Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-15258 State: PUBLISHED Published: 2020-10-16T16:50:19 Last Updated: 2024-08-04T13:15:18.937Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: wireapp Products: wire-desktop Problem Types: CWE-20 Description: In Wire before 3.20.x, `shell.openExternal` was used without checking the URL. This vulnerability allows an attacker to execute code on the victims machine by sending messages containing links with arbitrary protocols. The victim has to interact with the link and sees the URL that is opened. The issue was patched by implementing a helper function which checks if the URL's protocol is common. If it is common, the URL will be opened externally.
ting a helper function which checks if the URL's protocol is common. If it is common, the URL will be opened externally. If not, the URL will not be opened and a warning appears for the user informing them that a probably insecure URL was blocked from being executed. The issue is patched in Wire 3.20.x. More technical details about exploitation are available in the linked advisory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wireapp/wire-desktop/security/advisories/GHSA-5gpx-9976-ggpm - https://github.com/wireapp/wire-desktop/commit/b3705fffa75a03f055530f55a754face5ac0623b - https://benjamin-altpeter.de/shell-openexternal-dangers/
CVE ID: CVE-2020-15259 State: PUBLISHED Published: 2020-11-06T19:35:15 Last Updated: 2024-08-04T13:15:18.939Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: auth0 Products: ad-ldap-connector Problem Types: CWE-352 Description: ad-ldap-connector's admin panel before version 5.0.13 does not provide csrf protection, which when exploited may result in remote code execution or confidential data loss. CSRF exploits may occur if the user visits a malicious page containing CSRF payload on the same machine that has access to the ad-ldap-connector admin console via a browser. You may be affected if you use the admin console included with ad-ldap-connector versions <=5.
in console via a browser. You may be affected if you use the admin console included with ad-ldap-connector versions <=5.0.12. If you do not have ad-ldap-connector admin console enabled or do not visit any other public URL while on the machine it is installed on, you are not affected. The issue is fixed in version 5.0.13. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/auth0/ad-ldap-connector/security/advisories/GHSA-vx5q-cp9v-427v - https://github.com/auth0/ad-ldap-connector/commit/8b793631ec5ecacf63ff3ece23231a9e138ae911
CVE ID: CVE-2020-15260 State: PUBLISHED Published: 2021-03-10T22:30:16 Last Updated: 2024-08-04T13:15:19.022Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: pjsip Products: pjproject Problem Types: CWE-297 Description: PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In version 2.10 and earlier, PJSIP transport can be reused if they have the same IP address + port + protocol. However, this is insufficient for secure transport since it lacks remote hostname authentication. Suppose we have created a TLS connection to `sip.foo.com`, which has
port since it lacks remote hostname authentication. Suppose we have created a TLS connection to `sip.foo.com`, which has an IP address `100.1.1.1`. If we want to create a TLS connection to another hostname, say `sip.bar.com`, which has the same IP address, then it will reuse that existing connection, even though `100.1.1.1` does not have certificate to authenticate as `sip.bar.com`. The vulnerability allows for an insecure interaction without user awareness. It affects users who need access to connections to different destinations that translate to the same address, and allows man-in-the-middle attack if attacker can route a connection to another destination such as in the case of DNS spoofi
ows man-in-the-middle attack if attacker can route a connection to another destination such as in the case of DNS spoofing. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjsip/pjproject/security/advisories/GHSA-8hcp-hm38-mfph - https://github.com/pjsip/pjproject/commit/67e46c1ac45ad784db5b9080f5ed8b133c122872 - https://github.com/pjsip/pjproject/pull/2663 - https://security.gentoo.org/glsa/202107-42
CVE ID: CVE-2020-15261 State: PUBLISHED Published: 2020-10-19T21:30:18 Last Updated: 2024-08-04T13:15:19.022Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: veyon Products: veyon Problem Types: CWE-428 Description: On Windows the Veyon Service before version 4.4.2 contains an unquoted service path vulnerability, allowing locally authenticated users with administrative privileges to run malicious executables with LocalSystem privileges. Since Veyon users (both students and teachers) usually don't have administrative privileges, this vulnerability is only dangerous in anyway unsafe setups. The problem has been fixed in version 4.4.2. As a workaround, the exploita
ty is only dangerous in anyway unsafe setups. The problem has been fixed in version 4.4.2. As a workaround, the exploitation of the vulnerability can be prevented by revoking administrative privileges from all potentially untrustworthy users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/veyon/veyon/security/advisories/GHSA-c8cc-x786-hqqp - https://github.com/veyon/veyon/issues/657 - https://github.com/veyon/veyon/commit/f231ec511b9a09f43f49b2c7bb7c60b8046276b1 - http://packetstormsecurity.com/files/162873/Veyon-4.4.1-Unquoted-Service-Path.html - https://www.exploit-db.com/exploits/49925 - https://www.exploit-db.com/exploits/48246
CVE ID: CVE-2020-15262 State: PUBLISHED Published: 2020-10-19T20:10:18 Last Updated: 2024-08-04T13:15:19.047Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: waysact Products: webpack-subresource-integrity Problem Types: CWE-345 Description: In webpack-subresource-integrity before version 1.5.1, all dynamically loaded chunks receive an invalid integrity hash that is ignored by the browser, and therefore the browser cannot validate their integrity. This removes the additional level of protection offered by SRI for such chunks. Top-level chunks are unaffected. This issue is patched in version 1.5.1. Additional Analyst Notes: - CVE Program Container: References: -
are unaffected. This issue is patched in version 1.5.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/waysact/webpack-subresource-integrity/security/advisories/GHSA-4fc4-chg7-h8gh - https://github.com/waysact/webpack-subresource-integrity/issues/131 - https://github.com/waysact/webpack-subresource-integrity/commit/3d7090c08c333fcfb10ad9e2d6cf72e2acb7d87f
CVE ID: CVE-2020-15263 State: PUBLISHED Published: 2020-10-19T20:35:17 Last Updated: 2024-08-04T13:15:20.026Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: orchidsoftware Products: platform Problem Types: CWE-79 Description: In platform before version 9.4.4, inline attributes are not properly escaped. If the data that came from users was not escaped, then an XSS vulnerability is possible. The issue was introduced in 9.0.0 and fixed in 9.4.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/orchidsoftware/platform/security/advisories/GHSA-589w-hccm-265x - https://github.com/orchidsoftware/platform/commit/03f9a113b1a70bc5075ce8
tform/security/advisories/GHSA-589w-hccm-265x - https://github.com/orchidsoftware/platform/commit/03f9a113b1a70bc5075ce86a918707f0e7d82169
CVE ID: CVE-2020-15264 State: PUBLISHED Published: 2020-10-20T20:25:17 Last Updated: 2024-08-04T13:15:19.037Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: chocolatey Products: boxstarter Problem Types: CWE-668, CWE-73 Description: The Boxstarter installer before version 2.13.0 configures C:\ProgramData\Boxstarter to be in the system-wide PATH environment variable. However, this directory is writable by normal, unprivileged users. To exploit the vulnerability, place a DLL in this directory that a privileged service is looking for. For example, WptsExtensions.dll When Windows starts, it'll execute the code in DllMain() with SYSTEM privileges. Any unprivileged u
, WptsExtensions.dll When Windows starts, it'll execute the code in DllMain() with SYSTEM privileges. Any unprivileged user can execute code with SYSTEM privileges. The issue is fixed in version 3.13.0 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chocolatey/boxstarter/security/advisories/GHSA-rpgx-h675-r3jf - https://github.com/chocolatey/boxstarter/commit/67e320491813550b48900e87105a34ceefdcf633 - https://www.kb.cert.org/vuls/id/208577
CVE ID: CVE-2020-15265 State: PUBLISHED Published: 2020-10-21T20:20:15 Last Updated: 2024-08-04T13:15:19.748Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: tensorflow Products: tensorflow Problem Types: CWE-125 Description: In Tensorflow before version 2.4.0, an attacker can pass an invalid `axis` value to `tf.quantization.quantize_and_dequantize`. This results in accessing a dimension outside the rank of the input tensor in the C++ kernel implementation. However, dim_size only does a DCHECK to validate the argument and then uses it to access the corresponding element of an array. Since in normal builds, `DCHECK`-like macros are no-ops, this results in seg
cess the corresponding element of an array. Since in normal builds, `DCHECK`-like macros are no-ops, this results in segfault and access out of bounds of the array. The issue is patched in eccb7ec454e6617738554a255d77f08e60ee0808 and TensorFlow 2.4.0 will be released containing the patch. TensorFlow nightly packages after this commit will also have the issue resolved. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rrfp-j2mp-hq9c - https://github.com/tensorflow/tensorflow/issues/42105 - https://github.com/tensorflow/tensorflow/commit/eccb7ec454e6617738554a255d77f08e60ee0808
CVE ID: CVE-2020-15266 State: PUBLISHED Published: 2020-10-21T20:30:16 Last Updated: 2024-08-04T13:15:18.938Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: tensorflow Products: tensorflow Problem Types: CWE-119 Description: In Tensorflow before version 2.4.0, when the `boxes` argument of `tf.image.crop_and_resize` has a very large value, the CPU kernel implementation receives it as a C++ `nan` floating point value. Attempting to operate on this is undefined behavior which later produces a segmentation fault. The issue is patched in eccb7ec454e6617738554a255d77f08e60ee0808 and TensorFlow 2.4.0 will be released containing the patch. TensorFlow nightly packages
4e6617738554a255d77f08e60ee0808 and TensorFlow 2.4.0 will be released containing the patch. TensorFlow nightly packages after this commit will also have the issue resolved. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xwhf-g6j5-j5gc - https://github.com/tensorflow/tensorflow/issues/42129 - https://github.com/tensorflow/tensorflow/pull/42143/commits/3ade2efec2e90c6237de32a19680caaa3ebc2845
CVE ID: CVE-2020-15269 State: PUBLISHED Published: 2020-10-20T20:15:14 Last Updated: 2024-08-04T13:15:18.944Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: spree Products: spree Problem Types: CWE-287, CWE-613 Description: In Spree before versions 3.7.11, 4.0.4, or 4.1.11, expired user tokens could be used to access Storefront API v2 endpoints. The issue is patched in versions 3.7.11, 4.0.4 and 4.1.11. A workaround without upgrading is described in the linked advisory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/spree/spree/security/advisories/GHSA-f8cm-364f-q9qh - https://github.com/spree/spree/commit/e43643abfe51f54b
/github.com/spree/spree/security/advisories/GHSA-f8cm-364f-q9qh - https://github.com/spree/spree/commit/e43643abfe51f54bd9208dd02298b366e9b9a847
CVE ID: CVE-2020-15270 State: PUBLISHED Published: 2020-10-22T21:25:16 Last Updated: 2024-08-04T13:15:19.922Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: parse-community Products: parse-server Problem Types: CWE-672 Description: Parse Server (npm package parse-server) broadcasts events to all clients without checking if the session token is valid. This allows clients with expired sessions to still receive subscription objects. It is not possible to create subscription objects with invalid session tokens. The issue is not patched. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/parse-community/parse-server/security/advi
onal Analyst Notes: - CVE Program Container: References: - https://github.com/parse-community/parse-server/security/advisories/GHSA-2xm2-xj2q-qgpj - https://github.com/parse-community/parse-server/commit/78b59fb26b1c36e3cdbd42ba9fec025003267f58 - https://npmjs.com/parse-server
CVE ID: CVE-2020-15271 State: PUBLISHED Published: 2020-10-26T18:10:36 Last Updated: 2024-08-04T13:15:19.024Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: d0c-s4vage Products: lookatme Problem Types: CWE-78 Description: In lookatme (python/pypi package) versions prior to 2.3.0, the package automatically loaded the built-in "terminal" and "file_loader" extensions. Users that use lookatme to render untrusted markdown may have malicious shell commands automatically run on their system. This is fixed in version 2.3.0. As a workaround, the `lookatme/contrib/terminal.py` and `lookatme/contrib/file_loader.py` files may be manually deleted. Additionally, it is
`lookatme/contrib/terminal.py` and `lookatme/contrib/file_loader.py` files may be manually deleted. Additionally, it is always recommended to be aware of what is being rendered with lookatme. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d0c-s4vage/lookatme/security/advisories/GHSA-c84h-w6cr-5v8q - https://github.com/d0c-s4vage/lookatme/pull/110 - https://github.com/d0c-s4vage/lookatme/commit/72fe36b784b234548d49dae60b840c37f0eb8d84 - https://github.com/d0c-s4vage/lookatme/releases/tag/v2.3.0 - https://pypi.org/project/lookatme/#history
CVE ID: CVE-2020-15272 State: PUBLISHED Published: 2020-10-26T18:20:20 Last Updated: 2024-08-04T13:15:19.802Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: ericcornelissen Products: git-tag-annotation-action Problem Types: CWE-78 Description: In the git-tag-annotation-action (open source GitHub Action) before version 1.0.1, an attacker can execute arbitrary (*) shell commands if they can control the value of [the `tag` input] or manage to alter the value of [the `GITHUB_REF` environment variable]. The problem has been patched in version 1.0.1. If you don't use the `tag` input you are most likely safe. The `GITHUB_REF` environment variable is protected by the
.1. If you don't use the `tag` input you are most likely safe. The `GITHUB_REF` environment variable is protected by the GitHub Actions environment so attacks from there should be impossible. If you must use the `tag` input and cannot upgrade to `> 1.0.0` make sure that the value is not controlled by another Action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ericcornelissen/git-tag-annotation-action/security/advisories/GHSA-hgx2-4pp9-357g - https://github.com/ericcornelissen/git-tag-annotation-action/commit/9f30756375cc4b1b6c66f274fc9c591fa901455a - https://github.com/ericcornelissen/git-tag-annotation-action/releases/tag/v1.0.1
CVE ID: CVE-2020-15273 State: PUBLISHED Published: 2020-10-30T19:10:16 Last Updated: 2024-08-04T13:15:19.029Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: baserproject Products: basercms Problem Types: CWE-79 Description: baserCMS before version 4.4.1 is vulnerable to Cross-Site Scripting. The issue affects the following components: Edit feed settings, Edit widget area, Sub site new registration, New category registration. Arbitrary JavaScript may be executed by entering specific characters in the account that can access the file upload function category list, subsite setting list, widget area edit, and feed list on the management screen. The issue was intr
nction category list, subsite setting list, widget area edit, and feed list on the management screen. The issue was introduced in version 4.0.0. It is fixed in version 4.4.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/baserproject/basercms/security/advisories/GHSA-wpww-4jf4-4hx8 - https://packagist.org/packages/baserproject/basercms - https://github.com/baserproject/basercms/commit/b70474ef9dcee6ad8826360884625dc7ca9041a1
CVE ID: CVE-2020-15274 State: PUBLISHED Published: 2020-10-26T18:35:19 Last Updated: 2024-08-04T13:15:19.876Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: Requarks Products: wiki.js Problem Types: CWE-79 Description: In Wiki.js before version 2.5.162, an XSS payload can be injected in a page title and executed via the search results. While the title is properly escaped in both the navigation links and the actual page title, it is not the case in the search results. Commit a57d9af34c15adbf460dde6553d964efddf433de fixes this vulnerability (version 2.5.162) by properly escaping the text content displayed in the search results. Additional Analyst Notes: - CVE
(version 2.5.162) by properly escaping the text content displayed in the search results. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Requarks/wiki/security/advisories/GHSA-pgjv-84m7-62q7 - https://github.com/Requarks/wiki/commit/a57d9af34c15adbf460dde6553d964efddf433de - https://docs.requarks.io/releases
CVE ID: CVE-2020-15275 State: PUBLISHED Published: 2020-11-11T15:45:15 Last Updated: 2024-08-04T13:15:19.004Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: moinwiki Products: moin-1.9 Problem Types: CWE-79 Description: MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file that contains malicious javascript. This javascript will be executed in a user's browser when the user is viewing that SVG file on the wiki. Users are strongly advised to upgrade to a patched version. MoinMoin Wiki 1.9.11 has the necessary fixes and also contains other important fixes. Additional Analyst Notes: - CVE Program
in Wiki 1.9.11 has the necessary fixes and also contains other important fixes. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moinwiki/moin-1.9/security/advisories/GHSA-4q96-6xhq-ff43 - https://github.com/moinwiki/moin-1.9/releases/tag/1.9.11 - https://github.com/moinwiki/moin-1.9/commit/31de9139d0aabc171e94032168399b4a0b2a88a2 - https://advisory.checkmarx.net/advisory/CX-2020-4285
CVE ID: CVE-2020-15276 State: PUBLISHED Published: 2020-10-30T18:55:15 Last Updated: 2024-08-04T13:15:19.024Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: baserproject Products: basercms Problem Types: CWE-79 Description: baserCMS before version 4.4.1 is vulnerable to Cross-Site Scripting. Arbitrary JavaScript may be executed by entering a crafted nickname in blog comments. The issue affects the blog comment component. It is fixed in version 4.4.1. Additional Analyst Notes: - CVE Program Container: References: - https://basercms.net/security/20201029 - https://github.com/baserproject/basercms/security/advisories/GHSA-fw5q-j9p4-3vxg - https://github.com/base
ty/20201029 - https://github.com/baserproject/basercms/security/advisories/GHSA-fw5q-j9p4-3vxg - https://github.com/baserproject/basercms/commit/d14f506385f21d67d5ff3462f204d4c2321b7c54
CVE ID: CVE-2020-15277 State: PUBLISHED Published: 2020-10-30T17:30:16 Last Updated: 2024-08-04T13:15:19.021Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: baserproject Products: basercms Problem Types: CWE-434 Description: baserCMS before version 4.4.1 is affected by Remote Code Execution (RCE). Code may be executed by logging in as a system administrator and uploading an executable script file such as a PHP file. The Edit template component is vulnerable. The issue is fixed in version 4.4.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/baserproject/basercms/security/advisories/GHSA-6fmv-q269-55cw - https://basercms.ne
er: References: - https://github.com/baserproject/basercms/security/advisories/GHSA-6fmv-q269-55cw - https://basercms.net/security/20201029 - https://github.com/baserproject/basercms/commit/bb027c3967b0430adcff2d2fedbc23d39077563b
CVE ID: CVE-2020-15278 State: PUBLISHED Published: 2020-10-28T16:35:15 Last Updated: 2024-08-04T13:15:20.121Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Cog-Creators Products: Red-DiscordBot Problem Types: CWE-863 Description: Red Discord Bot before version 3.4.1 has an unauthorized privilege escalation exploit in the Mod module. This exploit allows Discord users with a high privilege level within the guild to bypass hierarchy checks when the application is in a specific condition that is beyond that user's control. By abusing this exploit, it is possible to perform destructive actions within the guild the user has high privileges in. This exploit has bee
it, it is possible to perform destructive actions within the guild the user has high privileges in. This exploit has been fixed in version 3.4.1. As a workaround, unloading the Mod module with unload mod or, disabling the massban command with command disable global massban can render this exploit not accessible. We still highly recommend updating to 3.4.1 to completely patch this issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cog-Creators/Red-DiscordBot/security/advisories/GHSA-mp9m-g7qj-6vqr - https://github.com/Cog-Creators/Red-DiscordBot/commit/726bfd38adfdfaef760412a68e01447b470f438b - https://github.com/Cog-Creators/Red-DiscordBot/releases/tag
DiscordBot/commit/726bfd38adfdfaef760412a68e01447b470f438b - https://github.com/Cog-Creators/Red-DiscordBot/releases/tag/3.4.1
CVE ID: CVE-2020-15279 State: PUBLISHED Published: 2021-05-18T11:00:26.176803Z Last Updated: 2024-09-17T03:43:33.722Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: BItdefenderd Products: Endpoint Security Tools for Windows Problem Types: CWE-284 Description: An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.23.320 allows a regular user to learn the scanning exclusion paths. This issue was discovered during external security research. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/scanning-exclusion
Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/scanning-exclusion-paths-disclosure-in-best-for-windows-va-9380
CVE ID: CVE-2020-15281 State: REJECTED Published: 2021-03-17T12:25:55 Last Updated: 2021-03-17T12:25:55 Description: No description available.
CVE ID: CVE-2020-15282 State: REJECTED Published: 2021-03-17T12:25:55 Last Updated: 2021-03-17T12:25:55 Description: No description available.
CVE ID: CVE-2020-15285 State: REJECTED Published: 2021-03-17T12:25:56 Last Updated: 2021-03-17T12:25:56 Description: No description available.
CVE ID: CVE-2020-15286 State: REJECTED Published: 2021-03-17T12:25:56 Last Updated: 2021-03-17T12:25:56 Description: No description available.
CVE ID: CVE-2020-15287 State: REJECTED Published: 2021-03-17T12:25:57 Last Updated: 2021-03-17T12:25:57 Description: No description available.
CVE ID: CVE-2020-15288 State: REJECTED Published: 2021-03-17T12:25:57 Last Updated: 2021-03-17T12:25:57 Description: No description available.