Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-36825 State: PUBLISHED Published: 2024-03-24T12:00:05.407Z Last Updated: 2025-04-10T18:37:15.513Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: cyberaz0r Products: WebRAT Problem Types: CWE-434 Description: ** UNSUPPORTED WHEN ASSIGNED ** ** DISPUTED ** A vulnerability has been found in cyberaz0r WebRAT up to 20191222 and classified as critical. This vulnerability affects the function download_file of the file Server/api.php. The manipulation of the argument name leads to unrestricted upload. The attack can be initiated remotely. The real existence of this vulnerability is still doubted at the moment. The patch is identified as 0c394a795b9c10c07085361e6fcea286
stence of this vulnerability is still doubted at the moment. The patch is identified as 0c394a795b9c10c07085361e6fcea286ee793701. It is recommended to apply a patch to fix this issue. VDB-257782 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: The issue, discovered in a 20-stars GitHub project (now private) by its author, had CVE requested by a third party 4 years post-resolution, referencing the fix commit (now a broken link). Due to minimal attention and usage, it should not be eligible for CVE according to the project maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Pr
not be eligible for CVE according to the project maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.257782 - https://vuldb.com/?ctiid.257782 - https://github.com/cyberaz0r/WebRAT/commit/0c394a795b9c10c07085361e6fcea286ee793701
CVE ID: CVE-2020-36826 State: PUBLISHED Published: 2024-03-25T07:00:05.337Z Last Updated: 2025-04-10T18:31:23.119Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: AwesomestCode Products: LiveBot Problem Types: CWE-79 Description: A vulnerability was found in AwesomestCode LiveBot. It has been classified as problematic. Affected is the function parseSend of the file js/parseMessage.js. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. Upgrading to version 0.1 is able to address this issue.
ersion details for affected nor updated releases are available. Upgrading to version 0.1 is able to address this issue. The name of the patch is 57505527f838d1e46e8f93d567ba552a30185bfa. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-257784. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.257784 - https://vuldb.com/?ctiid.257784 - https://github.com/AwesomestCode/LiveBot/commit/57505527f838d1e46e8f93d567ba552a30185bfa - https://github.com/AwesomestCode/LiveBot/releases/tag/0.1
CVE ID: CVE-2020-36827 State: PUBLISHED Published: 2024-03-24T00:00:00.000Z Last Updated: 2025-03-28T23:56:30.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XAO::Web module before 1.84 for Perl mishandles < and > characters in JSON output during use of json-embed in Web::Action. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/amaltsev/XAO-Web/commit/20dd1d3bc5b811503f5722a16037b60197fe7ef4 - https://metacpan.org/dist/XAO-Web/changes
CVE ID: CVE-2020-36828 State: PUBLISHED Published: 2024-03-31T09:00:04.241Z Last Updated: 2024-08-04T17:37:07.325Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: DiscuzX Problem Types: CWE-79 Description: A vulnerability was found in DiscuzX up to 3.4-20200818. It has been classified as problematic. Affected is the function show_next_step of the file upload/install/include/install_function.php. The manipulation of the argument uchidden leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 3.4-20210119 is able to address this issue. The name of the patch is 4a9673624f46f7609486778ded9653733020c567. It is recommended to upgr
able to address this issue. The name of the patch is 4a9673624f46f7609486778ded9653733020c567. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-258612. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.258612 - https://vuldb.com/?ctiid.258612 - https://github.com/codersclub/DiscuzX/commit/4a9673624f46f7609486778ded9653733020c567
CVE ID: CVE-2020-36829 State: PUBLISHED Published: 2024-04-07T00:00:00.000Z Last Updated: 2025-03-13T20:37:14.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mojolicious module before 8.65 for Perl is vulnerable to secure_compare timing attacks that allow an attacker to guess the length of a secret string. Only versions after 1.74 are affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mojolicious/mojo/pull/1601 - https://github.com/mojolicious/mojo/issues/1599 - https://lists.debian.org/debian-lts-announce/2024/06/msg00025.html
CVE ID: CVE-2020-36830 State: PUBLISHED Published: 2024-09-02T16:00:05.813Z Last Updated: 2024-09-03T14:21:44.280Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: nescalante Products: urlregex Problem Types: CWE-1333 Description: A vulnerability was found in nescalante urlregex up to 0.5.0 and classified as problematic. This issue affects some unknown processing of the file index.js of the component Backtracking. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.5.1 is able to address this issue. The identifier of the
isclosed to the public and may be used. Upgrading to version 0.5.1 is able to address this issue. The identifier of the patch is e5a085afe6abfaea1d1a78f54c45af9ef43ca1f9. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.276269 - https://vuldb.com/?ctiid.276269 - https://github.com/nescalante/urlregex/pull/8 - https://github.com/nescalante/urlregex/commit/e5a085afe6abfaea1d1a78f54c45af9ef43ca1f9 - https://github.com/nescalante/urlregex/releases/tag/v0.5.1
CVE ID: CVE-2020-36831 State: PUBLISHED Published: 2024-10-16T06:43:28.112Z Last Updated: 2024-10-16T18:06:20.441Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: nextscripts Products: NextScripts: Social Networks Auto-Poster Problem Types: CWE-284 Description: The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on multiple user privilege/security functions provided in versions up to, and including 4.3.17. This makes it possible for low-privileged attackers, like subscribers, to perform restricted actions that would be otherwise locked to a administrative-level user. Additiona
like subscribers, to perform restricted actions that would be otherwise locked to a administrative-level user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3709465d-6d67-45bd-abb9-4875065b8129?source=cve - https://blog.sucuri.net/2020/09/insufficient-privilege-validation-in-nextscripts-social-networks-auto-poster.html - https://wpscan.com/vulnerability/0641578b-16b9-4d79-af69-b4886840da36 - https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-nextscripts-social-networks-auto-poster-security-bypass-4-3-17/
CVE ID: CVE-2020-36832 State: PUBLISHED Published: 2024-10-16T06:43:38.406Z Last Updated: 2024-10-16T18:03:20.662Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: wpindeed Products: Indeed Membership Pro Problem Types: CWE-287 Description: The Ultimate Membership Pro plugin for WordPress is vulnerable to Authentication Bypass in versions between, and including, 7.3 to 8.6. This makes it possible for unauthenticated attackers to login as any user, including the site administrator with a default user ID of 1, via the username or user ID. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a5341bbd-55bd-41ad-b5d1-d6b56c141277?source=cve - https://codecanyon.net/item/ultimate-membership-pro-wordpress-plugin/12159253 - https://wpscan.com/vulnerability/9811025e-ab17-4255-aaaf-4f0306f5d281
CVE ID: CVE-2020-36833 State: PUBLISHED Published: 2024-10-16T06:43:40.797Z Last Updated: 2024-10-16T19:33:16.544Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: wpindeed Products: Indeed Membership Pro Problem Types: CWE-862 Description: The Indeed Membership Pro plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on various AJAX actions in versions 7.3 - 8.6. This makes it possible for authenticated attacker, with minimal permission, such as a subscriber, to perform a variety of actions such as modifying settings and viewing sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www
ifying settings and viewing sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ab1cc1ef-d0e0-491d-91a8-eaa0605fc1da?source=cve - https://wpscan.com/vulnerability/9811025e-ab17-4255-aaaf-4f0306f5d281
CVE ID: CVE-2020-36834 State: PUBLISHED Published: 2024-10-16T06:43:27.178Z Last Updated: 2024-10-16T19:13:16.958Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: flycart Products: Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons Problem Types: CWE-862 Description: The Discount Rules for WooCommerce plugin for WordPress is vulnerable to missing authorization via several AJAX actions in versions up to, and including, 2.0.2 due to missing capability checks on various functions. This makes it possible for subscriber-level attackers to execute various actions and perform a wide variety of actions such as
kes it possible for subscriber-level attackers to execute various actions and perform a wide variety of actions such as modifying rules and saving configurations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/33cf27ba-a01b-4e34-9584-b1d3fc87af34?source=cve - https://patchstack.com/articles/multiple-vulnerabilities-in-discount-rules-for-woocommerce-plugin/
CVE ID: CVE-2020-36835 State: PUBLISHED Published: 2024-10-16T06:43:36.927Z Last Updated: 2024-10-16T15:32:03.453Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: wpvividplugins Products: Migration, Backup, Staging – WPvivid Problem Types: CWE-200 Description: The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to sensitive information disclosure of a WordPress site's database due to missing capability checks on the wp_ajax_wpvivid_add_remote AJAX action that allows low-level authenticated attackers to send back-ups to a remote location of their choice for review. This affects versions up to, and including 0.9.35. Additional Analyst N
to a remote location of their choice for review. This affects versions up to, and including 0.9.35. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/90c3f8bc-fc41-4ba7-b9f2-8873203d5794?source=cve - https://www.webarxsecurity.com/vulnerability-in-wpvivid-backup-plugin-can-lead-to-database-leak/?fbclid=IwAR3Ve74ZIvmx-aC0OssIWYwcWEjGq6yU16DcyVGHD1XUT3uYaZ3QyVu_Eos&utm_content=buffer4435b&utm_medium=social&utm_source=facebook.com&utm_campaign=buffer - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2261665%40wpvivid-backuprestore%2Ftrunk&old=2252870%40wpvivid-backuprestore%2Ftrunk&sfp_emai
l=&sfph_mail=&reponame=&new=2261665%40wpvivid-backuprestore%2Ftrunk&old=2252870%40wpvivid-backuprestore%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2020-36836 State: PUBLISHED Published: 2024-10-16T06:43:34.541Z Last Updated: 2024-10-16T18:05:09.345Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: emrevona Products: WP Fastest Cache Problem Types: CWE-352 Description: The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and including, 0.9.0.2 due to a lack of capability checking and insufficient path validation. This makes it possible for authenticated users with minimal permissions to delete arbitrary files from the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulne
he server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/82f80916-37ab-4c5a-9787-2544c620acac?source=cve - https://wearetradecraft.com/advisories/tc-2020-0001/ - https://plugins.trac.wordpress.org/changeset/2235160/wp-fastest-cache
CVE ID: CVE-2020-36837 State: PUBLISHED Published: 2024-10-16T06:43:35.980Z Last Updated: 2024-10-16T18:03:47.811Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: themegrill Products: ThemeGrill Demo Importer Problem Types: CWE-862 Description: The ThemeGrill Demo Importer plugin for WordPress is vulnerable to authentication bypass due to a missing capability check on the reset_wizard_actions function in versions 1.3.4 through 1.6.1. This makes it possible for authenticated attackers to reset the WordPress database. After which, if there is a user named 'admin', the attacker will become automatically logged in as an administrator. Additional Analyst Notes:
is a user named 'admin', the attacker will become automatically logged in as an administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8c0dc694-854e-4f96-8c2d-7251c41a3ee9?source=cve - https://www.webarxsecurity.com/critical-issue-in-themegrill-demo-importer/ - https://www.openwall.com/lists/oss-security/2020/02/19/1 - https://raw.githubusercontent.com/themegrill/themegrill-demo-importer/master/CHANGELOG.txt
CVE ID: CVE-2020-36838 State: PUBLISHED Published: 2024-10-16T06:43:27.628Z Last Updated: 2024-10-16T19:13:54.085Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: facebook Products: Facebook Chat Plugin – Live Chat Plugin for WordPress Problem Types: CWE-284 Description: The Facebook Chat Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wp_ajax_update_options function in versions up to, and including, 1.5. This flaw makes it possible for low-level authenticated attackers to connect their own Facebook Messenger account to any site running the vulnerable plugin and engage in chats with site visitors on affected
Facebook Messenger account to any site running the vulnerable plugin and engage in chats with site visitors on affected sites. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/36ae4183-5fa7-484c-b858-5df10ae3d3f2?source=cve - https://www.wordfence.com/blog/2020/08/the-official-facebook-chat-plugin-created-vector-for-social-engineering-attacks/
CVE ID: CVE-2020-36839 State: PUBLISHED Published: 2024-10-16T06:43:45.081Z Last Updated: 2024-10-16T12:59:54.576Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H) Vendors: bc2018 Products: WordPress Landing Page – Squeeze Page – Responsive Landing Page Builder Free – WP Lead Plus X Problem Types: CWE-352 Description: The WP Lead Plus X plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.99. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to perform administrative actions, such as adding pages to the site and/or replacing site content with mal
ted attackers to perform administrative actions, such as adding pages to the site and/or replacing site content with malicious JavaScript via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ddb97db0-cbf3-42be-a5c7-12fc2a2bc9e8?source=cve - https://www.wordfence.com/blog/2020/04/critical-vulnerabilities-in-the-wp-lead-plus-x-wordpress-plugin/ - https://wordpress.org/plugins/free-sales-funnel-squeeze-pages-landing-page-builder-templates-make/#developers
CVE ID: CVE-2020-36840 State: PUBLISHED Published: 2024-10-16T07:31:50.702Z Last Updated: 2024-10-16T17:26:20.758Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: jetmonsters Products: Timetable and Event Schedule by MotoPress Problem Types: CWE-862 Description: The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wp_ajax_route_url() function called via a nopriv AJAX action in versions up to, and including, 2.3.8. This makes it possible for unauthenticated attackers to call that function and perform a wide variety of actions such as including random template, injecting
cated attackers to call that function and perform a wide variety of actions such as including random template, injecting malicious web scripts, and more. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/988d7b33-f985-4d22-a2db-3922002fcecb?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2288592%40mp-timetable&new=2288592%40mp-timetable&sfp_email=&sfph_mail=
CVE ID: CVE-2020-36841 State: PUBLISHED Published: 2024-10-16T12:45:52.256Z Last Updated: 2024-10-16T17:25:40.373Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: WooCommerce Products: WooCommerce Smart Coupons Problem Types: CWE-285 Description: The WooCommerce Smart Coupons plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the woocommerce_coupon_admin_init function in versions up to, and including, 4.6.0. This makes it possible for unauthenticated attackers to send themselves gift certificates of any value, which could be redeemed for products sold on the victim’s storefront. Additional Analyst Notes: - CISA AD
of any value, which could be redeemed for products sold on the victim’s storefront. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/eeeb03f7-5f78-4462-b0b4-5080bbc419a3?source=cve - https://www.wordfence.com/blog/2020/03/coupon-creation-vulnerability-patched-in-woocommerce-smart-coupons/
CVE ID: CVE-2020-36842 State: PUBLISHED Published: 2024-10-16T07:31:53.613Z Last Updated: 2024-10-16T17:26:08.332Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: wpvividplugins Products: Migration, Backup, Staging – WPvivid Problem Types: CWE-434 Description: The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the wpvivid_upload_import_files and wpvivid_upload_files AJAX actions that allows low-level authenticated attackers to upload zip files that can be subsequently extracted. This affects versions up to, and including 0.9.35. Additional Analyst Notes: - CISA ADP Vulnrich
subsequently extracted. This affects versions up to, and including 0.9.35. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/de1da248-2e03-40fa-8997-7176dc06abc9?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2261665%40wpvivid-backuprestore%2Ftrunk&old=2252870%40wpvivid-backuprestore%2Ftrunk&sfp_email=&sfph_mail= - https://www.webarxsecurity.com/vulnerability-in-wpvivid-backup-plugin-can-lead-to-database-leak/?fbclid=IwAR3Ve74ZIvmx-aC0OssIWYwcWEjGq6yU16DcyVGHD1XUT3uYaZ3QyVu_Eos&utm_content=buffer4435b&utm_medium=social&utm_source=facebook.com&utm_campaign=buffer
CVE ID: CVE-2020-36843 State: PUBLISHED Published: 2025-03-13T00:00:00.000Z Last Updated: 2025-03-18T16:22:08.617Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: str4d Products: ed25519-java Problem Types: CWE-347 Description: The implementation of EdDSA in EdDSA-Java (aka ed25519-java) through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA (Strong Existential Unforgeability under Chosen Message Attacks) property. This allows attackers to create new valid signatures different from previous signatures for a known message. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/str4d/ed25519-java/issues/82#i
sage. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/str4d/ed25519-java/issues/82#issue-727629226 - https://eprint.iacr.org/2020/1244
CVE ID: CVE-2020-36844 State: PUBLISHED Published: 2025-04-20T00:00:00.000Z Last Updated: 2025-04-21T02:16:46.465Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: KnowBe4 Products: Security Awareness Training Problem Types: CWE-79 Description: The KnowBe4 Security Awareness Training application before 2020-01-10 allows reflected XSS. The response has a SCRIPT element that sets window.location.href to a JavaScript URL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.doyler.net/security-not-included/knowbe4-vulnerabilities
CVE ID: CVE-2020-36845 State: PUBLISHED Published: 2025-04-20T00:00:00.000Z Last Updated: 2025-04-21T02:18:14.873Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: KnowBe4 Products: Security Awareness Training Problem Types: CWE-601 Description: The KnowBe4 Security Awareness Training application before 2020-01-10 contains a redirect function that does not validate the destination URL before redirecting. The response has a SCRIPT element that sets window.location.href to an arbitrary https URL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.doyler.net/security-not-included/knowbe4-vulnerabilities
CVE ID: CVE-2020-36846 State: PUBLISHED Published: 2025-05-30T00:50:28.582Z Last Updated: 2025-05-30T22:01:41.998Z Vendors: TIMLEGGE Products: IO::Compress::Brotli Problem Types: CWE-1395 Description: A buffer overflow, as described in CVE-2020-8927, exists in the embedded Brotli library. Versions of IO::Compress::Brotli prior to 0.007 included a version of the brotli library prior to version 1.0.8, where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your IO::Compress::Brotli module to 0.007 or later. If one cannot update, we recommen
2 GiB. It is recommended to update your IO::Compress::Brotli module to 0.007 or later. If one cannot update, we recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/google/brotli/pull/826 - https://github.com/advisories/GHSA-5v8v-66v8-mwm7 - https://github.com/timlegge/perl-IO-Compress-Brotli/blob/8b44c83b23bb4658179e1494af4b725a1bc476bc/Changes#L52 - https://nvd.nist.gov/vuln/detail/CVE-2020-8927 - https://github.com/google/brotli/commit/223d80cfbec8fd346e32906c732c8ede21f0cea6