Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-15942 State: PUBLISHED Published: 2021-04-12T14:11:25 Last Updated: 2024-10-25T13:59:32.498Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Fortinet Products: Fortinet FortiWeb Problem Types: Information disclosure Description: An information disclosure vulnerability in Web Vulnerability Scan profile of Fortinet's FortiWeb version 6.2.x below 6.2.4 and version 6.3.x below 6.3.5 may allow a remote authenticated attacker to read the password used by the FortiWeb scanner to access the device defined in the scan profile. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-20-076 - https://www.fortiguard.com/psirt/FG-IR-20-076
CVE ID: CVE-2020-15943 State: PUBLISHED Published: 2020-08-04T19:07:52 Last Updated: 2024-08-04T13:30:23.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Gantt-Chart module before 5.5.4 for Jira. Due to a missing privilege check, it is possible to read and write to the module configuration of other users. This can also be used to deliver an XSS payload to other users' dashboards. To exploit this vulnerability, an attacker has to be authenticated. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-029.txt - https://marketplace.atlassian.com/apps/28997/gantt-ch
e/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-029.txt - https://marketplace.atlassian.com/apps/28997/gantt-chart-for-jira?hosting=cloud&tab=overview - http://seclists.org/fulldisclosure/2020/Aug/0 - http://packetstormsecurity.com/files/158751/Gantt-Chart-For-Jira-5.5.3-Missing-Privilege-Check.html
CVE ID: CVE-2020-15944 State: PUBLISHED Published: 2020-08-04T19:02:54 Last Updated: 2024-08-04T13:30:23.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Gantt-Chart module before 5.5.5 for Jira. Due to missing validation of user input, it is vulnerable to a persistent XSS attack. An attacker can embed the attack vectors in the dashboard of other users. To exploit this vulnerability, an attacker has to be authenticated. Additional Analyst Notes: - CVE Program Container: References: - https://marketplace.atlassian.com/apps/28997/gantt-chart-for-jira?hosting=cloud&tab=overview - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-
gantt-chart-for-jira?hosting=cloud&tab=overview - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-030.txt - http://seclists.org/fulldisclosure/2020/Aug/1 - http://packetstormsecurity.com/files/158752/Gantt-Chart-For-Jira-5.5.4-Cross-Site-Scripting.html
CVE ID: CVE-2020-15945 State: PUBLISHED Published: 2020-07-24T20:05:57.000Z Last Updated: 2025-02-19T14:35:13.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lua 5.4.0 (fixed in 5.4.1) has a segmentation fault in changedline in ldebug.c (e.g., when called by luaG_traceexec) because it incorrectly expects that an oldpc value is always updated upon a return of the flow of control to a function. Additional Analyst Notes: - CVE Program Container: References: - http://lua-users.org/lists/lua-l/2020-07/msg00123.html - https://github.com/lua/lua/commit/a2195644d89812e5b157ce7bac35543e06db05e3 - https://www.lua.org/bugs.html#5.4.0-8
CVE ID: CVE-2020-15947 State: PUBLISHED Published: 2020-08-13T14:09:50 Last Updated: 2024-08-04T13:30:23.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in the qm_adm/qm_export_stats_run.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter. Additional Analyst Notes: - CVE Program Container: References: - https://blog.divisionzero.co/2020/08/12/cve-2020-15947/
CVE ID: CVE-2020-15948 State: PUBLISHED Published: 2021-07-28T19:39:09 Last Updated: 2024-08-04T13:30:23.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: eGain Chat 15.5.5 allows XSS via the Name (aka full_name) field. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/163687/eGain-Chat-15.5.5-Cross-Site-Scripting.html
CVE ID: CVE-2020-15949 State: PUBLISHED Published: 2020-11-05T14:35:03 Last Updated: 2024-08-04T13:30:23.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Immuta v2.8.2 is affected by one instance of insecure permissions that can lead to user account takeover. Additional Analyst Notes: - CVE Program Container: References: - https://www.immuta.com/ - https://labs.bishopfox.com/advisories - https://labs.bishopfox.com/advisories/immuta-version-2.8.2
CVE ID: CVE-2020-15950 State: PUBLISHED Published: 2020-11-05T14:35:53 Last Updated: 2024-08-04T13:30:23.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Immuta v2.8.2 is affected by improper session management: user sessions are not revoked upon logout. Additional Analyst Notes: - CVE Program Container: References: - https://www.immuta.com/ - https://labs.bishopfox.com/advisories - https://labs.bishopfox.com/advisories/immuta-version-2.8.2
CVE ID: CVE-2020-15951 State: PUBLISHED Published: 2020-11-05T14:33:04 Last Updated: 2024-08-04T13:30:23.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Immuta v2.8.2 accepts user-supplied project names without properly sanitizing the input, allowing attackers to inject arbitrary HTML content that is rendered as part of the application. An attacker could leverage this to redirect application users to a phishing website in an attempt to steal credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.immuta.com/ - https://labs.bishopfox.com/advisories - https://labs.bishopfox.com/advisories/immuta-version-2.8.2
CVE ID: CVE-2020-15952 State: PUBLISHED Published: 2020-11-05T14:30:49 Last Updated: 2024-08-04T13:30:23.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Immuta v2.8.2 is affected by stored XSS that allows a low-privileged user to escalate privileges to administrative permissions. Additionally, unauthenticated attackers can phish unauthenticated Immuta users to steal credentials or force actions on authenticated users through reflected, DOM-based XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.immuta.com/ - https://labs.bishopfox.com/advisories - https://labs.bishopfox.com/advisories/immuta-version-2.8.2
CVE ID: CVE-2020-15953 State: PUBLISHED Published: 2020-07-27T06:07:04 Last Updated: 2024-08-04T13:30:23.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data (e.g., from a meddler-in-the-middle attacker) and evaluates it in a TLS context, aka "response injection." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dinhvh/libetpan/issues/386 - https://security.gentoo.org/glsa/202007-55 - https://lists.debian.org/debian-lts-announc
om/dinhvh/libetpan/issues/386 - https://security.gentoo.org/glsa/202007-55 - https://lists.debian.org/debian-lts-announce/2020/08/msg00026.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QFBWNA5REI5ZGW2DAOEAVHM23MOU6O5J/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M65FVH5XPS23NLHFN3ABEGBSCHZAISXN/ - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00060.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00075.html
CVE ID: CVE-2020-15954 State: PUBLISHED Published: 2020-07-27T06:06:47 Last Updated: 2024-08-04T13:30:23.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDE KMail 19.12.3 (aka 5.13.3) engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.kde.org/show_bug.cgi?id=423426 - https://lists.debian.org/debian-lts-announce/2020/07/msg00030.html
CVE ID: CVE-2020-15955 State: PUBLISHED Published: 2021-08-17T17:12:09 Last Updated: 2024-08-04T13:30:23.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: In s/qmail through 4.0.07, an active MitM can inject arbitrary plaintext commands into a STARTTLS encrypted session between an SMTP client and s/qmail. This allows e-mail messages and user credentials to be sent to the MitM attacker. Additional Analyst Notes: - CVE Program Container: References: - https://www.fehcom.de/sqmail/sqmail.html - https://nostarttls.secvuln.info/
CVE ID: CVE-2020-15956 State: PUBLISHED Published: 2020-08-04T19:03:35 Last Updated: 2024-08-04T13:30:23.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: ActiveMediaServer.exe in ACTi NVR3 Standard Server 3.0.12.42 allows remote unauthenticated attackers to trigger a buffer overflow and application termination via a malformed payload. Additional Analyst Notes: - CVE Program Container: References: - https://www2.acti.com/nvr3 - https://github.com/megamagnus/cve-2020-15956 - http://packetstormsecurity.com/files/158771/ACTi-NVR3-Standard-Professional-Server-3.0.12.42-Denial-Of-Service.html
CVE ID: CVE-2020-15957 State: PUBLISHED Published: 2020-07-30T13:08:44 Last Updated: 2024-08-04T13:30:23.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DP3T-Backend-SDK before 1.1.1 for Decentralised Privacy-Preserving Proximity Tracing (DP3T). When it is configured to check JWT before uploading/publishing keys, it is possible to skip the signature check by providing a JWT token with alg=none. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dp-3T/dp3t-sdk-backend - https://github.com/DP-3T/dp3t-sdk-backend/compare/v1.0.4...v1.1.0 - https://github.com/DP-3T/dp3t-sdk-backend/security/advisories/GHSA-5m5q-3qw2-3xf3
CVE ID: CVE-2020-15958 State: PUBLISHED Published: 2020-09-18T14:32:26 Last Updated: 2024-08-04T13:30:23.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files allows a remote attacker to access various sensitive information via an unauthenticated request with a predictable URL. Additional Analyst Notes: - CVE Program Container: References: - https://1crm.com/documentation/ - http://seclists.org/fulldisclosure/2020/Sep/31 - http://packetstormsecurity.com/files/159193/1CRM-8.6.7-Insecure-Direct-Object-Reference.html - https://aramido.de/blog/sicherheitshinweise/sicherh
.com/files/159193/1CRM-8.6.7-Insecure-Direct-Object-Reference.html - https://aramido.de/blog/sicherheitshinweise/sicherheitswarnung-1crm-schutzt-daten-unzureichend-cve-2020-15958
CVE ID: CVE-2020-15959 State: PUBLISHED Published: 2020-09-21T19:06:34 Last Updated: 2024-08-04T13:30:23.418Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain potentially sensitive information from process memory via social engineering. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1122684 - https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html - http:
ble-channel-update-for-desktop.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00078.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00081.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html - https://www.debian.org/security/2021/dsa-4824 - https://security.gentoo.org/glsa/202101-
nnounce/2020-10/msg00049.html - https://www.debian.org/security/2021/dsa-4824 - https://security.gentoo.org/glsa/202101-30
CVE ID: CVE-2020-15960 State: PUBLISHED Published: 2020-09-21T19:06:35 Last Updated: 2024-08-04T13:30:23.528Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1100136 - https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00087.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html
use-security-announce/2020-09/msg00087.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html - https://security.gentoo.org/glsa/202009-13 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWNBJFBPKYCYSZTS54FHNCRZG6KC2AIJ/ - http://lists.opensuse.org/opensuse-security-announce/202
s.fedoraproject.org/message/YWNBJFBPKYCYSZTS54FHNCRZG6KC2AIJ/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html - https://www.debian.org/security/2021/dsa-4824 - https://security.gentoo.org/glsa/202101-30
CVE ID: CVE-2020-15961 State: PUBLISHED Published: 2020-09-21T19:06:35 Last Updated: 2024-08-04T13:30:23.514Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1114636 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00087.html - http:/
1.html - https://crbug.com/1114636 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00087.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html - https://security.gentoo.org/glsa/202009-13 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWNBJFBPKYCYSZTS54FHNCRZ
ttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWNBJFBPKYCYSZTS54FHNCRZG6KC2AIJ/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html - https://www.debian.org/security/2021/dsa-4824 - https://security.gentoo.org/glsa/202101-30
CVE ID: CVE-2020-15962 State: PUBLISHED Published: 2020-09-21T19:06:36 Last Updated: 2024-08-04T13:30:23.452Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1121836 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00087.html - http://lists.opensuse.org/opensuse-security-announce/2
s.opensuse.org/opensuse-security-announce/2020-09/msg00087.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html - https://security.gentoo.org/glsa/202009-13 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWNBJFBPKYCYSZTS54FHNCRZG6KC2AIJ/ - http://lists.opensuse.org/opensuse-s
kage-announce%40lists.fedoraproject.org/message/YWNBJFBPKYCYSZTS54FHNCRZG6KC2AIJ/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html - https://www.debian.org/security/2021/dsa-4824 - https://security.gentoo.org/glsa/202101-30
CVE ID: CVE-2020-15963 State: PUBLISHED Published: 2020-09-21T19:06:36 Last Updated: 2024-08-04T13:30:23.470Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1113558 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00087.html - http:
21.html - https://crbug.com/1113558 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00087.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html - https://security.gentoo.org/glsa/202009-13 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWNBJFBPKYCYSZTS54FHNCR
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWNBJFBPKYCYSZTS54FHNCRZG6KC2AIJ/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html - https://www.debian.org/security/2021/dsa-4824 - https://security.gentoo.org/glsa/202101-30
CVE ID: CVE-2020-15964 State: PUBLISHED Published: 2020-09-21T19:06:37 Last Updated: 2024-08-04T13:30:23.382Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1121414 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00087.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.ht
nsuse-security-announce/2020-09/msg00087.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html - https://security.gentoo.org/glsa/202009-13 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWNBJFBPKYCYSZTS54FHNCRZG6KC2AIJ/ - http://lists.opensuse.org/opensuse-security-announce/2
sts.fedoraproject.org/message/YWNBJFBPKYCYSZTS54FHNCRZG6KC2AIJ/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html - https://www.debian.org/security/2021/dsa-4824 - https://security.gentoo.org/glsa/202101-30
CVE ID: CVE-2020-15965 State: PUBLISHED Published: 2020-09-21T19:06:37 Last Updated: 2024-08-04T13:30:23.670Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1126249 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00087.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html - http://lists.o
unce/2020-09/msg00087.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html - https://security.gentoo.org/glsa/202009-13 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWNBJFBPKYCYSZTS54FHNCRZG6KC2AIJ/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.htm
rg/message/YWNBJFBPKYCYSZTS54FHNCRZG6KC2AIJ/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html - https://www.debian.org/security/2021/dsa-4824 - https://security.gentoo.org/glsa/202101-30
CVE ID: CVE-2020-15966 State: PUBLISHED Published: 2020-09-21T19:06:38 Last Updated: 2024-08-04T13:30:23.391Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1113565 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00087.html - h
top_21.html - https://crbug.com/1113565 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00087.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00095.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00096.html - https://security.gentoo.org/glsa/202009-13 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNIYFJST4TFJYFZ27VODBOINCLBGULTD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FN7HZIGAOCZKBT4LV363BCPRA5FLY25I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWNBJFBPKYCYSZTS54F
/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWNBJFBPKYCYSZTS54FHNCRZG6KC2AIJ/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html - https://www.debian.org/security/2021/dsa-4824 - https://security.gentoo.org/glsa/202101-30