Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-19203 State: PUBLISHED Published: 2021-07-12T15:39:07 Last Updated: 2024-08-04T14:08:30.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authenticated Cross-Site Scripting (XSS) vulnerability was found in widgets/widgets/wake_on_lan_widget.php, a component of the pfSense software WebGUI, on version 2.4.4-p2 and earlier. The widget did not encode the descr (description) parameter of wake-on-LAN entries in its output, leading to a possible stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.pfsense.org/download/ - https://docs.netgate.com/pfsense/en/latest/releases/2-4-4-p3.html - https://gist.github.com/dharmeshbaskaran/5
wnload/ - https://docs.netgate.com/pfsense/en/latest/releases/2-4-4-p3.html - https://gist.github.com/dharmeshbaskaran/55d546496bfb0ba28117e846d8b785db - https://www.netgate.com/assets/downloads/advisories/pfSense-SA-19_04.webgui.asc
CVE ID: CVE-2020-19204 State: PUBLISHED Published: 2021-07-12T15:22:38 Last Updated: 2024-08-04T14:08:30.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authenticated Stored Cross-Site Scriptiong (XSS) vulnerability exists in Lightning Wire Labs IPFire 2.21 (x86_64) - Core Update 130 in the "routing.cgi" Routing Table Entries via the "Remark" text box or "remark" parameter. It allows an authenticated WebGUI user to execute Stored Cross-site Scripting in the Routing Table Entries. Additional Analyst Notes: - CVE Program Container: References: - https://www.lightningwirelabs.com - https://blog.ipfire.org/post/ipfire-2-23-core-update-133-has-been-released - https://gist.githu
.lightningwirelabs.com - https://blog.ipfire.org/post/ipfire-2-23-core-update-133-has-been-released - https://gist.github.com/dharmeshbaskaran/1fdc069c0ad729d12bf3304b5f19b02d
CVE ID: CVE-2020-19212 State: PUBLISHED Published: 2022-05-06T13:55:25 Last Updated: 2024-08-04T14:08:30.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in admin/group_list.php in piwigo v2.9.5, via the group parameter to delete. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Piwigo/Piwigo/issues/1009
CVE ID: CVE-2020-19213 State: PUBLISHED Published: 2022-05-06T13:55:31 Last Updated: 2024-08-04T14:08:30.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Piwigo/Piwigo/issues/1010
CVE ID: CVE-2020-19215 State: PUBLISHED Published: 2022-05-06T13:55:41 Last Updated: 2024-08-04T14:08:30.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=user_perm. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Piwigo/Piwigo/issues/1011
CVE ID: CVE-2020-19216 State: PUBLISHED Published: 2022-05-06T13:55:51 Last Updated: 2024-08-04T14:08:30.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=group_perm. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Piwigo/Piwigo/issues/1011
CVE ID: CVE-2020-19217 State: PUBLISHED Published: 2022-05-06T13:55:59 Last Updated: 2024-08-04T14:08:30.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in admin/batch_manager.php in piwigo v2.9.5, via the filter_category parameter to admin.php?page=batch_manager. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Piwigo/Piwigo/issues/1012
CVE ID: CVE-2020-19228 State: PUBLISHED Published: 2022-05-11T12:00:01 Last Updated: 2024-08-04T14:08:30.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was found in bludit v3.13.0, unsafe implementation of the backup plugin allows attackers to upload arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bludit/bludit/issues/1242 - http://bludit.com
CVE ID: CVE-2020-19229 State: PUBLISHED Published: 2022-04-05T15:37:39 Last Updated: 2024-08-04T14:08:30.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437. Because of this version of the java deserialization vulnerability, an attacker could exploit the vulnerability to execute arbitrary commands via the rememberMe parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thinkgem/jeesite/issues/490
CVE ID: CVE-2020-19248 State: PUBLISHED Published: 2025-02-21T00:00:00.000Z Last Updated: 2025-02-21T21:08:09.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in a malicious user's ability to contaminate template content by searching for page contamination URLs, thus triggering vulnerabilities when the program uses eval statements to parse templates. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://unh3x.github.io/2019/07/19/PbootCMSv1.4.1_Template_Injection/ - https://github.com/SticKManII/SticKManII.github.io/tree/master/2019/07/31/PbootCMSv1-4-1-%E5%89%8D%E
mplate_Injection/ - https://github.com/SticKManII/SticKManII.github.io/tree/master/2019/07/31/PbootCMSv1-4-1-%E5%89%8D%E5%8F%B0%E6%90%9C%E7%B4%A2%E9%A1%B5%E9%9D%A2%E6%A8%A1%E6%9D%BF%E6%B3%A8%E5%85%A5
CVE ID: CVE-2020-19263 State: PUBLISHED Published: 2021-09-09T17:44:39 Last Updated: 2024-08-04T14:08:30.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily escalate user privileges to administrator via index.php?s=/user/ApiAdminUser/itemEdit. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sansanyun/mipcms5/issues/4
CVE ID: CVE-2020-19264 State: PUBLISHED Published: 2021-09-09T17:44:40 Last Updated: 2024-08-04T14:08:30.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily add users via index.php?s=/user/ApiAdminUser/itemAdd. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sansanyun/mipcms5/issues/4
CVE ID: CVE-2020-19265 State: PUBLISHED Published: 2021-09-09T17:44:41 Last Updated: 2024-08-04T14:08:30.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Basis/links component of Dswjcms 1.6.4 allows attackers to execute arbitrary web scripts or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tifaweb/Dswjcms/issues/4
CVE ID: CVE-2020-19266 State: PUBLISHED Published: 2021-09-09T17:44:42 Last Updated: 2024-08-04T14:08:30.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Site/articleList component of Dswjcms 1.6.4 allows attackers to execute arbitrary web scripts or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tifaweb/Dswjcms/issues/5
CVE ID: CVE-2020-19267 State: PUBLISHED Published: 2021-09-09T17:44:43 Last Updated: 2024-08-04T14:08:30.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to execute arbitrary code via uploading a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tifaweb/Dswjcms/issues/7
CVE ID: CVE-2020-19268 State: PUBLISHED Published: 2021-09-09T17:44:43 Last Updated: 2024-08-04T14:08:30.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site request forgery (CSRF) in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4 allows authenticated attackers to arbitrarily add administrator users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tifaweb/Dswjcms/issues/6
CVE ID: CVE-2020-19274 State: PUBLISHED Published: 2021-05-12T16:26:35 Last Updated: 2024-08-04T14:08:30.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross SIte Scripting (XSS) vulnerability exists in Dhcms 2017-09-18 in guestbook via the message board, which could let a remote malicious user execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ShaoGongBra/dhcms/issues/3
CVE ID: CVE-2020-19275 State: PUBLISHED Published: 2021-05-12T17:13:59 Last Updated: 2024-08-04T14:08:30.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Information Disclosure vulnerability exists in dhcms 2017-09-18 when entering invalid characters after the normal interface, which causes an error that will leak the physical path. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/209.html - https://github.com/ShaoGongBra/dhcms/issues/4
CVE ID: CVE-2020-19277 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T16:53:56.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Phachon mm-wiki v.0.1.2 allows a remote attacker to execute arbitrary code via javascript code in the markdown editor. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/phachon/mm-wiki/issues/68
CVE ID: CVE-2020-19278 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-14T19:20:01.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery vulnerability found in Phachon mm-wiki v.0.1.2 allows a remote attacker to execute arbitrary code via the system/user/save parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/phachon/mm-wiki/issues/68 - https://imgur.com/EABvnwz
CVE ID: CVE-2020-19279 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-14T19:16:35.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability found in B3log Wide allows a an attacker to escalate privileges via symbolic links. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/b3log/wide/issues/355
CVE ID: CVE-2020-19280 State: PUBLISHED Published: 2021-09-09T22:10:31 Last Updated: 2024-08-04T14:08:30.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jeesns 1.4.2 contains a cross-site request forgery (CSRF) which allows attackers to escalate privileges and perform sensitive program operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97938 - https://github.com/zchuanzhao/jeesns/issues/9
CVE ID: CVE-2020-19281 State: PUBLISHED Published: 2021-09-09T22:10:32 Last Updated: 2024-08-04T14:08:30.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the /manage/loginusername component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username field. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97941 - https://github.com/zchuanzhao/jeesns/issues/12
CVE ID: CVE-2020-19282 State: PUBLISHED Published: 2021-09-09T22:10:34 Last Updated: 2024-08-04T14:08:30.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the system error message's text field. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97940 - https://github.com/zchuanzhao/jeesns/issues/11
CVE ID: CVE-2020-19283 State: PUBLISHED Published: 2021-09-09T22:10:35 Last Updated: 2024-08-04T14:08:30.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in the /newVersion component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97939 - https://github.com/zchuanzhao/jeesns/issues/10
CVE ID: CVE-2020-19284 State: PUBLISHED Published: 2021-09-09T22:10:36 Last Updated: 2024-08-04T14:08:30.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the /group/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the group comments text field. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97944 - https://github.com/zchuanzhao/jeesns/issues/15
CVE ID: CVE-2020-19285 State: PUBLISHED Published: 2021-09-09T22:10:38 Last Updated: 2024-08-04T14:08:30.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the /group/apply component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Name text field. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97943 - https://github.com/zchuanzhao/jeesns/issues/14
CVE ID: CVE-2020-19286 State: PUBLISHED Published: 2021-09-09T22:10:38 Last Updated: 2024-08-04T14:08:30.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the /question/detail component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the source field of the editor. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97942 - https://github.com/zchuanzhao/jeesns/issues/13
CVE ID: CVE-2020-19287 State: PUBLISHED Published: 2021-09-09T22:10:39 Last Updated: 2024-08-04T14:08:30.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the /group/post component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97945 - https://github.com/zchuanzhao/jeesns/issues/16
CVE ID: CVE-2020-19288 State: PUBLISHED Published: 2021-09-09T22:10:40 Last Updated: 2024-08-04T14:08:30.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the /localhost/u component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a private message. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97946 - https://github.com/zchuanzhao/jeesns/issues/17
CVE ID: CVE-2020-19289 State: PUBLISHED Published: 2021-09-09T22:10:41 Last Updated: 2024-08-04T14:08:30.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the /member/picture/album component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the new album tab. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97947 - https://github.com/zchuanzhao/jeesns/issues/18
CVE ID: CVE-2020-19290 State: PUBLISHED Published: 2021-09-09T22:10:41 Last Updated: 2024-08-04T14:08:30.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the /weibo/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Weibo comment section. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97949 - https://github.com/zchuanzhao/jeesns/issues/20
CVE ID: CVE-2020-19291 State: PUBLISHED Published: 2021-09-09T22:10:42 Last Updated: 2024-08-04T14:08:30.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the /weibo/publishdata component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted Weibo. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97948 - https://github.com/zchuanzhao/jeesns/issues/19
CVE ID: CVE-2020-19292 State: PUBLISHED Published: 2021-09-09T22:10:43 Last Updated: 2024-08-04T14:08:30.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the /question/ask component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted question. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97953 - https://github.com/zchuanzhao/jeesns/issues/24
CVE ID: CVE-2020-19293 State: PUBLISHED Published: 2021-09-09T22:10:43 Last Updated: 2024-08-04T14:08:30.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the /article/add component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted article. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97951 - https://github.com/zchuanzhao/jeesns/issues/22
CVE ID: CVE-2020-19294 State: PUBLISHED Published: 2021-09-09T22:10:46 Last Updated: 2024-08-04T14:08:30.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the /article/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the article comments section. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97952 - https://github.com/zchuanzhao/jeesns/issues/23
CVE ID: CVE-2020-19295 State: PUBLISHED Published: 2021-09-09T22:10:45 Last Updated: 2024-08-04T14:08:30.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in the /weibo/topic component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://www.seebug.org/vuldb/ssvid-97950 - https://github.com/zchuanzhao/jeesns/issues/21
CVE ID: CVE-2020-19301 State: PUBLISHED Published: 2021-08-03T21:24:48 Last Updated: 2024-08-04T14:08:30.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the vae_admin_rule database table of vaeThink v1.0.1 allows attackers to execute arbitrary code via a crafted payload in the condition parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tingyuu/vaeThink/issues/1 - https://cwe.mitre.org/data/definitions/94.html
CVE ID: CVE-2020-19302 State: PUBLISHED Published: 2021-08-03T21:24:49 Last Updated: 2024-08-04T14:08:30.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the avatar upload function of vaeThink v1.0.1 allows attackers to open a webshell via changing uploaded file suffixes to ".php". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tingyuu/vaeThink/issues/2
CVE ID: CVE-2020-19303 State: PUBLISHED Published: 2021-08-03T21:24:50 Last Updated: 2024-08-04T14:08:30.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in /fileupload.php of hdcms 5.7 allows attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/houdunwang/hdcms/issues/6
CVE ID: CVE-2020-19304 State: PUBLISHED Published: 2021-08-03T21:24:51 Last Updated: 2024-08-04T14:08:30.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in /admin/index.php?n=system&c=filept&a=doGetFileList of Metinfo v7.0.0 allows attackers to perform a directory traversal and access sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MRdoulestar/CodeAnalyse/issues/1
CVE ID: CVE-2020-19305 State: PUBLISHED Published: 2021-08-03T21:24:52 Last Updated: 2024-08-04T14:08:30.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 causes the indeximg parameter to be deleted when the column is deleted, allowing attackers to escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MRdoulestar/CodeAnalyse/issues/2 - https://cwe.mitre.org/data/definitions/36.html
CVE ID: CVE-2020-19316 State: PUBLISHED Published: 2021-12-20T19:36:41 Last Updated: 2024-08-04T14:08:30.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/laravel/framework/commit/44c3feb604944599ad1c782a9942981c3991fa31 - http://www.netbytesec.com/advisories/OSCommandInjectionInLaravelFramework/
CVE ID: CVE-2020-19318 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T15:23:01.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in D-Link DIR-605L, hardware version AX, firmware version 1.17beta and below, allows authorized attackers execute arbitrary code via sending crafted data to the webserver service program. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hhhhu8045759/dir_605L-stack-overflow/blob/master/README.md
CVE ID: CVE-2020-19319 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T15:31:39.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the FILECODE parameter on login. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hhhhu8045759/dir_619l-buffer-overflow
CVE ID: CVE-2020-19320 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T15:34:35.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the curTime parameter on login. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/hhhhu8045759/dlink-619l-buffer_overflow
CVE ID: CVE-2020-19323 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T15:35:35.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in /bin/mini_upnpd on D-Link DIR-619L 2.06beta devices. There is a heap buffer overflow allowing remote attackers to restart router via the M-search request ST parameter. No authentication required Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/hhhhu8045759/619L_upnpd_heapoverflow
CVE ID: CVE-2020-19360 State: PUBLISHED Published: 2021-01-20T00:41:45 Last Updated: 2024-08-04T14:08:30.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Local file inclusion in FHEM 6.0 allows in fhem/FileLog_logWrapper file parameter can allow an attacker to include a file, which can lead to sensitive information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EmreOvunc/FHEM-6.0-Local-File-Inclusion-LFI-Vulnerability - https://emreovunc.com/blog/en/FHEM-v6.0-LFI-Vulnerability-01.png