Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-5826 State: PUBLISHED Published: 2020-02-11T17:09:08 Last Updated: 2024-08-04T08:39:25.791Z Vendors: n/a Products: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE) Problem Types: Out of Bounds Description: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program. Additional Analyst Notes: - CVE Program Container
de of the bounds of the memory that had been allocated to the program. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1505.html
CVE ID: CVE-2020-5827 State: PUBLISHED Published: 2020-02-11T17:09:19 Last Updated: 2024-08-04T08:39:25.864Z Vendors: n/a Products: Symantec Endpoint Protection Manager (SEPM) Problem Types: Out of Bounds Description: Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1505.html
CVE ID: CVE-2020-5828 State: PUBLISHED Published: 2020-02-11T17:11:18 Last Updated: 2024-08-04T08:39:25.914Z Vendors: n/a Products: Symantec Endpoint Protection Manager (SEPM) Problem Types: Out of Bounds Description: Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1505.html
CVE ID: CVE-2020-5829 State: PUBLISHED Published: 2020-02-11T17:11:31 Last Updated: 2024-08-04T08:39:25.936Z Vendors: n/a Products: Symantec Endpoint Protection Manager (SEPM) Problem Types: Out of Bounds Description: Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1505.html
CVE ID: CVE-2020-5830 State: PUBLISHED Published: 2020-02-11T17:12:50 Last Updated: 2024-08-04T08:39:25.879Z Vendors: n/a Products: Symantec Endpoint Protection Manager (SEPM) Problem Types: Out of Bounds Description: Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1505.html
CVE ID: CVE-2020-5831 State: PUBLISHED Published: 2020-02-11T17:12:59 Last Updated: 2024-08-04T08:39:25.919Z Vendors: n/a Products: Symantec Endpoint Protection Manager (SEPM) Problem Types: Out of Bounds Description: Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1505.html
CVE ID: CVE-2020-5832 State: PUBLISHED Published: 2020-04-06T19:22:18 Last Updated: 2024-08-04T08:39:25.910Z Vendors: n/a Products: Data Center Security Manager Component Problem Types: Privilege Escalation Description: Symantec Data Center Security Manager Component, prior to 6.8.2 (aka 6.8 MP2), may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificat
Program Container: References: - https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1750
CVE ID: CVE-2020-5833 State: PUBLISHED Published: 2020-05-11T19:19:45 Last Updated: 2024-08-04T08:39:25.879Z Vendors: n/a Products: Symantec Endpoint Protection Manager Problem Types: Out of Bounds Description: Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762
CVE ID: CVE-2020-5834 State: PUBLISHED Published: 2020-05-11T19:19:56 Last Updated: 2024-08-04T08:39:25.781Z Vendors: n/a Products: Symantec Endpoint Protection Manager Problem Types: Directory Traversal Description: Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762
CVE ID: CVE-2020-5835 State: PUBLISHED Published: 2020-05-11T19:22:58 Last Updated: 2024-08-04T08:39:25.933Z Vendors: n/a Products: Symantec Endpoint Protection Manager Problem Types: Elevation of Privilege Description: Symantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote deployment which may result in an elevation of privilege on the remote machine. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762
CVE ID: CVE-2020-5836 State: PUBLISHED Published: 2020-05-11T19:23:11 Last Updated: 2024-08-04T08:39:25.917Z Vendors: n/a Products: Symantec Endpoint Protection Problem Types: Elevation of Privilege Description: Symantec Endpoint Protection, prior to 14.3, can potentially reset the ACLs on a file as a limited user while Symantec Endpoint Protection's Tamper Protection feature is disabled. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762
CVE ID: CVE-2020-5837 State: PUBLISHED Published: 2020-05-11T19:25:45 Last Updated: 2024-08-04T08:39:25.922Z Vendors: n/a Products: Symantec Endpoint Protection Problem Types: Elevation of Privilege Description: Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential elevation of privilege. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762
CVE ID: CVE-2020-5838 State: PUBLISHED Published: 2020-05-13T15:42:20 Last Updated: 2024-08-04T08:39:25.918Z Vendors: n/a Products: IT Analytics Problem Types: Cross-site Scripting Description: Symantec IT Analytics, prior to 2.9.1, may be susceptible to a cross-site scripting (XSS) exploit, which is a type of issue that can potentially enable attackers to inject client-side scripts into web pages viewed by other users. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1766
CVE ID: CVE-2020-5839 State: PUBLISHED Published: 2020-07-08T15:08:54 Last Updated: 2024-08-04T08:39:25.927Z Vendors: n/a Products: Symantec Endpoint Detection And Response Problem Types: Information Disclosure Description: Symantec Endpoint Detection And Response, prior to 4.4, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/security-advisory/content/security-advisories/SEDR-Information-Disclosure/SYMSA16090
CVE ID: CVE-2020-5840 State: PUBLISHED Published: 2020-01-06T17:21:07 Last Updated: 2024-08-04T08:39:25.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in HashBrown CMS before 1.3.2. Server/Entity/Resource/Connection.js allows an attacker to reach a parent directory via a crafted name or ID field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/HashBrownCMS/hashbrown-cms/compare/v1.3.1...v1.3.2 - https://github.com/HashBrownCMS/hashbrown-cms/releases/tag/v1.3.2
CVE ID: CVE-2020-5841 State: PUBLISHED Published: 2020-01-07T20:49:30 Last Updated: 2024-08-04T08:39:25.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpServices OpMon 9.3.1-1. Using password change parameters, an attacker could perform SQL injection without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40ph0rensic/sql-injection-opmon-9-3-1-1-770bd7e7ad1
CVE ID: CVE-2020-5842 State: PUBLISHED Published: 2020-01-07T19:17:55 Last Updated: 2024-08-04T08:39:25.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI. The payload is, for example, executed on the admin/index.php?page=users/manage page. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/47876 - https://medium.com/%40prasanthc41m/cve-2020-5842-stored-xss-vulnerability-in-codoforum-4-8-3-b2e1133c6a91
CVE ID: CVE-2020-5843 State: PUBLISHED Published: 2020-01-07T12:51:19 Last Updated: 2024-08-04T08:39:26.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Codoforum 4.8.3 allows XSS in the admin dashboard via a category to the Manage Users screen. Additional Analyst Notes: - CVE Program Container: References: - http://codologic.com/forum/index.php?u=/category/news-and-announcements - https://vyshnavvizz.blogspot.com/2020/01/persistent-cross-site-scripting-admin.html
CVE ID: CVE-2020-5844 State: PUBLISHED Published: 2020-03-16T17:22:05 Last Updated: 2024-08-04T08:39:25.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php?sec=godmode/extensions&sec2=extensions/files_repo in Pandora FMS v7.0 NG allows authenticated administrators to upload malicious PHP scripts, and execute them via base64 decoding of the file location. This affects v7.0NG.742_FIX_PERL2020. Additional Analyst Notes: - CVE Program Container: References: - https://pandorafms.com - https://github.com/TheCyberGeek/CVE-2020-5844 - http://packetstormsecurity.com/files/167503/Pandora-FMS-7.0NG.742-Remote-Code-Execution.html
CVE ID: CVE-2020-5846 State: PUBLISHED Published: 2020-01-06T20:11:38 Last Updated: 2024-08-04T08:39:25.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.3.0.30 via a "PUT /obs/obm7/file/upload" request with the base64-encoded pathname in the X-RSW-custom-encode-path HTTP header, and the content in the HTTP request body. It is possible to upload a file into any directory of the server. One can insert a JSP shell into the web server's directory and execute it. This leads to full system access as the configured user (e.g., Administrator) when starting from any authenticated session (e.g.
ds to full system access as the configured user (e.g., Administrator) when starting from any authenticated session (e.g., a trial account). This is fixed in the 83/830122/cbs-*-hotfix-task26000 builds. Additional Analyst Notes: - CVE Program Container: References: - https://www.wbsec.nl/ahsay-2/
CVE ID: CVE-2020-5847 State: PUBLISHED Published: 2020-03-16T17:23:24.000Z Last Updated: 2025-10-21T23:35:48.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unraid through 6.8.0 allows Remote Code Execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sysdream.com/news/lab/ - https://forums.unraid.net/forum/7-announcements/ - https://sysdream.com/news/lab/2020-02-06-cve-2020-5847-cve-2020-5849-unraid-6-8-0-unauthenticated-remote-code-execution-as-root/ - http://packetstormsecurity.com/files/157275/Unraid-6.8.0-Authentication-Bypass-Arbitrary-Code-Execution.html
CVE ID: CVE-2020-5849 State: PUBLISHED Published: 2020-03-16T17:24:23.000Z Last Updated: 2025-10-21T23:35:48.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unraid 6.8.0 allows authentication bypass. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sysdream.com/news/lab/ - https://forums.unraid.net/forum/7-announcements/ - https://sysdream.com/news/lab/2020-02-06-cve-2020-5847-cve-2020-5849-unraid-6-8-0-unauthenticated-remote-code-execution-as-root/ - http://packetstormsecurity.com/files/157275/Unraid-6.8.0-Authentication-Bypass-Arbitrary-Code-Execution.html
CVE ID: CVE-2020-5851 State: PUBLISHED Published: 2020-01-14T15:03:29 Last Updated: 2024-08-04T08:39:25.925Z Vendors: n/a Products: BIG-IP Problem Types: Compromise detection failure Description: On impacted versions and platforms the Trusted Platform Module (TPM) system integrity check cannot detect modifications to specific system components. This issue only impacts specific engineering hotfixes and platforms. NOTE: This vulnerability does not affect any of the BIG-IP major, minor or maintenance releases you obtained from downloads.f5.com. The affected Engineering Hotfix builds are as follows: Hotfix-BIGIP-14.1.0.2.0.45.4-ENG Hotfix-BIGIP-14.1.0.2.0.62.4-ENG Additional Analyst Notes: - CVE
builds are as follows: Hotfix-BIGIP-14.1.0.2.0.45.4-ENG Hotfix-BIGIP-14.1.0.2.0.62.4-ENG Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K91171450
CVE ID: CVE-2020-5852 State: PUBLISHED Published: 2020-01-14T16:07:01 Last Updated: 2024-08-04T08:39:25.870Z Vendors: F5 Products: BIG-IP Problem Types: DoS Description: Undisclosed traffic patterns received may cause a disruption of service to the Traffic Management Microkernel (TMM). This vulnerability affects TMM through a virtual server configured with a FastL4 profile. Traffic processing is disrupted while TMM restarts. This issue only impacts specific engineering hotfixes. NOTE: This vulnerability does not affect any of the BIG-IP major, minor or maintenance releases you obtained from downloads.f5.com. The affected Engineering Hotfix builds are as follows: Hotfix-BIGIP-14.1.2.1.0.83.4-
you obtained from downloads.f5.com. The affected Engineering Hotfix builds are as follows: Hotfix-BIGIP-14.1.2.1.0.83.4-ENG Hotfix-BIGIP-12.1.4.1.0.97.6-ENG Hotfix-BIGIP-11.5.4.2.74.291-HF2 Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K53590702
CVE ID: CVE-2020-5853 State: PUBLISHED Published: 2020-01-14T16:14:02 Last Updated: 2024-08-04T08:39:25.931Z Vendors: F5 Products: BIG-IP APM Problem Types: XSS Description: In BIG-IP APM portal access on versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, when backend servers serve HTTP pages with special JavaScript code, this can lead to internal portal access name conflict. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K73183618
CVE ID: CVE-2020-5854 State: PUBLISHED Published: 2020-02-06T15:40:54 Last Updated: 2024-08-04T08:39:25.933Z Vendors: F5 Products: BIG-IP Problem Types: DoS Description: On BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.0-11.6.5.1, the tmm crashes under certain circumstances when using the connector profile if a specific sequence of connections are made. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K50046200
CVE ID: CVE-2020-5855 State: PUBLISHED Published: 2020-02-06T15:37:27 Last Updated: 2024-08-04T08:39:25.885Z Vendors: F5 Products: Edge Client for Windows Problem Types: Unauthorized Access Description: When the Windows Logon Integration feature is configured for all versions of BIG-IP Edge Client for Windows, unauthorized users who have physical access to an authorized user's machine can get shell access under unprivileged user. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K55102004
CVE ID: CVE-2020-5856 State: PUBLISHED Published: 2020-02-06T15:32:56 Last Updated: 2024-08-04T08:39:25.874Z Vendors: F5 Products: BIG-IP Problem Types: DoS Description: On BIG-IP 15.0.0-15.0.1.1 and 14.1.0-14.1.2.2, while processing specifically crafted traffic using the default 'xnet' driver, Virtual Edition instances hosted in Amazon Web Services (AWS) may experience a TMM restart. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K00025388
CVE ID: CVE-2020-5857 State: PUBLISHED Published: 2020-03-27T14:20:49 Last Updated: 2024-08-04T08:39:25.928Z Vendors: n/a Products: BIG-IP Problem Types: DoS Description: On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, undisclosed HTTP behavior may lead to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K70275209
CVE ID: CVE-2020-5858 State: PUBLISHED Published: 2020-03-27T14:31:27 Last Updated: 2024-08-04T08:39:25.923Z Vendors: n/a Products: BIG-IP, BIG-IQ Problem Types: Privilege escalation Description: On BIG-IP 15.0.0-15.0.1.2, 14.1.0-14.1.2.2, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1 and BIG-IQ 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, users with non-administrator roles (for example, Guest or Resource Administrator) with tmsh shell access can execute arbitrary commands with elevated privilege via a crafted tmsh command. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K36814487
CVE ID: CVE-2020-5859 State: PUBLISHED Published: 2020-03-27T14:29:43 Last Updated: 2024-08-04T08:39:26.064Z Vendors: n/a Products: BIG-IP Problem Types: DoS Description: On BIG-IP 15.1.0.1, specially formatted HTTP/3 messages may cause TMM to produce a core file. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K61367237
CVE ID: CVE-2020-5860 State: PUBLISHED Published: 2020-03-27T14:26:47 Last Updated: 2024-08-04T08:39:25.914Z Vendors: n/a Products: BIG-IP, BIG-IQ Problem Types: MITM Description: On BIG-IP 15.0.0-15.1.0.2, 14.1.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5.1, and 11.5.2-11.6.5.1 and BIG-IQ 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, in a High Availability (HA) network failover in Device Service Cluster (DSC), the failover service does not require a strong form of authentication and HA network failover traffic is not encrypted by Transport Layer Security (TLS). Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K67472032
CVE ID: CVE-2020-5861 State: PUBLISHED Published: 2020-03-27T14:34:01 Last Updated: 2024-08-04T08:39:25.940Z Vendors: n/a Products: BIG-IP Problem Types: DoS Description: On BIG-IP 12.1.0-12.1.5, the TMM process may produce a core file in some cases when Ram Cache incorrectly optimizes stored data resulting in memory errors. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K22113131
CVE ID: CVE-2020-5862 State: PUBLISHED Published: 2020-03-27T14:41:18 Last Updated: 2024-08-04T08:39:25.915Z Vendors: n/a Products: BIG-IP Problem Types: DoS Description: On BIG-IP 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.2, under certain conditions, TMM may crash or stop processing new traffic with the DPDK/ENA driver on AWS systems while sending traffic. This issue does not affect any other platforms, hardware or virtual, or any other cloud provider since the affected driver is specific to AWS. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K01054113
CVE ID: CVE-2020-5863 State: PUBLISHED Published: 2020-03-27T14:35:31 Last Updated: 2024-08-04T08:39:25.926Z Vendors: n/a Products: NGINX Controller Problem Types: DoS Description: In NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to the Controller API can create unprivileged user accounts. The user which is created is only able to upload a new license to the system but cannot view or modify any other components of the system. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K14631834 - https://security.netapp.com/advisory/ntap-20200430-0005/
CVE ID: CVE-2020-5864 State: PUBLISHED Published: 2020-04-23T18:32:40 Last Updated: 2024-08-04T08:39:25.957Z Vendors: n/a Products: NGINX Controller Problem Types: n/a Description: In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by default. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K27205552 - https://security.netapp.com/advisory/ntap-20200430-0005/
CVE ID: CVE-2020-5865 State: PUBLISHED Published: 2020-04-23T18:16:00 Last Updated: 2024-08-04T08:39:25.982Z Vendors: n/a Products: NGINX Controller Problem Types: n/a Description: In versions prior to 3.3.0, the NGINX Controller is configured to communicate with its Postgres database server over unencrypted channels, making the communicated data vulnerable to interception via man-in-the-middle (MiTM) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K21009022 - https://security.netapp.com/advisory/ntap-20200430-0005/
CVE ID: CVE-2020-5866 State: PUBLISHED Published: 2020-04-23T18:37:50 Last Updated: 2024-08-04T08:47:40.113Z Vendors: n/a Products: NGINX Controller Problem Types: n/a Description: In versions of NGINX Controller prior to 3.3.0, the helper.sh script, which is used optionally in NGINX Controller to change settings, uses sensitive items as command-line arguments. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K11922628 - https://security.netapp.com/advisory/ntap-20200430-0005/
CVE ID: CVE-2020-5867 State: PUBLISHED Published: 2020-04-23T19:58:59 Last Updated: 2024-08-04T08:47:40.090Z Vendors: n/a Products: NGINX Controller Problem Types: n/a Description: In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install packages Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K00958787 - https://security.netapp.com/advisory/ntap-20200430-0005/
CVE ID: CVE-2020-5868 State: PUBLISHED Published: 2020-04-24T12:54:06 Last Updated: 2024-08-04T08:47:40.044Z Vendors: n/a Products: BIG-IQ Problem Types: n/a Description: In BIG-IQ 6.0.0-7.0.0, a remote access vulnerability has been discovered that may allow a remote user to execute shell commands on affected systems using HTTP requests to the BIG-IQ user interface. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K37130415