Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-8357 State: PUBLISHED Published: 2021-03-09T16:15:20 Last Updated: 2024-08-04T09:56:28.321Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Lenovo Products: PCManager Problem Types: CWE-276 Description: A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.200.2042, that could allow configuration files to be written to non-standard locations. Additional Analyst Notes: - CVE Program Container: References: - https://iknow.lenovo.com.cn/detail/dc_195029.html
CVE ID: CVE-2020-8358 State: REJECTED Published: 2021-04-13T20:41:10 Last Updated: 2021-04-13T20:41:10 Description: No description available.
CVE ID: CVE-2020-8359 State: REJECTED Published: 2021-04-13T20:41:11 Last Updated: 2021-04-13T20:41:11 Description: No description available.
CVE ID: CVE-2020-8360 State: REJECTED Published: 2021-04-13T20:41:12 Last Updated: 2021-04-13T20:41:12 Description: No description available.
CVE ID: CVE-2020-8361 State: REJECTED Published: 2021-04-13T20:41:12 Last Updated: 2021-04-13T20:41:12 Description: No description available.
CVE ID: CVE-2020-8362 State: REJECTED Published: 2021-04-13T20:41:13 Last Updated: 2021-04-13T20:41:13 Description: No description available.
CVE ID: CVE-2020-8363 State: REJECTED Published: 2021-04-13T20:41:13 Last Updated: 2021-04-13T20:41:13 Description: No description available.
CVE ID: CVE-2020-8364 State: REJECTED Published: 2021-04-13T20:41:14 Last Updated: 2021-04-13T20:41:14 Description: No description available.
CVE ID: CVE-2020-8365 State: REJECTED Published: 2021-04-13T20:41:15 Last Updated: 2021-04-13T20:41:15 Description: No description available.
CVE ID: CVE-2020-8366 State: REJECTED Published: 2021-04-13T20:41:15 Last Updated: 2021-04-13T20:41:15 Description: No description available.
CVE ID: CVE-2020-8367 State: REJECTED Published: 2021-04-13T20:41:16 Last Updated: 2021-04-13T20:41:16 Description: No description available.
CVE ID: CVE-2020-8368 State: REJECTED Published: 2021-04-13T20:41:16 Last Updated: 2021-04-13T20:41:16 Description: No description available.
CVE ID: CVE-2020-8369 State: REJECTED Published: 2021-04-13T20:41:17 Last Updated: 2021-04-13T20:41:17 Description: No description available.
CVE ID: CVE-2020-8370 State: REJECTED Published: 2021-04-13T20:41:17 Last Updated: 2021-04-13T20:41:17 Description: No description available.
CVE ID: CVE-2020-8371 State: REJECTED Published: 2021-04-13T20:41:18 Last Updated: 2021-04-13T20:41:18 Description: No description available.
CVE ID: CVE-2020-8372 State: REJECTED Published: 2021-04-13T20:41:18 Last Updated: 2021-04-13T20:41:18 Description: No description available.
CVE ID: CVE-2020-8373 State: REJECTED Published: 2021-04-13T20:41:19 Last Updated: 2021-04-13T20:41:19 Description: No description available.
CVE ID: CVE-2020-8374 State: REJECTED Published: 2021-04-13T20:41:20 Last Updated: 2021-04-13T20:41:20 Description: No description available.
CVE ID: CVE-2020-8375 State: REJECTED Published: 2021-04-13T20:41:20 Last Updated: 2021-04-13T20:41:20 Description: No description available.
CVE ID: CVE-2020-8376 State: REJECTED Published: 2021-04-13T20:41:21 Last Updated: 2021-04-13T20:41:21 Description: No description available.
CVE ID: CVE-2020-8377 State: REJECTED Published: 2021-04-13T20:41:21 Last Updated: 2021-04-13T20:41:21 Description: No description available.
CVE ID: CVE-2020-8378 State: REJECTED Published: 2021-04-13T20:41:22 Last Updated: 2021-04-13T20:41:22 Description: No description available.
CVE ID: CVE-2020-8379 State: REJECTED Published: 2021-04-13T20:41:22 Last Updated: 2021-04-13T20:41:22 Description: No description available.
CVE ID: CVE-2020-8380 State: REJECTED Published: 2021-04-13T20:41:23 Last Updated: 2021-04-13T20:41:23 Description: No description available.
CVE ID: CVE-2020-8381 State: REJECTED Published: 2021-04-13T20:41:23 Last Updated: 2021-04-13T20:41:23 Description: No description available.
CVE ID: CVE-2020-8382 State: REJECTED Published: 2021-04-13T20:41:24 Last Updated: 2021-04-13T20:41:24 Description: No description available.
CVE ID: CVE-2020-8383 State: REJECTED Published: 2021-04-13T20:41:25 Last Updated: 2021-04-13T20:41:25 Description: No description available.
CVE ID: CVE-2020-8384 State: REJECTED Published: 2021-04-13T20:41:25 Last Updated: 2021-04-13T20:41:25 Description: No description available.
CVE ID: CVE-2020-8385 State: REJECTED Published: 2021-04-13T20:41:26 Last Updated: 2021-04-13T20:41:26 Description: No description available.
CVE ID: CVE-2020-8386 State: REJECTED Published: 2021-04-13T20:41:26 Last Updated: 2021-04-13T20:41:26 Description: No description available.
CVE ID: CVE-2020-8387 State: REJECTED Published: 2021-04-13T20:41:27 Last Updated: 2021-04-13T20:41:27 Description: No description available.
CVE ID: CVE-2020-8388 State: REJECTED Published: 2021-04-13T20:41:27 Last Updated: 2021-04-13T20:41:27 Description: No description available.
CVE ID: CVE-2020-8389 State: REJECTED Published: 2021-04-13T20:41:28 Last Updated: 2021-04-13T20:41:28 Description: No description available.
CVE ID: CVE-2020-8390 State: REJECTED Published: 2021-04-13T20:41:29 Last Updated: 2021-04-13T20:41:29 Description: No description available.
CVE ID: CVE-2020-8391 State: REJECTED Published: 2021-04-13T20:41:29 Last Updated: 2021-04-13T20:41:29 Description: No description available.
CVE ID: CVE-2020-8392 State: REJECTED Published: 2021-04-13T20:41:30 Last Updated: 2021-04-13T20:41:30 Description: No description available.
CVE ID: CVE-2020-8393 State: REJECTED Published: 2021-04-13T20:41:30 Last Updated: 2021-04-13T20:41:30 Description: No description available.
CVE ID: CVE-2020-8394 State: REJECTED Published: 2021-04-13T20:41:31 Last Updated: 2021-04-13T20:41:31 Description: No description available.
CVE ID: CVE-2020-8395 State: REJECTED Published: 2021-04-13T20:41:31 Last Updated: 2021-04-13T20:41:31 Description: No description available.
CVE ID: CVE-2020-8396 State: REJECTED Published: 2021-04-13T20:41:32 Last Updated: 2021-04-13T20:41:32 Description: No description available.
CVE ID: CVE-2020-8397 State: REJECTED Published: 2021-04-13T20:41:33 Last Updated: 2021-04-13T20:41:32 Description: No description available.
CVE ID: CVE-2020-8398 State: REJECTED Published: 2021-04-13T20:41:33 Last Updated: 2021-04-13T20:41:33 Description: No description available.
CVE ID: CVE-2020-8399 State: REJECTED Published: 2021-04-13T20:41:34 Last Updated: 2021-04-13T20:41:34 Description: No description available.
CVE ID: CVE-2020-8400 State: REJECTED Published: 2021-04-13T20:41:34 Last Updated: 2021-04-13T20:41:34 Description: No description available.
CVE ID: CVE-2020-8401 State: REJECTED Published: 2021-04-13T20:41:35 Last Updated: 2021-04-13T20:41:35 Description: No description available.
CVE ID: CVE-2020-8402 State: REJECTED Published: 2021-04-13T20:41:35 Last Updated: 2021-04-13T20:41:35 Description: No description available.
CVE ID: CVE-2020-8403 State: REJECTED Published: 2021-04-13T20:41:36 Last Updated: 2021-04-13T20:41:36 Description: No description available.
CVE ID: CVE-2020-8404 State: REJECTED Published: 2021-04-13T20:41:36 Last Updated: 2021-04-13T20:41:36 Description: No description available.
CVE ID: CVE-2020-8405 State: REJECTED Published: 2021-04-13T20:41:37 Last Updated: 2021-04-13T20:41:37 Description: No description available.
CVE ID: CVE-2020-8406 State: REJECTED Published: 2021-04-13T20:41:38 Last Updated: 2021-04-13T20:41:38 Description: No description available.
CVE ID: CVE-2020-8407 State: REJECTED Published: 2021-04-13T20:41:38 Last Updated: 2021-04-13T20:41:38 Description: No description available.
CVE ID: CVE-2020-8408 State: REJECTED Published: 2021-04-13T20:41:39 Last Updated: 2021-04-13T20:41:39 Description: No description available.
CVE ID: CVE-2020-8409 State: REJECTED Published: 2021-04-13T20:41:39 Last Updated: 2021-04-13T20:41:39 Description: No description available.
CVE ID: CVE-2020-8410 State: REJECTED Published: 2021-04-13T20:41:40 Last Updated: 2021-04-13T20:41:40 Description: No description available.
CVE ID: CVE-2020-8411 State: REJECTED Published: 2021-04-13T20:41:40 Last Updated: 2021-04-13T20:41:40 Description: No description available.
CVE ID: CVE-2020-8412 State: REJECTED Published: 2021-04-13T20:41:41 Last Updated: 2021-04-13T20:41:41 Description: No description available.
CVE ID: CVE-2020-8413 State: REJECTED Published: 2021-04-13T20:41:41 Last Updated: 2021-04-13T20:41:41 Description: No description available.
CVE ID: CVE-2020-8414 State: REJECTED Published: 2021-04-13T20:41:42 Last Updated: 2021-04-13T20:41:42 Description: No description available.
CVE ID: CVE-2020-8415 State: REJECTED Published: 2021-04-13T20:41:43 Last Updated: 2021-04-13T20:41:43 Description: No description available.
CVE ID: CVE-2020-8416 State: PUBLISHED Published: 2020-01-29T16:05:37 Last Updated: 2024-08-04T09:56:28.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: IKTeam BearFTP before 0.2.0 allows remote attackers to achieve denial of service via a large volume of connections to the PASV mode port. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kolya5544/BearFTP/commit/9965337f9d4c0325e4aab324dcd485e4cbb7b428 - https://github.com/kolya5544/BearFTP/releases/tag/0.2.0 - https://github.com/kolya5544/BearFTP/blob/0.2.0/CHANGELOG.txt - https://pastebin.com/wqNWnCuN - http://packetstormsecurity.com/files/156170/BearFTP-0.1.0-Denial-Of-Service.html
CVE ID: CVE-2020-8417 State: PUBLISHED Published: 2020-01-28T20:19:25 Last Updated: 2024-08-04T09:56:28.398Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/code-snippets/#developers - https://wpvulndb.com/vulnerabilities/10050
CVE ID: CVE-2020-8419 State: PUBLISHED Published: 2020-01-28T20:58:45 Last Updated: 2024-08-04T09:56:28.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.15. Missing token checks in the batch actions of various components cause CSRF vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/798-20200101-core-csrf-in-batch-actions
CVE ID: CVE-2020-8420 State: PUBLISHED Published: 2020-01-28T20:58:24 Last Updated: 2024-08-04T09:56:28.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler of com_templates causes a CSRF vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/799-20200102-core-csrf-com-templates-less-compiler
CVE ID: CVE-2020-8421 State: PUBLISHED Published: 2020-01-28T20:58:34 Last Updated: 2024-08-04T09:56:28.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.15. Inadequate escaping of usernames allows XSS attacks in com_actionlogs. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/800-20200103-core-xss-in-com-actionlogs
CVE ID: CVE-2020-8422 State: PUBLISHED Published: 2020-01-31T15:25:11.000Z Last Updated: 2025-05-30T16:01:31.452Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An authorization issue was discovered in the Credential Manager feature in Zoho ManageEngine Remote Access Plus before 10.0.450. A user with the Guest role can extract the collection of all defined credentials of remote machines: the credential name, credential type, user name, domain/workgroup name, and description (but not the password). Additional Analyst Notes: - CVE Program Container: References: - https://excellium-services.com/cert-xlm-advisor
sword). Additional Analyst Notes: - CVE Program Container: References: - https://excellium-services.com/cert-xlm-advisory/CVE-2020-8422 - https://excellium-services.com/cert-xlm-advisory/cve-2020-8422/ - https://cds.thalesgroup.com/en/tcs-cert/CVE-2020-8422
CVE ID: CVE-2020-8423 State: PUBLISHED Published: 2020-04-02T17:00:17 Last Updated: 2024-08-04T09:56:28.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in the httpd daemon on TP-Link TL-WR841N V10 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the configuration of the Wi-Fi network. Additional Analyst Notes: - CVE Program Container: References: - https://www.tp-link.com/us/security - https://ktln2.org/2020/03/29/exploiting-mips-router/
CVE ID: CVE-2020-8424 State: PUBLISHED Published: 2020-01-28T22:11:01 Last Updated: 2024-08-04T09:56:28.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/J3rryBl4nks/CUPSEasyExploits - http://packetstormsecurity.com/files/156140/Cups-Easy-1.0-Cross-Site-Request-Forgery.html
CVE ID: CVE-2020-8425 State: PUBLISHED Published: 2020-01-28T22:10:50 Last Updated: 2024-08-04T09:56:28.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account deletion via userdelete.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/J3rryBl4nks/CUPSEasyExploits - http://packetstormsecurity.com/files/156140/Cups-Easy-1.0-Cross-Site-Request-Forgery.html
CVE ID: CVE-2020-8426 State: PUBLISHED Published: 2020-01-28T22:26:03 Last Updated: 2024-08-04T09:56:28.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Elementor plugin before 2.8.5 for WordPress suffers from a reflected XSS vulnerability on the elementor-system-info page. These can be exploited by targeting an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/elementor/#developers - https://blog.impenetrable.tech/xss-in-wordpress-elementor-plugin - https://wpvulndb.com/vulnerabilities/10051
CVE ID: CVE-2020-8427 State: PUBLISHED Published: 2020-02-17T14:56:51 Last Updated: 2024-08-04T09:56:28.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Unitrends Backup before 10.4.1, an HTTP request parameter was not properly sanitized, allowing for SQL injection that resulted in an authentication bypass. Additional Analyst Notes: - CVE Program Container: References: - https://support.unitrends.com/UnitrendsBackup/s/article/000006983
CVE ID: CVE-2020-8428 State: PUBLISHED Published: 2020-01-28T23:43:41 Last Updated: 2024-08-04T09:56:28.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/namei.c in the Linux kernel before 5.5 has a may_create_in_sticky use-after-free, which allows local users to cause a denial of service (OOPS) or possibly obtain sensitive information from kernel memory, aka CID-d0cb50185ae9. One attack vector may be an open system call for a UNIX domain socket, if the socket is being moved to a new parent directory and its old parent directory is being removed. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2020/01/28/2 - https:
Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2020/01/28/2 - https://github.com/torvalds/linux/commit/d0cb50185ae942b03c4327be322055d622dc79f6 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d0cb50185ae942b03c4327be322055d622dc79f6 - http://www.openwall.com/lists/oss-security/2020/01/28/4 - http://www.openwall.com/lists/oss-security/2020/02/02/1 - https://security.netapp.com/advisory/ntap-20200313-0003/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html - https://usn.ubuntu.com/4320-1/ - https://usn.ubuntu.com/4318-1/ - http://packetstormsecurity.com/files/157233/Kernel-Live-Patch-Secu
ubuntu.com/4320-1/ - https://usn.ubuntu.com/4318-1/ - http://packetstormsecurity.com/files/157233/Kernel-Live-Patch-Security-Notice-LSN-0065-1.html - https://usn.ubuntu.com/4324-1/ - https://usn.ubuntu.com/4325-1/ - https://usn.ubuntu.com/4319-1/ - https://www.debian.org/security/2020/dsa-4667 - https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html - https://www.debian.org/security/2020/dsa-4698
CVE ID: CVE-2020-8429 State: PUBLISHED Published: 2020-02-11T17:15:42 Last Updated: 2024-08-04T09:56:28.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Admin web application in Kinetica 7.0.9.2.20191118151947 does not properly sanitise the input for the function getLogs. This lack of sanitisation could be exploited to allow an authenticated attacker to run remote code on the underlying operating system. The logFile parameter in the getLogs function was used as a variable in a command to read log files; however, due to poor input sanitisation, it was possible to bypass a replacement and break out of the command. Additional Analyst Notes: - CVE Program Container: References
ible to bypass a replacement and break out of the command. Additional Analyst Notes: - CVE Program Container: References: - https://support.kinetica.com/hc/en-us/categories/360001223653-Release-Notes - https://www.nccgroup.trust/uk/our-research/technical-advisory-command-injection/?research=Technical+advisories
CVE ID: CVE-2020-8430 State: PUBLISHED Published: 2020-04-13T15:08:46 Last Updated: 2024-08-04T09:56:28.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stormshield Network Security 310 3.7.10 devices have an auth/lang.html?rurl= Open Redirect vulnerability on the captive portal. For example, the attacker can use rurl=//example.com instead of rurl=https://example.com in the query string. Additional Analyst Notes: - CVE Program Container: References: - https://www.stormshield.com/products/sn310/ - https://www.digitemis.com/category/blog/actualite/ - https://www.digitemis.com/2020/02/24/digitemis-decouvre-une-vulnerabilite-au-sein-dun-produit-stormshield-cve-2020-8430/ - https:/
w.digitemis.com/2020/02/24/digitemis-decouvre-une-vulnerabilite-au-sein-dun-produit-stormshield-cve-2020-8430/ - https://advisories.stormshield.eu/2020-001/
CVE ID: CVE-2020-8432 State: PUBLISHED Published: 2020-01-29T18:33:31 Last Updated: 2024-08-04T09:56:28.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function. Double freeing may result in a write-what-where condition, allowing an attacker to execute arbitrary code. NOTE: this vulnerablity was introduced when attempting to fix a memory leak identified by static analysis. Additional Analyst Notes: - CVE Program Container: References: - https://www.mail-archive.com/u-boot%40lists.denx.de/msg354060.html - https://www.mail-archive.com/u-boot%40lists.denx.de/msg354114.html - http:/
.com/u-boot%40lists.denx.de/msg354060.html - https://www.mail-archive.com/u-boot%40lists.denx.de/msg354114.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00030.html
CVE ID: CVE-2020-8434 State: PUBLISHED Published: 2020-05-19T12:29:46 Last Updated: 2024-08-04T09:56:28.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenzabar JICS (aka Internet Campus Solution) before 9.0.1 Patch 3, 9.1 before 9.1.2 Patch 2, and 9.2 before 9.2.2 Patch 8 has session cookies that are a deterministic function of the username. There is a hard-coded password to supply a PBKDF feeding into AES to encrypt a username and base64 encode it to a client-side cookie for persistent session authentication. By knowing the key and algorithm, an attacker can select any username, encrypt it, base64 encode it, and save it in their browser with the correct JICSLoginCookie cook
an select any username, encrypt it, base64 encode it, and save it in their browser with the correct JICSLoginCookie cookie format to impersonate any real user in the JICS database without the need for authenticating (or verifying with MFA if implemented). Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40mdavis332/higher-ed-erp-portal-vulnerability-auth-bypass-to-login-any-account-f1aeef438f80
CVE ID: CVE-2020-8435 State: PUBLISHED Published: 2020-03-12T13:32:59 Last Updated: 2024-08-04T09:56:28.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress. There is SQL injection via the rm_analytics_show_form rm_form_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://Spider-security.co.uk - https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/#developers - https://spider-security.co.uk/blog-cve-2020-8435
CVE ID: CVE-2020-8436 State: PUBLISHED Published: 2020-03-12T13:31:59 Last Updated: 2024-08-04T09:56:28.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rm_form_id, rm_tr, or form_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://Spider-security.co.uk - https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/#developers - https://spider-security.co.uk/blog-cve-2020-8436
CVE ID: CVE-2020-8437 State: PUBLISHED Published: 2020-03-02T18:33:37 Last Updated: 2024-08-04T09:56:28.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505) misparses nested bencoded dictionaries, which allows a remote attacker to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://forum.utorrent.com/forum/13-announcements/ - https://twitter.com/va_start - https://utclient.utorrent.com/offers/beta_release_notes/release_notes.html - https://blog.whtaguy.com/2020/09/utorrent-cve-2020-8437-vulnerability.html
CVE ID: CVE-2020-8438 State: PUBLISHED Published: 2020-01-29T22:06:30 Last Updated: 2024-08-04T09:56:28.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruckus ZoneFlex R500 104.0.0.0.1347 devices allow an authenticated attacker to execute arbitrary OS commands via the hidden /forms/nslookupHandler form, as demonstrated by the nslookuptarget=|cat${IFS} substring. Additional Analyst Notes: - CVE Program Container: References: - https://sku11army.blogspot.com/2020/01/ruckus-rce-ruckus-m500-via-injection-on.html
CVE ID: CVE-2020-8439 State: PUBLISHED Published: 2020-03-07T00:26:41 Last Updated: 2024-08-04T09:56:28.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monstra CMS through 3.0.4 allows remote authenticated users to take over arbitrary user accounts via a modified login parameter to an edit URI, as demonstrated by login=victim to the users/21/edit URI. Additional Analyst Notes: - CVE Program Container: References: - http://uploadboy.me/cn40ne6p89t6/POC.mp4.html - https://cert.ikiu.ac.ir/public-files/pages/attachments/11/02630f153869936d555a79f89d717f9c.pdf
CVE ID: CVE-2020-8440 State: PUBLISHED Published: 2020-01-31T13:45:53 Last Updated: 2024-08-04T09:56:28.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: controllers/page_apply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP script as a resume. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/niteosoft/simplejobscript/issues/10