Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-36523 State: PUBLISHED Published: 2022-06-03T14:55:20.000Z Last Updated: 2025-04-15T14:37:23.944Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: PlantUML Problem Types: CWE-79 Description: A vulnerability was found in PlantUML 6.43. It has been declared as problematic. Affected by this vulnerability is the component Database Information Macro. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2020/Oct/1
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2020/Oct/15 - https://vuldb.com/?id.164509
CVE ID: CVE-2020-36524 State: PUBLISHED Published: 2022-06-03T14:55:22.000Z Last Updated: 2025-04-15T14:37:14.067Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: Refined Toolkit Problem Types: CWE-79 Description: A vulnerability was found in Refined Toolkit. It has been rated as problematic. Affected by this issue is some unknown functionality of the component UI-Image/UI-Button. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://seclists.org/fulld
ed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2020/Oct/15 - https://vuldb.com/?id.164510
CVE ID: CVE-2020-36525 State: PUBLISHED Published: 2022-06-03T14:55:23.000Z Last Updated: 2025-04-15T14:37:04.989Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: Linking Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in Linking. This affects an unknown part of the component New Windows Macro. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2020/Oct/15 - https://v
VE Program Container: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2020/Oct/15 - https://vuldb.com/?id.164511
CVE ID: CVE-2020-36526 State: PUBLISHED Published: 2022-06-03T14:55:25.000Z Last Updated: 2025-04-15T14:36:57.065Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: Countdown Timer Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in Countdown Timer. This vulnerability affects unknown code of the component Macro Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2020/Oct/15 - h
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2020/Oct/15 - https://vuldb.com/?id.164512
CVE ID: CVE-2020-36527 State: PUBLISHED Published: 2022-06-03T14:55:26.000Z Last Updated: 2025-04-15T14:36:47.256Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: Server Status Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in Server Status. This issue affects some unknown processing of the component HTTP Status/SMTP Status. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://seclists.org/full
sed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2020/Oct/15 - https://vuldb.com/?id.164513
CVE ID: CVE-2020-36528 State: PUBLISHED Published: 2022-06-03T14:55:28.000Z Last Updated: 2025-04-15T14:36:37.575Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Platinum Mobile Problem Types: CWE-264 Description: A vulnerability, which was classified as critical, was found in Platinum Mobile 1.0.4.850. Affected is /MobileHandler.ashx which leads to broken access control. The attack requires authentication. Upgrading to version 1.0.4.851 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldis
t. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2020/Oct/4 - https://vuldb.com/?id.162264
CVE ID: CVE-2020-36529 State: PUBLISHED Published: 2022-06-03T19:10:38.000Z Last Updated: 2025-04-15T14:36:27.615Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SevOne Products: Network Management System Problem Types: CWE-77 Description: A vulnerability classified as critical has been found in SevOne Network Management System up to 5.7.2.22. This affects the file traceroute.php of the Traceroute Handler. The manipulation leads to privilege escalation with a command injection. It is possible to initiate the attack remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2020/Oct/5
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2020/Oct/5 - https://vuldb.com/?id.162261
CVE ID: CVE-2020-36530 State: PUBLISHED Published: 2022-06-03T19:10:39.000Z Last Updated: 2025-04-15T14:36:15.656Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SevOne Products: Network Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2020/Oct/5 - https://vuldb.com/?id.162262
CVE ID: CVE-2020-36531 State: PUBLISHED Published: 2022-06-03T19:10:41.000Z Last Updated: 2025-04-15T14:36:06.194Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SevOne Products: Network Management System Problem Types: CWE-74 Description: A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the Device Manager Page. An injection leads to privilege escalation. The attack may be initiated remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2020/Oct/5 - https://vuldb.com/?id.162263
CVE ID: CVE-2020-36532 State: PUBLISHED Published: 2022-06-03T19:10:42.000Z Last Updated: 2025-04-15T14:35:51.915Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Klapp Products: App Problem Types: CWE-200 Description: A vulnerability has been found in Klapp App and classified as problematic. This vulnerability affects unknown code of the component Authorization. The manipulation leads to information disclosure (Credentials). The attack can be initiated remotely. It is recommended to upgrade the affected app. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.modzero.com/modlog/archives/2020/09/07/knapp_dane
Program Container: - CISA ADP Vulnrichment: References: - https://www.modzero.com/modlog/archives/2020/09/07/knapp_daneben_ist_auch_vorbei/index.html - https://vuldb.com/?id.160762
CVE ID: CVE-2020-36533 State: PUBLISHED Published: 2022-06-03T19:10:44.000Z Last Updated: 2025-04-15T14:35:41.756Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Klapp Products: App Problem Types: CWE-287 Description: A vulnerability was found in Klapp App and classified as problematic. This issue affects some unknown processing of the JSON Web Token Handler. The manipulation leads to weak authentication. The attack may be initiated remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.modzero.com/modlog/archives/2020/09/07/knapp_daneben_ist_auch_vorbei/index.html - https://vuldb.com/?id.160763
CVE ID: CVE-2020-36534 State: PUBLISHED Published: 2022-06-03T19:10:45.000Z Last Updated: 2025-04-15T14:35:31.834Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: easyii Products: CMS Problem Types: CWE-352 Description: A vulnerability was found in easyii CMS. It has been classified as problematic. Affected is an unknown function of the file /admin/sign/out. The manipulation leads to cross site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/noumo/easyii/ - https://vuldb.com/
s: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/noumo/easyii/ - https://vuldb.com/?id.160278
CVE ID: CVE-2020-36535 State: PUBLISHED Published: 2022-06-03T19:10:47.000Z Last Updated: 2025-04-15T14:35:23.513Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: MINMAX Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in MINMAX. This affects an unknown part of the file /newsDia.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.159957
CVE ID: CVE-2020-36536 State: PUBLISHED Published: 2022-06-03T19:10:48.000Z Last Updated: 2025-04-15T14:35:12.076Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Brandbugle Problem Types: CWE-89 Description: A vulnerability was found in Brandbugle. It has been rated as critical. Affected by this issue is some unknown functionality of the file /main.php. The manipulation leads to sql injection. The attack may be launched remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.159956
CVE ID: CVE-2020-36537 State: PUBLISHED Published: 2022-06-03T19:10:50.000Z Last Updated: 2025-04-15T14:35:01.363Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Everywhere Products: CMS Problem Types: CWE-89 Description: A vulnerability was found in Everywhere CMS. It has been classified as critical. Affected is an unknown function. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.159954
CVE ID: CVE-2020-36538 State: PUBLISHED Published: 2022-06-03T19:10:51.000Z Last Updated: 2025-04-15T14:34:48.927Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Eatan Products: CMS Problem Types: CWE-89 Description: A vulnerability was found in Eatan CMS. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection. The attack can be launched remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.159955
CVE ID: CVE-2020-36539 State: PUBLISHED Published: 2022-06-03T19:10:53.000Z Last Updated: 2025-04-15T14:34:33.186Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Lógico y Creativo Problem Types: CWE-89 Description: A vulnerability was found in Lógico y Creativo 1.0 and classified as critical. This issue affects some unknown processing. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.159953
CVE ID: CVE-2020-36540 State: PUBLISHED Published: 2022-06-03T19:10:54.000Z Last Updated: 2025-04-15T14:34:18.656Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Neetai Tech Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Neetai Tech. Affected is an unknown function of the file /product.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.159438
CVE ID: CVE-2020-36541 State: PUBLISHED Published: 2022-06-03T19:10:55.000Z Last Updated: 2025-04-15T14:33:58.567Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Demokratian Problem Types: CWE-89 Description: A vulnerability was found in Demokratian. It has been rated as critical. Affected by this issue is some unknown functionality of the file basicos_php/genera_select.php. The manipulation of the argument id_provincia with the input -1%20union%20all%20select%201,2,3,4,database() leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch t
be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://alquimistadesistemas.com/sql-injection-y-archivo-peligroso-en-demokratian - https://bitbucket.org/csalgadow/demokratian_votaciones/commits/b56c48b519fc52efa65404c312ea9bbde320e3fa - https://vuldb.com/?id.159434
CVE ID: CVE-2020-36542 State: PUBLISHED Published: 2022-06-03T19:11:00.000Z Last Updated: 2025-04-15T14:33:46.015Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: unspecified Products: Demokratian Problem Types: CWE-269 Description: A vulnerability classified as critical has been found in Demokratian. This affects an unknown part of the file install/install3.php. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
ly a patch to fix this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://alquimistadesistemas.com/sql-injection-y-archivo-peligroso-en-demokratian - https://bitbucket.org/csalgadow/demokratian_votaciones/commits/0d073ee461edd5f42528d41e00bf0a7b22e86bb3 - https://vuldb.com/?id.159435
CVE ID: CVE-2020-36543 State: PUBLISHED Published: 2022-06-04T12:35:13.000Z Last Updated: 2025-04-15T14:33:10.567Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SialWeb Products: CMS Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SialWeb CMS. This affects an unknown part of the file /about.php. The manipulation of the argument Id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sialweb.net/ - https://vuldb.com/?id.159429
CVE ID: CVE-2020-36544 State: PUBLISHED Published: 2022-06-04T12:35:15.000Z Last Updated: 2025-04-15T14:32:57.365Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SialWeb Products: CMS Problem Types: CWE-80 Description: A vulnerability has been found in SialWeb CMS and classified as problematic. This vulnerability affects unknown code of the component Search Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sialweb.net/ - https://vuldb.com/?id.159430
CVE ID: CVE-2020-36547 State: PUBLISHED Published: 2022-06-17T13:10:17.000Z Last Updated: 2025-04-16T16:17:26.529Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: GE Products: Voluson S8 Problem Types: CWE-798 Description: A vulnerability was found in GE Voluson S8. It has been rated as critical. This issue affects the Service Browser which itroduces hard-coded credentials. Attacking locally is a requirement. It is recommended to change the configuration settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.129833 - https://www.scip.ch/?news.20200701
CVE ID: CVE-2020-36548 State: PUBLISHED Published: 2022-06-17T13:10:18.000Z Last Updated: 2025-04-16T16:17:18.936Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: GE Products: Voluson S8 Problem Types: CWE-287 Description: A vulnerability classified as problematic has been found in GE Voluson S8. Affected is the file /uscgi-bin/users.cgi of the Service Browser. The manipulation leads to improper authentication and elevated access possibilities. It is possible to launch the attack on the local host. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.scip.ch/?news.20200701 - https://vuldb.com/?id.129834
CVE ID: CVE-2020-36549 State: PUBLISHED Published: 2022-06-17T13:10:20.000Z Last Updated: 2025-04-16T17:52:27.727Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: GE Products: Voluson S8 Problem Types: CWE-269 Description: A vulnerability classified as critical was found in GE Voluson S8. Affected is the underlying Windows XP operating system. Missing patches might introduce an excessive attack surface. Access to the local network is required for this attack to succeed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.scip.ch/?news.20200701 - https://vuldb.com/?id.129835
CVE ID: CVE-2020-36550 State: PUBLISHED Published: 2022-07-15T11:25:45 Last Updated: 2024-08-04T17:30:08.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Table Name field to /dashboard/table-list.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/49135 - https://packetstormsecurity.com/files/159786/Multi-Restaurant-Table-Reservation-System-1.0-Cross-Site-Scripting.html - https://www.sourcecodester.com/php/14568/multi-restaurant-table-reservation-system-php-full-source-code.html - https://github.com/yunaranyancat
ter.com/php/14568/multi-restaurant-table-reservation-system-php-full-source-code.html - https://github.com/yunaranyancat/poc-dump/tree/main/MultiRestaurantReservationSystem/1.0
CVE ID: CVE-2020-36551 State: PUBLISHED Published: 2022-07-15T11:25:40 Last Updated: 2024-08-04T17:30:08.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Item Name field to /dashboard/menu-list.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/49135 - https://packetstormsecurity.com/files/159786/Multi-Restaurant-Table-Reservation-System-1.0-Cross-Site-Scripting.html - https://www.sourcecodester.com/php/14568/multi-restaurant-table-reservation-system-php-full-source-code.html - https://github.com/yunaranyancat/p
r.com/php/14568/multi-restaurant-table-reservation-system-php-full-source-code.html - https://github.com/yunaranyancat/poc-dump/tree/main/MultiRestaurantReservationSystem/1.0
CVE ID: CVE-2020-36552 State: PUBLISHED Published: 2022-07-15T11:25:35 Last Updated: 2024-08-04T17:30:08.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Made field to /dashboard/menu-list.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/49135 - https://packetstormsecurity.com/files/159786/Multi-Restaurant-Table-Reservation-System-1.0-Cross-Site-Scripting.html - https://www.sourcecodester.com/php/14568/multi-restaurant-table-reservation-system-php-full-source-code.html - https://github.com/yunaranyancat/poc-du
/php/14568/multi-restaurant-table-reservation-system-php-full-source-code.html - https://github.com/yunaranyancat/poc-dump/tree/main/MultiRestaurantReservationSystem/1.0
CVE ID: CVE-2020-36553 State: PUBLISHED Published: 2022-07-15T11:25:30 Last Updated: 2024-08-04T17:30:08.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Area(food_type) field to /dashboard/menu-list.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/49135 - https://packetstormsecurity.com/files/159786/Multi-Restaurant-Table-Reservation-System-1.0-Cross-Site-Scripting.html - https://www.sourcecodester.com/php/14568/multi-restaurant-table-reservation-system-php-full-source-code.html - https://github.com/yunaranya
odester.com/php/14568/multi-restaurant-table-reservation-system-php-full-source-code.html - https://github.com/yunaranyancat/poc-dump/tree/main/MultiRestaurantReservationSystem/1.0
CVE ID: CVE-2020-36557 State: PUBLISHED Published: 2022-07-21T03:46:49 Last Updated: 2024-08-04T17:30:08.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ca4463bf8438b403596edd0ec961ca0d4fbe0220 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.2
CVE ID: CVE-2020-36558 State: PUBLISHED Published: 2022-07-21T03:46:33 Last Updated: 2024-08-04T17:30:08.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6cd1ed50efd88261298577cd92a14f2768eddeeb - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.7
CVE ID: CVE-2020-36559 State: PUBLISHED Published: 2022-12-27T21:13:19.169Z Last Updated: 2025-04-11T16:14:33.866Z Vendors: aahframe.work Products: aahframe.work Problem Types: CWE 23: Relative Path Traversal Description: Due to improper sanitization of user input, HTTPEngine.Handle allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/go-aah/aah/pull/267 - https://github.com/go-aah/aah/commit/881dc9f71d1f7a4e8a9a39df9c5c081d3a2da1ec - https://github.com/go-aah/aah/issues/266 - https://pkg.go.dev/vuln