Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-8238 State: PUBLISHED Published: 2020-09-29T13:41:05 Last Updated: 2024-08-04T09:56:27.951Z Vendors: Pulse Secure Products: Pulse Connect Secure/ Pulse Policy Secure Problem Types: CWE-79 Description: A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9.1R8.2 could allow attackers to conduct Cross-Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44588 - https://www.gosecure.net/blog/2020/11/13/forget-your-perimeter-part-2-four-vulnerabilities-in-pulse-connect-secure/
CVE ID: CVE-2020-8239 State: PUBLISHED Published: 2020-10-28T12:46:48 Last Updated: 2024-08-04T09:56:27.966Z Vendors: n/a Products: Pulse Secure Desktop Cient Problem Types: Privilege Escalation (CAPEC-233) Description: A vulnerability in the Pulse Secure Desktop Client < 9.1R9 is vulnerable to the client registry privilege escalation attack. This fix also requires Server Side Upgrade due to Standalone Host Checker Client (Windows) and Windows PDC. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
CVE ID: CVE-2020-8240 State: PUBLISHED Published: 2020-10-28T12:41:44 Last Updated: 2024-08-04T09:56:27.681Z Vendors: n/a Products: Pulse Secure Desktop Client Problem Types: Privilege Escalation (CAPEC-233) Description: A vulnerability in the Pulse Secure Desktop Client < 9.1R9 allows a restricted user on an endpoint machine can use system-level privileges if the Embedded Browser is configured with Credential Provider. This vulnerability only affects Windows PDC if the Embedded Browser is configured with the Credential Provider. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
CVE ID: CVE-2020-8241 State: PUBLISHED Published: 2020-10-28T12:47:07 Last Updated: 2024-08-04T09:56:27.925Z Vendors: n/a Products: Pulse Secure Dektop Client Problem Types: Privilege Escalation (CAPEC-233) Description: A vulnerability in the Pulse Secure Desktop Client < 9.1R9 could allow the attacker to perform a MITM Attack if end users are convinced to connect to a malicious server. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
CVE ID: CVE-2020-8242 State: PUBLISHED Published: 2022-02-18T17:50:57 Last Updated: 2024-08-04T09:56:27.642Z Vendors: n/a Products: ExpressionEngine Problem Types: CWE-89 Description: Unsanitized user input in ExpressionEngine <= 5.4.0 control panel member creation leads to an SQL injection. The user needs member creation/admin control panel access to execute the attack. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/968240
CVE ID: CVE-2020-8243 State: PUBLISHED Published: 2020-09-29T13:44:31.000Z Last Updated: 2025-10-21T23:35:36.130Z Vendors: n/a Products: Pulse Connect Secre Problem Types: CWE-94 Description: A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform an arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44588
CVE ID: CVE-2020-8244 State: PUBLISHED Published: 2020-08-30T13:43:55 Last Updated: 2024-08-04T09:56:28.050Z Vendors: n/a Products: bl Problem Types: CWE-126 Description: A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply user input (even typed) that if it ends up in consume() argument and can become negative, the BufferList state can be corrupted, tricking it into exposing uninitialized memory via regular .slice() calls. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/966347 - https://lists.debian.org/debian-lts-announce/2021/06/msg00028.html
CVE ID: CVE-2020-8245 State: PUBLISHED Published: 2020-09-18T20:12:07 Last Updated: 2024-08-04T09:56:27.961Z Vendors: n/a Products: Citrix ADC, Citrix Gateway Problem Types: CWE-79 Description: Improper Input Validation on Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b leads to an HTML Injection attack against the SSL VPN web portal.
fore 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b leads to an HTML Injection attack against the SSL VPN web portal. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX281474
CVE ID: CVE-2020-8246 State: PUBLISHED Published: 2020-09-18T20:12:26 Last Updated: 2024-08-04T09:56:27.947Z Vendors: n/a Products: Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP Problem Types: CWE-400 Description: Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b are vulnerable to a denial of service attack originating from the managem
.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b are vulnerable to a denial of service attack originating from the management network. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX281474
CVE ID: CVE-2020-8247 State: PUBLISHED Published: 2020-09-18T20:12:32 Last Updated: 2024-08-04T09:56:28.043Z Vendors: n/a Products: Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP Problem Types: CWE-269 Description: Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix SD-WAN WANOP 11.1 before 11.1.2a, Citrix SD-WAN WANOP 11.0 before 11.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b are vulnerable to escalation of privileges on the management interface. A
.0.3f, Citrix SD-WAN WANOP 10.2 before 10.2.7b are vulnerable to escalation of privileges on the management interface. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX281474
CVE ID: CVE-2020-8248 State: PUBLISHED Published: 2020-10-28T12:40:34 Last Updated: 2024-08-04T09:56:27.962Z Vendors: n/a Products: Pulse Secure Desktop Client Problem Types: Privilege Escalation (CAPEC-233) Description: A vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to escalate privilege. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
CVE ID: CVE-2020-8249 State: PUBLISHED Published: 2020-10-28T12:40:53 Last Updated: 2024-08-04T09:56:27.980Z Vendors: n/a Products: Pulse Secure Desktop Client Problem Types: CWE-120 Description: A vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to perform buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
CVE ID: CVE-2020-8250 State: PUBLISHED Published: 2020-10-28T12:41:11 Last Updated: 2024-08-04T09:56:28.023Z Vendors: n/a Products: Pulse Secure Desktop Client Problem Types: Privilege Escalation (CAPEC-233) Description: A vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to escalate privilege. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
CVE ID: CVE-2020-8251 State: PUBLISHED Published: 2020-09-18T20:11:43 Last Updated: 2025-04-30T22:24:26.013Z Vendors: NodeJS Products: Node Problem Types: CWE-400 Description: Node.js < 14.11.0 is vulnerable to HTTP denial of service (DoS) attacks based on delayed requests submission which can make the server unable to accept new connections. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/868834 - https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/ - https://security.netapp.com/advisory/ntap-20201009-0004/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4OOYAMJVLLCLXDTHW3
4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4OOYAMJVLLCLXDTHW3V5UXNULZBBK4O6/ - https://security.gentoo.org/glsa/202101-07
CVE ID: CVE-2020-8252 State: PUBLISHED Published: 2020-09-18T20:11:51 Last Updated: 2025-04-30T22:24:26.861Z Vendors: NodeJS Products: Node Problem Types: CWE-120 Description: The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js incorrectly determined the buffer size which can result in a buffer overflow if the resolved path is longer than 256 bytes. Additional Analyst Notes: - CVE Program Container: References: - https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/ - https://hackerone.com/reports/965914 - https://security.gentoo.org/glsa/202009-15 - https://usn.ubuntu.com/4548-1/ - http://lists.opensuse.org/opensuse-security-an
s://security.gentoo.org/glsa/202009-15 - https://usn.ubuntu.com/4548-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00011.html - https://security.netapp.com/advisory/ntap-20201009-0004/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00023.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4OOYAMJVLLCLXDTHW3V5UXNULZBBK4O6/
CVE ID: CVE-2020-8253 State: PUBLISHED Published: 2020-09-18T20:12:00 Last Updated: 2024-08-04T09:56:28.256Z Vendors: n/a Products: Citrix XenMobile Server Problem Types: CWE-287 Description: Improper authentication in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 leads to the ability to access sensitive files. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX277457
CVE ID: CVE-2020-8254 State: PUBLISHED Published: 2020-10-28T12:46:28 Last Updated: 2024-08-04T09:56:27.963Z Vendors: n/a Products: Pulse Secure Desktop Client Problem Types: CWE-23 Description: A vulnerability in the Pulse Secure Desktop Client < 9.1R9 has Remote Code Execution (RCE) if users can be convinced to connect to a malicious server. This vulnerability only affects Windows PDC.To improve the security of connections between Pulse clients and Pulse Connect Secure, see below recommendation(s):Disable Dynamic certificate trust for PDC. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
CVE ID: CVE-2020-8255 State: PUBLISHED Published: 2020-10-28T12:46:59 Last Updated: 2024-08-04T09:56:28.181Z Vendors: n/a Products: Pulse Connect Secure / Pulse Policy Secure Problem Types: CWE-20 Description: A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary file reading vulnerability is fixed using encrypted URL blacklisting that prevents these messages. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
CVE ID: CVE-2020-8256 State: PUBLISHED Published: 2020-09-29T13:41:32 Last Updated: 2024-11-18T16:03:30.432Z Vendors: n/a Products: Pulse Connect Secure Problem Types: CWE-611 Description: A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to gain arbitrary file reading access through Pulse Collaboration via XML External Entity (XXE) vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44588 - https://www.gosecure.net/blog/2020/11/13/forget-your-perimeter-part-2-four-vulnerabilities-in-pulse-connect-secure/
CVE ID: CVE-2020-8257 State: PUBLISHED Published: 2020-12-14T19:42:02 Last Updated: 2024-08-04T09:56:27.805Z Vendors: n/a Products: Citrix Gateway Plug-in for Windows Problem Types: Privilege Escalation (CAPEC-233) Description: Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, lead to privilege escalation attacks Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX282684
CVE ID: CVE-2020-8258 State: PUBLISHED Published: 2020-12-14T19:42:09 Last Updated: 2024-08-04T09:56:27.960Z Vendors: n/a Products: Citrix Gateway Plug-in for Windows Problem Types: CWE-269 Description: Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, allows an attacker to modify arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX282684
CVE ID: CVE-2020-8259 State: PUBLISHED Published: 2020-11-16T00:36:43 Last Updated: 2024-08-04T09:56:27.937Z Vendors: n/a Products: Nextcloud Server Problem Types: CWE-522 Description: Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the encryption keys. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/732431 - https://nextcloud.com/security/advisory/?id=NC-SA-2020-041
CVE ID: CVE-2020-8260 State: PUBLISHED Published: 2020-10-28T12:47:13.000Z Last Updated: 2025-10-21T23:35:34.332Z Vendors: n/a Products: Pulse Connect Secure / Pulse Policy Secure Problem Types: CWE-434 Description: A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code execution using uncontrolled gzip extraction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601 - http://packetstormsecurity.com/files/160619/Pulse-Secure-VPN-Remote-Code-Execution.html
CVE ID: CVE-2020-8261 State: PUBLISHED Published: 2020-10-28T12:47:36 Last Updated: 2024-08-04T09:56:28.147Z Vendors: n/a Products: Pulse Connect Secure / Pulse Policy Secure Problem Types: CWE-120 Description: A vulnerability in the Pulse Connect Secure / Pulse Policy Secure < 9.1R9 is vulnerable to arbitrary cookie injection. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
CVE ID: CVE-2020-8262 State: PUBLISHED Published: 2020-10-28T12:47:55 Last Updated: 2024-08-04T09:56:28.075Z Vendors: n/a Products: Pulse Connect Secure / Pulse Policy Secure Problem Types: CWE-79 Description: A vulnerability in the Pulse Connect Secure / Pulse Policy Secure below 9.1R9 could allow attackers to conduct Cross-Site Scripting (XSS) and Open Redirection for authenticated user web interface. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
CVE ID: CVE-2020-8263 State: PUBLISHED Published: 2020-10-28T12:48:17 Last Updated: 2024-08-04T09:56:27.966Z Vendors: n/a Products: Pulse Connect Secure / Pulse Policy Secure Problem Types: CWE-79 Description: A vulnerability in the authenticated user web interface of Pulse Connect Secure < 9.1R9 could allow attackers to conduct Cross-Site Scripting (XSS) through the CGI file. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
CVE ID: CVE-2020-8264 State: PUBLISHED Published: 2021-01-06T21:02:35 Last Updated: 2024-08-04T09:56:28.149Z Vendors: n/a Products: https://github.com/rails/rails Problem Types: CWE-79 Description: In actionpack gem >= 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed (in another page) a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This vulnerability is in the Actionable Exceptions middleware. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/904059 - https://groups.google.com/g/rubyonrails-security
Program Container: References: - https://hackerone.com/reports/904059 - https://groups.google.com/g/rubyonrails-security/c/yQzUVfv42jk/m/oJWw-xhNAQAJ
CVE ID: CVE-2020-8265 State: PUBLISHED Published: 2021-01-06T21:01:15 Last Updated: 2025-04-30T22:24:28.624Z Vendors: NodeJS Products: Node Problem Types: CWE-416 Description: Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If the DoWrite method does not return an error, this object is passed back to the caller as part of a StreamWriteResult structure. This may be exploited to corrupt memory leading to a Denial of Service or potentially other exploits. Additional Anal
e. This may be exploited to corrupt memory leading to a Denial of Service or potentially other exploits. Additional Analyst Notes: - CVE Program Container: References: - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/ - https://hackerone.com/reports/988103 - https://www.debian.org/security/2021/dsa-4826 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4I6MZNC7C7VIDQR267OL4TVCI3ZKAC4/ - https://security.gentoo.org/glsa/202101-07 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H472D5HPXN6RRXCNFML3BK5OYC52CXF2/ - https://www.oracle.com/security-alerts/cpujan2021.html -
.fedoraproject.org/message/H472D5HPXN6RRXCNFML3BK5OYC52CXF2/ - https://www.oracle.com/security-alerts/cpujan2021.html - https://security.netapp.com/advisory/ntap-20210212-0003/ - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
CVE ID: CVE-2020-8267 State: PUBLISHED Published: 2020-11-05T18:28:34 Last Updated: 2024-08-04T09:56:28.211Z Vendors: n/a Products: UniFi Protect Problem Types: CWE-287 Description: A security issue was found in UniFi Protect controller v1.14.10 and earlier.The authentication in the UniFi Protect controller API was using “x-token” improperly, allowing attackers to use the API to send authenticated messages without a valid token.This vulnerability was fixed in UniFi Protect v1.14.11 and newer.This issue does not impact UniFi Cloud Key Gen 2 plus.This issue does not impact UDM-Pro customers with UniFi Protect stopped.Affected Products:UDM-Pro firmware 1.7.2 and earlier.UNVR firmware 1.3.12 and
M-Pro customers with UniFi Protect stopped.Affected Products:UDM-Pro firmware 1.7.2 and earlier.UNVR firmware 1.3.12 and earlier.Mitigation:Update UniFi Protect to v1.14.11 or newer version; the UniFi Protect controller can be updated through your UniFi OS settings.Alternatively, you can update UNVR and UDM-Pro to:- UNVR firmware to 1.3.15 or newer.- UDM-Pro firmware to 1.8.0 or newer. Additional Analyst Notes: - CVE Program Container: References: - https://community.ui.com/releases/UniFi-Protect-1-14-11/928e6fac-afeb-49c2-93a5-1b3066bf2bbf - https://community.ui.com/releases/UniFi-Protect-NVR-Firmware-1-3-15/c2a783a6-c996-43d9-ab95-8c97ae05a98f - https://community.ui.com/releases/UniFi-Drea
es/UniFi-Protect-NVR-Firmware-1-3-15/c2a783a6-c996-43d9-ab95-8c97ae05a98f - https://community.ui.com/releases/UniFi-Dream-Machine-Firmware-1-8-0/deabc255-a081-49ba-8f51-131f3a13000a
CVE ID: CVE-2020-8268 State: PUBLISHED Published: 2020-11-09T14:06:21 Last Updated: 2024-08-04T09:56:28.268Z Vendors: n/a Products: json8-merge-patch Problem Types: CWE-471 Description: Prototype pollution vulnerability in json8-merge-patch npm package < 1.0.3 may allow attackers to inject or modify methods and properties of the global object constructor. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/980649
CVE ID: CVE-2020-8269 State: PUBLISHED Published: 2020-11-16T00:35:24 Last Updated: 2024-08-04T09:56:27.967Z Vendors: n/a Products: Citrix Virtual Apps and Desktops Problem Types: CWE-269 Description: An unprivileged Windows user on the VDA can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9 Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX285059
CVE ID: CVE-2020-8270 State: PUBLISHED Published: 2020-11-16T00:35:35 Last Updated: 2024-08-04T09:56:27.974Z Vendors: n/a Products: Citrix Virtual Apps and Desktops Problem Types: CWE-78 Description: An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285871 and CTX285872, 7.15 LTSR CU6 hotfix CTX285341 and CTX285342 Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX285059
CVE ID: CVE-2020-8271 State: PUBLISHED Published: 2020-11-16T00:32:58 Last Updated: 2024-08-04T09:56:28.218Z Vendors: n/a Products: Citrix SD-WAN Center Problem Types: CWE-23 Description: Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8 Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX285061
CVE ID: CVE-2020-8272 State: PUBLISHED Published: 2020-11-16T00:33:14 Last Updated: 2024-08-04T09:56:28.240Z Vendors: n/a Products: Citrix SD-WAN Center Problem Types: CWE-287 Description: Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8 Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX285061
CVE ID: CVE-2020-8273 State: PUBLISHED Published: 2020-11-16T00:33:33 Last Updated: 2024-08-04T09:56:28.254Z Vendors: n/a Products: Citrix SD-WAN Center Problem Types: CWE-78 Description: Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX285061
CVE ID: CVE-2020-8274 State: PUBLISHED Published: 2021-01-06T20:59:16 Last Updated: 2024-08-04T09:56:28.347Z Vendors: n/a Products: Citrix Secure Mail for Android Problem Types: CWE-94 Description: Citrix Secure Mail for Android before 20.11.0 suffers from Improper Control of Generation of Code ('Code Injection') by allowing unauthenticated access to read data stored within Secure Mail. Note that a malicious app would need to be installed on the Android device or a threat actor would need to execute arbitrary code on the Android device. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX286763