Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-5643 State: PUBLISHED Published: 2020-11-06T02:06:26 Last Updated: 2024-08-04T08:39:25.512Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Improper Input Validation Description: Improper input validation vulnerability in Cybozu Garoon 5.0.0 to 5.0.2 allows a remote authenticated attacker to delete some data of the bulletin board via unspecified vector. Additional Analyst Notes: - CVE Program Container: References: - https://kb.cybozu.support/article/36725/ - https://jvn.jp/en/jp/JVN57942454/index.html
CVE ID: CVE-2020-5644 State: PUBLISHED Published: 2020-11-06T02:06:27 Last Updated: 2024-08-04T08:39:25.895Z Vendors: Mitsubishi Electric Corporation Products: GT14 Model of GOT 1000 series Problem Types: Buffer Overflow Description: Buffer overflow vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and earlier, GT1455HS-QTBDE CoreOS version "05.65.00.BD" and earlier, and GT1450HS-QMBDE CoreOS version "05.65.00.BD" and earlier) allows a remote unauthenticated attacker to stop the network functions of t
DE CoreOS version "05.65.00.BD" and earlier) allows a remote unauthenticated attacker to stop the network functions of the products or execute a malicious program via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-310-02 - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-014.pdf - https://jvn.jp/vu/JVNVU99562395/index.html
CVE ID: CVE-2020-5645 State: PUBLISHED Published: 2020-11-06T02:06:27 Last Updated: 2024-08-04T08:39:25.558Z Vendors: Mitsubishi Electric Corporation Products: GT14 Model of GOT 1000 series Problem Types: Session fixation Description: Session fixation vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and earlier, GT1455HS-QTBDE CoreOS version "05.65.00.BD" and earlier, and GT1450HS-QMBDE CoreOS version "05.65.00.BD" and earlier) allows a remote unauthenticated attacker to stop the network functions of
MBDE CoreOS version "05.65.00.BD" and earlier) allows a remote unauthenticated attacker to stop the network functions of the products via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-310-02 - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-014.pdf - https://jvn.jp/vu/JVNVU99562395/index.html
CVE ID: CVE-2020-5646 State: PUBLISHED Published: 2020-11-06T02:06:28 Last Updated: 2024-08-04T08:39:25.356Z Vendors: Mitsubishi Electric Corporation Products: GT14 Model of GOT 1000 series Problem Types: NULL Pointer Dereference Description: NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and earlier, GT1455HS-QTBDE CoreOS version "05.65.00.BD" and earlier, and GT1450HS-QMBDE CoreOS version "05.65.00.BD" and earlier) allows a remote unauthenticated attacker to stop the net
r, and GT1450HS-QMBDE CoreOS version "05.65.00.BD" and earlier) allows a remote unauthenticated attacker to stop the network functions of the products via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-310-02 - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-014.pdf - https://jvn.jp/vu/JVNVU99562395/index.html
CVE ID: CVE-2020-5647 State: PUBLISHED Published: 2020-11-06T02:06:29 Last Updated: 2024-08-04T08:39:25.780Z Vendors: Mitsubishi Electric Corporation Products: GT14 Model of GOT 1000 series Problem Types: Fails to restrict access Description: Improper access control vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version ’05.65.00.BD’ and earlier, GT1450-QMBDE CoreOS version ’05.65.00.BD’ and earlier, GT1450-QLBDE CoreOS version ’05.65.00.BD’ and earlier, GT1455HS-QTBDE CoreOS version ’05.65.00.BD’ and earlier, and GT1450HS-QMBDE CoreOS version ’05.65.00.BD’ and earlier) allows a remote unauthenticated attacker to stop the netwo
and GT1450HS-QMBDE CoreOS version ’05.65.00.BD’ and earlier) allows a remote unauthenticated attacker to stop the network functions of the products or execute a malicious program via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-310-02 - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-014.pdf - https://jvn.jp/vu/JVNVU99562395/index.html
CVE ID: CVE-2020-5648 State: PUBLISHED Published: 2020-11-06T02:06:30 Last Updated: 2024-08-04T08:39:25.376Z Vendors: Mitsubishi Electric Corporation Products: GT14 Model of GOT 1000 series Problem Types: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Description: Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and earlier, GT1455HS-QTBDE CoreOS version "05.65.00.BD" and earlier, an
lier, GT1450-QLBDE CoreOS version "05.65.00.BD" and earlier, GT1455HS-QTBDE CoreOS version "05.65.00.BD" and earlier, and GT1450HS-QMBDE CoreOS version "05.65.00.BD" and earlier) allows unauthenticated attackers on adjacent network to stop the network functions of the products via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-310-02 - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-014.pdf - https://jvn.jp/vu/JVNVU99562395/index.html
CVE ID: CVE-2020-5649 State: PUBLISHED Published: 2020-11-06T02:06:31 Last Updated: 2024-08-04T08:39:25.660Z Vendors: Mitsubishi Electric Corporation Products: GT14 Model of GOT 1000 series Problem Types: Resource Management Errors Description: Resource management error vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and earlier, GT1455HS-QTBDE CoreOS version "05.65.00.BD" and earlier, and GT1450HS-QMBDE CoreOS version "05.65.00.BD" and earlier) allows a remote unauthenticated attacker to stop the n
ier, and GT1450HS-QMBDE CoreOS version "05.65.00.BD" and earlier) allows a remote unauthenticated attacker to stop the network functions of the products via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-310-02 - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-014_en.pdf - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-014.pdf - https://jvn.jp/vu/JVNVU99562395/index.html
CVE ID: CVE-2020-5650 State: PUBLISHED Published: 2020-10-21T15:15:17 Last Updated: 2024-08-04T08:39:25.910Z Vendors: Tips and Tricks HQ Products: Simple Download Monitor Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/simple-download-monitor/ - https://jvn.jp/en/jp/JVN31425618/index.html
CVE ID: CVE-2020-5651 State: PUBLISHED Published: 2020-10-21T15:15:18 Last Updated: 2024-08-04T08:39:25.748Z Vendors: Tips and Tricks HQ Products: Simple Download Monitor Problem Types: SQL Injection Description: SQL injection vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to execute arbitrary SQL commands via a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/simple-download-monitor/ - https://jvn.jp/en/jp/JVN31425618/index.html
CVE ID: CVE-2020-5652 State: PUBLISHED Published: 2020-10-30T03:35:51 Last Updated: 2024-08-04T08:39:25.481Z Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-R, Q and L series Problem Types: Uncontrolled Resource Consumption Description: Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules (R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 (EN) CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU all versions, R 08/16/32/120 PSFCPU all versions, R 16/32/64 MTCPU all versions, Q03 UDECPU, Q 04/06/10/13/20/26/50/100 UDEHCPU serial number '22081'
SFCPU all versions, R 16/32/64 MTCPU all versions, Q03 UDECPU, Q 04/06/10/13/20/26/50/100 UDEHCPU serial number '22081' and earlier , Q 03/04/06/13/26 UDVCPU serial number '22031' and earlier, Q 04/06/13/26 UDPVCPU serial number '22031' and earlier, Q 172/173 DCPU all versions, Q 172/173 DSCPU all versions, Q 170 MCPU all versions, Q 170 MSCPU all versions, L 02/06/26 CPU (-P) and L 26 CPU - (P) BT all versions) allows a remote unauthenticated attacker to stop the Ethernet communication functions of the products via a specially crafted packet, which may lead to a denial of service (DoS) condition . Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectri
service (DoS) condition . Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-013.pdf - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-013_en.pdf - https://jvn.jp/vu/JVNVU96558207/index.html
CVE ID: CVE-2020-5653 State: PUBLISHED Published: 2020-10-30T03:35:52 Last Updated: 2024-08-04T08:39:25.391Z Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-R series Problem Types: Buffer Overflow Description: Buffer overflow vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before, RD81DL96 High Speed Data Logger Module First 2 digits of serial number are '08' or before, RD81MES96N MES Interface Module First 2 digits of serial number are '04' or before, and RD81OPC96 O
are '08' or before, RD81MES96N MES Interface Module First 2 digits of serial number are '04' or before, and RD81OPC96 OPC UA Server Module First 2 digits of serial number are '04' or before) allows a remote unauthenticated attacker to stop the network functions of the products or execute a malicious program via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-012.pdf - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-012_en.pdf - https://jvn.jp/vu/JVNVU92513419/index.html
CVE ID: CVE-2020-5654 State: PUBLISHED Published: 2020-10-30T03:35:52 Last Updated: 2024-08-04T08:39:25.640Z Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-R series Problem Types: Session fixation Description: Session fixation vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before, RD81DL96 High Speed Data Logger Module First 2 digits of serial number are '08' or before, RD81MES96N MES Interface Module First 2 digits of serial number are '04' or before, and RD81OPC96
er are '08' or before, RD81MES96N MES Interface Module First 2 digits of serial number are '04' or before, and RD81OPC96 OPC UA Server Module First 2 digits of serial number are '04' or before) allows a remote unauthenticated attacker to stop the network functions of the products via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-012.pdf - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-012_en.pdf - https://jvn.jp/vu/JVNVU92513419/index.html
CVE ID: CVE-2020-5655 State: PUBLISHED Published: 2020-10-30T03:35:53 Last Updated: 2024-08-04T08:39:25.490Z Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-R series Problem Types: NULL Pointer Dereference Description: NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before, RD81DL96 High Speed Data Logger Module First 2 digits of serial number are '08' or before, RD81MES96N MES Interface Module First 2 digits of serial number are '04' or befo
ts of serial number are '08' or before, RD81MES96N MES Interface Module First 2 digits of serial number are '04' or before, and RD81OPC96 OPC UA Server Module First 2 digits of serial number are '04' or before) allows a remote unauthenticated attacker to stop the network functions of the products via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-012.pdf - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-012_en.pdf - https://jvn.jp/vu/JVNVU92513419/index.html
CVE ID: CVE-2020-5656 State: PUBLISHED Published: 2020-10-30T03:35:53 Last Updated: 2024-08-04T08:39:25.477Z Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-R series Problem Types: Fails to restrict access Description: Improper access control vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before, RD81DL96 High Speed Data Logger Module First 2 digits of serial number are '08' or before, RD81MES96N MES Interface Module First 2 digits of serial number are '04' or before
of serial number are '08' or before, RD81MES96N MES Interface Module First 2 digits of serial number are '04' or before, and RD81OPC96 OPC UA Server Module First 2 digits of serial number are '04' or before) allows a remote unauthenticated attacker to stop the network functions of the products or execute a malicious program via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-012.pdf - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-012_en.pdf - https://jvn.jp/vu/JVNVU92513419/index.html
CVE ID: CVE-2020-5657 State: PUBLISHED Published: 2020-10-30T03:35:54 Last Updated: 2024-08-04T08:39:25.468Z Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-R series Problem Types: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Description: Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before, RD81DL96 High Speed Data Logger Module First 2 digits of
ller Module First 2 digits of serial number are '01' or before, RD81DL96 High Speed Data Logger Module First 2 digits of serial number are '08' or before, RD81MES96N MES Interface Module First 2 digits of serial number are '04' or before, and RD81OPC96 OPC UA Server Module First 2 digits of serial number are '04' or before) allows unauthenticated attackers on adjacent network to stop the network functions of the products via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-012.pdf - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-012_en.pdf - https://jvn.jp/vu/JVNV
df/2020-012.pdf - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-012_en.pdf - https://jvn.jp/vu/JVNVU92513419/index.html
CVE ID: CVE-2020-5658 State: PUBLISHED Published: 2020-10-30T03:35:54 Last Updated: 2024-08-04T08:39:25.392Z Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-R series Problem Types: Resource Management Errors Description: Resource Management Errors vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before, RD81DL96 High Speed Data Logger Module First 2 digits of serial number are '08' or before, RD81MES96N MES Interface Module First 2 digits of serial number are '04' or b
igits of serial number are '08' or before, RD81MES96N MES Interface Module First 2 digits of serial number are '04' or before, and RD81OPC96 OPC UA Server Module First 2 digits of serial number are '04' or before) allows a remote unauthenticated attacker to stop the network functions of the products via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-012.pdf - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-012_en.pdf - https://jvn.jp/vu/JVNVU92513419/index.html
CVE ID: CVE-2020-5659 State: PUBLISHED Published: 2020-11-16T04:15:29 Last Updated: 2024-08-04T08:39:25.348Z Vendors: Neuroinformatics Unit, Integrative Computational Brain Science Collaboration Division, RIKEN Center for Brain Science Products: XooNIps Problem Types: SQL Injection Description: SQL injection vulnerability in the XooNIps 3.49 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://xoonips.osdn.jp/modules/news/index.php?page=article&storyid=13 - https://jvn.jp/en/vu/JVNVU92053563/index.html
CVE ID: CVE-2020-5662 State: PUBLISHED Published: 2020-11-16T04:15:29 Last Updated: 2024-08-04T08:39:25.516Z Vendors: Neuroinformatics Unit, Integrative Computational Brain Science Collaboration Division, RIKEN Center for Brain Science Products: XooNIps Problem Types: Reflected cross-site scripting Description: Reflected cross-site scripting vulnerability in XooNIps 3.49 and earlier allows remote authenticated attackers to inject arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://xoonips.osdn.jp/modules/news/index.php?page=article&storyid=13 - https://jvn.jp/en/vu/JVNVU92053563/index.html
CVE ID: CVE-2020-5663 State: PUBLISHED Published: 2020-11-16T04:15:30 Last Updated: 2024-08-04T08:39:25.549Z Vendors: Neuroinformatics Unit, Integrative Computational Brain Science Collaboration Division, RIKEN Center for Brain Science Products: XooNIps Problem Types: Stored cross-site scripting Description: Stored cross-site scripting vulnerability in XooNIps 3.49 and earlier allows remote authenticated attackers to inject arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://xoonips.osdn.jp/modules/news/index.php?page=article&storyid=13 - https://jvn.jp/en/vu/JVNVU92053563/index.html
CVE ID: CVE-2020-5664 State: PUBLISHED Published: 2020-11-16T04:15:30 Last Updated: 2024-08-04T08:39:25.515Z Vendors: Neuroinformatics Unit, Integrative Computational Brain Science Collaboration Division, RIKEN Center for Brain Science Products: XooNIps Problem Types: Deserialization of Untrusted Data Description: Deserialization of untrusted data vulnerability in XooNIps 3.49 and earlier allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://xoonips.osdn.jp/modules/news/index.php?page=article&storyid=13 - https://jvn.jp/en/vu/JVNVU92053563/index.html
CVE ID: CVE-2020-5665 State: PUBLISHED Published: 2020-12-14T02:25:53 Last Updated: 2024-08-04T08:39:25.489Z Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-F series FX5U(C) CPU unit Problem Types: Denial-of-service (DoS) Description: Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5U(C) CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service (DoS) condition on program execution and communication by sending a specially crafted ARP packet. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-20-345-01 - https://www.mitsubishielectric.com/en/psirt/vulnerability
es: - https://us-cert.cisa.gov/ics/advisories/icsa-20-345-01 - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-018_en.pdf - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-018.pdf - https://jvn.jp/vu/JVNVU95638588/index.html
CVE ID: CVE-2020-5666 State: PUBLISHED Published: 2020-11-16T00:49:55 Last Updated: 2024-08-04T08:39:25.681Z Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-R Series CPU Modules Problem Types: Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series CPU Modules (R00/01/02CPU Firmware versions from '05' to '19' and R04/08/16/32/120(EN)CPU Firmware versions from '35' to '51') allows a remote attacker to cause an error in a CPU unit via a specially crafted HTTP packet, which may lead to a denial-of-service (DoS) condition in execution of the program and its communication. Description: Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series CPU Modules (R0
nd its communication. Description: Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series CPU Modules (R00/01/02CPU Firmware versions from '05' to '19' and R04/08/16/32/120(EN)CPU Firmware versions from '35' to '51') allows a remote attacker to cause an error in a CPU unit via a specially crafted HTTP packet, which may lead to a denial-of-service (DoS) condition in execution of the program and its communication. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-015_en.pdf - https://jvn.jp/jp/JVN44764844/index.html - https://jvn.jp/en/jp/JVN44764844/index.html - https://us-cert.cisa.gov/ics/adviso
s://jvn.jp/jp/JVN44764844/index.html - https://jvn.jp/en/jp/JVN44764844/index.html - https://us-cert.cisa.gov/ics/advisories/icsa-20-317-01
CVE ID: CVE-2020-5667 State: PUBLISHED Published: 2020-11-06T02:06:32 Last Updated: 2024-08-04T08:39:25.501Z Vendors: Studyplus Inc. Products: Studyplus App Problem Types: Use of Hard-coded Credentials Description: Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN00414047/index.html