Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-5539 State: PUBLISHED Published: 2020-03-02T07:00:24 Last Updated: 2024-08-04T08:30:24.499Z Vendors: GRANDIT CORPORATION Products: GRANDIT Problem Types: Fails to manage sessions Description: GRANDIT Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 do not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and then alter or disclose the information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN73472345/index.html - https://www.grandit.jp/etc/20200228_letter.pdf
CVE ID: CVE-2020-5540 State: PUBLISHED Published: 2020-08-25T02:20:21 Last Updated: 2024-08-04T08:30:24.582Z Vendors: CyberSolutions Inc. Products: CyberMail Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in CyberMail Ver.6.x and Ver.7.x allows remote attackers to inject arbitrary script or HTML via a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://sup.cybersolutions.co.jp/otrs/customer.pl?Action=CustomerFAQZoom%3BItemID=985 - https://jvn.jp/en/jp/JVN46258789/ - https://gist.github.com/tonykuo76/d2480727faeb768a97800db3058dceed - https://www.chtsecurity.com/news/fff688e5-8ba2-4da2-be65-732fc6c9ce9d
CVE ID: CVE-2020-5541 State: PUBLISHED Published: 2020-08-25T02:20:21 Last Updated: 2024-08-04T08:30:24.512Z Vendors: CyberSolutions Inc. Products: CyberMail Problem Types: Open Redirect Description: Open redirect vulnerability in CyberMail Ver.6.x and Ver.7.x allows remote attackers to redirect users to arbitrary sites and conduct phishing attacks via a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://sup.cybersolutions.co.jp/otrs/customer.pl?Action=CustomerFAQZoom%3BItemID=985 - https://jvn.jp/en/jp/JVN46258789/ - https://www.chtsecurity.com/news/cf5742f8-a676-43c2-a8b9-bff17f452823 - https://gist.github.com/tonykuo76/ffdaa7bfabf2205dc5bac010e
.chtsecurity.com/news/cf5742f8-a676-43c2-a8b9-bff17f452823 - https://gist.github.com/tonykuo76/ffdaa7bfabf2205dc5bac010eee38509
CVE ID: CVE-2020-5542 State: PUBLISHED Published: 2020-03-16T01:25:47 Last Updated: 2024-08-04T08:30:24.579Z Vendors: Mitsubishi Electric Corporation Products: Mitsubishi Electric MELQIC IU1 series Problem Types: Improper Restriction of Operations within the Bounds of a Memory Buffer Description: Buffer error vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to stop the network functions or execute malware via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/vu/JVNVU92370624/index.html - https://www.mitsubishielectri
es: - CVE Program Container: References: - https://jvn.jp/en/vu/JVNVU92370624/index.html - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2019-004.pdf
CVE ID: CVE-2020-5543 State: PUBLISHED Published: 2020-03-16T01:25:48 Last Updated: 2024-08-04T08:30:24.557Z Vendors: Mitsubishi Electric Corporation Products: Mitsubishi Electric MELQIC IU1 series Problem Types: Fails to manage sessions Description: TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier does not properly manage sessions, which allows remote attackers to stop the network functions or execute malware via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/vu/JVNVU92370624/index.html - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2019
ces: - https://jvn.jp/en/vu/JVNVU92370624/index.html - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2019-004.pdf
CVE ID: CVE-2020-5544 State: PUBLISHED Published: 2020-03-16T01:25:48 Last Updated: 2024-08-04T08:30:24.508Z Vendors: Mitsubishi Electric Corporation Products: Mitsubishi Electric MELQIC IU1 series Problem Types: NULL Pointer Dereference Description: Null Pointer Dereference vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to stop the network functions or execute malware via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/vu/JVNVU92370624/index.html - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/201
nces: - https://jvn.jp/en/vu/JVNVU92370624/index.html - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2019-004.pdf
CVE ID: CVE-2020-5545 State: PUBLISHED Published: 2020-03-16T01:25:49 Last Updated: 2024-08-04T08:30:24.504Z Vendors: Mitsubishi Electric Corporation Products: Mitsubishi Electric MELQIC IU1 series Problem Types: Fails to restrict access Description: TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to bypass access restriction and to stop the network functions or execute malware via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/vu/JVNVU92370624/index.html - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2019-004.pdf
CVE ID: CVE-2020-5546 State: PUBLISHED Published: 2020-03-16T01:25:49 Last Updated: 2024-08-04T08:30:24.586Z Vendors: Mitsubishi Electric Corporation Products: Mitsubishi Electric MELQIC IU1 series Problem Types: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Description: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows an attacker on the same network segment to stop the network functions or execute malware via a specially crafted packet. Additional Analyst Notes: - CVE Progra
to stop the network functions or execute malware via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/vu/JVNVU92370624/index.html - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2019-004.pdf
CVE ID: CVE-2020-5547 State: PUBLISHED Published: 2020-03-16T01:25:50 Last Updated: 2024-08-04T08:30:24.559Z Vendors: Mitsubishi Electric Corporation Products: Mitsubishi Electric MELQIC IU1 series Problem Types: Resource Management Errors Description: Resource Management Errors vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to stop the network functions or execute malware via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/vu/JVNVU92370624/index.html - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf
ferences: - https://jvn.jp/en/vu/JVNVU92370624/index.html - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2019-004.pdf
CVE ID: CVE-2020-5548 State: PUBLISHED Published: 2020-04-01T11:15:15 Last Updated: 2024-08-04T08:30:24.549Z Vendors: Yamaha Corporation Products: Yamaha network devices Problem Types: Denial-of-service (DoS) Description: Yamaha LTE VoIP Router(NVR700W firmware Rev.15.00.15 and earlier), Yamaha Gigabit VoIP Router(NVR510 firmware Rev.15.01.14 and earlier), Yamaha Gigabit VPN Router(RTX810 firmware Rev.11.01.33 and earlier, RTX830 firmware Rev.15.02.09 and earlier, RTX1200 firmware Rev.10.01.76 and earlier, RTX1210 firmware Rev.14.01.33 and earlier, RTX3500 firmware Rev.14.00.26 and earlier, and RTX5000 firmware Rev.14.00.26 and earlier), Yamaha Broadband VoIP Router(NVR500 firmware Rev.11.00
0.26 and earlier, and RTX5000 firmware Rev.14.00.26 and earlier), Yamaha Broadband VoIP Router(NVR500 firmware Rev.11.00.38 and earlier), and Yamaha Firewall(FWX120 firmware Rev.11.03.27 and earlier) allow remote attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN38732359.html - https://jvn.jp/en/jp/JVN38732359/index.html
CVE ID: CVE-2020-5549 State: PUBLISHED Published: 2020-04-08T07:50:23 Last Updated: 2024-08-04T08:30:24.599Z Vendors: Plat'Home Co.,Ltd. Products: EasyBlocks IPv6 Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in EasyBlocks IPv6 Ver. 2.0.1 and earlier and Enterprise Ver. 2.0.1 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.plathome.co.jp/software/ipv6-v2-0-2/ - https://www.plathome.co.jp/software/ipv6-enterprise-v2-0-2/ - https://jvn.jp/en/jp/JVN89224521/index.html
CVE ID: CVE-2020-5550 State: PUBLISHED Published: 2020-04-08T07:50:23 Last Updated: 2024-08-04T08:30:24.604Z Vendors: Plat'Home Co.,Ltd. Products: EasyBlocks IPv6 Problem Types: Session fixation Description: Session fixation vulnerability in EasyBlocks IPv6 Ver. 2.0.1 and earlier, and Enterprise Ver. 2.0.1 and earlier allows remote attackers to impersonate a registered user and log in the management console, that may result in information alteration/disclosure via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.plathome.co.jp/software/ipv6-v2-0-2/ - https://www.plathome.co.jp/software/ipv6-enterprise-v2-0-2/ - https://jvn.jp/en/jp/JVN89224521
p/software/ipv6-v2-0-2/ - https://www.plathome.co.jp/software/ipv6-enterprise-v2-0-2/ - https://jvn.jp/en/jp/JVN89224521/index.html
CVE ID: CVE-2020-5551 State: PUBLISHED Published: 2020-03-30T04:05:13 Last Updated: 2024-08-04T08:30:24.551Z Vendors: TOYOTA MOTOR CORPORATION Products: DCU (Display Control Unit) Problem Types: Denial-of-service (DoS) Description: Toyota 2017 Model Year DCU (Display Control Unit) allows an unauthenticated attacker within Bluetooth range to cause a denial of service attack and/or execute an arbitrary command. The affected DCUs are installed in Lexus (LC, LS, NX, RC, RC F), TOYOTA CAMRY, and TOYOTA SIENNA manufactured in the regions other than Japan from Oct. 2016 to Oct. 2019. An attacker with certain knowledge on the target vehicle control system may be able to send some diagnostic commands
19. An attacker with certain knowledge on the target vehicle control system may be able to send some diagnostic commands to ECUs with some limited availability impacts; the vendor states critical vehicle controls such as driving, turning, and stopping are not affected. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/vu/JVNVU99396686/index.html - https://global.toyota/en/newsroom/corporate/32120629.html
CVE ID: CVE-2020-5552 State: PUBLISHED Published: 2020-03-25T01:25:27 Last Updated: 2024-08-04T08:30:24.508Z Vendors: keitai-site.net Products: mailform Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in mailform version 1.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN85942151/index.html
CVE ID: CVE-2020-5553 State: PUBLISHED Published: 2020-03-25T01:25:27 Last Updated: 2024-08-04T08:30:24.687Z Vendors: keitai-site.net Products: mailform Problem Types: Remote code execution Description: mailform version 1.04 allows remote attackers to execute arbitrary PHP code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN77634892/index.html
CVE ID: CVE-2020-5554 State: PUBLISHED Published: 2020-03-25T01:25:28 Last Updated: 2024-08-04T08:30:24.588Z Vendors: EKAKIN Products: Shihonkanri Plus GOOUT Problem Types: Directory traversal Description: Directory traversal vulnerability in Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN32415420/index.html
CVE ID: CVE-2020-5555 State: PUBLISHED Published: 2020-03-25T01:25:28 Last Updated: 2024-08-04T08:30:24.617Z Vendors: EKAKIN Products: Shihonkanri Plus GOOUT Problem Types: Improper Input Validation Description: Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write data of the files placed in the same directory where it is placed via unspecified vector due to the improper input validation issue. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN32415420/index.html
CVE ID: CVE-2020-5556 State: PUBLISHED Published: 2020-03-25T01:25:29 Last Updated: 2024-08-04T08:30:24.605Z Vendors: EKAKIN Products: Shihonkanri Plus GOOUT Problem Types: OS Command Injection Description: Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN63834780/index.html
CVE ID: CVE-2020-5557 State: PUBLISHED Published: 2020-03-25T01:25:29 Last Updated: 2024-08-04T08:30:24.544Z Vendors: CutePHP.com Products: CuteNews Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN29095127/index.html
CVE ID: CVE-2020-5558 State: PUBLISHED Published: 2020-03-25T01:25:29 Last Updated: 2024-08-04T08:30:24.606Z Vendors: CutePHP.com Products: CuteNews Problem Types: Remote code execution Description: CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN58176087/index.html
CVE ID: CVE-2020-5559 State: PUBLISHED Published: 2020-03-25T01:25:30 Last Updated: 2024-08-04T08:30:24.509Z Vendors: WonderLink Products: WL-Enq Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WL-Enq 1.11 and 1.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN88033799/index.html
CVE ID: CVE-2020-5560 State: PUBLISHED Published: 2020-03-25T01:25:30 Last Updated: 2024-08-04T08:30:24.622Z Vendors: WonderLink Products: WL-Enq Problem Types: OS Command Injection Description: WL-Enq 1.11 and 1.12 allows remote attackers to execute arbitrary OS commands with the administrative privilege via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN27951364/index.html
CVE ID: CVE-2020-5561 State: PUBLISHED Published: 2020-03-25T01:25:31 Last Updated: 2024-08-04T08:30:24.583Z Vendors: Mash room - Free CGI - Products: Keijiban Tsumiki Problem Types: OS Command Injection Description: Keijiban Tsumiki v1.15 allows remote attackers to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN88277644/index.html
CVE ID: CVE-2020-5562 State: PUBLISHED Published: 2020-04-28T03:15:28 Last Updated: 2024-08-04T08:30:24.585Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Server-Side Request Forgery (SSRF) Description: Server-side request forgery (SSRF) vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows a remote attacker with an administrative privilege to issue arbitrary HTTP requests to other web servers via V-CUBE Meeting function. Additional Analyst Notes: - CVE Program Container: References: - https://kb.cybozu.support/article/36304 - https://jvn.jp/en/jp/JVN58849431/index.html
CVE ID: CVE-2020-5563 State: PUBLISHED Published: 2020-04-28T03:15:28 Last Updated: 2024-08-04T08:30:24.587Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Improper Authentication Description: Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in the affected product via the API. Additional Analyst Notes: - CVE Program Container: References: - https://kb.cybozu.support/article/36118/ - https://jvn.jp/en/jp/JVN35649781/index.html
CVE ID: CVE-2020-5564 State: PUBLISHED Published: 2020-04-28T03:15:29 Last Updated: 2024-08-04T08:30:24.553Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the application 'E-mail'. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN35649781/index.html - https://kb.cybozu.support/article/36116/
CVE ID: CVE-2020-5565 State: PUBLISHED Published: 2020-04-28T03:15:29 Last Updated: 2024-08-04T08:30:24.581Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Improper Input Validation Description: Improper input validation vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows a remote authenticated attacker to alter the application's data via the applications 'Workflow' and 'MultiReport'. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN35649781/index.html - https://kb.cybozu.support/article/36119/
CVE ID: CVE-2020-5566 State: PUBLISHED Published: 2020-04-28T03:15:30 Last Updated: 2024-08-04T08:30:24.608Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Improper Authorization Description: Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the application's data via the applications 'E-mail' and 'Messages'. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN35649781/index.html - https://kb.cybozu.support/article/36113/
CVE ID: CVE-2020-5567 State: PUBLISHED Published: 2020-04-28T03:15:30 Last Updated: 2024-08-04T08:30:24.657Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Improper Authentication Description: Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in Application Menu. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN35649781/index.html - https://kb.cybozu.support/article/36114/
CVE ID: CVE-2020-5568 State: PUBLISHED Published: 2020-04-28T03:15:31 Last Updated: 2024-08-04T08:30:24.562Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 5.0.0 allows remote attackers to inject arbitrary web script or HTML via the applications 'Messages' and 'Bulletin Board'. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN35649781/index.html - https://kb.cybozu.support/article/36302/
CVE ID: CVE-2020-5569 State: PUBLISHED Published: 2020-04-20T07:25:14 Last Updated: 2024-08-04T08:30:24.635Z Vendors: Toshiba Electronic Devices & Storage Corporation Products: HDD Password tool (for Windows) Problem Types: Unquoted Search Path or Element Description: An unquoted search path vulnerability exists in HDD Password tool (for Windows) version 1.20.6620 and earlier which is stored in CANVIO PREMIUM 3TB(HD-MB30TY, HD-MA30TY, HD-MB30TS, HD-MA30TS), CANVIO PREMIUM 2TB(HD-MB20TY, HD-MA20TY, HD-MB20TS, HD-MA20TS), CANVIO PREMIUM 1TB(HD-MB10TY, HD-MA10TY, HD-MB10TS, HD-MA10TS), CANVIO SLIM 1TB(HD-SB10TK, HD-SB10TS), and CANVIO SLIM 500GB(HD-SB50GK, HD-SA50GK, HD-SB50GS, HD-SA50GS), and
-MA10TS), CANVIO SLIM 1TB(HD-SB10TK, HD-SB10TS), and CANVIO SLIM 500GB(HD-SB50GK, HD-SA50GK, HD-SB50GS, HD-SA50GS), and which was downloaded before 2020 May 10. Since it registers Windows services with unquoted file paths, when a registered path contains spaces, and a malicious executable is placed on a certain path, it may be executed with the privilege of the Windows service. Additional Analyst Notes: - CVE Program Container: References: - https://www.canvio.jp/news/20200420.htm - https://jvn.jp/en/jp/JVN13467854/index.html
CVE ID: CVE-2020-5570 State: PUBLISHED Published: 2020-04-28T05:50:17 Last Updated: 2024-08-04T08:30:24.543Z Vendors: NI Consulting CO.,Ltd. Products: Sales Force Assistant Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Sales Force Assistant version 11.2.48 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ni-consul.jp/support/info/2020/20200424_ge.html - https://jvn.jp/en/jp/JVN47668991/index.html - http://jvn.jp/en/jp/JVN47668991/index.html
CVE ID: CVE-2020-5571 State: PUBLISHED Published: 2020-04-23T07:40:15 Last Updated: 2024-08-04T08:30:24.624Z Vendors: Sharp Corporation Products: SHARP AQUOS series Problem Types: Information Disclosure Description: SHARP AQUOS series (AQUOS SH-M02 build number 01.00.05 and earlier, AQUOS SH-RM02 build number 01.00.04 and earlier, AQUOS mini SH-M03 build number 01.00.04 and earlier, AQUOS Keitai SH-N01 build number 01.00.01 and earlier, AQUOS L2 (UQ mobile/J:COM) build number 01.00.05 and earlier, AQUOS sense lite SH-M05 build number 03.00.04 and earlier, AQUOS sense (UQ mobile) build number 03.00.03 and earlier, AQUOS compact SH-M06 build number 02.00.02 and earlier, AQUOS sense plus SH-M07
bile) build number 03.00.03 and earlier, AQUOS compact SH-M06 build number 02.00.02 and earlier, AQUOS sense plus SH-M07 build number 02.00.02 and earlier, AQUOS sense2 SH-M08 build number 02.00.05 and earlier, and AQUOS sense2 (UQ mobile) build number 02.00.06 and earlier) allow an attacker to obtain the sensitive information of the device via malicious applications installed on the device. Additional Analyst Notes: - CVE Program Container: References: - https://k-tai.sharp.co.jp/support/info/info036.html - https://jvn.jp/en/jp/JVN93064451/index.html
CVE ID: CVE-2020-5572 State: PUBLISHED Published: 2020-05-29T08:40:17 Last Updated: 2024-08-04T08:30:24.517Z Vendors: Cybozu, Inc. Products: Android App 'Mailwise for Android' Problem Types: Information Disclosure Description: Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.cybozu.support/article/36411/ - https://jvn.jp/en/jp/JVN78745667/index.html
CVE ID: CVE-2020-5573 State: PUBLISHED Published: 2020-05-29T08:40:17 Last Updated: 2024-08-04T08:30:24.533Z Vendors: Cybozu, Inc. Products: Android App 'kintone mobile for Android' Problem Types: Information Disclosure Description: Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN78745667/index.html - https://kb.cybozu.support/article/36211/
CVE ID: CVE-2020-5574 State: PUBLISHED Published: 2020-05-14T01:00:21 Last Updated: 2024-08-04T08:30:24.552Z Vendors: Six Apart Ltd. Products: Movable Type Problem Types: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Description: HTML attribute value injection vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type for AWS 7 r.4606 (7.2.1) and earlier (Movable Type for AWS 7), Movable Type 6.5.3 and earlier (Movable Type 6.5), Movable Type Advanced 6.5.3 and earlier (Movable Type Advanced 6.5), Movable Type 6