Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
7bb3fdbe2e5bc34aa6f4c4 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00011.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SRVVNXCNTNMPCIAZIVR4FAGYCSU53FNA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FF6HYIBREQGATRM5COF57MRQWKOKCWZ3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKNKSGBVYGRRVRLFEFBEKUEJYJR5LWOF/ - https://github.com/adrienverge/openfortivpn/commit/60660e00b80bad0fadcf39aee86f6f8756c94f91
CVE ID: CVE-2020-7042 State: PUBLISHED Published: 2020-02-27T17:30:16 Last Updated: 2024-08-04T09:18:02.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because the hostname check operates on uninitialized memory. The outcome is that a valid certificate is never accepted (only a malformed certificate may be accepted). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/adrienverge/openfortivpn/issues/536 - https://github.com/adrienverge/openfortivpn/commit/cd9368c6a1b4ef91d77bb3fdbe2e5bc34aa6f4c4 - http://lists.opensus
536 - https://github.com/adrienverge/openfortivpn/commit/cd9368c6a1b4ef91d77bb3fdbe2e5bc34aa6f4c4 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00011.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SRVVNXCNTNMPCIAZIVR4FAGYCSU53FNA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FF6HYIBREQGATRM5COF57MRQWKOKCWZ3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKNKSGBVYGRRVRLFEFBEKUEJYJR5LWOF/ - https://github.com/adrienverge/openfortivpn/com
ce%40lists.fedoraproject.org/message/CKNKSGBVYGRRVRLFEFBEKUEJYJR5LWOF/ - https://github.com/adrienverge/openfortivpn/commit/9eee997d599a89492281fc7ffdd79d88cd61afc3
CVE ID: CVE-2020-7043 State: PUBLISHED Published: 2020-02-27T17:30:51 Last Updated: 2024-08-04T09:18:03.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c mishandles certificate validation because hostname comparisons do not consider '\0' characters, as demonstrated by a good.example.com\x00evil.example.com attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/adrienverge/openfortivpn/issues/536 - https://github.com/adrienverge/openfortivpn/commit/cd9368c6a1b4ef91d77bb3fdbe2e5bc34aa6f4c4 - http://lists.opensuse.org/opensuse-security-announce/2020-03/
fortivpn/commit/cd9368c6a1b4ef91d77bb3fdbe2e5bc34aa6f4c4 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00011.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SRVVNXCNTNMPCIAZIVR4FAGYCSU53FNA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FF6HYIBREQGATRM5COF57MRQWKOKCWZ3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKNKSGBVYGRRVRLFEFBEKUEJYJR5LWOF/ - https://github.com/adrienverge/openfortivpn/commit/6328a070ddaab16faaf008cb9a8a62439c30f
SGBVYGRRVRLFEFBEKUEJYJR5LWOF/ - https://github.com/adrienverge/openfortivpn/commit/6328a070ddaab16faaf008cb9a8a62439c30f2a8
CVE ID: CVE-2020-7044 State: PUBLISHED Published: 2020-01-16T03:05:59 Last Updated: 2024-08-04T09:18:02.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using >= and <= to resolve off-by-one errors. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16324 - https://www.wireshark.org/security/wnpa-sec-2020-01.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f90a3720b73ca140403315126e2a478c4f70ca03 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg0
=commit%3Bh=f90a3720b73ca140403315126e2a478c4f70ca03 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html - https://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZBICEY2HGSNQ3RPBLMDDYVAHGOGS4E2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2GMGLT5XND7U34WX3O23WKUZ7JHMVN/
CVE ID: CVE-2020-7045 State: PUBLISHED Published: 2020-01-16T03:07:27 Last Updated: 2024-08-04T09:18:02.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16258 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=01f261de41f4dd3233ef578e5c0ffb9c25c7d14d - https://www.wireshark.org/security/wnpa-sec-2020-02.html - https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html
CVE ID: CVE-2020-7046 State: PUBLISHED Published: 2020-02-12T16:40:16 Last Updated: 2024-08-04T09:18:02.989Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login infinite loop. Additional Analyst Notes: - CVE Program Container: References: - https://dovecot.org/security - http://www.openwall.com/lists/oss-security/2020/02/12/1 - https://dovecot.org/pipermail/dovecot-news/2020-February/000431.html - https://lists.fedoraproj
-security/2020/02/12/1 - https://dovecot.org/pipermail/dovecot-news/2020-February/000431.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XYT55WH372BJOXCJRKBDIFGBMPVOIDT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJXHOUT3FH2DJNMACSX4GHPP4MUV4UKA/
CVE ID: CVE-2020-7047 State: PUBLISHED Published: 2020-01-16T20:37:04 Last Updated: 2024-08-04T09:18:02.597Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: The WordPress plugin, WP Database Reset through 3.1, contains a flaw that gave any authenticated user, with minimal permissions, the ability (with a simple wp-admin/admin.php?db-reset-tables[]=users request) to escalate their privileges to administrator while dropping all other users from the table. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wordpress-database-reset/#developers - https://wpvulndb.com/v
ram Container: References: - https://wordpress.org/plugins/wordpress-database-reset/#developers - https://wpvulndb.com/vulnerabilities/10028 - https://www.wordfence.com/blog/2020/01/easily-exploitable-vulnerabilities-patched-in-wp-database-reset-plugin/
CVE ID: CVE-2020-7048 State: PUBLISHED Published: 2020-01-16T20:35:15 Last Updated: 2024-08-04T09:18:03.025Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AC:L/AV:N/A:H/C:N/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any table in the database to the initial WordPress set-up state (deleting all site content stored in that table), as demonstrated by a wp-admin/admin-post.php?db-reset-tables[]=comments URI. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wordpress-database-reset/#developers - https://wpvulndb
E Program Container: References: - https://wordpress.org/plugins/wordpress-database-reset/#developers - https://wpvulndb.com/vulnerabilities/10027 - https://www.wordfence.com/blog/2020/01/easily-exploitable-vulnerabilities-patched-in-wp-database-reset-plugin/
CVE ID: CVE-2020-7049 State: PUBLISHED Published: 2020-06-30T18:36:08 Last Updated: 2024-08-04T09:18:02.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nozomi Networks OS before 19.0.4 allows /#/network?tab=network_node_list.html CSV Injection. Additional Analyst Notes: - CVE Program Container: References: - https://www2.deloitte.com/de/de/pages/risk/articles/nozomi-csv-injection.html?nc=1
CVE ID: CVE-2020-7050 State: PUBLISHED Published: 2020-02-15T17:52:46 Last Updated: 2024-08-04T09:18:02.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Codologic Codoforum through 4.8.4 allows a DOM-based XSS. While creating a new topic as a normal user, it is possible to add a poll that is automatically loaded in the DOM once the thread/topic is opened. Because session cookies lack the HttpOnly flag, it is possible to steal authentication cookies and take over accounts. Additional Analyst Notes: - CVE Program Container: References: - https://codologic.com/forum/index.php?u=/topic/12638/codoforum-4-8-8-released-and-the-future#post-23845 - https://www.linkedin.com/posts/polina
orum/index.php?u=/topic/12638/codoforum-4-8-8-released-and-the-future#post-23845 - https://www.linkedin.com/posts/polina-voronina-896819b5_discovered-by-polina-voronina-jan-15-activity-6634436086540054528-dDgg/
CVE ID: CVE-2020-7051 State: PUBLISHED Published: 2020-02-13T15:43:24 Last Updated: 2024-08-04T09:18:02.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session cookies lack the HttpOnly flag. The impact is account takeover. Additional Analyst Notes: - CVE Program Container: References: - https://codologic.com/forum/index.php?u=/topic/12638/codoforum-4-8-8-released-and-the-future#post-23845 - https://www.linkedin.com/posts/polina-voronina-896819b5_discovered-by-polina-voronina-jan-15-activity-6634436086540054528-dDgg/
CVE ID: CVE-2020-7052 State: PUBLISHED Published: 2020-01-24T19:31:59 Last Updated: 2024-08-04T09:18:02.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2020-04 - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12977&token=33f948eed0c2fd69d238d9515779be337ef7592d&download=
CVE ID: CVE-2020-7053 State: PUBLISHED Published: 2020-01-14T20:04:02 Last Updated: 2024-08-04T09:18:03.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a use-after-free (write) in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c, aka CID-7dc40713618c. This is related to i915_gem_context_destroy_ioctl in drivers/gpu/drm/i915/i915_gem_context.c. Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/stable/20200114183937.12224-1-tyhicks%40canonical.com - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.
el.org/stable/20200114183937.12224-1-tyhicks%40canonical.com - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7dc40713618c884bf07c030d1ab1f47a9dc1f310 - https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1859522 - https://usn.ubuntu.com/4255-1/ - https://usn.ubuntu.com/4255-2/ - https://security.netapp.com/advisory/ntap-20200204-0002/ - http://packetstormsecurity.com/files/156455/Kernel-Live-Patch-Security-Notice-LSN-0063-1.html - https://usn.ubuntu.com/4285-1/ - https://usn.ubuntu.com/4287-1/ - https://usn.ubuntu.com/4287-2/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
CVE ID: CVE-2020-7054 State: PUBLISHED Published: 2020-01-14T20:32:20 Last Updated: 2024-08-04T09:18:02.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: MmsValue_decodeMmsData in mms/iso_mms/server/mms_access_result.c in libIEC61850 through 1.4.0 has a heap-based buffer overflow when parsing the MMS_BIT_STRING data type. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mz-automation/libiec61850/issues/200
CVE ID: CVE-2020-7055 State: PUBLISHED Published: 2020-04-22T17:02:49 Last Updated: 2024-08-04T09:18:02.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function, allowing an attacker to execute code via a crafted ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - https://pentest.co.uk/labs/advisory/cve-2020-7055/ - https://pentest.co.uk/labs/vulnerability-disclosure-cve-2020-7055/
CVE ID: CVE-2020-7057 State: PUBLISHED Published: 2020-01-14T21:28:51 Last Updated: 2024-08-04T09:18:03.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hikvision DVR DS-7204HGHI-F1 V4.0.1 build 180903 Web Version sends a different response for failed ISAPI/Security/sessionLogin/capabilities login attempts depending on whether the user account exists, which might make it easier to enumerate users. However, only about 4 or 5 failed logins are allowed. Additional Analyst Notes: - CVE Program Container: References: - https://sku11army.blogspot.com/2020/01/hikvision-dvr-ds-7204hghi-user.html
CVE ID: CVE-2020-7058 State: PUBLISHED Published: 2020-01-15T06:03:56 Last Updated: 2024-11-18T17:48:50.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: data_input.php in Cacti 1.2.8 allows remote code execution via a crafted Input String to Data Collection -> Data Input Methods -> Unix -> Ping Host. NOTE: the vendor has stated "This is a false alarm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Cacti/cacti/issues/3186
CVE ID: CVE-2020-7059 State: PUBLISHED Published: 2020-02-10T07:45:13.921535Z Last Updated: 2024-09-17T02:37:14.052Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-125 Description: When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function to read past the allocated buffer. This may lead to information disclosure or crash. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2020/Feb/27 - https://www.debian.org/security/2020/dsa-4626 -
ram Container: References: - https://seclists.org/bugtraq/2020/Feb/27 - https://www.debian.org/security/2020/dsa-4626 - https://usn.ubuntu.com/4279-1/ - https://www.debian.org/security/2020/dsa-4628 - https://seclists.org/bugtraq/2020/Feb/31 - https://lists.debian.org/debian-lts-announce/2020/02/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html - https://security.gentoo.org/glsa/202003-57 - https://www.oracle.com/security-alerts/cpujul2020.html - https://bugs.php.net/bug.php?id=79099 - https://security.netapp.com/advisory/ntap-20200221-0002/ - https://seclists.org/bugtraq/2021/Jan/3 - https://www.oracle.com/security-alerts/cpuApr2021.html - https://ww
21-0002/ - https://seclists.org/bugtraq/2021/Jan/3 - https://www.oracle.com/security-alerts/cpuApr2021.html - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2020-7060 State: PUBLISHED Published: 2020-02-10T07:45:14.320387Z Last Updated: 2024-09-17T03:33:06.766Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-125 Description: When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbfl_filt_conv_big5_wchar to read past the allocated buffer. This may lead to information disclosure or crash. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2020/Feb/27 - https://www.debian.o
al Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2020/Feb/27 - https://www.debian.org/security/2020/dsa-4626 - https://usn.ubuntu.com/4279-1/ - https://www.debian.org/security/2020/dsa-4628 - https://seclists.org/bugtraq/2020/Feb/31 - https://lists.debian.org/debian-lts-announce/2020/02/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html - https://security.gentoo.org/glsa/202003-57 - https://www.oracle.com/security-alerts/cpujul2020.html - https://security.netapp.com/advisory/ntap-20200221-0002/ - https://bugs.php.net/bug.php?id=79037 - https://seclists.org/bugtraq/2021/Jan/3 - https://www.oracle.com/security-alerts/
ttps://bugs.php.net/bug.php?id=79037 - https://seclists.org/bugtraq/2021/Jan/3 - https://www.oracle.com/security-alerts/cpuApr2021.html - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2020-7061 State: PUBLISHED Published: 2020-02-27T20:25:14.751954Z Last Updated: 2024-09-17T01:21:01.352Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-125 Description: In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte read past the allocated buffer. This could potentially lead to information disclosure or crash. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=79171 - https://security.gentoo.org/glsa/202003-57 - https://www.tenable.
References: - https://bugs.php.net/bug.php?id=79171 - https://security.gentoo.org/glsa/202003-57 - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2020-7062 State: PUBLISHED Published: 2020-02-27T20:25:15.153032Z Last Updated: 2024-09-16T22:24:49.661Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: PHP Group Products: PHP Problem Types: CWE-476 Description: In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null pointer dereference, which would likely lead to a crash. Additional Analyst Notes: - CVE Program Container: Refer
r null pointer dereference, which would likely lead to a crash. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=79221 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html - https://security.gentoo.org/glsa/202003-57 - https://lists.debian.org/debian-lts-announce/2020/03/msg00034.html - https://usn.ubuntu.com/4330-1/ - https://www.debian.org/security/2020/dsa-4717 - https://www.debian.org/security/2020/dsa-4719 - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2020-7063 State: PUBLISHED Published: 2020-02-27T20:25:15.606064Z Last Updated: 2024-09-16T16:49:14.274Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: PHP Group Products: PHP Problem Types: CWE-281 Description: In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is extracted. Additional Analyst Notes: - CVE Program
files having more lax permissions than intended when such archive is extracted. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=79082 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html - https://security.gentoo.org/glsa/202003-57 - https://lists.debian.org/debian-lts-announce/2020/03/msg00034.html - https://usn.ubuntu.com/4330-1/ - https://www.debian.org/security/2020/dsa-4717 - https://www.debian.org/security/2020/dsa-4719 - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2020-7064 State: PUBLISHED Published: 2020-04-01T03:35:13.144448Z Last Updated: 2024-09-16T23:56:45.058Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-125 Description: In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exif_read_data() function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory. This could potentially lead to information disclosure or crash. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2020/04/msg00021.html - https://usn.ubuntu.co
gram Container: References: - https://lists.debian.org/debian-lts-announce/2020/04/msg00021.html - https://usn.ubuntu.com/4330-1/ - https://usn.ubuntu.com/4330-2/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00025.html - https://www.debian.org/security/2020/dsa-4717 - https://www.debian.org/security/2020/dsa-4719 - https://bugs.php.net/bug.php?id=79282 - https://security.netapp.com/advisory/ntap-20200403-0001/ - https://www.oracle.com/security-alerts/cpujan2021.html - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2020-7065 State: PUBLISHED Published: 2020-04-01T03:35:13.554348Z Last Updated: 2024-09-17T04:25:45.769Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: PHP Group Products: PHP Problem Types: CWE-121 Description: In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/4330-1/ - https://usn.ubuntu.com/4330-2/ - https://www.debian.org/security/2020/d
: References: - https://usn.ubuntu.com/4330-1/ - https://usn.ubuntu.com/4330-2/ - https://www.debian.org/security/2020/dsa-4719 - https://security.netapp.com/advisory/ntap-20200403-0001/ - https://www.oracle.com/security-alerts/cpuoct2021.html - https://bugs.php.net/bug.php?id=79371 - https://www.php.net/ChangeLog-7.php#7.4.4 - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2020-7066 State: PUBLISHED Published: 2020-04-01T03:35:14.021693Z Last Updated: 2024-09-17T01:51:01.194Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: PHP Group Products: PHP Problem Types: CWE-170 Description: In PHP versions 7.2.x below 7.2.29, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using get_headers() with user-supplied URL, if the URL contains zero (\0) character, the URL will be silently truncated at it. This may cause some software to make incorrect assumptions about the target of the get_headers() and possibly send some information to a wrong server. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.p