Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-11066 State: PUBLISHED Published: 2020-05-13T23:15:12 Last Updated: 2024-08-04T11:21:14.635Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: TYPO3 Products: TYPO3 CMS Problem Types: CWE-915 Description: In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.17 and greater than or equal to 10.0.0 and less than 10.4.2, calling unserialize() on malicious user-submitted content can lead to modification of dynamically-determined object attributes and result in triggering deletion of an arbitrary directory in the file system, if it is writable for the web server. It can also trigger message submission via email using the identity of the web s
, if it is writable for the web server. It can also trigger message submission via email using the identity of the web site (mail relay). Another insecure deserialization vulnerability is required to actually exploit mentioned aspects. This has been fixed in 9.5.17 and 10.4.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-2rxh-h6h9-qrqc
CVE ID: CVE-2020-11067 State: PUBLISHED Published: 2020-05-13T23:25:13 Last Updated: 2024-08-04T11:21:14.623Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: TYPO3 Products: TYPO3 CMS Problem Types: CWE-502 Description: In TYPO3 CMS 9.0.0 through 9.5.16 and 10.0.0 through 10.4.1, it has been discovered that backend user settings (in $BE_USER->uc) are vulnerable to insecure deserialization. In combination with vulnerabilities of third party components, this can lead to remote code execution. A valid backend user account is needed to exploit this vulnerability. This has been fixed in 9.5.17 and 10.4.2. Additional Analyst Notes: - CVE Program Container: Reference
is vulnerability. This has been fixed in 9.5.17 and 10.4.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-2wj9-434x-9hvp
CVE ID: CVE-2020-11068 State: PUBLISHED Published: 2020-06-23T16:40:12 Last Updated: 2024-08-04T11:21:14.647Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: LoRa Products: LoRaMac-node Problem Types: CWE-120 Description: In LoRaMac-node before 4.4.4, a reception buffer overflow can happen due to the received buffer size not being checked. This has been fixed in 4.4.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Lora-net/LoRaMac-node/security/advisories/GHSA-559p-6xgm-fpv9 - https://github.com/Lora-net/LoRaMac-node/commit/e3063a91daa7ad8a687223efa63079f0c24568e4
CVE ID: CVE-2020-11069 State: PUBLISHED Published: 2020-05-13T23:35:37 Last Updated: 2024-08-04T11:21:14.617Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: TYPO3 Products: TYPO3 CMS Problem Types: CWE-352, CWE-346 Description: In TYPO3 CMS 9.0.0 through 9.5.16 and 10.0.0 through 10.4.1, it has been discovered that the backend user interface and install tool are vulnerable to a same-site request forgery. A backend user can be tricked into interacting with a malicious resource an attacker previously managed to upload to the web server. Scripts are then executed with the privileges of the victims' user session. In a worst-case scenario, new admin users can be cre
are then executed with the privileges of the victims' user session. In a worst-case scenario, new admin users can be created which can directly be used by an attacker. The vulnerability is basically a cross-site request forgery (CSRF) triggered by a cross-site scripting vulnerability (XSS) - but happens on the same target host - thus, it's actually a same-site request forgery. Malicious payload such as HTML containing JavaScript might be provided by either an authenticated backend user or by a non-authenticated user using a third party extension, e.g. file upload in a contact form with knowing the target location. To be successful, the attacked victim requires an active and valid backend or
ct form with knowing the target location. To be successful, the attacked victim requires an active and valid backend or install tool user session at the time of the attack. This has been fixed in 9.5.17 and 10.4.2. The deployment of additional mitigation techniques is suggested as described below. - Sudo Mode Extension This TYPO3 extension intercepts modifications to security relevant database tables, e.g. those storing user accounts or storages of the file abstraction layer. Modifications need to confirmed again by the acting user providing their password again. This technique is known as sudo mode. This way, unintended actions happening in the background can be mitigated. - https://github.
ique is known as sudo mode. This way, unintended actions happening in the background can be mitigated. - https://github.com/FriendsOfTYPO3/sudo-mode - https://extensions.typo3.org/extension/sudo_mode - Content Security Policy Content Security Policies tell (modern) browsers how resources served a particular site are handled. It is also possible to disallow script executions for specific locations. In a TYPO3 context, it is suggested to disallow direct script execution at least for locations /fileadmin/ and /uploads/. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-pqg8-crx9-g8m4
CVE ID: CVE-2020-11070 State: PUBLISHED Published: 2020-05-13T18:40:11 Last Updated: 2024-08-04T11:21:14.616Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: TYPO3GmbH Products: svg_sanitizer Problem Types: CWE-79 Description: The SVG Sanitizer extension for TYPO3 has a cross-site scripting vulnerability in versions before 1.0.3. Slightly invalid or incomplete SVG markup is not correctly processed and thus not sanitized at all. Albeit the markup is not valid it still is evaluated in browsers and leads to cross-site scripting. This is fixed in version 1.0.3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TYPO3GmbH/svg_sani
in version 1.0.3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TYPO3GmbH/svg_sanitizer/security/advisories/GHSA-59cf-m7v5-wh5w
CVE ID: CVE-2020-11071 State: PUBLISHED Published: 2020-05-12T00:25:15 Last Updated: 2024-08-04T11:21:14.616Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: simpleledger Products: slpjs Problem Types: CWE-697 Description: SLPJS (npm package slpjs) before version 0.27.2, has a vulnerability where users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the destruction of a user's minting baton. This is fixed in version 0.27.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/simpleledger/slpjs/se
ersion 0.27.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/simpleledger/slpjs/security/advisories/GHSA-jc83-cpf9-q7c6 - https://github.com/simpleledger/slpjs/commit/3671be2ffb6d4cfa94c00c6dc8649d1ba1d75754
CVE ID: CVE-2020-11072 State: PUBLISHED Published: 2020-05-12T00:45:12 Last Updated: 2024-08-04T11:21:14.682Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: simpleledger Products: slp-validate Problem Types: CWE-697 Description: In SLP Validate (npm package slp-validate) before version 1.2.1, users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the destruction of a user's minting baton. This has been fixed in slp-validate in version 1.2.1. Additonally, slpjs version 0.27.2 has a related fix under related CVE-2020-11071. Addit
n slp-validate in version 1.2.1. Additonally, slpjs version 0.27.2 has a related fix under related CVE-2020-11071. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/simpleledger/slp-validate/security/advisories/GHSA-4w97-57v2-3w44 - https://github.com/simpleledger/slp-validate/commit/cde95c0c6470dceb4f023cd462f904135ebd73e7
CVE ID: CVE-2020-11073 State: PUBLISHED Published: 2020-05-13T18:55:14 Last Updated: 2024-08-04T11:21:14.525Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: MichaelAquilina Products: zsh-autoswitch-virtualenv Problem Types: CWE-77 Description: In Autoswitch Python Virtualenv before version 0.16.0, a user who enters a directory with a malicious `.venv` file could run arbitrary code without any user interaction. This is fixed in version: 1.16.0 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MichaelAquilina/zsh-autoswitch-virtualenv/security/advisories/GHSA-h8wm-cqq6-957q - https://github.com/MichaelAquilina/zsh-autoswitch-vi
zsh-autoswitch-virtualenv/security/advisories/GHSA-h8wm-cqq6-957q - https://github.com/MichaelAquilina/zsh-autoswitch-virtualenv/issues/122 - https://github.com/MichaelAquilina/zsh-autoswitch-virtualenv/pull/123 - https://github.com/MichaelAquilina/zsh-autoswitch-virtualenv/commit/30c77db7c83eca2bc5f6134fccbdc117b49a6a05
CVE ID: CVE-2020-11074 State: PUBLISHED Published: 2020-07-02T16:45:29 Last Updated: 2024-08-04T11:21:14.578Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: PrestaShop Products: PrestaShop Problem Types: CWE-79 Description: In PrestaShop from version 1.5.3.0 and before version 1.7.6.6, there is a stored XSS when using the name of a quick access item. The problem is fixed in 1.7.6.6. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-v4pg-q2cv-f7x4 - https://github.com/PrestaShop/PrestaShop/commit/d122b82bcc2ad8a7b05cfffc03df6c2cae08efe8
CVE ID: CVE-2020-11075 State: PUBLISHED Published: 2020-05-27T21:20:14 Last Updated: 2024-08-04T11:21:14.644Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: anchore Products: anchore-engine Problem Types: CWE-114 Description: In Anchore Engine version 0.7.0, a specially crafted container image manifest, fetched from a registry, can be used to trigger a shell escape flaw in the anchore engine analyzer service during an image analysis process. The image analysis operation can only be executed by an authenticated user via a valid API request to anchore engine, or if an already added image that anchore is monitoring has its manifest altered to exploit the same fl
anchore engine, or if an already added image that anchore is monitoring has its manifest altered to exploit the same flaw. A successful attack can be used to execute commands that run in the analyzer environment, with the same permissions as the user that anchore engine is run as - including access to the credentials that Engine uses to access its own database which have read-write ability, as well as access to the running engien analyzer service environment. By default Anchore Engine is released and deployed as a container where the user is non-root, but if users run Engine directly or explicitly set the user to 'root' then that level of access may be gained in the execution environment wh
ne directly or explicitly set the user to 'root' then that level of access may be gained in the execution environment where Engine runs. This issue is fixed in version 0.7.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/anchore/anchore-engine/security/advisories/GHSA-w4rm-w22x-h7m5 - https://github.com/anchore/anchore-engine/issues/430 - https://github.com/anchore/anchore-engine/pull/431 - https://github.com/anchore/anchore-engine/commit/e41786901f097fd32104447a45864073105d37db
CVE ID: CVE-2020-11076 State: PUBLISHED Published: 2020-05-22T14:50:12 Last Updated: 2024-08-04T11:21:14.684Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: puma Products: puma Problem Types: CWE-444 Description: In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle an HTTP response, by using an invalid transfer-encoding header. The problem has been fixed in Puma 3.12.5 and Puma 4.3.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/puma/puma/security/advisories/GHSA-x7jg-6pwg-fx5h - https://github.com/puma/puma/blob/master/History.md#434435-and-31253126--2020-05-22 - https://github.com/puma/puma/commit/f24d5
/github.com/puma/puma/blob/master/History.md#434435-and-31253126--2020-05-22 - https://github.com/puma/puma/commit/f24d5521295a2152c286abb0a45a1e1e2bd275bd - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00038.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SKIY5H67GJIGJL6SMFWFLUQQQR3EMVPR/ - https://lists.debian.org/debian-lts-announce/2020/10/msg00009.html
CVE ID: CVE-2020-11077 State: PUBLISHED Published: 2020-05-22T14:55:13 Last Updated: 2024-08-04T11:21:14.618Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: puma Products: puma Problem Types: CWE-444 Description: In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could smuggle a request through a proxy, causing the proxy to send a response back to another unknown client. If the proxy uses persistent connections and the client adds another request in via HTTP pipelining, the proxy may mistake it as the first request's body. Puma, however, would see it as two requests, and when processing the second request, send back a response that the proxy does not expec
would see it as two requests, and when processing the second request, send back a response that the proxy does not expect. If the proxy has reused the persistent connection to Puma to send another request for a different client, the second response from the first client will be sent to the second client. This is a similar but different vulnerability from CVE-2020-11076. The problem has been fixed in Puma 3.12.6 and Puma 4.3.5. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/puma/puma/blob/master/History.md#434435-and-31253126--2020-05-22 - https://github.com/puma/puma/security/advisories/GHSA-w64w-qqph-5gxm - http://lists.opensuse.org/opensuse-security-ann
- https://github.com/puma/puma/security/advisories/GHSA-w64w-qqph-5gxm - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00038.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SKIY5H67GJIGJL6SMFWFLUQQQR3EMVPR/ - https://lists.debian.org/debian-lts-announce/2020/10/msg00009.html
CVE ID: CVE-2020-11078 State: PUBLISHED Published: 2020-05-20T16:00:16 Last Updated: 2024-08-04T11:21:14.627Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: httplib2 Products: httplib2 Problem Types: CWE-93 Description: In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with uri constructed by string concatenation, as opposed to proper urllib building with escaping. This has been fixed in 0.18.0. Additional Analyst Notes: - CVE Program Container: References:
b building with escaping. This has been fixed in 0.18.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/httplib2/httplib2/security/advisories/GHSA-gg84-qgv9-w4pq - https://github.com/httplib2/httplib2/commit/a1457cc31f3206cf691d11d2bf34e98865873e9e - https://lists.apache.org/thread.html/rc9eff9572946142b657c900fe63ea4bbd3535911e8d4ce4d08fe4b89%40%3Ccommits.allura.apache.org%3E - https://lists.debian.org/debian-lts-announce/2020/06/msg00000.html - https://lists.apache.org/thread.html/r23711190c2e98152cb6f216b95090d5eeb978543bb7e0bad22ce47fc%40%3Cissues.beam.apache.org%3E - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject
fc%40%3Cissues.beam.apache.org%3E - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IXCX2AWROGWGY5GXR7VN3BKF34A2FO6J/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZJ3D6JSM7CFZESZZKGUW2VX55BOSOXI/ - https://lists.apache.org/thread.html/r69a462e690b5f2c3d418a288a2c98ae764d58587bd0b5d6ab141f25f%40%3Cissues.beam.apache.org%3E - https://lists.apache.org/thread.html/rad8872fc99f670958c2774e2bf84ee32a3a0562a0c787465cf3dfa23%40%3Cissues.beam.apache.org%3E - https://lists.apache.org/thread.html/r7f364000066748299b331b615ba51c62f55ab5b201ddce9a22d98202%40%3Cissues.beam.apache.org%3E - https://lists.
rg/thread.html/r7f364000066748299b331b615ba51c62f55ab5b201ddce9a22d98202%40%3Cissues.beam.apache.org%3E - https://lists.apache.org/thread.html/r4d35dac106fab979f0db75a07fc4e320ad848b722103e79667ff99e1%40%3Cissues.beam.apache.org%3E
CVE ID: CVE-2020-11079 State: PUBLISHED Published: 2020-05-28T18:40:12 Last Updated: 2024-08-04T11:21:14.625Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: skoranga Products: node-dns-sync Problem Types: CWE-94 Description: node-dns-sync (npm module dns-sync) through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This has been fixed in 0.2.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/skoranga/node-dns-sync/security/advisories/GHSA-wh69-wc6q-7888 - https://github.com/skoranga/node-dns-sync/commit/c
.com/skoranga/node-dns-sync/security/advisories/GHSA-wh69-wc6q-7888 - https://github.com/skoranga/node-dns-sync/commit/cb10a5ac7913eacc031ade7d91596277f31645dc
CVE ID: CVE-2020-11080 State: PUBLISHED Published: 2020-06-03T00:00:00.000Z Last Updated: 2025-06-09T15:45:50.711Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: nghttp2 Products: nghttp2 Problem Types: CWE-707 Description: In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service. The proof of concept attack involves a malicious client constructing a SETTINGS frame with a length of 14,400 bytes (2400 individual settings entries) over and over again. The attack causes the CPU to spike at 100%. nghttp2 v1.41.0 fixes this vulnerability. There is a workaround to this vulnerability. Implement nghttp2_on_frame_recv_ca
ghttp2 v1.41.0 fixes this vulnerability. There is a workaround to this vulnerability. Implement nghttp2_on_frame_recv_callback callback, and if received frame is SETTINGS frame and the number of settings entries are large (e.g., > 32), then drop the connection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.debian.org/security/2020/dsa-4696 - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00024.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AAC2AA36OTRHKSVM5OV7TTVB3CZIGEFL/ - https://www.oracle.com/security-alerts/cpujul2020.html - https://github.com/nghttp2/nghttp
36OTRHKSVM5OV7TTVB3CZIGEFL/ - https://www.oracle.com/security-alerts/cpujul2020.html - https://github.com/nghttp2/nghttp2/security/advisories/GHSA-q5wr-xfw9-q7xr - https://github.com/nghttp2/nghttp2/commit/336a98feb0d56b9ac54e12736b18785c27f75090 - https://github.com/nghttp2/nghttp2/commit/f8da73bd042f810f34d19f9eae02b46d870af394 - https://www.oracle.com/security-alerts/cpuoct2020.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4OOYAMJVLLCLXDTHW3V5UXNULZBBK4O6/ - https://www.oracle.com/security-alerts/cpujan2021.html - https://www.oracle.com//security-alerts/cpujul2021.html - https://lists.debian.org/debian-lts-announce/2021/10/msg00011
https://www.oracle.com//security-alerts/cpujul2021.html - https://lists.debian.org/debian-lts-announce/2021/10/msg00011.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html
CVE ID: CVE-2020-11081 State: PUBLISHED Published: 2020-07-10T18:45:16 Last Updated: 2024-08-04T11:21:14.829Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N) Vendors: osquery Products: osquery Problem Types: CWE-114 Description: osquery before version 4.4.0 enables a privilege escalation vulnerability. If a Window system is configured with a PATH that contains a user-writable directory then a local user may write a zlib1.dll DLL, which osquery will attempt to load. Since osquery runs with elevated privileges this enables local escalation. This is fixed in version 4.4.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osquery/osquer
xed in version 4.4.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osquery/osquery/security/advisories/GHSA-2xwp-8fv7-c5pm - https://github.com/osquery/osquery/issues/6426 - https://github.com/osquery/osquery/pull/6433 - https://github.com/osquery/osquery/commit/4d4957f12a6aa0becc9d01d9f97061e1e3d809c5 - https://github.com/osquery/osquery/releases/tag/4.4.0
CVE ID: CVE-2020-11082 State: PUBLISHED Published: 2020-05-28T21:10:12 Last Updated: 2024-08-04T11:21:14.622Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L) Vendors: kaminari Products: Kaminari Problem Types: CWE-79 Description: In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kaminari/kaminari/security/advisories/GHSA-r5jw-62xg-j433 - https://github.com/github/advisory-review/pull/1020 - https://github.com/kaminari/kaminari/commit/8dd52a1aed3d2fa2835d836de23fc0d8c4
ub.com/github/advisory-review/pull/1020 - https://github.com/kaminari/kaminari/commit/8dd52a1aed3d2fa2835d836de23fc0d8c4ff5db8 - https://lists.debian.org/debian-lts-announce/2021/09/msg00011.html - https://www.debian.org/security/2021/dsa-5005
CVE ID: CVE-2020-11083 State: PUBLISHED Published: 2020-07-14T20:55:14 Last Updated: 2024-08-04T11:21:14.610Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N) Vendors: October CMS Products: October Problem Types: CWE-79 Description: In October from version 1.0.319 and before version 1.0.466, a user with access to a markdown FormWidget that stores data persistently could create a stored XSS attack against themselves and any other users with access to the generated HTML from the field. This has been fixed in 1.0.466. For users of the RainLab.Blog plugin, this has also been fixed in 1.4.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/o
this has also been fixed in 1.4.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/octobercms/october/security/advisories/GHSA-w4pj-7p68-3vgv - https://github.com/octobercms/october/commit/9ecfb4867baae14a0d3f99f5b5c1e8a979ae8746 - https://github.com/rainlab/blog-plugin/commit/6ae19a6e16ef3ba730692bc899851342c858bb94 - http://packetstormsecurity.com/files/158730/October-CMS-Build-465-XSS-File-Read-File-Deletion-CSV-Injection.html - http://seclists.org/fulldisclosure/2020/Aug/2
CVE ID: CVE-2020-11084 State: PUBLISHED Published: 2020-07-14T21:15:13 Last Updated: 2024-08-04T11:21:14.654Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: yaBobJonez Products: iPear Problem Types: CWE-78 Description: In iPear, the manual execution of the eval() function can lead to command injection. Only PCs where commands are manually executed via "For Developers" are affected. This function allows executing any PHP code within iPear which may change, damage, or steal data (files) from the PC. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yaBobJonez/iPear/security/advisories/GHSA-4xvp-35fx-hjjj