notice&page=5&sn1=&divpage=1&sn=off&ss=on&sc=on&select_arrange=headnum&desc=asc&no=506
CVE ID: CVE-2020-7873 State: PUBLISHED Published: 2021-09-09T12:48:43 Last Updated: 2024-08-04T09:41:01.883Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Younglimwon Co., Ltd Products: K-System WellComm Problem Types: CWE-494 Description: Download of code without integrity check vulnerability in ActiveX control of Younglimwon Co., Ltd allows the attacker to cause a arbitrary file download and execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36233
CVE ID: CVE-2020-7874 State: PUBLISHED Published: 2021-09-09T12:49:59 Last Updated: 2024-08-04T09:41:01.982Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: TOBESOFT Products: NEXACRO14 Problem Types: CWE-494 Description: Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and execution. This vulnerability is due to incomplete validation of file download URL or file extension. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36235
CVE ID: CVE-2020-7875 State: PUBLISHED Published: 2021-10-28T15:28:37 Last Updated: 2024-08-04T09:41:01.864Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: RAONWIZ Products: DEXT5 Upload Problem Types: CWE-494 Description: DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36312
CVE ID: CVE-2020-7877 State: PUBLISHED Published: 2021-09-07T11:43:54 Last Updated: 2024-08-04T09:41:02.007Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: mastersoft Products: ZOOKViewer_Setup.exe, ZOOKAgentSetup.exe Problem Types: CWE-120 Description: A buffer overflow issue was discovered in ZOOK solution(remote administration tool) through processing 'ConnectMe' command while parsing a crafted OUTERIP value because of missing boundary check. This vulnerability allows the attacker to execute remote arbitrary command. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36216
CVE ID: CVE-2020-7878 State: PUBLISHED Published: 2021-12-28T19:09:21.634352Z Last Updated: 2024-09-16T22:41:33.761Z Vendors: 4NB Products: VideoOffice Problem Types: CWE-353 Description: An arbitrary file download and execution vulnerability was found in the VideoOffice X2.9 and earlier versions (CVE-2020-7878). This issue is due to missing support for integrity check. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36349
CVE ID: CVE-2020-7879 State: PUBLISHED Published: 2021-11-30T18:37:29 Last Updated: 2024-08-04T09:41:01.886Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: EFM networks & multimedia Products: ipTIME C200 IP Camera Problem Types: CWE-78 Description: This issue was discovered when the ipTIME C200 IP Camera was synchronized with the ipTIME NAS. It is necessary to extract value for ipTIME IP camera because the ipTIME NAS send ans setCookie('[COOKIE]') . The value is transferred to the --header option in wget binary, and there is no validation check. This vulnerability allows remote attackers to execute remote command. Additional Analyst Notes: - CVE Program Conta
eck. This vulnerability allows remote attackers to execute remote command. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36365
CVE ID: CVE-2020-7880 State: PUBLISHED Published: 2021-11-30T18:47:59 Last Updated: 2024-08-04T09:41:01.881Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: douzone Products: NeoRS Problem Types: CWE-20 Description: The vulnerabilty was discovered in ActiveX module related to NeoRS remote support program. This issue allows an remote attacker to download and execute remote file. It is because of improper parameter validation of StartNeoRS function in ActiveX. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36367
CVE ID: CVE-2020-7881 State: PUBLISHED Published: 2021-11-26T16:29:17 Last Updated: 2024-08-04T09:41:01.981Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: AfreecaTV Products: afreecatvstreamer.exe Problem Types: CWE-190 Description: The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A stack-based buffer overflow leading to remote code execution was discovered in strcpy() operate by "FanTicket" field. It is because of stored data without validation of length. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bul
gth. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36357
CVE ID: CVE-2020-7882 State: PUBLISHED Published: 2021-11-22T14:43:26 Last Updated: 2024-08-04T09:48:23.706Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Hancomwith Products: anySign4PC Problem Types: CWE-24 Description: Using the parameter of getPFXFolderList function, attackers can see the information of authorization certification and delete the files. It occurs because the parameter contains path traversal characters(ie. '../../../') Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36344
CVE ID: CVE-2020-7883 State: PUBLISHED Published: 2021-12-28T19:12:33.509413Z Last Updated: 2024-09-17T02:52:23.288Z Vendors: WOWSOFT Products: Printchaser Problem Types: CWE-494 Description: Printchaser v2.2021.804.1 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36350
CVE ID: CVE-2020-7904 State: PUBLISHED Published: 2020-01-30T17:01:39 Last Updated: 2024-08-04T09:48:23.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/
CVE ID: CVE-2020-7905 State: PUBLISHED Published: 2020-01-30T17:03:36 Last Updated: 2024-08-04T09:48:23.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ports listened to by JetBrains IntelliJ IDEA before 2019.3 were exposed to the network. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/
CVE ID: CVE-2020-7906 State: PUBLISHED Published: 2020-01-30T17:09:16 Last Updated: 2024-08-04T09:48:23.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release version 2019.3. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/
CVE ID: CVE-2020-7907 State: PUBLISHED Published: 2020-02-21T20:37:24 Last Updated: 2024-08-04T09:48:23.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the JetBrains Scala plugin before 2019.2.1, some artefact dependencies were resolved over unencrypted connections. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/
CVE ID: CVE-2020-7908 State: PUBLISHED Published: 2020-01-30T17:10:34 Last Updated: 2024-08-04T09:48:23.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2019.1.5, reverse tabnabbing was possible on several pages. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/
CVE ID: CVE-2020-7909 State: PUBLISHED Published: 2020-01-30T17:12:01 Last Updated: 2024-08-04T09:48:23.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2019.1.5, some server-stored passwords could be shown via the web UI. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/
CVE ID: CVE-2020-7910 State: PUBLISHED Published: 2020-01-30T17:13:21 Last Updated: 2024-08-04T09:48:23.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: JetBrains TeamCity before 2019.2 was vulnerable to a stored XSS attack by a user with the developer role. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/