Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-36314 State: PUBLISHED Published: 2021-04-07T11:07:40 Last Updated: 2024-08-04T17:23:09.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: fr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Shell and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-11736. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/file-roller/-/issues/108 - https://gitlab.gnome.org/GNOME/file-roller/-/commit/e970f4966bf388f6e7c277357c8b186c645683
ME/file-roller/-/issues/108 - https://gitlab.gnome.org/GNOME/file-roller/-/commit/e970f4966bf388f6e7c277357c8b186c645683ae - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6KJBZVCHQ4SSX2JAJZVJ5J4P3GEMXJ75/
CVE ID: CVE-2020-36315 State: PUBLISHED Published: 2021-04-07T20:10:30 Last Updated: 2024-08-04T17:23:10.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: In RELIC before 2020-08-01, RSA PKCS#1 v1.5 signature forgery can occur because certain checks of the padding (and of the first two bytes) are inadequate. NOTE: this requires that a low public exponent (such as 3) is being used. The product, by default, does not generate RSA keys with such a low number. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/relic-toolkit/relic/tree/32eb4c257fc80328061d66639b1cdb35dbed51a2 - https://github.com/relic-toolkit/relic/ - https://github.com/relic-toolkit
ee/32eb4c257fc80328061d66639b1cdb35dbed51a2 - https://github.com/relic-toolkit/relic/ - https://github.com/relic-toolkit/relic/issues/154 - https://github.com/relic-toolkit/relic/commit/76c9a1fdf19d9e92e566a77376673e522aae9f80
CVE ID: CVE-2020-36316 State: PUBLISHED Published: 2021-04-07T20:10:08 Last Updated: 2024-08-04T17:23:10.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: In RELIC before 2021-04-03, there is a buffer overflow in PKCS#1 v1.5 signature verification because garbage bytes can be present. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/relic-toolkit/relic/tree/32eb4c257fc80328061d66639b1cdb35dbed51a2 - https://github.com/relic-toolkit/relic/ - https://github.com/relic-toolkit/relic/commit/76c9a1fdf19d9e92e566a77376673e522aae9f80 - https://github.com/relic-toolkit/relic/issues/155
CVE ID: CVE-2020-36317 State: PUBLISHED Published: 2021-04-11T19:06:28 Last Updated: 2024-08-04T17:23:10.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows creation of a non-UTF-8 Rust string when the provided closure panics. This bug could result in a memory safety violation when other string APIs assume that UTF-8 encoding is used on the same string. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rust-lang/rust/issues/78498 - https://github.com/rust-lang/rust/pull/78499
CVE ID: CVE-2020-36318 State: PUBLISHED Published: 2021-04-11T19:05:27 Last Updated: 2024-08-04T17:23:10.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This bug could result in a use-after-free or double free. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rust-lang/rust/issues/79808 - https://github.com/rust-lang/rust/pull/79814
CVE ID: CVE-2020-36319 State: PUBLISHED Published: 2021-04-23T16:05:40.661202Z Last Updated: 2024-09-16T23:45:49.973Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Vaadin Products: Vaadin, flow-server Problem Types: CWE-200 Description: Insecure configuration of default ObjectMapper in com.vaadin:flow-server versions 3.0.0 through 3.0.5 (Vaadin 15.0.0 through 15.0.4) may expose sensitive data if the application also uses e.g. @RestController Additional Analyst Notes: - CVE Program Container: References: - https://vaadin.com/security/cve-2020-36319 - https://github.com/vaadin/flow/pull/8016 - https://github.com/vaadin/flow/pull/8051
CVE ID: CVE-2020-36320 State: PUBLISHED Published: 2021-04-23T16:05:40.779317Z Last Updated: 2024-09-16T16:58:41.413Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Vaadin Products: Vaadin, vaadin-server Problem Types: CWE-400 Description: Unsafe validation RegEx in EmailValidator class in com.vaadin:vaadin-server versions 7.0.0 through 7.7.21 (Vaadin 7.0.0 through 7.7.21) allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses. Additional Analyst Notes: - CVE Program Container: References: - https://vaadin.com/security/cve-2020-36320 - https://github.com/vaadin/framework/issues/7757 - https://github.com/vaadin/fram
://vaadin.com/security/cve-2020-36320 - https://github.com/vaadin/framework/issues/7757 - https://github.com/vaadin/framework/pull/12104
CVE ID: CVE-2020-36321 State: PUBLISHED Published: 2021-04-23T16:05:40.889444Z Last Updated: 2024-09-17T00:45:59.853Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Vaadin Products: Vaadin, flow-server Problem Types: CWE-22 Description: Improper URL validation in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.4.1 (Vaadin 14.0.0 through 14.4.2), and 3.0 prior to 5.0 (Vaadin 15 prior to 18) allows attacker to request arbitrary files stored outside of intended frontend resources folder. Additional Analyst Notes: - CVE Program Container: References: - https://vaadin.com/security/cve-2020-36321 - https://github.com/vaadin/flow/pull/9
CVE Program Container: References: - https://vaadin.com/security/cve-2020-36321 - https://github.com/vaadin/flow/pull/9392
CVE ID: CVE-2020-36322 State: PUBLISHED Published: 2021-04-14T00:00:00 Last Updated: 2024-08-04T17:23:10.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. fuse_do_getattr() calls make_bad_inode() in inappropriate situations, causing a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5d069dbe8aaf2a197142558b6fb2978189ba3454 - https://cdn.kerne
.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5d069dbe8aaf2a197142558b6fb2978189ba3454 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.6 - https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html - https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html - https://www.debian.org/security/2022/dsa-5096 - https://www.starwindsoftware.com/security/sw-20220816-0001/
CVE ID: CVE-2020-36323 State: PUBLISHED Published: 2021-04-14T06:10:09 Last Updated: 2024-08-04T17:23:10.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed (or the program to crash) if the borrowed string changes after its length is checked. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rust-lang/rust/issues/80335 - https://github.com/rust-lang/rust/pull/81728 - https://github.com/rust-lang/rust/pull/81728#issuecomment-821549174 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fe
-lang/rust/pull/81728#issuecomment-821549174 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZ337CM4GFJLRDFVQCGC7J25V65JXOG5/ - https://github.com/rust-lang/rust/pull/81728#issuecomment-824904190 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZG65GUW6Z2CYOQHF7T3TB5CZKIX6ZJE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFUO3URYCO73D2Q4WYJBWAMJWGGVXQO4/
CVE ID: CVE-2020-36324 State: PUBLISHED Published: 2021-04-21T19:43:59 Last Updated: 2024-08-04T17:23:10.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type. Additional Analyst Notes: - CVE Program Container: References: - https://quarry.wmflabs.org/ - https://github.com/wikimedia/analytics-quarry-web/commit/4b7e1d6a3a52ec6cf826a971135a38b0f74785d2
CVE ID: CVE-2020-36325 State: PUBLISHED Published: 2021-04-26T17:05:28 Last Updated: 2024-08-04T17:23:10.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Jansson through 2.13.1. Due to a parsing error in json_loads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification Additional Analyst Notes: - CVE Program Container: References: - https://github.com/akheron/jansson/issues/548
CVE ID: CVE-2020-36326 State: PUBLISHED Published: 2021-04-28T02:21:53 Last Updated: 2024-08-04T17:23:10.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPMailer 6.1.8 through 6.4.0 allows object injection through Phar Deserialization via addAttachment with a UNC pathname. NOTE: this is similar to CVE-2018-19296, but arose because 6.1.8 fixed a functionality problem in which UNC pathnames were always considered unreadable by PHPMailer, even in safe contexts. As an unintended side effect, this fix eliminated the code that blocked addAttachment exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PHPMailer/PHPMailer/commit/e2e07a355
Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PHPMailer/PHPMailer/commit/e2e07a355ee8ff36aba21d0242c5950c56e4c6f9 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPU66INRFY5BQ3ESVPRUXJR4DXQAFJVT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3B5WDPGUFNPG4NAZ6G4BZX43BKLAVA5B/
CVE ID: CVE-2020-36327 State: PUBLISHED Published: 2021-04-29T02:28:54 Last Updated: 2024-08-04T17:23:10.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem version number, which means that a rogue gem found at a public source may be chosen, even if the intended choice was a private gem that is a dependency of another private gem that is explicitly depended on by the application. NOTE: it is not correct to use CVE-2021-24105 for every "Dependency Confusion" issue in every product. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/
Confusion" issue in every product. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rubygems/rubygems/issues/3982 - https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-24105 - https://bundler.io/blog/2021/02/15/a-more-secure-bundler-we-fixed-our-source-priorities.html - https://mensfeld.pl/2021/02/rubygems-dependency-confusion-attack-side-of-things/ - https://www.zofrex.com/blog/2021/04/29/bundler-still-vulnerable-dependency-confusion-cve-2020-36327/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MWXHK5UUHVSHF7HTHMX6JY3WXDVNIHSL/
CVE ID: CVE-2020-36328 State: PUBLISHED Published: 2021-05-21T16:14:21 Last Updated: 2024-08-04T17:23:10.457Z Vendors: n/a Products: libwebp Problem Types: CWE-787 Description: A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1956829 - https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html - https://lists.debian.org/debian-lts-announce/2021/06/
tps://lists.debian.org/debian-lts-announce/2021/06/msg00005.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00006.html - https://www.debian.org/security/2021/dsa-4930 - https://support.apple.com/kb/HT212601 - http://seclists.org/fulldisclosure/2021/Jul/54 - https://security.netapp.com/advisory/ntap-20211112-0001/
CVE ID: CVE-2020-36329 State: PUBLISHED Published: 2021-05-21T16:15:10 Last Updated: 2024-08-04T17:23:10.443Z Vendors: n/a Products: libwebp Problem Types: CWE-416 Description: A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1956843 - https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00006.html - https://www.debian.org/securi
21/06/msg00005.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00006.html - https://www.debian.org/security/2021/dsa-4930 - https://support.apple.com/kb/HT212601 - http://seclists.org/fulldisclosure/2021/Jul/54 - https://security.netapp.com/advisory/ntap-20211112-0001/
CVE ID: CVE-2020-36330 State: PUBLISHED Published: 2021-05-21T16:19:44 Last Updated: 2024-08-04T17:23:10.522Z Vendors: n/a Products: libwebp Problem Types: CWE-125 Description: A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1956853 - https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00006.html - https://www.debian.org/security/2021/dsa-49
.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00006.html - https://www.debian.org/security/2021/dsa-4930 - https://support.apple.com/kb/HT212601 - http://seclists.org/fulldisclosure/2021/Jul/54 - https://security.netapp.com/advisory/ntap-20211104-0004/
CVE ID: CVE-2020-36331 State: PUBLISHED Published: 2021-05-21T16:20:33 Last Updated: 2024-08-04T17:23:10.465Z Vendors: n/a Products: libwebp Problem Types: CWE-125 Description: A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1956856 - https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00006.html - https://www.debian.org/security/2021/dsa-4930 -
- https://lists.debian.org/debian-lts-announce/2021/06/msg00006.html - https://www.debian.org/security/2021/dsa-4930 - https://support.apple.com/kb/HT212601 - http://seclists.org/fulldisclosure/2021/Jul/54 - https://security.netapp.com/advisory/ntap-20211112-0001/
CVE ID: CVE-2020-36332 State: PUBLISHED Published: 2021-05-21T16:21:29 Last Updated: 2024-08-04T17:23:10.434Z Vendors: n/a Products: libwebp Problem Types: CWE-20 Description: A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1956868 - https://www.debian.org/security/2021/dsa-4930 - https://security.netapp.com/advisory/ntap-20211104-0004/
CVE ID: CVE-2020-36333 State: PUBLISHED Published: 2021-05-05T03:12:12 Last Updated: 2024-08-04T17:23:10.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a reset_wizard_actions hook. Additional Analyst Notes: - CVE Program Container: References: - https://www.webarxsecurity.com/critical-issue-in-themegrill-demo-importer/ - https://www.openwall.com/lists/oss-security/2020/02/19/1
CVE ID: CVE-2020-36334 State: PUBLISHED Published: 2021-05-05T03:11:59 Last Updated: 2024-08-04T17:23:10.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: themegrill-demo-importer before 1.6.3 allows CSRF, as demonstrated by wiping the database. Additional Analyst Notes: - CVE Program Container: References: - https://www.webarxsecurity.com/critical-issue-in-themegrill-demo-importer/ - https://www.openwall.com/lists/oss-security/2020/02/19/1
CVE ID: CVE-2020-36363 State: PUBLISHED Published: 2021-08-12T21:13:30 Last Updated: 2024-08-04T17:23:10.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amazon AWS CloudFront TLSv1.2_2019 allows TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 and TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, which some entities consider to be weak ciphers. Additional Analyst Notes: - CVE Program Container: References: - https://stackoverflow.com/questions/62071604 - https://aws.amazon.com/about-aws/whats-new/2020/07/cloudfront-tls-security-policy/
CVE ID: CVE-2020-36364 State: PUBLISHED Published: 2021-05-19T18:57:20 Last Updated: 2024-08-04T17:23:10.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Smartstore (aka SmartStoreNET) before 4.1.0. Administration/Controllers/ImportController.cs allows path traversal (for copy and delete actions) in the ImportController.Create method via a TempFileName field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/smartstore/SmartStoreNET/commit/5ab1e37dc8d6415d04354e1a116f3d82e9555f5c - https://github.com/smartstore/SmartStoreNET/issues/2112
CVE ID: CVE-2020-36365 State: PUBLISHED Published: 2021-05-19T18:57:46 Last Updated: 2024-08-04T17:23:10.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Smartstore (aka SmartStoreNET) before 4.1.0 allows CommonController.ClearCache, ClearDatabaseCache, RestartApplication, and ScheduleTaskController.Edit open redirect. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/smartstore/SmartStoreNET/issues/2113
CVE ID: CVE-2020-36366 State: PUBLISHED Published: 2021-05-28T20:37:17 Last Updated: 2024-08-04T17:23:10.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow vulnerability in parse_value Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/106
CVE ID: CVE-2020-36367 State: PUBLISHED Published: 2021-05-28T20:38:24 Last Updated: 2024-08-04T17:23:10.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow vulnerability in parse_block Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/135
CVE ID: CVE-2020-36368 State: PUBLISHED Published: 2021-05-28T20:38:11 Last Updated: 2024-08-04T17:23:10.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow vulnerability in parse_statement Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/135
CVE ID: CVE-2020-36369 State: PUBLISHED Published: 2021-05-28T20:38:49 Last Updated: 2024-08-04T17:23:10.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow vulnerability in parse_statement_list Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/135
CVE ID: CVE-2020-36370 State: PUBLISHED Published: 2021-05-28T20:38:01 Last Updated: 2024-08-04T17:23:10.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow vulnerability in parse_unary Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/136
CVE ID: CVE-2020-36371 State: PUBLISHED Published: 2021-05-28T20:37:33 Last Updated: 2024-08-04T17:23:10.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow vulnerability in parse_mul_div_rem Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/136
CVE ID: CVE-2020-36372 State: PUBLISHED Published: 2021-05-28T20:38:37 Last Updated: 2024-08-04T17:23:10.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow vulnerability in parse_plus_minus Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/136
CVE ID: CVE-2020-36373 State: PUBLISHED Published: 2021-05-28T20:39:09 Last Updated: 2024-08-04T17:23:10.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow vulnerability in parse_shifts Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/136
CVE ID: CVE-2020-36374 State: PUBLISHED Published: 2021-05-28T20:39:01 Last Updated: 2024-08-04T17:23:10.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow vulnerability in parse_comparison Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/136
CVE ID: CVE-2020-36375 State: PUBLISHED Published: 2021-05-28T20:39:18 Last Updated: 2024-08-04T17:23:10.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow vulnerability in parse_equality Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/136
CVE ID: CVE-2020-36376 State: PUBLISHED Published: 2021-10-31T19:51:55 Last Updated: 2024-08-04T17:23:10.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the list function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shenzhim/aaptjs/issues/2
CVE ID: CVE-2020-36377 State: PUBLISHED Published: 2021-10-31T19:51:56 Last Updated: 2024-08-04T17:23:10.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the dump function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shenzhim/aaptjs/issues/2
CVE ID: CVE-2020-36378 State: PUBLISHED Published: 2021-10-31T19:51:56 Last Updated: 2024-08-04T17:23:10.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the packageCmd function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shenzhim/aaptjs/issues/2