Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-16128 State: PUBLISHED Published: 2020-12-09T03:35:16.896304Z Last Updated: 2024-09-16T16:24:15.489Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Canonical Products: aptdaemon Problem Types: CWE-209 Description: The aptdaemon DBus interface disclosed file existence disclosure by setting Terminal/DebconfSocket properties, aka GHSL-2020-192 and GHSL-2020-196. This affected versions prior to 1.1.1+bzr982-0ubuntu34.1, 1.1.1+bzr982-0ubuntu32.3, 1.1.1+bzr982-0ubuntu19.5, 1.1.1+bzr982-0ubuntu14.5. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/usn/usn-4664-1 - https://bugs.launchpad.net/ubuntu/+source/aptdae
rogram Container: References: - https://usn.ubuntu.com/usn/usn-4664-1 - https://bugs.launchpad.net/ubuntu/+source/aptdaemon/+bug/1899513
CVE ID: CVE-2020-16131 State: PUBLISHED Published: 2020-08-03T16:52:42 Last Updated: 2024-08-04T13:37:53.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tiki before 21.2 allows XSS because [\s\/"\'] is not properly considered in lib/core/TikiFilter/PreventXss.php. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/tikiwiki/tiki/-/commit/d12d6ea7b025d3b3f81c8a71063fe9f89e0c4bf1 - https://tiki.org/News
CVE ID: CVE-2020-16132 State: REJECTED Published: 2020-12-31T00:51:25 Last Updated: 2020-12-31T00:51:25 Description: No description available.
CVE ID: CVE-2020-16134 State: PUBLISHED Published: 2020-08-04T18:49:12 Last Updated: 2024-08-04T13:37:53.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Swisscom Internet Box 2, Internet Box Standard, Internet Box Plus prior to 10.04.38, Internet Box 3 prior to 11.01.20, and Internet Box light prior to 08.06.06. Given the (user-configurable) credentials for the local Web interface or physical access to a device's plus or reset button, an attacker can create a user with elevated privileges on the Sysbus-API. This can then be used to modify local or remote SSH access, thus allowing a login session as the superuser. Additional Analyst Notes: - CVE Prog
modify local or remote SSH access, thus allowing a login session as the superuser. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisscom.ch - https://www.swisscom.ch/content/dam/swisscom/de/about/nachhaltigkeit/digitale-schweiz/sicherheit/bug-bounty/files/cve-2020-16134.txt
CVE ID: CVE-2020-16135 State: PUBLISHED Published: 2020-07-29T20:20:29 Last Updated: 2024-08-04T13:37:53.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.libssh.org/T232 - https://bugs.libssh.org/rLIBSSHe631ebb3e2247dd25e9678e6827c20dc73b73238 - https://gitlab.com/libssh/libssh-mirror/-/merge_requests/120 - https://lists.debian.org/debian-lts-announce/2020/07/msg00034.html - https://usn.ubuntu.com/4447-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JNW5GBC
u.com/4447-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JNW5GBC6JFN76VEWQXMLT5F7VCZ5AJ2E/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FCIKQRKXAAB4HMWM62EPZJ4DVBHIIEG6/ - https://security.gentoo.org/glsa/202011-05 - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2020-16136 State: PUBLISHED Published: 2020-07-31T15:01:07 Last Updated: 2024-08-04T13:37:54.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the server machine (accessible by the owner of the server process) via directory traversal ../ sequences in /Administration/Logs/ requests. The attacker is unable to enumerate files, however. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tgstation/tgstation-server - https://github.com/tgstation/tgstation-server/security/advisories/GHSA-r8pp-42wr-2gc4
CVE ID: CVE-2020-16137 State: PUBLISHED Published: 2020-08-12T20:07:25 Last Updated: 2024-08-04T13:37:53.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: A privilege escalation issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to reset the credentials for the SSH administrative console to arbitrary values. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned to better serve our customers and ensure all who are still running this product understand that the product is end of life and should be removed or upgraded. For more information on this, and how to upgrade, refer to the CVE’s
is end of life and should be removed or upgraded. For more information on this, and how to upgrade, refer to the CVE’s reference information Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/158818/Cisco-7937G-Privilege-Escalation.html - https://www.blacklanternsecurity.com/2020-08-07-Cisco-Unified-IP-Conference-Station-7937G/ - https://www.cisco.com/c/en/us/products/collateral/collaboration-endpoints/unified-ip-phone-7940g/end_of_life_notice_c51-729487.html
CVE ID: CVE-2020-16138 State: PUBLISHED Published: 2020-08-12T20:09:07 Last Updated: 2024-11-18T17:26:51.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: A denial-of-service issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to remotely disable the device until it is power cycled. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned to better serve our customers and ensure all who are still running this product understand that the product is end of life and should be removed or upgraded. For more information on this, and how to upgrade, refer to the CVE’s reference information Addit
be removed or upgraded. For more information on this, and how to upgrade, refer to the CVE’s reference information Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/158819/Cisco-7937G-Denial-Of-Service.html - https://www.blacklanternsecurity.com/2020-08-07-Cisco-Unified-IP-Conference-Station-7937G/ - https://www.cisco.com/c/en/us/products/collateral/collaboration-endpoints/unified-ip-phone-7940g/end_of_life_notice_c51-729487.html
CVE ID: CVE-2020-16139 State: PUBLISHED Published: 2020-08-12T20:10:35 Last Updated: 2024-08-04T13:37:53.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the device remotely through sending specially crafted packets. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned to better serve our customers and ensure all who are still running this product understand that the product is end of life and should be removed or upgraded. For more information on this, and how to upgrade, refer to the CVE’s reference informati
should be removed or upgraded. For more information on this, and how to upgrade, refer to the CVE’s reference information Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://packetstormsecurity.com/files/158819/Cisco-7937G-Denial-Of-Service.html - https://www.blacklanternsecurity.com/2020-08-07-Cisco-Unified-IP-Conference-Station-7937G/ - https://www.cisco.com/c/en/us/products/collateral/collaboration-endpoints/unified-ip-phone-7940g/end_of_life_notice_c51-729487.html
CVE ID: CVE-2020-16140 State: PUBLISHED Published: 2020-10-27T21:32:49 Last Updated: 2024-08-04T13:37:53.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: The search functionality of the Greenmart theme 2.4.2 for WordPress is vulnerable to XSS. Additional Analyst Notes: - CVE Program Container: References: - https://cybersecurityworks.com/zerodays/cve-2020-16140-thembay.html
CVE ID: CVE-2020-16142 State: PUBLISHED Published: 2020-08-27T15:28:52 Last Updated: 2024-08-04T13:37:53.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Mercedes-Benz C Class AMG Premium Plus c220 BlueTec vehicles, the Bluetooth stack mishandles %x and %c format-string specifiers in a device name in the COMAND infotainment software. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40reliable_lait_mouse_975/mercedes-comand-infotainment-improper-format-strings-handling-4c67063d744e
CVE ID: CVE-2020-16143 State: PUBLISHED Published: 2020-07-29T21:48:49 Last Updated: 2024-08-04T13:37:53.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: The seafile-client client 7.0.8 for Seafile is vulnerable to DLL hijacking because it loads exchndl.dll from the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/haiwen/seafile-client/issues/1309
CVE ID: CVE-2020-16144 State: PUBLISHED Published: 2021-02-09T17:59:11 Last Updated: 2024-08-04T13:37:53.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: When using an object storage like S3 as the file store, when a user creates a public link to a folder where anonymous users can upload files, and another user uploads a virus the files antivirus app would detect the virus but fails to delete it due to permission issues. This affects the files_antivirus component versions before 0.15.2 for ownCloud. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.com/security-advisories/files-antivirus-doesnt-delete-virus-if-uploaded-through-public-link/
CVE ID: CVE-2020-16145 State: PUBLISHED Published: 2020-08-12T12:29:44 Last Updated: 2024-08-04T13:37:53.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG document. This issue has been fixed in 1.4.8 and 1.3.15. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/roundcube/roundcubemail/releases/tag/1.4.8 - https://github.com/roundcube/roundcubemail/commit/a71bf2e8d4a64ff2c83fdabc1e8cb0c045a41ef4 - https://github.com/roundcube/roundcubemail/releases/tag/1.3.15 - https://github.com/roundcube/roundcubemail/commit/d44ca2308a96576b88d
.com/roundcube/roundcubemail/releases/tag/1.3.15 - https://github.com/roundcube/roundcubemail/commit/d44ca2308a96576b88d6bf27528964d4fe1a6b8b#diff-d3bb3391c79904494c60ee2ac2f33070 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3DAXK3565NYK4OEZVTW6S5LEVIDQEY2E/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OBLUQRIBAMEQVBO6GUZECCHJDJIWCYFU/ - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00083.html
CVE ID: CVE-2020-16146 State: PUBLISHED Published: 2021-01-12T02:56:11 Last Updated: 2024-08-04T13:37:53.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.7, 3.2.x through 3.2.3, 3.3.x through 3.3.2, and 4.0.x through 4.0.1 has a Buffer Overflow in BluFi provisioning in btc_blufi_recv_handler function in blufi_prf.c. An attacker can send a crafted BluFi protocol Write Attribute command to characteristic 0xFF01. With manipulated packet fields, there is a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/espressif/esp-idf - https://github.com/pokerfacett/MY_CVE_CREDIT/
VE Program Container: References: - https://github.com/espressif/esp-idf - https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/CVE-2020-16146.md
CVE ID: CVE-2020-16147 State: PUBLISHED Published: 2020-09-24T13:57:15 Last Updated: 2024-08-04T13:37:53.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login page in Telmat AccessLog <= 6.0 (TAL_20180415) allows an attacker to get root shell access via Unauthenticated code injection over the network. Additional Analyst Notes: - CVE Program Container: References: - https://podalirius.net/cves/2020-16147/ - https://podalirius.net/en/cves/2020-16147/
CVE ID: CVE-2020-16148 State: PUBLISHED Published: 2020-09-24T13:44:38 Last Updated: 2024-08-04T13:37:53.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ping page of the administration panel in Telmat AccessLog <= 6.0 (TAL_20180415) allows an attacker to get root shell access via authenticated code injection over the network. Additional Analyst Notes: - CVE Program Container: References: - https://podalirius.net/cves/2020-16148/ - https://podalirius.net/en/cves/2020-16148/
CVE ID: CVE-2020-16149 State: REJECTED Published: 2020-09-03T14:31:04 Last Updated: 2020-09-03T14:31:04 Description: No description available.
CVE ID: CVE-2020-16150 State: PUBLISHED Published: 2020-09-02T00:00:00 Last Updated: 2024-08-04T13:37:53.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length. Additional Analyst Notes: - CVE Program Container: References: - https://tls.mbed.org/tech-updates/security-advisories - https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-09-1 - https://lists.fedoraproject.org/archives/list/package-
updates/security-advisories/mbedtls-security-advisory-2020-09-1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5OSOFUD6UTGTDDSQRS62BPXDU52I6PUA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IRPBHCQKZXHVKOP5O5EWE7P76AWGUXQJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OD3NM6GD73CTFFRBKG5G2ACXGG7QQHCC/ - https://lists.debian.org/debian-lts-announce/2022/12/msg00036.html
CVE ID: CVE-2020-16152 State: PUBLISHED Published: 2021-11-14T20:08:26 Last Updated: 2024-08-04T13:37:54.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user via remote HTTP requests that insert this code into a log file and then traverse to that file. Additional Analyst Notes: - CVE Program Container: References: - https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2020-001 - http://packetstormsecurity.com/files/164957/Aerohive-NetConfig-10.0r8a-Local-File-Inclusion-Remote-Code-Exe
N-2020-001 - http://packetstormsecurity.com/files/164957/Aerohive-NetConfig-10.0r8a-Local-File-Inclusion-Remote-Code-Execution.html
CVE ID: CVE-2020-16154 State: PUBLISHED Published: 2021-12-13T17:00:32 Last Updated: 2024-08-04T13:37:53.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass. Additional Analyst Notes: - CVE Program Container: References: - https://metacpan.org/pod/App::cpanminus - https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DENFY4CRTIZL5WYYUYUM4VKCJNXO4QIW/
CVE ID: CVE-2020-16155 State: PUBLISHED Published: 2021-12-13T17:01:52 Last Updated: 2024-08-04T13:37:53.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data. Additional Analyst Notes: - CVE Program Container: References: - https://metacpan.org/pod/CPAN::Checksums - https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
CVE ID: CVE-2020-16156 State: PUBLISHED Published: 2021-12-13T17:03:00.000Z Last Updated: 2025-11-03T21:44:19.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: CPAN 2.28 allows Signature Verification Bypass. Additional Analyst Notes: - CVE Program Container: References: - https://metacpan.org/pod/distribution/CPAN/scripts/cpan - https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/ - http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC/ - https://lists.fedoraproject.org/archives/list/p
ce%40lists.fedoraproject.org/message/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SD6RYOJII7HRJ6WVORFNVTYNOFY5JDXN/
CVE ID: CVE-2020-16157 State: PUBLISHED Published: 2020-07-30T14:34:41 Last Updated: 2024-08-04T13:37:53.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods -> Email Users menu. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-log-server/change-log/ - https://www.getastra.com/blog/911/stored-xss-vulnerability-nagios-log-server/ - https://www.jinsonvarghese.com/stored-xss-vulnerability-in-nagios-log-server/ - http://packetstormsecurity.com/files/158992/Nagios-Log-Server-2.1.6-Cross-Site-Scripting.html
CVE ID: CVE-2020-16158 State: PUBLISHED Published: 2020-10-19T17:44:26 Last Updated: 2024-08-04T13:37:54.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: GoPro gpmf-parser through 1.5 has a stack out-of-bounds write vulnerability in GPMF_ExpandComplexTYPE(). Parsing malicious input can result in a crash or potentially arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gopro/gpmf-parser/blob/2cc0af7ffee6f12934e2d57750bdf292f62b0a97/GPMF_parser.c#L950-L954 - https://blog.inhq.net/posts/gopro-gpmf-parser-vuln-1/
CVE ID: CVE-2020-16159 State: PUBLISHED Published: 2020-10-19T17:48:46 Last Updated: 2024-08-04T13:37:53.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: GoPro gpmf-parser 1.5 has a heap out-of-bounds read and segfault in GPMF_ScaledData(). Parsing malicious input can result in a crash or information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gopro/gpmf-parser/blob/2cc0af7ffee6f12934e2d57750bdf292f62b0a97/GPMF_parser.c#L1657 - https://blog.inhq.net/posts/gopro-gpmf-parser-vuln-1/
CVE ID: CVE-2020-16160 State: PUBLISHED Published: 2020-10-19T17:54:09 Last Updated: 2024-08-04T13:37:53.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_Decompress(). Parsing malicious input can result in a crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gopro/gpmf-parser/blob/2cc0af7ffee6f12934e2d57750bdf292f62b0a97/GPMF_parser.c#L1744 - https://blog.inhq.net/posts/gopro-gpmf-parser-vuln-1/
CVE ID: CVE-2020-16161 State: PUBLISHED Published: 2020-10-19T17:57:26 Last Updated: 2024-08-04T13:37:53.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_ScaledData(). Parsing malicious input can result in a crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gopro/gpmf-parser/blob/2cc0af7ffee6f12934e2d57750bdf292f62b0a97/GPMF_parser.c#L1634 - https://github.com/gopro/gpmf-parser/blob/2cc0af7ffee6f12934e2d57750bdf292f62b0a97/GPMF_parser.c#L1653 - https://blog.inhq.net/posts/gopro-gpmf-parser-vuln-1/
CVE ID: CVE-2020-16162 State: PUBLISHED Published: 2020-07-30T15:16:55 Last Updated: 2024-08-04T13:37:54.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14.28. Missing validation checks on CRL presence or CRL staleness in the X509-based RPKI certificate-tree validation procedure allow remote attackers to bypass intended access restrictions by using revoked certificates. NOTE: there may be counterarguments related to backwards compatibility Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RIPE-NCC/rpki-validator-3/issues/162 - https://github.com/RIPE-NCC/rpki-valida
ntainer: References: - https://github.com/RIPE-NCC/rpki-validator-3/issues/162 - https://github.com/RIPE-NCC/rpki-validator-3/issues/232
CVE ID: CVE-2020-16163 State: PUBLISHED Published: 2020-07-30T15:16:29 Last Updated: 2024-08-04T13:37:53.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in RIPE NCC RPKI Validator 3.x before 3.1-2020.07.06.14.28. RRDP fetches proceed even with a lack of validation of a TLS HTTPS endpoint. This allows remote attackers to bypass intended access restrictions, or to trigger denial of service to traffic directed to co-dependent routing systems. NOTE: third parties assert that the behavior is intentionally permitted by RFC 8182 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RIPE-NCC/rpki-validator-3/issues/159
CVE ID: CVE-2020-16164 State: PUBLISHED Published: 2020-07-30T15:15:37 Last Updated: 2024-08-04T13:37:54.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14.28. It allows remote attackers to bypass intended access restrictions or to cause a denial of service on dependent routing systems by strategically withholding RPKI Route Origin Authorisation ".roa" files or X509 Certificate Revocation List files from the RPKI relying party's view. NOTE: some third parties may regard this as a preferred behavior, not a vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://github.c
referred behavior, not a vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RIPE-NCC/rpki-validator-3/issues/232 - https://github.com/RIPE-NCC/rpki-validator-3/issues/158 - https://github.com/RIPE-NCC/rpki-validator-3/security/advisories/GHSA-q76j-58cx-wp5v
CVE ID: CVE-2020-16165 State: PUBLISHED Published: 2020-07-30T19:01:59 Last Updated: 2024-08-04T13:37:54.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DAO/DTO implementation in SpringBlade through 2.7.1 allows SQL Injection in an ORDER BY clause. This is related to the /api/blade-log/api/list ascs and desc parameters. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/smallc/SpringBlade - https://github.com/chillzhuang/SpringBlade/issues/9
CVE ID: CVE-2020-16166 State: PUBLISHED Published: 2020-07-30T20:05:24 Last Updated: 2024-08-04T13:37:53.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/f227e3ec3b5cad859ad15666874405e8c1bbc1d4 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f227e3ec3b5cad859ad15666874405e8c1bbc1d4 - http://lists
t.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f227e3ec3b5cad859ad15666874405e8c1bbc1d4 - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFBCLQWJI5I4G25TVJNLXLAXJ4MERQNW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AAPTLPAEKVAJYJ4LHN7VH4CN2W75R2YW/ - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00047.html - https://usn.ubuntu.com/4526-1/ - https://usn.ubuntu.com/4525-1/ - https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html - https://lists.debian.org/debian-lts-a