Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-15702 State: PUBLISHED Published: 2020-08-06T22:50:22.871Z Last Updated: 2025-11-03T19:25:30.971Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Canonical Products: apport Problem Types: CWE-367 Description: TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which can then be used to escalate privileges. Fixed in 2.20.1-0ubuntu2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234.
2.24, 2.20.9 versions prior to 2.20.9-0ubuntu7.16 and 2.20.11 versions prior to 2.20.11-0ubuntu27.6. Was ZDI-CAN-11234. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/4449-1 - https://usn.ubuntu.com/4449-1/ - https://www.zerodayinitiative.com/advisories/ZDI-20-979/ - https://usn.ubuntu.com/4449-2/
CVE ID: CVE-2020-15703 State: PUBLISHED Published: 2020-10-31T03:45:19.526886Z Last Updated: 2024-09-16T22:01:51.102Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Canonical Products: aptdaemon Problem Types: CWE-22 Description: There is no input validation on the Locale property in an apt transaction. An unprivileged user can supply a full path to a writable directory, which lets aptd read a file as root. Having a symlink in place results in an error message if the file exists, and no error otherwise. This way an unprivileged user can check for the existence of any files on the system as root. Additional Analyst Notes: - CVE Program Container: References: -
k for the existence of any files on the system as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.eyecontrol.nl/blog/the-story-of-3-cves-in-ubuntu-desktop.html - https://ubuntu.com/security/notices/USN-4537-1
CVE ID: CVE-2020-15704 State: PUBLISHED Published: 2020-08-31T23:15:14.261406Z Last Updated: 2024-09-17T00:35:29.021Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Canonical Products: ppp Problem Types: CWE-200 Description: The modprobe child process in the ./debian/patches/load_ppp_generic_if_needed patch file incorrectly handled module loading. A local non-root attacker could exploit the MODPROBE_OPTIONS environment variable to read arbitrary root files. Fixed in 2.4.5-5ubuntu1.4, 2.4.5-5.1ubuntu2.3+esm2, 2.4.7-1+2ubuntu1.16.04.3, 2.4.7-2+2ubuntu1.3, 2.4.7-2+4.1ubuntu5.1, 2.4.7-2+4.1ubuntu6. Was ZDI-CAN-11504. Additional Analyst Notes: - CVE Program Cont
-2+2ubuntu1.3, 2.4.7-2+4.1ubuntu5.1, 2.4.7-2+4.1ubuntu6. Was ZDI-CAN-11504. Additional Analyst Notes: - CVE Program Container: References: - https://ubuntu.com/security/notices/USN-4451-1 - https://ubuntu.com/security/notices/USN-4451-2
CVE ID: CVE-2020-15705 State: PUBLISHED Published: 2020-07-29T17:45:33.422001Z Last Updated: 2024-09-17T00:06:01.169Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Ubuntu Products: grub2 in Ubuntu Problem Types: CWE-347 Description: GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim. This issue affects GRUB2 version 2.04 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.
cts GRUB2 version 2.04 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/ - https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass - http://ubuntu.com/security/notices/USN-4432-1 - https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011 - https://access.redhat.com/security/vulnerabilities/grub2bootloader - https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/ - https://www.suse.com/support/kb/doc/?id=000019673 - https://www.openwall.com/lists/oss-security/2020/07/29/3 - https://lists.gnu.o
w.suse.com/support/kb/doc/?id=000019673 - https://www.openwall.com/lists/oss-security/2020/07/29/3 - https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html - http://www.openwall.com/lists/oss-security/2020/07/29/3 - https://security.netapp.com/advisory/ntap-20200731-0008/ - https://usn.ubuntu.com/4432-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00067.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00069.html - http://www.openwall.com/lists/oss-security/2021/03/02/3 - https://security.gentoo.org/glsa/202104-05 - http://www.openwall.com/lists/oss-security/2021/09/17/2 - http://www.openwall.com/lists/oss-security/2021/09/17/4 - http:/
tp://www.openwall.com/lists/oss-security/2021/09/17/2 - http://www.openwall.com/lists/oss-security/2021/09/17/4 - http://www.openwall.com/lists/oss-security/2021/09/21/1
CVE ID: CVE-2020-15706 State: PUBLISHED Published: 2020-07-29T17:45:33.975497Z Last Updated: 2024-09-16T22:20:56.598Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Ubuntu Products: grub2 in Ubuntu Problem Types: CWE-362 Description: GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing, leading to arbitrary code execution and secure boot restriction bypass. This issue affects GRUB2 version 2.04 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.eclypsium.com/2020/07/
and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/ - https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass - http://ubuntu.com/security/notices/USN-4432-1 - https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011 - https://access.redhat.com/security/vulnerabilities/grub2bootloader - https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/ - https://www.suse.com/support/kb/doc/?id=000019673 - https://www.openwall.com/lists/oss-security/2020/07/29/3 - https://lists.gnu.org/archive/html/grub-d
doc/?id=000019673 - https://www.openwall.com/lists/oss-security/2020/07/29/3 - https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html - https://www.debian.org/security/2020/dsa-4735 - http://www.openwall.com/lists/oss-security/2020/07/29/3 - https://security.netapp.com/advisory/ntap-20200731-0008/ - https://usn.ubuntu.com/4432-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html - https://security.gentoo.org/glsa/202104-05
CVE ID: CVE-2020-15707 State: PUBLISHED Published: 2020-07-29T17:45:34.577890Z Last Updated: 2024-09-17T03:07:49.301Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Ubuntu Products: grub2 in Ubuntu Problem Types: CWE-362 Description: Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functionality is not included in GRUB2 upstream), leading to a heap-based buffer overflow. These could be triggered by an extremely large number of arguments to the initrd command on 32-bit architectures, or a crafted filesystem with very large files on any ar
mber of arguments to the initrd command on 32-bit architectures, or a crafted filesystem with very large files on any architecture. An attacker could use this to execute arbitrary code and bypass UEFI Secure Boot restrictions. This issue affects GRUB2 version 2.04 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/ - https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypass - http://ubuntu.com/security/notices/USN-4432-1 - https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011 - https://access.redhat.
-UEFI-SecureBoot - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011 - https://access.redhat.com/security/vulnerabilities/grub2bootloader - https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/ - https://www.suse.com/support/kb/doc/?id=000019673 - https://www.openwall.com/lists/oss-security/2020/07/29/3 - https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html - https://www.debian.org/security/2020/dsa-4735 - http://www.openwall.com/lists/oss-security/2020/07/29/3 - https://security.netapp.com/advisory/ntap-20200731-0008/ - https://usn.ubuntu.com/4432-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html - http://lists
tps://usn.ubuntu.com/4432-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00016.html - https://security.gentoo.org/glsa/202104-05
CVE ID: CVE-2020-15708 State: PUBLISHED Published: 2020-11-06T01:40:13.864034Z Last Updated: 2024-09-16T17:37:51.206Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Ubuntu Products: libvirt Problem Types: CWE-732 Description: Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions. An attacker could use this to overwrite arbitrary files or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/usn/usn-4452-1
CVE ID: CVE-2020-15709 State: PUBLISHED Published: 2020-09-05T03:30:18.015729Z Last Updated: 2024-09-17T01:51:18.150Z Vendors: Canonical Products: add-apt-repository Problem Types: CWE-20 Description: Versions of add-apt-repository before 0.98.9.2, 0.96.24.32.14, 0.96.20.10, and 0.92.37.8ubuntu0.1~esm1, printed a PPA (personal package archive) description to the terminal as-is, which allowed PPA owners to provide ANSI terminal escapes to modify terminal contents in unexpected ways. Additional Analyst Notes: - CVE Program Container: References: - https://git.launchpad.net/software-properties/commit/add-apt-repository?id=97e2fe7d181e8711e0f5253d3b8db40426c17f1e
CVE ID: CVE-2020-15710 State: PUBLISHED Published: 2020-11-19T02:30:17.080446Z Last Updated: 2024-09-17T04:04:44.247Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H) Vendors: Canonical Products: PulseAudio Problem Types: CWE-415 Description: Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in 1:8.0-0ubuntu3.14. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/1884738 - https://ubuntu.com/USN-
ional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/1884738 - https://ubuntu.com/USN-4519-1
CVE ID: CVE-2020-15711 State: PUBLISHED Published: 2020-07-14T12:05:48 Last Updated: 2024-08-04T13:22:30.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MISP before 2.4.129, setting a favourite homepage was not CSRF protected. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/bf4610c947c7dc372c4078f363d2dff6ae0703a8 - https://github.com/MISP/MISP/compare/v2.4.128...v2.4.129
CVE ID: CVE-2020-15712 State: PUBLISHED Published: 2020-07-28T13:03:09 Last Updated: 2024-08-04T13:22:30.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: rConfig 3.9.5 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a crafted request to the ajaxGetFileByPath.php script containing hexadecimal encoded "dot dot" sequences (%2f..%2f) in the path parameter to view arbitrary files on the system. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/184938 - https://www.rconfig.com/downloads/v3-release-notes
CVE ID: CVE-2020-15713 State: PUBLISHED Published: 2020-07-28T13:03:37 Last Updated: 2024-08-04T13:22:30.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.php script using the sortBy parameter, which could allow the attacker to view, add, modify, or delete information in the back-end database. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/184939 - https://www.rconfig.com/downloads/v3-release-notes
CVE ID: CVE-2020-15714 State: PUBLISHED Published: 2020-07-28T13:03:52 Last Updated: 2024-08-04T13:22:30.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.crud.php script using the custom_Location parameter, which could allow the attacker to view, add, modify, or delete information in the back-end database. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/184940 - https://www.rconfig.com/downloads/v3-release-notes
CVE ID: CVE-2020-15715 State: PUBLISHED Published: 2020-07-28T13:04:09 Last Updated: 2024-08-04T13:22:30.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability using the nodeId parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/184941 - https://www.rconfig.com/downloads/v3-release-notes
CVE ID: CVE-2020-15716 State: PUBLISHED Published: 2020-07-15T19:00:44.000Z Last Updated: 2025-04-16T14:31:56.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Preferences.php script. A remote attacker could exploit this vulnerability using the tab parameter in a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/184942 - https://gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.md - https://gitlab.com/francoisjacquet/rosariosis/-/issues/291 - https://gitlab.com/francoisjacquet/rosariosis/-/t
NGES.md - https://gitlab.com/francoisjacquet/rosariosis/-/issues/291 - https://gitlab.com/francoisjacquet/rosariosis/-/tags/v6.8-beta - https://gitlab.com/francoisjacquet/rosariosis/-/commit/89ae9de732024e3a2e99262aa98b400a1aa6975a - https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2020-15716.md
CVE ID: CVE-2020-15717 State: PUBLISHED Published: 2020-07-15T19:01:43 Last Updated: 2024-08-04T13:22:30.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Search.inc.php script. A remote attacker could exploit this vulnerability using the advanced parameter in a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.md - https://gitlab.com/francoisjacquet/rosariosis/-/issues/291 - https://gitlab.com/francoisjacquet/rosariosis/-/tags/v6.8-beta - https://exchange.xforce.ibmcloud.com/vulnerabil
s/291 - https://gitlab.com/francoisjacquet/rosariosis/-/tags/v6.8-beta - https://exchange.xforce.ibmcloud.com/vulnerabilities/184943 - https://gitlab.com/francoisjacquet/rosariosis/-/commit/89ae9de732024e3a2e99262aa98b400a1aa6975a
CVE ID: CVE-2020-15718 State: PUBLISHED Published: 2020-07-15T19:02:52.000Z Last Updated: 2025-04-16T14:28:25.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the PrintSchedules.php script. A remote attacker could exploit this vulnerability using the include_inactive parameter in a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.md - https://gitlab.com/francoisjacquet/rosariosis/-/issues/291 - https://gitlab.com/francoisjacquet/rosariosis/-/tags/v6.8-beta - https://exchange.xforce.ibmclo
osariosis/-/issues/291 - https://gitlab.com/francoisjacquet/rosariosis/-/tags/v6.8-beta - https://exchange.xforce.ibmcloud.com/vulnerabilities/184944 - https://gitlab.com/francoisjacquet/rosariosis/-/commit/89ae9de732024e3a2e99262aa98b400a1aa6975a - https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2020-15718.md
CVE ID: CVE-2020-15719 State: PUBLISHED Published: 2020-07-14T13:47:31 Last Updated: 2024-08-04T13:22:30.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1740070 - https://bugs.openldap.org/show_bug.cgi?id=9266 - https://access.redhat.com/errata/RHBA-2019:3674 - http://lists.ope
70 - https://bugs.openldap.org/show_bug.cgi?id=9266 - https://access.redhat.com/errata/RHBA-2019:3674 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00059.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10365
CVE ID: CVE-2020-15720 State: PUBLISHED Published: 2020-07-14T13:46:58 Last Updated: 2024-08-04T13:22:30.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable python-requests certificate validation. Since the verify parameter was hard-coded in all request functions, it was not possible to override the setting. As a result, tools making use of this class, such as the pki-server command, may have been vulnerable to Person-in-the-Middle attacks in certain non-localhost use cases. This is fixed in 10.9.0-b1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bu
fixed in 10.9.0-b1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1855273 - https://github.com/dogtagpki/pki/commit/50c23ec146ee9abf28c9de87a5f7787d495f0b72 - https://github.com/dogtagpki/pki/compare/v10.9.0-a2...v10.9.0-b1
CVE ID: CVE-2020-15721 State: PUBLISHED Published: 2020-07-14T14:26:43 Last Updated: 2024-08-04T13:22:30.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.md - https://gitlab.com/francoisjacquet/rosariosis/-/issues/291 - https://gitlab.com/francoisjacquet/rosariosis/-/commit/c4a694860b50c4aa5c67d6568f7d0613fef1a30d
CVE ID: CVE-2020-15722 State: PUBLISHED Published: 2020-07-21T17:10:21 Last Updated: 2024-08-04T13:22:30.838Z Vendors: n/a Products: 360 Total Security Problem Types: local privilege escalation vulnerability Description: In version 12.1.0.1004 and below of 360 Total Security,when TPI calls the browser process, there exists a local privilege escalation vulnerability. An attacker who could exploit DLL hijacking could execute arbitrary code on the Local system. Additional Analyst Notes: - CVE Program Container: References: - https://security.360.cn/News/news/id/232
CVE ID: CVE-2020-15723 State: PUBLISHED Published: 2020-07-21T17:04:50 Last Updated: 2024-08-04T13:22:30.687Z Vendors: n/a Products: 360 Total Security Problem Types: local privilege escalation vulnerability Description: In the version 12.1.0.1004 and below of 360 Total Security, when the main process of 360 Total Security calls GameChrome.exe, there exists a local privilege escalation vulnerability. An attacker who could exploit DLL hijacking to bypass the hips could execute arbitrary code on the Local system. Additional Analyst Notes: - CVE Program Container: References: - https://security.360.cn/News/news/id/232
CVE ID: CVE-2020-15724 State: PUBLISHED Published: 2020-07-21T17:36:16 Last Updated: 2024-08-04T13:22:30.804Z Vendors: n/a Products: 360 Total Security Problem Types: local privilege escalation vulnerability Description: In the version 12.1.0.1005 and below of 360 Total Security, when the Gamefolde calls GameChrome.exe, there exists a local privilege escalation vulnerability. An attacker who could exploit DLL hijacking to bypass the hips could execute arbitrary code on the Local system. Additional Analyst Notes: - CVE Program Container: References: - https://security.360.cn/News/news/id/232
CVE ID: CVE-2020-15728 State: REJECTED Published: 2021-03-17T12:26:01 Last Updated: 2021-03-17T12:26:01 Description: No description available.
CVE ID: CVE-2020-15730 State: REJECTED Published: N/A Last Updated: 2023-07-02T21:48:12.212464Z Description: No description available.
CVE ID: CVE-2020-15731 State: PUBLISHED Published: 2020-09-30T11:55:18.065802Z Last Updated: 2024-09-16T22:20:25.774Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: Bitdefender Products: Bitdefender Engines Problem Types: CWE-20 Description: An improper Input Validation vulnerability in the code handling file renaming and recovery in Bitdefender Engines allows an attacker to write an arbitrary file in a location hardcoded in a specially-crafted malicious file name. This issue affects: Bitdefender Engines versions prior to 7.85448. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/local-priv
Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/local-privilege-escalation-in-bitdefender-engines-va-8953
CVE ID: CVE-2020-15732 State: PUBLISHED Published: 2021-06-22T14:50:16.029384Z Last Updated: 2024-09-17T01:16:57.105Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: Bitdefender Products: Total Security, Internet Security, Antivirus Plus Problem Types: CWE-295 Description: Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Security allows an attacker to potentially bypass HTTP Strict Transport Security (HSTS) checks. This issue affects: Bitdefender Total Security versions prior to 25.0.7.29. Bitdefender Internet Security versions prior to 25.0.7.29. Bitdefender Antivirus Plus versions prior to 25
to 25.0.7.29. Bitdefender Internet Security versions prior to 25.0.7.29. Bitdefender Antivirus Plus versions prior to 25.0.7.29. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/improper-certificate-validation-bitdefender-total-security-va-8957