Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
S 8.1 versions earlier than PAN-OS 8.1.13 on Panorama. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-1979
CVE ID: CVE-2020-1980 State: PUBLISHED Published: 2020-03-11T18:58:17.891426Z Last Updated: 2024-09-16T16:29:01.339Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Palo Alto Networks Products: PAN-OS Problem Types: CWE-77 Description: A shell command injection vulnerability in the PAN-OS CLI allows a local authenticated user to escape the restricted shell and escalate privileges. This issue affects only PAN-OS 8.1 versions earlier than PAN-OS 8.1.13. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions. This issue is fixed in PAN-OS 8.1.13, and all later versions. Additional Analyst Notes: - CVE Program Container: References: - https://
ixed in PAN-OS 8.1.13, and all later versions. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-1980
CVE ID: CVE-2020-1981 State: PUBLISHED Published: 2020-03-11T18:58:14.627439Z Last Updated: 2024-09-17T02:37:39.110Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Palo Alto Networks Products: PAN-OS Problem Types: CWE-377 Description: A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation. This issue allows a local attacker who bypassed the restricted shell to execute commands as a low privileged user and gain root access on the PAN-OS hardware or virtual appliance. This issue affects only PAN-OS 8.1 versions earlier than PAN-OS 8.1.13. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions. Additional A
ns earlier than PAN-OS 8.1.13. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-1981
CVE ID: CVE-2020-1982 State: PUBLISHED Published: 2020-07-08T16:35:16.480967Z Last Updated: 2024-09-17T00:52:21.417Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Palo Alto Networks Products: PAN-OS Problem Types: CWE-326 Description: Certain communication between PAN-OS and cloud-delivered services inadvertently use TLS 1.0, which is known to be a cryptographically weak protocol. These cloud services include Cortex Data Lake, the Customer Support Portal, and the Prisma Access infrastructure. Conditions required for exploitation of known TLS 1.0 weaknesses do not exist for the communication between PAN-OS and cloud-delivered services. We do not believe tha
TLS 1.0 weaknesses do not exist for the communication between PAN-OS and cloud-delivered services. We do not believe that any communication is impacted as a result of known attacks against TLS 1.0. This issue impacts: All versions of PAN-OS 8.0; PAN-OS 8.1 versions earlier than PAN-OS 8.1.14; PAN-OS 9.0 versions earlier than PAN-OS 9.0.9; PAN-OS 9.1 versions earlier than PAN-OS 9.1.3. PAN-OS 7.1 is not impacted by this issue. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-1982
CVE ID: CVE-2020-1983 State: PUBLISHED Published: 2020-04-22T19:30:14.844095Z Last Updated: 2024-09-16T19:41:29.761Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: slirp Products: libslirp Problem Types: CWE-416 Description: A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/slirp/libslirp/-/issues/20 - https://gitlab.freedesktop.org/slirp/libslirp/-/commit/9ac0371bb8c0a40f5d9f82a1c25129660e81df04 - https://www.debian.org/security/2020/dsa-4665 - https://lists.fedorapr
commit/9ac0371bb8c0a40f5d9f82a1c25129660e81df04 - https://www.debian.org/security/2020/dsa-4665 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HWFD4MWV3YWIHVHSA2F7FKOLJFL4PHOX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NKT2MTSINE4NUPG5L6BYH6N23NBNITOL/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00022.html - https://usn.ubuntu.com/4372-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00001.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html - https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html
CVE ID: CVE-2020-1984 State: PUBLISHED Published: 2020-04-08T18:41:58.264586Z Last Updated: 2024-09-17T04:20:08.232Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Secdo Products: Secdo Problem Types: CWE-73 Description: Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk (C:\) to gain system privileges if the path does not already exist or is writable. This issue affects all versions of Secdo for Windows. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-1984
CVE ID: CVE-2020-1985 State: PUBLISHED Published: 2020-04-08T18:41:58.303212Z Last Updated: 2024-09-16T18:28:43.796Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Secdo Products: Secdo Problem Types: CWE-276 Description: Incorrect Default Permissions on C:\Programdata\Secdo\Logs folder in Secdo allows local authenticated users to overwrite system files and gain escalated privileges. This issue affects all versions Secdo for Windows. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-1985
CVE ID: CVE-2020-1986 State: PUBLISHED Published: 2020-04-08T18:41:58.340011Z Last Updated: 2024-09-16T20:26:16.271Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Secdo Products: Secdo Problem Types: CWE-20 Description: Improper input validation vulnerability in Secdo allows an authenticated local user with 'create folders or append data' access to the root of the OS disk (C:\) to cause a system crash on every login. This issue affects all versions Secdo for Windows. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-1986
CVE ID: CVE-2020-1987 State: PUBLISHED Published: 2020-04-08T18:41:58.380348Z Last Updated: 2024-09-16T19:14:19.257Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Palo Alto Networks Products: Global Protect Agent Problem Types: CWE-200 Description: An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local authenticated user to read VPN cookie information when the troubleshooting logging level is set to "Dump". This issue affects Palo Alto Networks Global Protect Agent 5.0 versions prior to 5.0.9; 5.1 versions prior to 5.1.1. Additional Analyst Notes: - CVE Program Container: References: - https://
s prior to 5.0.9; 5.1 versions prior to 5.1.1. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-1987
CVE ID: CVE-2020-1988 State: PUBLISHED Published: 2020-04-08T18:41:58.415618Z Last Updated: 2024-09-16T18:03:55.930Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Palo Alto Networks Products: Global Protect Agent Problem Types: CWE-428 Description: An unquoted search path vulnerability in the Windows release of Global Protect Agent allows an authenticated local user with file creation privileges on the root of the OS disk (C:\) or to Program Files directory to gain system privileges. This issue affects Palo Alto Networks GlobalProtect Agent 5.0 versions before 5.0.5; 4.1 versions before 4.1.13 on Windows; Additional Analyst Notes: - CVE Program Container:
nt 5.0 versions before 5.0.5; 4.1 versions before 4.1.13 on Windows; Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-1988
CVE ID: CVE-2020-1989 State: PUBLISHED Published: 2020-04-08T18:41:58.456857Z Last Updated: 2024-09-16T19:14:44.124Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Palo Alto Networks Products: Global Protect Agent Problem Types: CWE-266 Description: An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global Protect Agent for Linux on ARM platform allows a local authenticated user to gain root privileges on the system. This issue affects Palo Alto Networks Global Protect Agent for Linux 5.0 versions before 5.0.8; 5.1 versions before 5.1.1. Additional Analyst Notes: - CVE Program Container: References:
nux 5.0 versions before 5.0.8; 5.1 versions before 5.1.1. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-1989
CVE ID: CVE-2020-1990 State: PUBLISHED Published: 2020-04-08T18:41:58.493602Z Last Updated: 2024-09-17T01:16:16.817Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Palo Alto Networks Products: PAN-OS Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability in the management server component of PAN-OS allows an authenticated user to upload a corrupted PAN-OS configuration and potentially execute code with root privileges. This issue affects Palo Alto Networks PAN-OS 8.1 versions before 8.1.13; 9.0 versions before 9.0.7. This issue does not affect PAN-OS 7.1. Additional Analyst Notes: - CVE Program Container: References: - https://securit
This issue does not affect PAN-OS 7.1. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-1990
CVE ID: CVE-2020-1991 State: PUBLISHED Published: 2020-04-08T18:41:58.528818Z Last Updated: 2024-09-17T00:17:10.408Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Palo Alto Networks Products: Traps, Cortex XDR Problem Types: CWE-377 Description: An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escalate privileges or overwrite system files. This issue affects Palo Alto Networks Traps 5.0 versions before 5.0.8; 6.1 versions before 6.1.4 on Windows. This issue does not affect Cortex XDR 7.0. This issue does not affect Traps for Linux or MacOS. Additional Analyst Notes: - CVE Program Container: Ref
tex XDR 7.0. This issue does not affect Traps for Linux or MacOS. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-1991
CVE ID: CVE-2020-1992 State: PUBLISHED Published: 2020-04-08T18:41:58.564278Z Last Updated: 2024-09-17T03:44:20.914Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Palo Alto Networks Products: PAN-OS Problem Types: CWE-134 Description: A format string vulnerability in the Varrcvr daemon of PAN-OS on PA-7000 Series devices with a Log Forwarding Card (LFC) allows remote attackers to crash the daemon creating a denial of service condition or potentially execute code with root privileges. This issue affects Palo Alto Networks PAN-OS 9.0 versions before 9.0.7; PAN-OS 9.1 versions before 9.1.2 on PA-7000 Series devices with an LFC installed and configured. This iss
before 9.0.7; PAN-OS 9.1 versions before 9.1.2 on PA-7000 Series devices with an LFC installed and configured. This issue requires WildFire services to be configured and enabled. This issue does not affect PAN-OS 8.1 and earlier releases. This issue does not affect any other PA Series firewalls. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-1992
CVE ID: CVE-2020-1993 State: PUBLISHED Published: 2020-05-13T19:07:13.853287Z Last Updated: 2024-09-16T23:00:41.983Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Palo Alto Networks Products: PAN-OS Problem Types: CWE-384 Description: The GlobalProtect Portal feature in PAN-OS does not set a new session identifier after a successful user login, which allows session fixation attacks, if an attacker is able to control a user's session ID. This issue affects: All PAN-OS 7.1 and 8.0 versions; PAN-OS 8.1 versions earlier than 8.1.14; PAN-OS 9.0 versions earlier than 9.0.8. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltone
ersions earlier than 9.0.8. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-1993
CVE ID: CVE-2020-1994 State: PUBLISHED Published: 2020-05-13T19:07:13.915373Z Last Updated: 2024-09-16T22:15:17.616Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: Palo Alto Networks Products: PAN-OS Problem Types: CWE-377 Description: A predictable temporary file vulnerability in PAN-OS allows a local authenticated user with shell access to corrupt arbitrary system files affecting the integrity of the system. This issue affects: All versions of PAN-OS 7.1 and 8.0; PAN-OS 8.1 versions earlier than 8.1.13; PAN-OS 9.0 versions earlier than 9.0.7. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-19
.0.7. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-1994
CVE ID: CVE-2020-1995 State: PUBLISHED Published: 2020-05-13T19:07:13.950717Z Last Updated: 2024-09-17T01:40:42.974Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Palo Alto Networks Products: PAN-OS Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability in Palo Alto Networks PAN-OS allows an authenticated administrator to send a request that causes the rasmgr daemon to crash. Repeated attempts to send this request result in denial of service to all PAN-OS services by restarting the device and putting it into maintenance mode. This issue affects: PAN-OS 9.1 versions earlier than 9.1.2. Additional Analyst Notes: - CVE Program Container:
nce mode. This issue affects: PAN-OS 9.1 versions earlier than 9.1.2. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-1995
CVE ID: CVE-2020-1996 State: PUBLISHED Published: 2020-05-13T19:07:13.986877Z Last Updated: 2024-09-17T02:20:44.846Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Palo Alto Networks Products: PAN-OS Problem Types: CWE-862 Description: A missing authorization vulnerability in the management server component of PAN-OS Panorama allows a remote unauthenticated user to inject messages into the management server ms.log file. This vulnerability can be leveraged to obfuscate an ongoing attack or fabricate log entries in the ms.log file This issue affects: All versions of PAN-OS 7.1 and 8.0; PAN-OS 8.1 versions earlier than 8.1.14; PAN-OS 9.0 versions earlier than
affects: All versions of PAN-OS 7.1 and 8.0; PAN-OS 8.1 versions earlier than 8.1.14; PAN-OS 9.0 versions earlier than 9.0.9. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-1996
CVE ID: CVE-2020-1997 State: PUBLISHED Published: 2020-05-13T19:07:14.025232Z Last Updated: 2024-09-16T19:36:57.272Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Palo Alto Networks Products: PAN-OS Problem Types: CWE-601 Description: An open redirection vulnerability in the GlobalProtect component of Palo Alto Networks PAN-OS allows an attacker to specify an arbitrary redirection target away from the trusted GlobalProtect gateway. If the user then successfully authenticates it will cause them to access an unexpected and potentially malicious website. This issue affects: PAN-OS 7.1 versions earlier than 7.1.26; PAN-OS 8.0 versions earlier than 8.0.14. Addi
ious website. This issue affects: PAN-OS 7.1 versions earlier than 7.1.26; PAN-OS 8.0 versions earlier than 8.0.14. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-1997
CVE ID: CVE-2020-1998 State: PUBLISHED Published: 2020-05-13T19:07:14.059174Z Last Updated: 2024-09-16T23:56:06.792Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Palo Alto Networks Products: PAN-OS Problem Types: CWE-285 Description: An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the purposes of SSO authentication. This can result in authentication bypass and unintended resource access for the user. This issue affects: PAN-OS 7.1 versions earlier than 7.1.26; PAN-OS 8.1 versions earlier than 8.1.13; PAN-OS 9.
he user. This issue affects: PAN-OS 7.1 versions earlier than 7.1.26; PAN-OS 8.1 versions earlier than 8.1.13; PAN-OS 9.0 versions earlier than 9.0.6; PAN-OS 9.1 versions earlier than 9.1.1; All versions of PAN-OS 8.0. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-1998
CVE ID: CVE-2020-1999 State: PUBLISHED Published: 2020-11-12T00:05:19.633253Z Last Updated: 2024-09-17T01:15:53.377Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Palo Alto Networks Products: PAN-OS Problem Types: CWE-754 Description: A vulnerability exists in the Palo Alto Network PAN-OS signature-based threat detection engine that allows an attacker to communicate with devices in the network in a way that is not analyzed for threats by sending data through specifically crafted TCP packets. This technique evades signature-based threat detection. This issue impacts: PAN-OS 8.1 versions earlier than 8.1.17; PAN-OS 9.0 versions earlier than 9.0.11; PAN-OS 9.
tection. This issue impacts: PAN-OS 8.1 versions earlier than 8.1.17; PAN-OS 9.0 versions earlier than 9.0.11; PAN-OS 9.1 versions earlier than 9.1.5; All versions of PAN-OS 7.1 and PAN-OS 8.0. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2020-1999
CVE ID: CVE-2020-20012 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-21T15:04:16.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebPlus Pro v1.4.7.8.4-01 is vulnerable to Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://wzqpt.hfut.edu.cn/login.jsp?_p=YXM9MSZwPTEmbT1OJg__ - https://gist.github.com/1915504804/9503198d3cbd5bc7db47625ac0caaade
CVE ID: CVE-2020-20021 State: PUBLISHED Published: 2023-07-12T00:00:00 Last Updated: 2024-11-07T15:15:16.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in MikroTik Router v6.46.3 and earlier allows attacker to cause denial of service via misconfiguration in the SSH daemon. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://mikrotik.com - http://router.com - https://www.exploit-db.com/exploits/48228
CVE ID: CVE-2020-20067 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-11T17:02:02.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: File upload vulnerability in ebCMS v.1.1.0 allows a remote attacker to execute arbitrary code via the upload type parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/a932278490/ebcms/issues/1
CVE ID: CVE-2020-20070 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-11T17:05:46.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to execute arbitrary code via thequltemld parameter of the qu-multi-fillblank!answers.action file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wkeyuan/DWSurvey/issues/48
CVE ID: CVE-2020-20092 State: PUBLISHED Published: 2021-05-13T14:07:19 Last Updated: 2024-08-04T14:15:29.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability exists in ArticleCMS 1.0 via the image upload feature at /admin by changing the Content-Type to image/jpeg and placing PHP code after the JPEG data, which could let a remote malicious user execute arbitrary PHP code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/woider/ArticleCMS/issues/8
CVE ID: CVE-2020-20093 State: PUBLISHED Published: 2022-03-23T21:27:29 Last Updated: 2024-08-04T14:15:28.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Facebook Messenger app for iOS 227.0 and prior and Android 228.1.0.10.116 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zadewg/RIUS - http://packetstormsecurity.com/files/166448/RTLO-Injection-URI-Spoofing.html
CVE ID: CVE-2020-20094 State: PUBLISHED Published: 2022-03-23T21:27:46 Last Updated: 2024-08-04T14:15:28.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Instagram iOS 106.0 and prior and Android 107.0.0.11 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zadewg/RIUS - http://packetstormsecurity.com/files/166448/RTLO-Injection-URI-Spoofing.html
CVE ID: CVE-2020-20095 State: PUBLISHED Published: 2022-03-23T21:28:33 Last Updated: 2024-08-04T14:15:29.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: iMessage (Messages app) iOS 12.4 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zadewg/RIUS - http://packetstormsecurity.com/files/166448/RTLO-Injection-URI-Spoofing.html
CVE ID: CVE-2020-20096 State: PUBLISHED Published: 2022-03-23T21:28:54 Last Updated: 2024-08-04T14:15:29.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Whatsapp iOS 2.19.80 and prior and Android 2.19.222 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zadewg/RIUS - http://packetstormsecurity.com/files/166448/RTLO-Injection-URI-Spoofing.html
CVE ID: CVE-2020-20118 State: PUBLISHED Published: 2023-07-11T00:00:00 Last Updated: 2024-11-08T16:33:43.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Avast AntiVirus before v.19.7 allows a local attacker to cause a denial of service via a crafted request to the aswSnx.sys driver. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://avast.com - https://gitlab.com/yongchuank/avast-aswsnx-ioctl-82ac0060-oob-write
CVE ID: CVE-2020-20120 State: PUBLISHED Published: 2021-09-28T22:05:09 Last Updated: 2024-08-04T14:15:28.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/top-think/thinkphp/issues/553
CVE ID: CVE-2020-20122 State: PUBLISHED Published: 2021-09-28T22:05:10 Last Updated: 2024-08-04T14:15:28.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wuzhi CMS v4.1 contains a SQL injection vulnerability in the checktitle() function in /coreframe/app/content/admin/content.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SuperSalsa20/WUZHICMS-SQL-Injection/blob/master/README.md