Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-28625 State: PUBLISHED Published: 2022-04-18T16:56:22.629Z Last Updated: 2025-04-23T18:36:10.206Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: CGAL Project Products: libcgal Problem Types: CWE-129 Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_facet() fh->boundary_entry_obj
ities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_facet() fh->boundary_entry_objects SLoop_of. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 - https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html - https://security.gentoo.org/glsa/202305-34
CVE ID: CVE-2020-28626 State: PUBLISHED Published: 2022-04-18T16:56:24.183Z Last Updated: 2025-04-23T18:36:03.084Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: CGAL Project Products: libcgal Problem Types: CWE-129 Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_facet() fh->incident_volume().
ities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_facet() fh->incident_volume(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 - https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html - https://security.gentoo.org/glsa/202305-34
CVE ID: CVE-2020-28627 State: PUBLISHED Published: 2022-04-18T16:56:25.801912Z Last Updated: 2024-09-16T17:03:20.195Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: CGAL Project Products: libcgal Problem Types: CWE-129 Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_volume() ch->shell_entry_ob
bilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_volume() ch->shell_entry_objects(). Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 - https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html - https://security.gentoo.org/glsa/202305-34
CVE ID: CVE-2020-28628 State: PUBLISHED Published: 2022-04-18T16:56:27.121Z Last Updated: 2025-04-23T18:35:52.271Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: CGAL Project Products: libcgal Problem Types: CWE-129 Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_volume() seh->twin(). Addition
ities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_volume() seh->twin(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 - https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html - https://security.gentoo.org/glsa/202305-34
CVE ID: CVE-2020-28629 State: PUBLISHED Published: 2022-04-18T16:56:28.582Z Last Updated: 2025-04-15T19:04:47.556Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: CGAL Project Products: libcgal Problem Types: CWE-129 Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->sprev(). Addition
ities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->sprev(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 - https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html - https://security.gentoo.org/glsa/202305-34
CVE ID: CVE-2020-28630 State: PUBLISHED Published: 2022-04-18T16:56:30.114Z Last Updated: 2025-04-23T18:35:43.062Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: CGAL Project Products: libcgal Problem Types: CWE-129 Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->snext(). Addition
ities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->snext(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 - https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html - https://security.gentoo.org/glsa/202305-34
CVE ID: CVE-2020-28631 State: PUBLISHED Published: 2022-04-18T16:56:31.540Z Last Updated: 2025-04-23T18:35:30.281Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: CGAL Project Products: libcgal Problem Types: CWE-129 Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->source(). Additio
ities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->source(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 - https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html - https://security.gentoo.org/glsa/202305-34
CVE ID: CVE-2020-28632 State: PUBLISHED Published: 2022-04-18T16:56:33.465Z Last Updated: 2025-04-23T18:35:15.793Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: CGAL Project Products: libcgal Problem Types: CWE-129 Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->incident_sface().
ities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->incident_sface(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 - https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html - https://security.gentoo.org/glsa/202305-34
CVE ID: CVE-2020-28633 State: PUBLISHED Published: 2022-04-18T16:56:35.232Z Last Updated: 2025-04-23T18:35:06.460Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: CGAL Project Products: libcgal Problem Types: CWE-129 Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->prev(). Additiona
ities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->prev(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 - https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html - https://security.gentoo.org/glsa/202305-34
CVE ID: CVE-2020-28634 State: PUBLISHED Published: 2022-04-18T16:56:36.729Z Last Updated: 2025-04-23T18:34:50.558Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: CGAL Project Products: libcgal Problem Types: CWE-129 Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->next(). Additiona
ities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->next(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 - https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html - https://security.gentoo.org/glsa/202305-34
CVE ID: CVE-2020-28635 State: PUBLISHED Published: 2022-04-18T16:56:38.101493Z Last Updated: 2024-09-17T04:29:39.760Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: CGAL Project Products: libcgal Problem Types: CWE-129 Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->facet(). Addit
bilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->facet(). Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 - https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html - https://security.gentoo.org/glsa/202305-34
CVE ID: CVE-2020-28636 State: PUBLISHED Published: 2021-03-04T00:00:00.000Z Last Updated: 2025-04-23T19:44:53.277Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: CGAL Problem Types: CWE-129 Description: A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sloop() slh->twin() An attacker can provide malicious input to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 - https://li
- CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E4J344OKKDLPRN422OYRR46HDEN6MM6P/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NB5SF5OJR2DSV7CC6U7FVW5VJSJO5EKV/ - https://lists.debian.org/debian-lts-announce/2021/05/msg00002.html - https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html - https://security.gentoo.org/glsa/202305-34
CVE ID: CVE-2020-28638 State: PUBLISHED Published: 2020-11-13T20:25:54 Last Updated: 2024-08-04T16:40:59.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: ask_password in Tomb 2.0 through 2.7 returns a warning when pinentry-curses is used and $DISPLAY is non-empty, causing affected users' files to be encrypted with "tomb {W] Detected DISPLAY, but only pinentry-curses is found." as the encryption key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dyne/Tomb/issues/385
CVE ID: CVE-2020-28641 State: PUBLISHED Published: 2020-12-22T22:07:03 Last Updated: 2024-08-04T16:40:59.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Malwarebytes Free 4.1.0.56, a symbolic link may be used delete an arbitrary file on the system by exploiting the local quarantine system. Additional Analyst Notes: - CVE Program Container: References: - https://www.malwarebytes.com - https://support.malwarebytes.com/hc/en-us/articles/360058885974-Arbitrary-file-deletion-vulnerability-fixed-in-Malwarebytes-for-Windows - https://support.malwarebytes.com/hc/en-us/articles/1500000403501-Arbitrary-file-deletion-vulnerability-fixed-in-Malwarebytes-Endpoint-Protection
CVE ID: CVE-2020-28642 State: PUBLISHED Published: 2020-11-16T01:19:27 Last Updated: 2024-08-04T16:40:59.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.whitehack.de/advisories/HWADV2020-001.txt
CVE ID: CVE-2020-28644 State: PUBLISHED Published: 2021-02-09T18:18:35 Last Updated: 2024-08-04T16:40:59.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against some ocs API endpoints. This affects ownCloud/core version < 10.6. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.com/security-advisories/cross-site-request-forgery-in-the-ocs-api/
CVE ID: CVE-2020-28645 State: PUBLISHED Published: 2021-02-09T18:41:01 Last Updated: 2024-08-04T16:40:59.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Deleting users with certain names caused system files to be deleted. Risk is higher for systems which allow users to register themselves and have the data directory in the web root. This affects ownCloud/core versions < 10.6. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.com/security-advisories/missing-user-validation-leading-to-information-disclosure/
CVE ID: CVE-2020-28646 State: PUBLISHED Published: 2021-02-26T14:51:57 Last Updated: 2024-08-04T16:40:59.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud owncloud/client before 2.7 allows DLL Injection. The desktop client loaded development plugins from certain directories when they were present. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.com/security-advisories/feed/ - https://owncloud.com/security-advisories/cve-2020-28646/
CVE ID: CVE-2020-28647 State: PUBLISHED Published: 2020-11-17T13:08:50 Last Updated: 2024-08-04T16:40:59.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Progress MOVEit Transfer before 2020.1, a malicious user could craft and store a payload within the application. If a victim within the MOVEit Transfer instance interacts with the stored payload, it could invoke and execute arbitrary code within the context of the victim's browser (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://www.progress.com/ - https://community.progress.com/s/article/MOVEit-Transfer-Vulnerability-Nov-2020 - https://labs.secforce.com/posts/progress-moveit-transfer-2020.1-
.com/s/article/MOVEit-Transfer-Vulnerability-Nov-2020 - https://labs.secforce.com/posts/progress-moveit-transfer-2020.1-stored-xss-cve-2020-28647/
CVE ID: CVE-2020-28648 State: PUBLISHED Published: 2020-11-16T02:28:38 Last Updated: 2024-08-04T16:40:59.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper input validation in the Auto-Discovery component of Nagios XI before 5.7.5 allows an authenticated attacker to execute remote code. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/ - https://skylightcyber.com/2021/05/20/13-nagios-vulnerabilities-7-will-shock-you/ - http://packetstormsecurity.com/files/162783/Nagios-XI-Fusion-Privilege-Escalation-Cross-Site-Scripting-Code-Execution.html
CVE ID: CVE-2020-28649 State: PUBLISHED Published: 2020-11-16T02:50:05 Last Updated: 2024-08-04T16:40:59.966Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: The orbisius-child-theme-creator plugin before 1.5.2 for WordPress allows CSRF via orbisius_ctc_theme_editor_manage_file. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/orbisius-child-theme-creator/#developers - https://www.wordfence.com/blog/2020/10/high-severity-vulnerability-patched-in-child-theme-creator-by-orbisius/
CVE ID: CVE-2020-28650 State: PUBLISHED Published: 2020-11-16T02:49:50 Last Updated: 2024-08-04T16:40:59.962Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: The WPBakery plugin before 6.4.1 for WordPress allows XSS because it calls kses_remove_filters to disable the standard WordPress XSS protection mechanism for the Author and Contributor roles. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2020/10/vulnerability-exposes-over-4-million-sites-using-wpbakery/
CVE ID: CVE-2020-28653 State: PUBLISHED Published: 2021-02-03T16:00:18 Last Updated: 2024-08-04T16:40:59.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update Manager (SUM) servlet. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125233 - https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125203 - http://packetstormsecurity.com/files/164231/ManageEngine-OpManager-SumPDU-Java-Deserialization.html
CVE ID: CVE-2020-28656 State: PUBLISHED Published: 2020-11-16T03:55:09 Last Updated: 2024-08-04T16:40:59.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: The update functionality of the Discover Media infotainment system in Volkswagen Polo 2019 vehicles allows physically proximate attackers to execute arbitrary code because some unsigned parts of a metainfo file are parsed, which can cause attacker-controlled files to be written to the infotainment system and executed as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.contextis.com/en/blog/a-code-signing-bypass-for-the-vw-polo
CVE ID: CVE-2020-28657 State: PUBLISHED Published: 2021-03-02T18:10:38 Last Updated: 2024-08-04T16:40:59.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: In bPanel 2.0, the administrative ajax endpoints (aka ajax/aj_*.php) are accessible without authentication and allow SQL injections, which could lead to platform compromise. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blackarrowsec/advisories/tree/master/2020/CVE-2020-28657
CVE ID: CVE-2020-28672 State: PUBLISHED Published: 2021-01-07T14:47:05 Last Updated: 2024-08-04T16:40:59.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution. At monofiles/category.php:27, user input can be saved to category/[foldername]/index.php causing RCE. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fortest-1/vuln/blob/main/MonoCMS%20Blog/MonoCMS%20Blog%201.0_remote_code_execution.md
CVE ID: CVE-2020-28679 State: PUBLISHED Published: 2022-01-10T17:47:37 Last Updated: 2024-08-04T16:40:59.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the showReports module of Zoho ManageEngine Applications Manager before build 14550 allows authenticated attackers to execute a SQL injection via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/applications_manager/issues.html#v14550
CVE ID: CVE-2020-28687 State: PUBLISHED Published: 2020-11-17T13:14:41 Last Updated: 2024-08-04T16:40:59.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: The edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://code-projects.org/artworks-gallery-in-php-css-javascript-and-mysql-free-download/ - https://packetstormsecurity.com/files/160095/Artworks-Gallery-1.0-Shell-Upload.html
CVE ID: CVE-2020-28688 State: PUBLISHED Published: 2020-11-17T13:14:35 Last Updated: 2024-08-04T16:40:59.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: The add artwork functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://code-projects.org/artworks-gallery-in-php-css-javascript-and-mysql-free-download/ - https://packetstormsecurity.com/files/160095/Artworks-Gallery-1.0-Shell-Upload.html
CVE ID: CVE-2020-28692 State: PUBLISHED Published: 2020-11-16T17:29:31 Last Updated: 2024-08-04T16:40:59.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Gila CMS 1.16.0, an attacker can upload a shell to tmp directy and abuse .htaccess through the logs function for executing PHP files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jkana/Gila-CMS-1.16.0-shell-upload
CVE ID: CVE-2020-28693 State: PUBLISHED Published: 2020-11-16T20:42:22 Last Updated: 2024-08-04T16:40:59.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unrestricted file upload issue in HorizontCMS 1.0.0-beta allows an authenticated remote attacker to upload PHP code through a zip file by uploading a theme, and executing the PHP file via an HTTP GET request to /themes/<php_file_name> Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jkana/HorizontCMS-1.0.0-beta-shell-upload - https://github.com/ttimot24/HorizontCMS/issues/21