Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-14430 State: PUBLISHED Published: 2020-06-18T16:26:18 Last Updated: 2024-08-04T12:46:34.455Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: Refer
.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061939/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-WiFi-Systems-PSV-2020-0051
CVE ID: CVE-2020-14431 State: PUBLISHED Published: 2020-06-18T16:26:41 Last Updated: 2024-08-04T12:46:34.563Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: Refer
.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061944/Security-Advisory-for-Admin-Credential-Disclosure-on-Some-WiFi-Systems-PSV-2020-0068
CVE ID: CVE-2020-14432 State: PUBLISHED Published: 2020-06-18T16:33:29 Last Updated: 2024-08-04T12:46:34.433Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by CSRF. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/00006193
BS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061937/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-WiFi-Systems-PSV-2020-0049
CVE ID: CVE-2020-14433 State: PUBLISHED Published: 2020-06-18T16:33:53 Last Updated: 2024-08-04T12:46:34.580Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBK842 before 3.2.15.25, RBR850 before 3.2.15.25, RBS850 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, and RBS750 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: Referen
.15.25, RBR750 before 3.2.15.25, and RBS750 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061932/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0035
CVE ID: CVE-2020-14434 State: PUBLISHED Published: 2020-06-18T16:34:38 Last Updated: 2024-08-04T12:46:34.525Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, RBS850 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, and RBS840 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: Referen
.15.25, RBR840 before 3.2.15.25, and RBS840 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061934/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0040
CVE ID: CVE-2020-14435 State: PUBLISHED Published: 2020-06-18T16:35:24 Last Updated: 2024-08-04T12:46:34.516Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AC:H/AV:A/A:N/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.2.104, SRS60 before 2.5.2.104, SRR60 before 2.5.2.104, SRK60B03 before 2.5.2.104, SRK60B04 before 2.5.2.104, SRK60B05 before 2.5.2.104, and SRK60B06 before 2.5.2.104. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061930/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-S
References: - https://kb.netgear.com/000061930/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0026
CVE ID: CVE-2020-14436 State: PUBLISHED Published: 2020-06-18T16:35:43 Last Updated: 2024-08-04T12:46:34.600Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, RBS850 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, and RBS840 before 3.2.15.25. Additional Analyst Notes: - CVE Program Containe
before 3.2.15.25, RBR840 before 3.2.15.25, and RBS840 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061933/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0039
CVE ID: CVE-2020-14437 State: PUBLISHED Published: 2020-06-18T16:37:40 Last Updated: 2024-08-04T12:46:34.680Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Containe
before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061940/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0054
CVE ID: CVE-2020-14438 State: PUBLISHED Published: 2020-06-18T16:38:07 Last Updated: 2024-08-04T12:46:34.524Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Containe
before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061941/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0063
CVE ID: CVE-2020-14439 State: PUBLISHED Published: 2020-06-18T16:38:47 Last Updated: 2024-08-04T12:46:34.372Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Containe
before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061942/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0064
CVE ID: CVE-2020-14440 State: PUBLISHED Published: 2020-06-18T16:39:13 Last Updated: 2024-08-04T12:46:34.308Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Containe
before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061943/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0065
CVE ID: CVE-2020-14441 State: PUBLISHED Published: 2020-06-18T16:39:36 Last Updated: 2024-08-04T12:46:34.611Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Containe
before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061946/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0071
CVE ID: CVE-2020-14442 State: PUBLISHED Published: 2020-06-18T16:40:19 Last Updated: 2024-08-04T12:46:34.605Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Containe
before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061947/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0103
CVE ID: CVE-2020-14443 State: PUBLISHED Published: 2020-06-18T17:26:58 Last Updated: 2024-08-04T12:46:34.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.3 allows remote authenticated users to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/40e16672e3aa4e9208ea7a4829f30507dcdfc4ba
CVE ID: CVE-2020-14444 State: PUBLISHED Published: 2020-06-18T17:47:51 Last Updated: 2024-08-04T12:46:34.387Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key Manager through 5.9.0. A potential Reflected Cross-Site Scripting (XSS) vulnerability has been identified in the Management Console Policy Administration user interface. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0707 - https://cybersecurityworks.com/zerodays/cve-2020-14444-wso2.html
CVE ID: CVE-2020-14445 State: PUBLISHED Published: 2020-06-18T17:47:40 Last Updated: 2024-08-04T12:46:34.605Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AC:H/AV:N/A:N/C:L/I:L/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key Manager through 5.9.0. A potential Reflected Cross-Site Scripting (XSS) vulnerability has been identified in the Management Console Basic Policy Editor user Interface. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0711 - https://cybersecurityworks.com/zerodays/cve-2020-14445-wso2.html
CVE ID: CVE-2020-14446 State: PUBLISHED Published: 2020-06-18T17:47:32 Last Updated: 2024-08-04T12:46:34.548Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WSO2 Identity Server through 5.10.0 and WSO2 IS as Key Manager through 5.10.0. An open redirect exists. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0713 - https://cybersecurityworks.com/zerodays/cve-2020-14446-wso2.html
CVE ID: CVE-2020-14447 State: PUBLISHED Published: 2020-06-19T13:04:19 Last Updated: 2024-08-04T12:46:34.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.23.0. Large webhook requests allow attackers to cause a denial of service (infinite loop), aka MMSA-2020-0021. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2020-14448 State: PUBLISHED Published: 2020-06-19T13:05:34 Last Updated: 2024-08-04T12:46:34.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.23.0. Automatic direct message replies allow attackers to cause a denial of service (infinite loop), aka MMSA-2020-0020. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2020-14449 State: PUBLISHED Published: 2020-06-19T13:07:03 Last Updated: 2024-08-04T12:46:34.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Mobile Apps before 1.30.0. Authorization tokens can sometimes be disclosed to third-party servers, aka MMSA-2020-0018. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2020-14450 State: PUBLISHED Published: 2020-06-19T13:07:52 Last Updated: 2024-08-04T12:46:34.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.22.0. The markdown renderer allows attackers to cause a denial of service (client-side), aka MMSA-2020-0017. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2020-14451 State: PUBLISHED Published: 2020-06-19T13:08:36 Last Updated: 2024-08-04T12:46:34.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Mobile Apps before 1.29.0. The iOS app allowed Single Sign-On cookies and Local Storage to remain after a logout, aka MMSA-2020-0013. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2020-14452 State: PUBLISHED Published: 2020-06-19T13:09:31 Last Updated: 2024-08-04T12:46:34.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.21.0. mmctl allows directory traversal via HTTP, aka MMSA-2020-0014. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2020-14453 State: PUBLISHED Published: 2020-06-19T13:10:05 Last Updated: 2024-08-04T12:46:34.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.21.0. Socket read operations are not appropriately restricted, which allows attackers to cause a denial of service, aka MMSA-2020-0005. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2020-14454 State: PUBLISHED Published: 2020-06-19T13:10:48 Last Updated: 2024-08-04T12:46:34.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Desktop App before 4.4.0. Attackers can open web pages in the desktop application because server redirection is mishandled, aka MMSA-2020-0008. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2020-14455 State: PUBLISHED Published: 2020-06-19T13:11:32 Last Updated: 2024-08-04T12:46:34.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Desktop App before 4.4.0. Prompting for HTTP Basic Authentication is mishandled, allowing phishing, aka MMSA-2020-0007. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2020-14456 State: PUBLISHED Published: 2020-06-19T13:12:30 Last Updated: 2024-08-04T12:46:34.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Desktop App before 4.4.0. The Same Origin Policy is mishandled during access-control decisions for web APIs, aka MMSA-2020-0006. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2020-14457 State: PUBLISHED Published: 2020-06-19T13:13:32 Last Updated: 2024-08-04T12:46:34.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.20.0. Non-members can receive broadcasted team details via the update_team WebSocket event, aka MMSA-2020-0012. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2020-14458 State: PUBLISHED Published: 2020-06-19T13:14:22 Last Updated: 2024-08-04T12:46:34.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.19.0. Attackers can discover private channels via the "get channel by name" API, aka MMSA-2020-0004. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2020-14459 State: PUBLISHED Published: 2020-06-19T13:15:13 Last Updated: 2024-08-04T12:46:34.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.19.0. Attackers can rename a channel and cause a collision with a direct message, aka MMSA-2020-0002. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2020-14460 State: PUBLISHED Published: 2020-06-19T13:16:12 Last Updated: 2024-08-04T12:46:34.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mattermost Server before 5.19.0, 5.18.1, 5.17.3, 5.16.5, and 5.9.8. Creation of a trusted OAuth application does not always require admin privileges, aka MMSA-2020-0001. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2020-14461 State: PUBLISHED Published: 2020-06-22T12:39:57 Last Updated: 2024-08-04T12:46:34.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel Armor X1 WAP6806 1.00(ABAL.6)C0 devices allow Directory Traversal via the images/eaZy/ URI. Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2020060088 - http://packetstormsecurity.com/files/158428/Zyxel-Armor-X1-WAP6806-Directory-Traversal.html
CVE ID: CVE-2020-14462 State: PUBLISHED Published: 2020-06-19T11:34:36 Last Updated: 2024-08-04T12:46:34.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: CALDERA 2.7.0 allows XSS via the Operation Name box. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mitre/caldera/issues/1755
CVE ID: CVE-2020-14467 State: REJECTED Published: 2020-06-21T23:44:07 Last Updated: 2020-06-21T23:44:07 Description: No description available.
CVE ID: CVE-2020-14470 State: PUBLISHED Published: 2020-06-19T14:48:32 Last Updated: 2024-08-04T12:46:34.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Octopus Deploy 2018.8.0 through 2019.x before 2019.12.2, an authenticated user with could trigger a deployment that leaks the Helm Chart repository password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/6438
CVE ID: CVE-2020-14472 State: PUBLISHED Published: 2020-06-24T16:51:23 Last Updated: 2024-08-04T12:46:34.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in the mainfunction.cgi file. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/WinMin/46165779215f1d47ec257210428c0240 - https://gist.github.com/Cossack9989/fa9718434ceee4e6d4f6b0ad672c10f1
CVE ID: CVE-2020-14473 State: PUBLISHED Published: 2020-06-24T16:41:51 Last Updated: 2024-08-04T12:46:34.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow vulnerability in Vigor3900, Vigor2960, and Vigor300B with firmware before 1.5.1.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability-%28cve-2020-14473%29 - https://github.com/Cossack9989/Vulns/blob/master/IoT/CVE-2020-14473.md
CVE ID: CVE-2020-14474 State: PUBLISHED Published: 2020-06-30T18:03:50 Last Updated: 2024-08-04T12:46:34.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cellebrite UFED physical device 5.0 through 7.5.0.845 relies on key material hardcoded within both the executable code supporting the decryption process, and within the encrypted files themselves by using a key enveloping technique. The recovered key material is the same for every device running the same version of the software, and does not appear to be changed with each new build. It is possible to reconstruct the decryption process using the hardcoded key material and obtain easy access to otherwise protected data. Add