Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-11940 State: PUBLISHED Published: 2020-04-23T14:20:31 Last Updated: 2024-08-04T11:42:00.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: In nDPI through 3.2 Stable, an out-of-bounds read in concat_hash_string in ssh.c can be exploited by a network-positioned attacker that can send malformed SSH protocol messages on a network segment monitored by nDPI's library. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ntop/nDPI/commit/3bbb0cd3296023f6f922c71d21a1c374d2b0a435 - https://securitylab.github.com/advisories/GHSL-2020-051_052-ntop-ndpi
CVE ID: CVE-2020-11941 State: PUBLISHED Published: 2020-04-27T16:46:19 Last Updated: 2024-08-04T11:42:00.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open-AudIT 3.2.2. There is OS Command injection in Discovery. Additional Analyst Notes: - CVE Program Container: References: - https://community.opmantek.com/display/OA/Release+Notes+for+Open-AudIT+v3.3.0 - https://www.coresecurity.com/advisories/open-audit-multiple-vulnerabilities - http://packetstormsecurity.com/files/157476/Open-AudIT-3.2.2-Command-Injection-SQL-Injection.html
CVE ID: CVE-2020-11942 State: PUBLISHED Published: 2020-04-29T21:16:31 Last Updated: 2024-08-04T11:42:00.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open-AudIT 3.2.2. There are Multiple SQL Injections. Additional Analyst Notes: - CVE Program Container: References: - https://community.opmantek.com/display/OA/Release+Notes+for+Open-AudIT+v3.3.0 - https://www.coresecurity.com/advisories/open-audit-multiple-vulnerabilities
CVE ID: CVE-2020-11943 State: PUBLISHED Published: 2020-04-29T21:17:27 Last Updated: 2024-08-04T11:42:00.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open-AudIT 3.2.2. There is Arbitrary file upload. Additional Analyst Notes: - CVE Program Container: References: - https://community.opmantek.com/display/OA/Release+Notes+for+Open-AudIT+v3.3.0 - https://www.coresecurity.com/advisories/open-audit-multiple-vulnerabilities
CVE ID: CVE-2020-11944 State: PUBLISHED Published: 2020-04-20T21:49:33 Last Updated: 2024-08-04T11:42:00.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Abe (aka bitcoin-abe) through 0.7.2, and 0.8pre, allows XSS in __call__ in abe.py because the PATH_INFO environment variable is mishandled during a PageNotFound exception. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitcoin-abe/bitcoin-abe/blob/d33f6e85de74e708e11cabe4ed0246e12025c726/Abe/abe.py#L253-L254 - https://geeknik-labs.com - https://github.com/bitcoin-abe/bitcoin-abe/issues/292
CVE ID: CVE-2020-11945 State: PUBLISHED Published: 2020-04-23T14:16:55 Last Updated: 2024-08-04T11:42:00.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest Authentication nonce to gain access to resources that are otherwise forbidden. This occurs because the attacker can overflow the nonce reference counter (a short integer). Remote code execution may occur if the pooled token credentials are freed (instead of replayed as valid credentials). Additional Analyst Notes: - CVE Program Container: References: - http://www.squid-cache.org/Versions/v4/changesets/squid-4-eeebf0f37a72a2de08348e85a
CVE Program Container: References: - http://www.squid-cache.org/Versions/v4/changesets/squid-4-eeebf0f37a72a2de08348e85ae34b02c34e9a811.patch - http://master.squid-cache.org/Versions/v4/changesets/squid-4-eeebf0f37a72a2de08348e85ae34b02c34e9a811.patch - https://github.com/squid-cache/squid/pull/585 - https://github.com/squid-cache/squid/commit/eeebf0f37a72a2de08348e85ae34b02c34e9a811 - http://www.openwall.com/lists/oss-security/2020/04/23/2 - https://bugzilla.suse.com/show_bug.cgi?id=1170313 - https://www.debian.org/security/2020/dsa-4682 - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00018.html - https://security.gentoo.org/glsa/202005-05 - https://lists.fedoraproject.org
e-security-announce/2020-05/msg00018.html - https://security.gentoo.org/glsa/202005-05 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4FWQRYZJPHAZBLXJ56FPCHJN5X2FP3VA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RV2VZWFJNO3B56IVN56HHKJASG5DYUIX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H4MWXEZAJSOGRJSS2JCJK4WBSND4IV46/ - https://usn.ubuntu.com/4356-1/ - https://lists.debian.org/debian-lts-announce/2020/07/msg00009.html - https://security.netapp.com/advisory/ntap-20210304-0004/
CVE ID: CVE-2020-11946 State: PUBLISHED Published: 2020-04-20T20:18:32 Last Updated: 2024-08-04T11:42:00.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/network-monitoring/help/read-me-complete.html - https://cwe.mitre.org/data/definitions/306.html
CVE ID: CVE-2020-11947 State: PUBLISHED Published: 2020-12-31T00:13:30 Last Updated: 2024-08-04T11:42:00.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ff0507c239a246fd7215b31c5658fc6a3ee1e4c5 - http://www.openwall.com/lists/oss-security/2021/01/13/4 - https://security.netapp.com/advisory/ntap-20210212-0001/
CVE ID: CVE-2020-11949 State: PUBLISHED Published: 2020-05-28T12:43:32 Last Updated: 2024-08-04T11:42:00.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388-HT devices. Additional Analyst Notes: - CVE Program Container: References: - http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2020-001-v1.pdf
CVE ID: CVE-2020-11950 State: PUBLISHED Published: 2020-05-28T12:44:36 Last Updated: 2024-08-04T11:42:00.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to upload and execute a script (with resultant execution of OS commands). For example, this affects IT9388-HT devices. Additional Analyst Notes: - CVE Program Container: References: - http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2020-001-v1.pdf
CVE ID: CVE-2020-11951 State: PUBLISHED Published: 2020-07-14T13:00:40 Last Updated: 2024-08-04T11:42:00.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. There is a Backdoor root account. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-multiple-rittal-products-based-on-same-software/
CVE ID: CVE-2020-11952 State: PUBLISHED Published: 2020-07-14T13:01:31 Last Updated: 2024-08-04T11:42:00.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. Attackers can bypass the CLI menu. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-multiple-rittal-products-based-on-same-software/
CVE ID: CVE-2020-11953 State: PUBLISHED Published: 2020-07-14T13:02:40 Last Updated: 2024-08-04T11:42:00.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Rittal PDU-3C002DEC through 5.15.40 and CMCIII-PU-9333E0FB through 3.15.70_4 devices. Attackers can execute code. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-multiple-rittal-products-based-on-same-software/
CVE ID: CVE-2020-11955 State: PUBLISHED Published: 2020-07-14T13:03:51 Last Updated: 2024-08-04T11:42:00.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Rittal PDU-3C002DEC through 5.15.70 and CMCIII-PU-9333E0FB through 3.15.70 devices. There are insecure permissions. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-multiple-rittal-products-based-on-same-software/
CVE ID: CVE-2020-11956 State: PUBLISHED Published: 2020-07-14T13:05:39 Last Updated: 2024-08-04T11:42:00.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. There is a least privilege violation. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-multiple-rittal-products-based-on-same-software/
CVE ID: CVE-2020-11957 State: PUBLISHED Published: 2020-06-09T18:26:54 Last Updated: 2024-08-04T11:42:00.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Low Energy implementation in Cypress PSoC Creator BLE 4.2 component versions before 3.64 generates a random number (Pairing Random) with significantly less entropy than the specified 128 bits during BLE pairing. This is the case for both authenticated and unauthenticated pairing with both LE Secure Connections as well as LE Legacy Pairing. A predictable or brute-forceable random number allows an attacker (in radio range) to perform a MITM attack during BLE pairing. Additional Analyst Notes: - CVE Program Contain
n attacker (in radio range) to perform a MITM attack during BLE pairing. Additional Analyst Notes: - CVE Program Container: References: - https://www.cypress.com/file/504466/download
CVE ID: CVE-2020-11958 State: PUBLISHED Published: 2020-04-21T00:37:45 Last Updated: 2024-08-04T11:42:00.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2020/04/19/re2c-heap-overflow-in-scannerfill-scanner-cc/ - https://www.openwall.com/lists/oss-security/2020/04/19/1 - https://github.com/skvadrik/re2c/commit/c4603ba5ce229db83a2a4fb93e6d4b4e3ec3776a - http://www.openwall.com/lists/oss-security/2020/04/21/1 - https://usn.ubuntu.com/4338-1/ - https://usn.ubuntu.com/4338-2/ - https://securi
l.com/lists/oss-security/2020/04/21/1 - https://usn.ubuntu.com/4338-1/ - https://usn.ubuntu.com/4338-2/ - https://security.gentoo.org/glsa/202007-28
CVE ID: CVE-2020-11959 State: PUBLISHED Published: 2020-06-24T16:19:05 Last Updated: 2024-08-04T11:48:56.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM before 1.0.50. Additional Analyst Notes: - CVE Program Container: References: - https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=14
CVE ID: CVE-2020-11960 State: PUBLISHED Published: 2020-06-24T16:23:54 Last Updated: 2024-08-04T11:48:56.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xiaomi router R3600 ROM before 1.0.50 is affected by a vulnerability when checking backup file in c_upload interface let attacker able to extract malicious file under any location in /tmp, lead to possible RCE and DoS Additional Analyst Notes: - CVE Program Container: References: - https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=15
CVE ID: CVE-2020-11961 State: PUBLISHED Published: 2020-06-24T16:28:06 Last Updated: 2024-08-04T11:48:56.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xiaomi router R3600 ROM before 1.0.50 is affected by a sensitive information leakage caused by an insecure interface get_config_result without authentication Additional Analyst Notes: - CVE Program Container: References: - https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=16
CVE ID: CVE-2020-11963 State: PUBLISHED Published: 2020-04-21T12:04:45 Last Updated: 2024-08-04T11:48:56.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: IQrouter through 3.3.1, when unconfigured, has multiple remote code execution vulnerabilities in the web-panel because of Bash Shell Metacharacter Injection. Note: The vendor claims that this vulnerability can only occur on a brand-new network that, after initiating the forced initial configuration (which has a required step for setting a secure password on the system), makes this CVE invalid. This vulnerability is “true for any unconfigured release of OpenWRT, and true of many other new Linux distros prior to being configure
lity is “true for any unconfigured release of OpenWRT, and true of many other new Linux distros prior to being configured for the first time” Additional Analyst Notes: - CVE Program Container: References: - https://evenroute.com/ - https://pastebin.com/grSCSBSu - https://openwrt.org/docs/guide-quick-start/walkthrough_login - https://evenroute.zendesk.com/hc/en-us/articles/216107838-How-do-I-configure-an-IQrouter-
CVE ID: CVE-2020-11964 State: PUBLISHED Published: 2020-04-21T12:05:27 Last Updated: 2024-08-04T11:48:56.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IQrouter through 3.3.1, the Lua function diag_set_password in the web-panel allows remote attackers to change the root password arbitrarily. Note: The vendor claims that this vulnerability can only occur on a brand-new network that, after initiating the forced initial configuration (which has a required step for setting a secure password on the system), makes this CVE invalid. This vulnerability is “true for any unconfigured release of OpenWRT, and true of many other new Linux distros prior to being configured for the firs
for any unconfigured release of OpenWRT, and true of many other new Linux distros prior to being configured for the first time” Additional Analyst Notes: - CVE Program Container: References: - https://evenroute.com/ - https://pastebin.com/grSCSBSu - https://openwrt.org/docs/guide-quick-start/walkthrough_login - https://evenroute.zendesk.com/hc/en-us/articles/216107838-How-do-I-configure-an-IQrouter-
CVE ID: CVE-2020-11965 State: PUBLISHED Published: 2020-04-21T12:05:49 Last Updated: 2024-08-04T11:48:56.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IQrouter through 3.3.1, there is a root user without a password, which allows attackers to gain full remote access via SSH. Note: The vendor claims that this vulnerability can only occur on a brand-new network that, after initiating the forced initial configuration (which has a required step for setting a secure password on the system), makes this CVE invalid. This vulnerability is “true for any unconfigured release of OpenWRT, and true of many other new Linux distros prior to being configured for the first time” Additiona
red release of OpenWRT, and true of many other new Linux distros prior to being configured for the first time” Additional Analyst Notes: - CVE Program Container: References: - https://evenroute.com/ - https://pastebin.com/grSCSBSu - https://openwrt.org/docs/guide-quick-start/walkthrough_login - https://evenroute.zendesk.com/hc/en-us/articles/216107838-How-do-I-configure-an-IQrouter-
CVE ID: CVE-2020-11966 State: PUBLISHED Published: 2020-04-21T12:06:12 Last Updated: 2024-08-04T11:48:56.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IQrouter through 3.3.1, the Lua function reset_password in the web-panel allows remote attackers to change the root password arbitrarily. Note: The vendor claims that this vulnerability can only occur on a brand-new network that, after initiating the forced initial configuration (which has a required step for setting a secure password on the system), makes this CVE invalid. This vulnerability is “true for any unconfigured release of OpenWRT, and true of many other new Linux distros prior to being configured for the first t
any unconfigured release of OpenWRT, and true of many other new Linux distros prior to being configured for the first time” Additional Analyst Notes: - CVE Program Container: References: - https://evenroute.com/ - https://pastebin.com/grSCSBSu - https://openwrt.org/docs/guide-quick-start/walkthrough_login - https://evenroute.zendesk.com/hc/en-us/articles/216107838-How-do-I-configure-an-IQrouter-
CVE ID: CVE-2020-11967 State: PUBLISHED Published: 2020-04-21T12:08:11 Last Updated: 2024-08-04T11:48:56.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IQrouter through 3.3.1, remote attackers can control the device (restart network, reboot, upgrade, reset) because of Incorrect Access Control. Note: The vendor claims that this vulnerability can only occur on a brand-new network that, after initiating the forced initial configuration (which has a required step for setting a secure password on the system), makes this CVE invalid. This vulnerability is “true for any unconfigured release of OpenWRT, and true of many other new Linux distros prior to being configured for the fi
e for any unconfigured release of OpenWRT, and true of many other new Linux distros prior to being configured for the first time” Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://evenroute.com/ - https://pastebin.com/grSCSBSu - https://openwrt.org/docs/guide-quick-start/walkthrough_login - https://evenroute.zendesk.com/hc/en-us/articles/216107838-How-do-I-configure-an-IQrouter-
CVE ID: CVE-2020-11968 State: PUBLISHED Published: 2020-04-21T12:07:43 Last Updated: 2024-08-04T11:48:56.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the web-panel in IQrouter through 3.3.1, remote attackers can read system logs because of Incorrect Access Control. Note: The vendor claims that this vulnerability can only occur on a brand-new network that, after initiating the forced initial configuration (which has a required step for setting a secure password on the system), makes this CVE invalid. This vulnerability is “true for any unconfigured release of OpenWRT, and true of many other new Linux distros prior to being configured for the first time” Additional Analys
ase of OpenWRT, and true of many other new Linux distros prior to being configured for the first time” Additional Analyst Notes: - CVE Program Container: References: - https://evenroute.com/ - https://pastebin.com/grSCSBSu - https://openwrt.org/docs/guide-quick-start/walkthrough_login - https://evenroute.zendesk.com/hc/en-us/articles/216107838-How-do-I-configure-an-IQrouter-
CVE ID: CVE-2020-11969 State: PUBLISHED Published: 2020-06-15T19:03:49 Last Updated: 2024-08-04T11:48:56.988Z Vendors: n/a Products: Apache TomEE Problem Types: Information Disclosure Description: If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is opened on TCP port 1099, which does not include authentication. This affects Apache TomEE 8.0.0-M1 - 8.0.1, Apache TomEE 7.1.0 - 7.1.2, Apache TomEE 7.0.0-M1 - 7.0.7, Apache TomEE 1.0.0 - 1.7.5. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/rbd23418646dedda70a546331ea1c1d115b8975b7e7dc452d10e2e773%40%3Cdev.tom
eferences: - https://lists.apache.org/thread.html/rbd23418646dedda70a546331ea1c1d115b8975b7e7dc452d10e2e773%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/rbd23418646dedda70a546331ea1c1d115b8975b7e7dc452d10e2e773%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/ref088c4732e1a8dd0bbbb96e13ffafcfe65f984238ffa55f438d78fe%40%3Cusers.tomee.apache.org%3E - https://lists.apache.org/thread.html/ref088c4732e1a8dd0bbbb96e13ffafcfe65f984238ffa55f438d78fe%40%3Cdev.tomee.apache.org%3E - http://www.openwall.com/lists/oss-security/2020/12/16/2 - https://lists.apache.org/thread.html/r85b87478f8aa4751aa3a06e88622e80ffabae376ee7283e147ee56b9%40%3Cdev.tomee.apache.org%3E
CVE ID: CVE-2020-11970 State: REJECTED Published: 2020-05-26T16:01:25 Last Updated: 2020-05-26T16:01:25 Description: No description available.
CVE ID: CVE-2020-11971 State: PUBLISHED Published: 2020-05-14T16:18:41 Last Updated: 2024-08-04T11:48:56.399Z Vendors: n/a Products: Apache Camel Problem Types: Rebind Flaw Description: Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. Users should upgrade to 3.2.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2020/05/14/7 - https://lists.apache.org/thread.html/r7968b5086e861da2cf635a7b215e465ce9912d5f16c683b8e56819c4%40%3Ccommits.camel.apache.org%3E - https://lists.apache.org/thread.html/r16f4f9019840bc923e25d1b029fb42fe2676c4ba36e54824749a8da9%40%3Ccommi
pache.org%3E - https://lists.apache.org/thread.html/r16f4f9019840bc923e25d1b029fb42fe2676c4ba36e54824749a8da9%40%3Ccommits.camel.apache.org%3E - https://lists.apache.org/thread.html/r3d0ae14ca224e69fb1c653f0a5d9e56370ee12d8896aa4490aeae14a%40%3Ccommits.camel.apache.org%3E - https://lists.apache.org/thread.html/r45da6abb42a9e6853ec8affdbf591f1db3e90c5288de9d3753124c79%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/rb0033c4e9dade1fdf22493314062364ff477e9a8b417f687dc168468%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/r8988311eb2481fd8a87e69cf17ffb8dc81bfeba5503021537f72db0a%40%3Cissues.activemq.apache.org%3E - https://www.oracle.com/securi
8311eb2481fd8a87e69cf17ffb8dc81bfeba5503021537f72db0a%40%3Cissues.activemq.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2020.html - https://camel.apache.org/security/CVE-2020-11971.html - https://lists.apache.org/thread.html/r938dc2ded68039ab747f6d7a12153862495d4b38107d3ed111994386%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/rc907a3d385a9c62416d686608e7241c864be8ef2ac16a3bdb0e33649%40%3Cissues.activemq.apache.org%3E - https://www.oracle.com/security-alerts/cpujan2021.html - https://lists.apache.org/thread.html/r9dc2505651788ac668299774d9e7af4dc616be2f56fdc684d1170882%40%3Cusers.activemq.apache.org%3E - https://lists.apache.org/thread.html/r52a512
8299774d9e7af4dc616be2f56fdc684d1170882%40%3Cusers.activemq.apache.org%3E - https://lists.apache.org/thread.html/r52a5129df402352adc34d052bab9234c8ef63596306506a89fdc7328%40%3Cusers.activemq.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2020-11972 State: PUBLISHED Published: 2020-05-14T16:26:03 Last Updated: 2024-08-04T11:48:57.301Z Vendors: n/a Products: Apache Camel Problem Types: Java deserialization Description: Apache Camel RabbitMQ enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2020/05/14/8 - http://www.openwall.com/lists/oss-security/2020/05/14/10 - https://www.oracle.com/security-alerts/cpuoct2020.html - https://camel.apache.org/security/CVE-2020-11972.html -
14/10 - https://www.oracle.com/security-alerts/cpuoct2020.html - https://camel.apache.org/security/CVE-2020-11972.html - https://www.oracle.com/security-alerts/cpujan2021.html