Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-12621 State: PUBLISHED Published: 2020-09-02T16:27:32 Last Updated: 2024-08-04T12:04:22.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Teamwire application 5.3.0 for Android allows physically proximate attackers to exploit a flaw related to the pass-code component. Additional Analyst Notes: - CVE Program Container: References: - https://play.google.com/store/apps/details?id=com.teamwire.messenger&hl=en_US - https://telekom-security.github.io/2020/08/teamwire-passcode-bypass.html
CVE ID: CVE-2020-12624 State: PUBLISHED Published: 2020-05-03T13:01:33 Last Updated: 2024-08-04T12:04:22.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: The League application before 2020-05-02 on Android sends a bearer token in an HTTP Authorization header to an arbitrary web site that hosts an external image because an OkHttp object is reused, which allows remote attackers to hijack sessions. Additional Analyst Notes: - CVE Program Container: References: - https://push32.com/post/dating-app-fail/
CVE ID: CVE-2020-12625 State: PUBLISHED Published: 2020-05-04T01:57:31 Last Updated: 2024-08-04T12:04:22.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because JavaScript code can occur in the CDATA of an HTML message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/roundcube/roundcubemail/commit/87e4cd0cf2c550e77586860b94e5c75d2b7686d0 - https://github.com/roundcube/roundcubemail/releases/tag/1.4.4 - https://github.com/roundcube/roundcubemail/compare/1.4.3...1.4.4 - https://www.debian.org/security/2020/dsa-46
g/1.4.4 - https://github.com/roundcube/roundcubemail/compare/1.4.3...1.4.4 - https://www.debian.org/security/2020/dsa-4674 - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-12625-Cross%20Site-Scripting%20via%20Malicious%20HTML%20Attachment-Roundcube - https://security.gentoo.org/glsa/202007-41 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00083.html
CVE ID: CVE-2020-12626 State: PUBLISHED Published: 2020-05-04T01:57:17 Last Updated: 2024-08-04T12:04:22.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an authenticated user to be logged out because POST was not considered. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/roundcube/roundcubemail/releases/tag/1.4.4 - https://github.com/roundcube/roundcubemail/compare/1.4.3...1.4.4 - https://github.com/roundcube/roundcubemail/pull/7302 - https://github.com/roundcube/roundcubemail/commit/9bbda422ff0b782b81de59c86994f1a5fd93f8e6 - https://www.debian.org/security/
://github.com/roundcube/roundcubemail/commit/9bbda422ff0b782b81de59c86994f1a5fd93f8e6 - https://www.debian.org/security/2020/dsa-4674 - https://security.gentoo.org/glsa/202007-41
CVE ID: CVE-2020-12627 State: PUBLISHED Published: 2020-05-04T02:16:06 Last Updated: 2024-08-04T12:04:21.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Calibre-Web 0.6.6 allows authentication bypass because of the 'A0Zr98j/3yX R~XHH!jmN]LWX/,?RT' hardcoded secret key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/janeczku/calibre-web/pull/1337
CVE ID: CVE-2020-12629 State: PUBLISHED Published: 2020-05-04T12:28:46 Last Updated: 2024-08-04T12:04:21.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osticket/osticket/commit/fc4c8608fa122f38673b9dddcb8fef4a15a9c884 - https://github.com/osTicket/osTicket/compare/v1.14.1...v1.14.2 - https://www.exploit-db.com/exploits/48413
CVE ID: CVE-2020-12635 State: PUBLISHED Published: 2020-06-29T13:08:23 Last Updated: 2024-08-04T12:04:22.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in the WebForms Pro M2 extension before 2.9.17 for Magento 2 via the textarea field. Additional Analyst Notes: - CVE Program Container: References: - https://mageme.com/magento-2-form-builder.html - https://anothernetsecblog.com/magento-2-extension-security/
CVE ID: CVE-2020-12637 State: PUBLISHED Published: 2020-05-09T16:23:46 Last Updated: 2024-08-04T12:04:22.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zulip Desktop before 5.2.0 has Missing SSL Certificate Validation because all validation was inadvertently disabled during an attempt to recognize the ignoreCerts option. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zulip.org/2020/05/06/zulip-desktop-5-2-0-security-release/
CVE ID: CVE-2020-12638 State: PUBLISHED Published: 2020-07-23T15:41:58 Last Updated: 2024-08-04T12:04:22.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: An encryption-bypass issue was discovered on Espressif ESP-IDF devices through 4.2, ESP8266_NONOS_SDK devices through 3.0.3, and ESP8266_RTOS_SDK devices through 3.3. Broadcasting forged beacon frames forces a device to change its authentication mode to OPEN, effectively disabling its 802.11 encryption. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/espressif/esp-idf - https://github.com/espressif/ESP8266_NONOS_SDK - https://github.com/espressif/ESP8266_RTOS_SDK - https://lbsfilm.at/blog/w
tps://github.com/espressif/ESP8266_NONOS_SDK - https://github.com/espressif/ESP8266_RTOS_SDK - https://lbsfilm.at/blog/wpa2-authenticationmode-downgrade-in-espressif-microprocessors
CVE ID: CVE-2020-12639 State: PUBLISHED Published: 2020-05-04T13:36:59 Last Updated: 2024-08-04T12:04:22.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpList before 3.5.3 allows XSS, with resultant privilege elevation, via lists/admin/template.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.phplist.org/newslist/phplist-3-5-3-release-notes/ - https://github.com/phpList/phplist3/compare/3.5.2...3.5.3
CVE ID: CVE-2020-12640 State: PUBLISHED Published: 2020-05-04T14:58:28 Last Updated: 2024-08-04T12:04:22.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via directory traversal in a plugin name to rcube_plugin_api.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/roundcube/roundcubemail/releases/tag/1.4.4 - https://github.com/roundcube/roundcubemail/compare/1.4.3...1.4.4 - https://roundcube.net/news/2020/04/29/security-updates-1.4.4-1.3.11-and-1.2.10 - https://github.com/roundcube/roundcubemail/commit/814eadb699e8576ce3a78f21e95bf69a7c7b3794 - https:/
1.3.11-and-1.2.10 - https://github.com/roundcube/roundcubemail/commit/814eadb699e8576ce3a78f21e95bf69a7c7b3794 - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-12640-PHP%20Local%20File%20Inclusion-Roundcube - https://security.gentoo.org/glsa/202007-41 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00083.html
CVE ID: CVE-2020-12641 State: PUBLISHED Published: 2020-05-04T14:58:15.000Z Last Updated: 2025-10-21T23:35:44.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/roundcube/roundcubemail/releases/tag/1.4.4 - https://github.com/roundcube/roundcubemail/compare/1.4.3...1.4.4 - https://roundcube.net/news/2020/04/29/security-updates-1.4.4-1.3.11-and-1.2.10 - https://github.com/roundcube/roundcube
https://roundcube.net/news/2020/04/29/security-updates-1.4.4-1.3.11-and-1.2.10 - https://github.com/roundcube/roundcubemail/commit/fcfb099477f353373c34c8a65c9035b06b364db3 - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-12641-Command%20Injection-Roundcube - https://security.gentoo.org/glsa/202007-41 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00083.html
CVE ID: CVE-2020-12642 State: PUBLISHED Published: 2020-05-04T15:14:14 Last Updated: 2024-08-04T12:04:22.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in service-api before 4.3.12 and 5.x before 5.1.1 for Report Portal. It allows XXE, with resultant secrets disclosure and SSRF, via JUnit XML launch import. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/reportportal/reportportal/blob/master/SECURITY_ADVISORIES.md
CVE ID: CVE-2020-12643 State: PUBLISHED Published: 2020-08-31T14:24:01 Last Updated: 2024-08-04T12:04:22.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request for a snippet containing an email address. Additional Analyst Notes: - CVE Program Container: References: - https://www.open-xchange.com/ - http://seclists.org/fulldisclosure/2020/Aug/14
CVE ID: CVE-2020-12644 State: PUBLISHED Published: 2020-08-31T14:25:38 Last Updated: 2024-08-04T12:04:22.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API. Additional Analyst Notes: - CVE Program Container: References: - https://www.open-xchange.com/ - https://seclists.org/fulldisclosure/2020/Aug/14
CVE ID: CVE-2020-12645 State: PUBLISHED Published: 2020-08-31T14:28:16 Last Updated: 2024-08-04T12:04:22.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/load memory consumption. Additional Analyst Notes: - CVE Program Container: References: - https://www.open-xchange.com/ - https://seclists.org/fulldisclosure/2020/Aug/14
CVE ID: CVE-2020-12646 State: PUBLISHED Published: 2020-08-31T14:30:03 Last Updated: 2024-08-04T12:04:22.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://www.open-xchange.com/
CVE ID: CVE-2020-12647 State: PUBLISHED Published: 2020-05-21T02:07:14 Last Updated: 2024-08-04T12:04:22.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unisys ALGOL Compiler 58.1 before 58.1a.15, 59.1 before 59.1a.9, and 60.0 before 60.0a.5 can emit invalid code sequences under rare circumstances related to syntax. The resulting code could, for example, trigger a system fault or adversely affect confidentiality, integrity, and availability. Additional Analyst Notes: - CVE Program Container: References: - https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=55
CVE ID: CVE-2020-12648 State: PUBLISHED Published: 2020-08-14T13:52:29 Last Updated: 2024-08-04T12:04:22.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in TinyMCE 5.2.1 and earlier allows remote attackers to inject arbitrary web script when configured in classic editing mode. Additional Analyst Notes: - CVE Program Container: References: - https://labs.bishopfox.com/advisories/tinymce-version-5.2.1
CVE ID: CVE-2020-12649 State: PUBLISHED Published: 2020-05-05T00:09:06 Last Updated: 2024-08-04T12:04:22.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gurbalib through 2020-04-30 allows lib/cmds/player/help.c directory traversal for reading administrative paths. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sirdude/gurbalib/pull/38
CVE ID: CVE-2020-12650 State: REJECTED Published: 2020-05-11T15:04:02 Last Updated: 2020-05-11T15:04:02 Description: No description available.
CVE ID: CVE-2020-12651 State: PUBLISHED Published: 2020-05-15T17:31:50 Last Updated: 2024-08-04T12:04:22.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: SecureCRT before 8.7.2 allows remote attackers to execute arbitrary code via an Integer Overflow and a Buffer Overflow because a banner can trigger a line number to CSI functions that exceeds INT_MAX. Additional Analyst Notes: - CVE Program Container: References: - https://www.vandyke.com/support/advisory/index.html - https://twitter.com/taviso/status/1261079774190919680 - https://bugs.chromium.org/p/project-zero/issues/detail?id=2033 - https://www.vandyke.com/products/securecrt/history.txt
CVE ID: CVE-2020-12652 State: PUBLISHED Published: 2020-05-05T04:23:59 Last Updated: 2024-08-04T12:04:22.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a "double fetch" vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states "The security impact of this bug is not as bad as it could have been because these operations are all privileged and root already has enormous destructive power." Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.o
y has enormous destructive power." Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.14 - https://github.com/torvalds/linux/commit/28d76df18f0ad5bcf5fa48510b225f0ed262a99b - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=28d76df18f0ad5bcf5fa48510b225f0ed262a99b - https://security.netapp.com/advisory/ntap-20200608-0001/ - https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html - https://www.debian.org/security/2020/dsa-4698 - http://lists.opensus
ian.org/debian-lts-announce/2020/06/msg00013.html - https://www.debian.org/security/2020/dsa-4698 - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
CVE ID: CVE-2020-12653 State: PUBLISHED Published: 2020-05-05T04:47:35 Last Updated: 2024-08-04T12:04:22.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.4 - https://github.com/torvalds/linux/commit/b70261a288ea4d2f4ac7cd04be08a9f0f2de4f4d - https://git.kernel.org/cgit/linux/kerne
ps://github.com/torvalds/linux/commit/b70261a288ea4d2f4ac7cd04be08a9f0f2de4f4d - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b70261a288ea4d2f4ac7cd04be08a9f0f2de4f4d - http://www.openwall.com/lists/oss-security/2020/05/08/2 - https://security.netapp.com/advisory/ntap-20200608-0001/ - https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html - https://www.debian.org/security/2020/dsa-4698 - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
CVE ID: CVE-2020-12654 State: PUBLISHED Published: 2020-05-05T04:47:48 Last Updated: 2024-08-04T12:04:22.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was found in Linux kernel before 5.5.4. mwifiex_ret_wmm_get_status() in drivers/net/wireless/marvell/mwifiex/wmm.c allows a remote AP to trigger a heap-based buffer overflow because of an incorrect memcpy, aka CID-3a9b153c5591. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.4 - https://github.com/torvalds/linux/commit/3a9b153c5591548612c3955c9600a98150c81875 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3a9b153
53c5591548612c3955c9600a98150c81875 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3a9b153c5591548612c3955c9600a98150c81875 - http://www.openwall.com/lists/oss-security/2020/05/08/2 - https://security.netapp.com/advisory/ntap-20200608-0001/ - https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html - https://www.debian.org/security/2020/dsa-4698 - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html - https://usn.ubuntu.com/4392-1/ - https://usn.ubuntu.com/4393-1/
CVE ID: CVE-2020-12655 State: PUBLISHED Published: 2020-05-05T05:16:02 Last Updated: 2024-08-04T12:04:22.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in xfs_agf_verify in fs/xfs/libxfs/xfs_alloc.c in the Linux kernel through 5.6.10. Attackers may trigger a sync of excessive duration via an XFS v5 image with crafted metadata, aka CID-d0c7feaf8767. Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/linux-xfs/20200221153803.GP9506%40magnolia/ - https://github.com/torvalds/linux/commit/d0c7feaf87678371c2c09b3709400be416b2dc62 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d0c7feaf876783
8371c2c09b3709400be416b2dc62 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d0c7feaf87678371c2c09b3709400be416b2dc62 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ES5C6ZCMALBEBMKNNCTBSLLSYGFZG3FF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IO5XIQSRI747P4RVVTNX7TUPEOCF4OPU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZ2X3TM6RGRUS3KZAS26IJO5XGU7TBBR/ - https://security.netapp.com/advisory/ntap-20200608-0001/ - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html - https://lists.de
sory/ntap-20200608-0001/ - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00019.html - https://usn.ubuntu.com/4465-1/ - https://usn.ubuntu.com/4483-1/ - https://usn.ubuntu.com/4485-1/ - https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html
CVE ID: CVE-2020-12656 State: PUBLISHED Published: 2020-05-05T05:42:21 Last Updated: 2024-08-04T12:04:22.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: gss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation in the Linux kernel through 5.6.10 lacks certain domain_release calls, leading to a memory leak. Note: This was disputed with the assertion that the issue does not grant any access not already available. It is a problem that on unloading a specific kernel module some memory is leaked, but loading kernel modules is a privileged operation. A user could also write a kernel module to consume any amount of memory they like and load that re
privileged operation. A user could also write a kernel module to consume any amount of memory they like and load that replicating the effect of this bug Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.kernel.org/show_bug.cgi?id=206651 - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html - https://usn.ubuntu.com/4483-1/ - https://usn.ubuntu.com/4485-1/
CVE ID: CVE-2020-12657 State: PUBLISHED Published: 2020-05-05T06:01:45 Last Updated: 2024-08-04T12:04:22.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.6.5. There is a use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body. Additional Analyst Notes: - CVE Program Container: References: - https://patchwork.kernel.org/patch/11447049/ - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.5 - https://github.com/torvalds/linux/commit/2f95fa5c955d0a9987ffdc3a095e2f4e62c5f2a9 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2f95fa5c955d0a9987ffdc3a095e2f4e62c5f2a9 - https://u
/git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2f95fa5c955d0a9987ffdc3a095e2f4e62c5f2a9 - https://usn.ubuntu.com/4367-1/ - https://usn.ubuntu.com/4368-1/ - https://usn.ubuntu.com/4363-1/ - https://usn.ubuntu.com/4369-1/ - https://security.netapp.com/advisory/ntap-20200608-0001/ - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
CVE ID: CVE-2020-12658 State: PUBLISHED Published: 2020-12-31T00:17:50 Last Updated: 2024-08-04T12:04:22.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp_workers.c. NOTE: An upstream comment states "We are already on a shutdown path when running the code in question, so a DoS there doesn't make any sense, and there has been no additional information provided us (as upstream) to indicate why this would be a problem. Additional Analyst Notes: - CVE Program Container: References: - https://pagure.io/gssproxy/c/cb761412e299ef907f22cd7c4146d50c8a792003?branch=master - http
gram Container: References: - https://pagure.io/gssproxy/c/cb761412e299ef907f22cd7c4146d50c8a792003?branch=master - https://github.com/gssapi/gssproxy/compare/v0.8.2...v0.8.3 - https://github.com/gssapi/gssproxy/commit/cb761412e299ef907f22cd7c4146d50c8a792003 - https://lists.debian.org/debian-lts-announce/2021/01/msg00004.html
CVE ID: CVE-2020-12659 State: PUBLISHED Published: 2020-05-05T06:13:15 Last Updated: 2024-08-04T12:04:22.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.kernel.org/show_bug.cgi?id=207225 - https://github.com/torvalds/linux/commit/99e3a236dd43d06c65af0a2ef9cb44306aef6e02 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99e3a236dd43d06c65af0a2ef9cb44306aef6e02 - htt
ttps://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99e3a236dd43d06c65af0a2ef9cb44306aef6e02 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.7 - https://security.netapp.com/advisory/ntap-20200608-0001/ - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html - https://usn.ubuntu.com/4388-1/ - https://usn.ubuntu.com/4389-1/ - https://usn.ubuntu.com/4387-1/
CVE ID: CVE-2020-12662 State: PUBLISHED Published: 2020-05-19T13:50:18 Last Updated: 2024-08-04T12:04:22.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records. Additional Analyst Notes: - CVE Program Container: References: - https://nlnetlabs.nl/downloads/unbound/CVE-2020-12662_2020-12663.txt - http://www.nxnsattack.com - http://www.openwall.com/lists/oss-security/2020/05/19/5 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F5NFROI2OMCZLYRTCNGHGO3TUD32LCIQ/ - https: