Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
. - Data Center Automation Containerized. versions 2018.05 to 2019.11 - Identity Intelligence. versions 1.1.0 and 1.1.1. The vulnerability could be exploited to provide unauthorized access to the Container Deployment Foundation. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03645636 - https://softwaresupport.softwaregrp.com/doc/KM03645642 - https://softwaresupport.softwaregrp.com/doc/KM03645631 - https://softwaresupport.softwaregrp.com/doc/KM03645630 - https://softwaresupport.softwaregrp.com/doc/KM03645629 - https://softwaresupport.softwaregrp.com/doc/KM03645628 - https://support.microfocus.com/kb/doc.php?id=7024637
CVE ID: CVE-2020-11845 State: PUBLISHED Published: 2020-05-19T14:05:21 Last Updated: 2024-08-04T11:41:59.796Z Vendors: n/a Products: Service Manager. Problem Types: Cross Site Scripting. Description: Cross Site Scripting vulnerability in Micro Focus Service Manager product. Affecting versions 9.50, 9.51, 9.52, 9.60, 9.61, 9.62, 9.63. The vulnerability could be exploited to allow remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03640285
CVE ID: CVE-2020-11846 State: PUBLISHED Published: 2024-08-21T13:37:11.454Z Last Updated: 2024-08-21T14:40:15.436Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: OpenText Products: Privileged Access Manager Problem Types: CWE-269 Description: A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/privileged-account-manager-37/npam_3701_releasenotes/data/np
richment: References: - https://www.netiq.com/documentation/privileged-account-manager-37/npam_3701_releasenotes/data/npam_3701_releasenotes.html
CVE ID: CVE-2020-11847 State: PUBLISHED Published: 2024-08-21T13:38:44.228Z Last Updated: 2024-08-22T13:50:29.679Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: OpenText Products: Privileged Access Manager Problem Types: CWE-78 Description: SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/privileged-account-manager-37/npam_3701_releasenotes/data/npam_3701_releasenotes.html
CVE ID: CVE-2020-11848 State: PUBLISHED Published: 2020-08-19T14:25:31 Last Updated: 2024-08-04T11:42:00.623Z Vendors: n/a Products: ArcSight Management Center Problem Types: Denial of Service Description: Denial of service vulnerability on Micro Focus ArcSight Management Center. Affecting all versions prior to version 2.9.5. The vulnerability could cause the server to become unavailable, causing a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://community.microfocus.com/t5/ArcSight-Management-Center-ArcMC/ArcSight-Management-Center-2-9-5-Release-Notes/ta-p/2814648
CVE ID: CVE-2020-11849 State: PUBLISHED Published: 2020-07-08T13:30:36.737561Z Last Updated: 2024-09-17T01:30:32.313Z Vendors: Micro Fosus Products: Identity Manager Problem Types: Elevation of privilege and/or unauthorized access Description: Elevation of privilege and/or unauthorized access vulnerability in Micro Focus Identity Manager. Affecting versions prior to 4.7.3 and 4.8.1 hot fix 1. The vulnerability could allow information exposure that can result in an elevation of privilege or an unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - https://www.netiq.com/documentation/identity-manager-47/releasenotes_idm4741_apps/data/releasenotes_idm4741_apps.htm
: - https://www.netiq.com/documentation/identity-manager-47/releasenotes_idm4741_apps/data/releasenotes_idm4741_apps.html - https://www.netiq.com/documentation/identity-manager-48/releasenotes_idm4811_apps/data/releasenotes_idm4811_apps.html
CVE ID: CVE-2020-11850 State: PUBLISHED Published: 2024-08-21T12:52:22.890Z Last Updated: 2024-08-21T13:37:05.195Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: OpenText Products: Self Service Password Reset Problem Types: CWE-20 Description: Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Cross-Site Scripting (XSS). This issue affects Self Service Password Reset before 4.5.0.2 and 4.4.0.6 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/self-service-password-reset-45/sspr-4502-release-notes/data/sspr-4502-release-notes.html#b149gz5h
CVE ID: CVE-2020-11851 State: PUBLISHED Published: 2020-11-17T01:02:34 Last Updated: 2024-08-04T11:42:00.687Z Vendors: Micro Focus Products: ArcSight Logger Problem Types: Arbitrary code execution. Description: Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in the execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://community.microfocus.com/t5/Logger/Logger-Release-Notes-7-1-1/ta-p/2837600
CVE ID: CVE-2020-11852 State: PUBLISHED Published: 2020-08-07T15:53:57 Last Updated: 2024-08-04T11:42:00.810Z Vendors: n/a Products: Secure Messaging Gateway ( SMG). Problem Types: Inject system commands into the call to the DKIM system command. Description: DKIM key management page vulnerability on Micro Focus Secure Messaging Gateway (SMG). Affecting all SMG Appliance running releases prior to July 2020. The vulnerability could allow a logged in user with rights to generate DKIM key information to inject system commands into the call to the DKIM system command. Additional Analyst Notes: - CVE Program Container: References: - https://support.microfocus.com/kb/doc.php?id=7024775
CVE ID: CVE-2020-11853 State: PUBLISHED Published: 2020-10-22T20:37:51 Last Updated: 2024-08-04T11:42:00.549Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Micro Focus Products: Operation Bridge Manager , Application Performance Management , Data Center Automation, Operations Bridge (containerized), Universal CMDB , Hybrid Cloud Management, Service Management Automation Problem Types: Arbitrary code execution Description: Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Perfor
ersion: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Performance Management affecting versions : 9.51, 9.50 and 9.40 with uCMDB 10.33 CUP 3 3.) Data Center Automation affected version 2019.11 4.) Operations Bridge (containerized) affecting versions: 2019.11, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05, 2018.02, 2017.11 5.) Universal CMDB affecting version: 2020.05, 2019.11, 2019.05, 2019.02, 2018.11, 2018.08, 2018.05, 11, 10.33, 10.32, 10.31, 10.30 6.) Hybrid Cloud Management affecting version 2020.05 7.) Service Management Automation affecting version 2020.5 and 2020.02. The vulnerability could allow to execute arbitrary code. Add
Management Automation affecting version 2020.5 and 2020.02. The vulnerability could allow to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03747658 - https://softwaresupport.softwaregrp.com/doc/KM03747657 - https://softwaresupport.softwaregrp.com/doc/KM03747854 - https://softwaresupport.softwaregrp.com/doc/KM03749879 - https://softwaresupport.softwaregrp.com/doc/KM03747949 - https://softwaresupport.softwaregrp.com/doc/KM03747948 - https://softwaresupport.softwaregrp.com/doc/KM03747950 - http://packetstormsecurity.com/files/161182/Micro-Focus-UCMDB-Remote-Code-Execution.html - http://packetstormsecurity.c
http://packetstormsecurity.com/files/161182/Micro-Focus-UCMDB-Remote-Code-Execution.html - http://packetstormsecurity.com/files/161366/Micro-Focus-Operations-Bridge-Manager-Remote-Code-Execution.html
CVE ID: CVE-2020-11854 State: PUBLISHED Published: 2020-10-27T16:29:44 Last Updated: 2024-08-04T11:42:00.149Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Micro Focus Products: Application Performance Management , Operation Bridge (containerized), Operation Bridge Manager Problem Types: Arbitrary code execution Description: Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge (containerized) and Application Performance Management. The vulneravility affects: 1.) Operation Bridge M
eration Bridge (containerized) and Application Performance Management. The vulneravility affects: 1.) Operation Bridge Manager versions 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions. 2.) Operations Bridge (containerized) 2020.05, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05. 2018.02 and 2017.11. 3.) Application Performance Management versions 9,51, 9.50 and 9.40 with uCMDB 10.33 CUP 3. The vulnerability could allow Arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03747658 - https://softwaresupport.softwaregrp.com/doc/KM03747657 - https:
https://softwaresupport.softwaregrp.com/doc/KM03747658 - https://softwaresupport.softwaregrp.com/doc/KM03747657 - https://softwaresupport.softwaregrp.com/doc/KM03747854 - https://www.zerodayinitiative.com/advisories/ZDI-20-1287/ - http://packetstormsecurity.com/files/161182/Micro-Focus-UCMDB-Remote-Code-Execution.html
CVE ID: CVE-2020-11855 State: PUBLISHED Published: 2020-09-22T13:54:11 Last Updated: 2024-08-04T11:41:59.896Z Vendors: n/a Products: Operation Bridge Reporter. Problem Types: Authorization Bypass. Description: An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow local attackers on the OBR host to execute code with escalated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03710590 - https://www.zerodayinitiative.com/advisories/ZDI-20-1217/
CVE ID: CVE-2020-11856 State: PUBLISHED Published: 2020-09-22T14:03:47 Last Updated: 2024-08-04T11:42:00.840Z Vendors: n/a Products: Operation Bridge Reporter. Problem Types: Arbitrary code execution. Description: Arbitrary code execution vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow remote attackers to execute arbitrary code on affected installations of OBR. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03710590 - https://www.zerodayinitiative.com/advisories/ZDI-20-1216/
CVE ID: CVE-2020-11857 State: PUBLISHED Published: 2020-09-22T14:00:55 Last Updated: 2024-08-04T11:41:59.937Z Vendors: n/a Products: Operation Bridge Reporter. Problem Types: Authorization Bypass. Description: An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow remote attackers to access the OBR host as a non-admin user Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03710590 - https://www.zerodayinitiative.com/advisories/ZDI-20-1215/ - http://packetstormsecurity.com/files/162407/Micro-Focus-Operations-Bridge-Reporter-shrboadmin-Default
ies/ZDI-20-1215/ - http://packetstormsecurity.com/files/162407/Micro-Focus-Operations-Bridge-Reporter-shrboadmin-Default-Password.html
CVE ID: CVE-2020-11858 State: PUBLISHED Published: 2020-10-27T16:45:12 Last Updated: 2024-08-04T11:42:00.534Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Micro Focus Products: Operation Bridge (containerized), Operation Bridge Manager Problem Types: Code execution with escalated privileges Description: Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge (containerized). The vulneravility affects: 1.) Operation Bridge Manager versions: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions. 2.) Operations Bridge (containeriz
11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions. 2.) Operations Bridge (containerized) versions: 2020.05, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05. 2018.02 and 2017.11. The vulnerability could allow local attackers to execute code with escalated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03747658 - https://softwaresupport.softwaregrp.com/doc/KM03747854 - https://www.zerodayinitiative.com/advisories/ZDI-20-1326/ - http://packetstormsecurity.com/files/161411/Micro-Focus-Operations-Bridge-Manager-Local-Privilege-Escalation.html
CVE ID: CVE-2020-11859 State: PUBLISHED Published: 2024-11-06T14:10:59.925Z Last Updated: 2024-11-06T15:17:36.484Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: OpenText Products: iManager Problem Types: CWE-79 Description: Improper Input Validation vulnerability in OpenText iManager allows Cross-Site Scripting (XSS). This issue affects iManager before 3.2.3 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/imanager-32/imanager323_releasenotes/data/imanager323_releasenotes.html
CVE ID: CVE-2020-11860 State: PUBLISHED Published: 2020-11-17T00:54:23 Last Updated: 2024-08-04T11:42:00.534Z Vendors: Micro Focus Products: ArcSight Logger Problem Types: Cross-Site Scripting. Description: Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting (XSS) Additional Analyst Notes: - CVE Program Container: References: - https://community.microfocus.com/t5/Logger/Logger-Release-Notes-7-1-1/ta-p/2837600
CVE ID: CVE-2020-11861 State: PUBLISHED Published: 2020-09-18T20:07:34 Last Updated: 2024-08-04T11:42:00.241Z Vendors: n/a Products: Operations Agent Problem Types: Unauthorized escalation of local privileges Description: Unauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent, affecting all versions prior to versions 12.11. The vulnerability could be exploited to escalate the local privileges and gain root access on the system. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03709900
CVE ID: CVE-2020-11862 State: PUBLISHED Published: 2024-03-13T21:32:24.413Z Last Updated: 2024-08-26T16:07:55.452Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: OpenText Products: NetIQ Privileged Account Manager Problem Types: CWE-770 Description: Allocation of Resources Without Limits or Throttling vulnerability in OpenText NetIQ Privileged Account Manager on Linux, Windows, 64 bit allows Flooding.This issue affects NetIQ Privileged Account Manager: before 3.7.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.netiq.com/documentation/privileged-account-manager-37/npam_3702_releasenotes/data/npam_3702_
: References: - https://www.netiq.com/documentation/privileged-account-manager-37/npam_3702_releasenotes/data/npam_3702_releasenotes.html
CVE ID: CVE-2020-11863 State: PUBLISHED Published: 2020-05-11T15:08:44 Last Updated: 2024-08-04T11:42:00.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/libemf/mailman/libemf-devel/ - https://sourceforge.net/p/libemf/code/commit_browser - https://sourceforge.net/p/libemf/news/2020/05/re-release-of-libemf-1012/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DFYDSKWFM2R5NKZOO2IN6X7SM3T2PWL/ - http://lists.opensuse.org/opensuse-security-announc
0lists.fedoraproject.org/message/2DFYDSKWFM2R5NKZOO2IN6X7SM3T2PWL/ - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00036.html
CVE ID: CVE-2020-11864 State: PUBLISHED Published: 2020-05-11T15:09:50 Last Updated: 2024-08-04T11:42:00.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 2 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/libemf/mailman/libemf-devel/ - https://sourceforge.net/p/libemf/code/commit_browser - https://sourceforge.net/p/libemf/news/2020/05/re-release-of-libemf-1012/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DFYDSKWFM2R5NKZOO2IN6X7SM3T2PWL/ - http://lists.opensuse.org/opensuse-security-announc
CVE ID: CVE-2020-11865 State: PUBLISHED Published: 2020-05-11T15:10:45 Last Updated: 2024-08-04T11:42:00.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows out-of-bounds memory access. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/libemf/mailman/libemf-devel/ - https://sourceforge.net/p/libemf/code/commit_browser - https://sourceforge.net/p/libemf/news/2020/05/re-release-of-libemf-1012/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DFYDSKWFM2R5NKZOO2IN6X7SM3T2PWL/ - http://lists.opensuse.org/opensuse-security-announce/202
s.fedoraproject.org/message/2DFYDSKWFM2R5NKZOO2IN6X7SM3T2PWL/ - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00036.html
CVE ID: CVE-2020-11866 State: PUBLISHED Published: 2020-05-11T15:12:03 Last Updated: 2024-08-04T11:42:00.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/libemf/mailman/libemf-devel/ - https://sourceforge.net/p/libemf/code/commit_browser - https://sourceforge.net/p/libemf/news/2020/05/re-release-of-libemf-1012/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DFYDSKWFM2R5NKZOO2IN6X7SM3T2PWL/ - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg000
ject.org/message/2DFYDSKWFM2R5NKZOO2IN6X7SM3T2PWL/ - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00036.html
CVE ID: CVE-2020-11867 State: PUBLISHED Published: 2020-11-30T21:21:28 Last Updated: 2024-08-04T11:42:00.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/audacity/audacity/releases - https://salvatoresecurity.com/the-many-perils-of-tmp/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKK3S2QBXBHOFOQ
-tmp/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKK3S2QBXBHOFOQMXMGY5QAKVUWUX2YY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MG5PSF4CJ7UPMJHWX553EG3P2XN3PAYI/
CVE ID: CVE-2020-11868 State: PUBLISHED Published: 2020-04-17T03:31:05.000Z Last Updated: 2025-05-05T17:08:18.997Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissions are rescheduled even when a packet lacks a valid origin timestamp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.debian.org/debian-lts-announce/2020/05/msg00004.html - http://lists.opensuse.or
ulnrichment: References: - https://lists.debian.org/debian-lts-announce/2020/05/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00044.html - https://security.gentoo.org/glsa/202007-12 - https://www.oracle.com//security-alerts/cpujul2021.html - http://support.ntp.org/bin/view/Main/NtpBug3592 - https://bugzilla.redhat.com/show_bug.cgi?id=1716665 - https://security.netapp.com/advisory/ntap-20200424-0002/
CVE ID: CVE-2020-11869 State: PUBLISHED Published: 2020-04-27T19:00:34 Last Updated: 2024-08-04T11:42:00.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs in the ati_2d_blt() routine in hw/display/ati-2d.c while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could abuse this flaw to crash the QEMU process, resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2020/04/24/2 - https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ac2071c3791b67
http://www.openwall.com/lists/oss-security/2020/04/24/2 - https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ac2071c3791b67fc7af78b8ceb320c01ca1b5df7 - https://usn.ubuntu.com/4372-1/
CVE ID: CVE-2020-11872 State: PUBLISHED Published: 2020-04-17T04:24:28 Last Updated: 2024-08-04T11:42:00.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cloud Functions subsystem in OpenTrace 1.0 might allow fabrication attacks by making billions of TempID requests before an AES-256-GCM key rotation occurs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/opentrace-community/opentrace-cloud-functions/issues/7
CVE ID: CVE-2020-11873 State: PUBLISHED Published: 2020-04-17T13:23:54 Last Updated: 2024-08-04T11:42:00.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A stack-based buffer overflow in the logging tool could allow an attacker to gain privileges. The LG ID is LVE-SMP-200005 (April 2020). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/
CVE ID: CVE-2020-11874 State: PUBLISHED Published: 2020-04-17T13:24:59 Last Updated: 2024-08-04T11:42:00.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software. Attackers can bypass Factory Reset Protection (FRP). The LG ID is LVE-SMP-200004 (March 2020). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/