Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-18327 State: PUBLISHED Published: 2022-03-04T14:15:17 Last Updated: 2024-08-04T14:00:49.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via the action parameter in the alfresco/s/admin/admin-nodebrowser API. Fixed in v6.2 Additional Analyst Notes: - CVE Program Container: References: - https://www.cvedetails.com/vulnerability-list/vendor_id-13372/product_id-27784/opxss-1/Alfresco-Alfresco.html - https://gist.github.com/paatui/a3c7ca8cf12594b437d3854f13d76cb8
CVE ID: CVE-2020-18329 State: PUBLISHED Published: 2023-01-25T00:00:00.000Z Last Updated: 2025-04-02T13:28:33.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Rehau devices that use a pCOWeb card BIOS v6.27, BOOT v5.00, web version v2.2, allows attackers to gain full unauthenticated access to the configuration and service interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40SergiuSechel/insecure-permissions-in-rehau-group-unlimited-polymer-solutions-implementation-of-carel-pcoweb-514c148ae694 - https://github.com/cybertoxin/CVEs/blob/main/CVE_2020_18329.md
CVE ID: CVE-2020-18330 State: PUBLISHED Published: 2023-01-25T00:00:00.000Z Last Updated: 2025-04-01T20:46:47.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the default configuration of ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the firmware version W2000EN-01(hardware platform Gpn2.4P21-C_WIFI-V0.05), allows attackers to gain access to the configuration interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40SergiuSechel/insecure-permissions-and-multiple-vulnerabilities-in-chinamobile-plc-wireless-routers-leaves-more-d3eb9ff70d24 - https://github.com/cybertoxin/CV
multiple-vulnerabilities-in-chinamobile-plc-wireless-routers-leaves-more-d3eb9ff70d24 - https://github.com/cybertoxin/CVEs/blob/main/CVE_2020_18330.md
CVE ID: CVE-2020-18331 State: PUBLISHED Published: 2023-01-25T00:00:00.000Z Last Updated: 2025-04-01T20:28:41.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the firmware version W2000EN-01(hardware platform Gpn2.4P21-C_WIFI-V0.05), via the getpage parameter to /cgi-bin/webproc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40SergiuSechel/insecure-permissions-and-multiple-vulnerabilities-in-chinamobile-plc-wireless-routers-leaves-more-d3eb9ff70d24 - https://github.com/cybertoxin/CVEs/blob/main/CVE_2020_18331.md
CVE ID: CVE-2020-18336 State: PUBLISHED Published: 2023-10-10T00:00:00 Last Updated: 2024-09-19T14:34:01.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability found in Typora v.0.9.65 allows a remote attacker to obtain sensitive information via the PDF file exporting function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/typora/typora-issues/issues/2232
CVE ID: CVE-2020-18378 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T20:30:39.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WebAssembly/binaryen/issues/1900
CVE ID: CVE-2020-18382 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-07T15:46:14.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-opt. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WebAssembly/binaryen/issues/1900
CVE ID: CVE-2020-18392 State: PUBLISHED Published: 2021-05-28T20:37:40 Last Updated: 2024-08-04T14:00:49.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow vulnerability in parse_array Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/106 - https://cwe.mitre.org/data/definitions/674.html
CVE ID: CVE-2020-18395 State: PUBLISHED Published: 2021-05-28T20:36:53 Last Updated: 2024-08-04T14:00:49.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL-pointer deference issue was discovered in GNU_gama::set() in ellipsoid.h in Gama 2.04 which can lead to a denial of service (DOS) via segment faults caused by crafted inputs. Additional Analyst Notes: - CVE Program Container: References: - http://lists.gnu.org/archive/html/bug-gama/2019-04/msg00001.html
CVE ID: CVE-2020-18404 State: PUBLISHED Published: 2023-06-27T00:00:00 Last Updated: 2024-12-04T21:12:22.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in espcms version P8.18101601. There is a cross site scripting (XSS) vulnerability that allows arbitrary code to be executed via the title parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/source-hunter/espcms/issues/1
CVE ID: CVE-2020-18406 State: PUBLISHED Published: 2023-06-27T00:00:00 Last Updated: 2024-12-04T21:10:14.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in cmseasy v7.0.0 that allows user credentials to be sent in clear text due to no encryption of form data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/source-hunter/cmseasy/issues/1
CVE ID: CVE-2020-18409 State: PUBLISHED Published: 2023-06-27T00:00:00 Last Updated: 2024-12-05T14:31:23.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability was discovered in CatfishCMS 4.8.63 that would allow attackers to obtain administrator permissions via /index.php/admin/index/modifymanage.html. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwlrbh/Catfish/issues/5
CVE ID: CVE-2020-18410 State: PUBLISHED Published: 2023-06-27T00:00:00 Last Updated: 2024-12-05T14:34:24.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in /index.php?admin-master-article-edit of Chaoji CMS v2.18 that allows attackers to obtain administrator privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GodEpic/chaojicms/issues/6
CVE ID: CVE-2020-18413 State: PUBLISHED Published: 2023-06-27T00:00:00 Last Updated: 2024-12-05T14:36:35.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored cross site scripting (XSS) vulnerability in /index.php?admin-master-navmenu-add of Chaoji CMS v2.18 that allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GodEpic/chaojicms/issues/5
CVE ID: CVE-2020-18414 State: PUBLISHED Published: 2023-06-27T00:00:00 Last Updated: 2024-12-04T21:09:21.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored cross site scripting (XSS) vulnerability in Chaoji CMS v2.18 that allows attackers to execute arbitrary code via /index.php?admin-master-webset. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GodEpic/chaojicms/issues/3
CVE ID: CVE-2020-18416 State: PUBLISHED Published: 2023-06-27T00:00:00 Last Updated: 2024-12-04T21:07:57.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: An cross site request forgery (CSRF) vulnerability discovered in Jymusic v2.0.0.,that allows attackers to execute arbitrary code via /admin.php?s=/addons/config.html&id=6 to modify payment information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dtorp06/jymusic/issues/1
CVE ID: CVE-2020-18418 State: PUBLISHED Published: 2023-06-27T00:00:00 Last Updated: 2024-12-04T21:06:45.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross site request forgery (CSRF) vulnerability was discovered in FeiFeiCMS v4.1.190209, which allows attackers to create administrator accounts via /index.php?s=Admin-Admin-Insert. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GodEpic/Vulnerability-detection/blob/master/feifeicms/FeiFeiCMS_4.1_csrf.doc - https://github.com/GodEpic/Vulnerability-detection/blob/master/feifeicms/poc
CVE ID: CVE-2020-18428 State: PUBLISHED Published: 2021-07-26T21:36:01 Last Updated: 2024-08-04T14:00:49.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: tinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR component, which can lead to a denial of service (DOS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/syoyo/tinyexr/issues/109 - https://github.com/ChijinZ/security_advisories/tree/master/tinyexr_65f9859
CVE ID: CVE-2020-18430 State: PUBLISHED Published: 2021-07-26T21:36:03 Last Updated: 2024-08-04T14:00:49.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: tinyexr 0.9.5 was discovered to contain an array index error in the tinyexr::DecodeEXRImage component, which can lead to a denial of service (DOS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ChijinZ/security_advisories/tree/master/tinyexr_65f9859 - https://github.com/syoyo/tinyexr/issues/108
CVE ID: CVE-2020-18432 State: PUBLISHED Published: 2023-06-30T00:00:00 Last Updated: 2024-11-26T19:10:13.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vorders.me/2019/03/05/semcms-vulnerablity-before-php-v3-7/#admin-upload-webshell-in-SEMCMS-Upfile-php
CVE ID: CVE-2020-18438 State: PUBLISHED Published: 2021-11-02T17:44:02 Last Updated: 2024-08-04T14:00:49.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in qinggan phpok 5.1, allows attackers to disclose sensitive information, via the title parameter to admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/qinggan/phpok/issues/4
CVE ID: CVE-2020-18439 State: PUBLISHED Published: 2021-11-02T17:44:57 Last Updated: 2024-08-04T14:00:49.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discoverered in in function edit_save_f in framework/admin/tpl_control.php in qinggan phpok 5.1, allows attackers to write arbitrary files or get a shell. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/qinggan/phpok/issues/4
CVE ID: CVE-2020-18440 State: PUBLISHED Published: 2021-11-02T17:44:59 Last Updated: 2024-08-04T14:00:49.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in framework/init.php in qinggan phpok 5.1, allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/qinggan/phpok/issues/4
CVE ID: CVE-2020-18442 State: PUBLISHED Published: 2021-06-18T14:25:51 Last Updated: 2024-08-04T14:00:49.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gdraheim/zziplib/issues/68 - https://lists.debian.org/debian-lts-announce/2021/12/msg00021.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCFYD46OY4VAGJ4UX7IFOH5SHD4UW4ZA/ - https://lists.fedoraproject.org/archives/list/package-an
s.fedoraproject.org/message/TCFYD46OY4VAGJ4UX7IFOH5SHD4UW4ZA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVANTEBDQGOIPC5KCEVAGA5KT4KKTGWB/
CVE ID: CVE-2020-18445 State: PUBLISHED Published: 2021-08-12T16:36:01 Last Updated: 2024-08-04T14:00:49.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/doublefast/yunucms - https://github.com/doublefast/yunucms/issues/8
CVE ID: CVE-2020-18446 State: PUBLISHED Published: 2021-08-12T16:42:04 Last Updated: 2024-08-04T14:00:49.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the param parameter in the insertContent function in ContentModel.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/doublefast/yunucms/issues/9
CVE ID: CVE-2020-18449 State: PUBLISHED Published: 2021-08-12T17:15:55 Last Updated: 2024-08-04T14:00:49.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability exists in UKCMS v1.1.10 via data in the index function in Single.php Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yxcmf/ukcms/issues/3
CVE ID: CVE-2020-18451 State: PUBLISHED Published: 2021-08-12T17:26:21 Last Updated: 2024-08-04T14:00:49.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AutismJH/damicms/issues/2
CVE ID: CVE-2020-18454 State: PUBLISHED Published: 2021-08-12T17:39:08 Last Updated: 2024-08-04T14:00:49.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in bycms v1.3 via admin.php/systems/index/module_id/70/group_id/1.html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hillerlin/bycms/issues/1
CVE ID: CVE-2020-18455 State: PUBLISHED Published: 2021-08-12T17:42:13 Last Updated: 2024-08-04T14:00:49.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability exists in bycms v3.0.4 via the title parameter in the edit function in Document.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hillerlin/bycms/issues/2
CVE ID: CVE-2020-18456 State: PUBLISHED Published: 2021-08-12T17:48:08 Last Updated: 2024-08-04T14:00:49.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Pbootcms/Pbootcms/issues/4
CVE ID: CVE-2020-18457 State: PUBLISHED Published: 2021-08-12T17:54:10 Last Updated: 2024-08-04T14:00:49.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability exists in bycms v1.3.0 that can add an admin account via admin.php/ucenter/add.html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hillerlin/bycms/issues/3
CVE ID: CVE-2020-18458 State: PUBLISHED Published: 2021-08-12T18:02:46 Last Updated: 2024-08-04T14:00:49.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AutismJH/damicms/issues/5
CVE ID: CVE-2020-18460 State: PUBLISHED Published: 2021-08-12T18:13:19 Last Updated: 2024-08-04T14:00:49.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability exists in 711cms v1.0.7 that can add an admin account via admin.php?c=Admin&m=content. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/linchg/711cms/issues/
CVE ID: CVE-2020-18462 State: PUBLISHED Published: 2021-08-12T18:30:19 Last Updated: 2024-08-04T14:00:49.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerabilty in AikCms v2.0.0 in poster_edit.php because the background file management office does not verify the uploaded file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Richard1266/aikcms/issues/1
CVE ID: CVE-2020-18463 State: PUBLISHED Published: 2021-08-12T18:36:05 Last Updated: 2024-08-04T14:00:49.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability exists in v2.0.0 in video_list.php, which can let a malicious user delete a video message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Richard1266/aikcms/issues/2
CVE ID: CVE-2020-18464 State: PUBLISHED Published: 2021-08-12T18:39:53 Last Updated: 2024-08-04T14:00:49.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in AikCms 2.0.0 in video_list.php, which can let a malicious user delete movie information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Richard1266/aikcms/issues/2
CVE ID: CVE-2020-18467 State: PUBLISHED Published: 2021-08-26T17:28:41 Last Updated: 2024-08-04T14:00:49.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerabilty exists in BigTree-CMS 4.4.3 in the tag name field found in the Tags page under the General menu via a crafted website name by doing an authenticated POST HTTP request to admin/tags/create. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigtreecms/BigTree-CMS/issues/364
CVE ID: CVE-2020-18468 State: PUBLISHED Published: 2021-08-26T17:28:43 Last Updated: 2024-08-04T14:00:49.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability exists in qdPM 9.1 in the Heading field found in the Login Page page under the General menu via a crafted website name by doing an authenticated POST HTTP request to /qdPM_9.1/index.php/configuration. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/joelister/Persistent-XSS-on-qdPM-9.1/issues/2
CVE ID: CVE-2020-18469 State: PUBLISHED Published: 2021-08-26T17:28:45 Last Updated: 2024-08-04T14:00:49.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored cross-site scripting (XSS) vulnerability in the Copyright Text field found in the Application page under the Configuration menu in Rukovoditel 2.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authenticated POST HTTP request to /rukovoditel_2.4.1/index.php?module=configuration/save&redirect_to=configuration/application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/joelister/Persistent-XSS-on-qdPM-9.1/issues/3 - https://gith
: - CVE Program Container: References: - https://github.com/joelister/Persistent-XSS-on-qdPM-9.1/issues/3 - https://github.com/joelister/Persistent-XSS-on-qdPM-9.1/issues/5
CVE ID: CVE-2020-18470 State: PUBLISHED Published: 2021-08-26T17:28:46 Last Updated: 2024-08-04T14:00:49.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored cross-site scripting (XSS) vulnerability in the Name of application field found in the General Configuration page in Rukovoditel 2.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authenticated POST HTTP request to rukovoditel_2.4.1/install/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/joelister/Persistent-XSS-on-qdPM-9.1/issues/3 - https://github.com/joelister/Persistent-XSS-on-qdPM-9.1/issues/4
CVE ID: CVE-2020-18475 State: PUBLISHED Published: 2021-08-26T17:28:49 Last Updated: 2024-08-04T14:00:49.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerabilty exists in Hucart CMS 5.7.4 is via the mes_title field. The first user inserts a malicious script into the header field of the outbox and sends it to other users. When other users open the email, the malicious code will be executed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/joelister/bug/issues/7
CVE ID: CVE-2020-18476 State: PUBLISHED Published: 2021-08-26T17:28:51 Last Updated: 2024-08-04T14:00:49.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Hucart CMS 5.7.4 via the basic information field found in the avatar usd_image field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/joelister/bug/issues/9
CVE ID: CVE-2020-18477 State: PUBLISHED Published: 2021-08-26T17:28:52 Last Updated: 2024-08-04T14:00:49.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message con_content field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/joelister/bug/issues/8
CVE ID: CVE-2020-18494 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-07T15:45:03.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/magicSwordsMan/PAAFS/tree/master/vul12
CVE ID: CVE-2020-18544 State: PUBLISHED Published: 2021-07-12T19:39:41 Last Updated: 2024-08-04T14:00:49.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in WMS v1.0 allows remote attackers to execute arbitrary code via the "username" parameter in the component "chkuser.php". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FeMiner/wms/issues/5
CVE ID: CVE-2020-18568 State: PUBLISHED Published: 2021-02-02T13:22:19 Last Updated: 2024-08-04T14:00:49.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D-Link DSR-250 (3.14) DSR-1000N (2.11B201) UPnP service contains a command injection vulnerability, which can cause remote command execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://gist.github.com/WinMin/5b2bc43b517503472bb28a298981ed5a
CVE ID: CVE-2020-18646 State: PUBLISHED Published: 2021-06-22T14:25:41 Last Updated: 2024-08-04T14:00:49.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PearlyNautilus/Security-Code-Review/issues/5
CVE ID: CVE-2020-18647 State: PUBLISHED Published: 2021-06-22T14:25:44 Last Updated: 2024-08-04T14:00:49.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/nonecms/vendor". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PearlyNautilus/Security-Code-Review/issues/5