Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-8091 State: PUBLISHED Published: 2020-01-27T21:48:39 Last Updated: 2024-08-04T09:48:24.936Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AC:H/AV:N/A:N/C:L/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: svg.swf in TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system. This may be at a contrib/websvg/svg.swf pathname. Additional Analyst Notes: - CVE Program Container: References: - https://typo3.org/security/advisory/typo3-psa-2019-003/ - https://www.purplemet.com/blog/typo3-xss-vulnerability
CVE ID: CVE-2020-8092 State: PUBLISHED Published: 2020-01-29T16:00:23.606202Z Last Updated: 2024-09-17T01:00:58.143Z Severity: LOW (CVSS 1.6 CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N) Vendors: Bitdefender Products: Bitdefender Antivirus for Mac Problem Types: CWE-264 Description: A privilege escalation vulnerability in BDLDaemon as used in Bitdefender Antivirus for Mac allows a local attacker to obtain authentication tokens for requests submitted to the Bitdefender Cloud. This issue affects: Bitdefender Bitdefender Antivirus for Mac versions prior to 8.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/privilege-es
alyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/privilege-escalation-in-bitdefender-av-for-mac-va-3499/
CVE ID: CVE-2020-8093 State: PUBLISHED Published: 2020-01-29T16:05:20.241763Z Last Updated: 2024-09-17T02:57:26.727Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Bitdefender Products: Bitdefender Antivirus for Mac Problem Types: CWE-264 Description: A vulnerability in the AntivirusforMac binary as used in Bitdefender Antivirus for Mac allows an attacker to inject a library using DYLD environment variable to cause third-party code execution Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/code-injection-into-bitdefender-antivirus-for-mac-va-3441/
CVE ID: CVE-2020-8094 State: PUBLISHED Published: 2025-01-15T16:12:35.432Z Last Updated: 2025-01-15T16:48:23.541Z Vendors: Bitdefender Products: Antivirus Free 2020 Problem Types: CWE-426 Description: An untrusted search path vulnerability in testinitsigs.exe as used in Bitdefender Antivirus Free 2020 allows a low-privilege attacker to execute code as SYSTEM via a specially crafted DLL file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.bitdefender.com/support/security-advisories/untrusted-search-path-vulnerability-bitdefender-antivirus-free-2020-va-8422/
CVE ID: CVE-2020-8095 State: PUBLISHED Published: 2020-01-30T21:05:20.309492Z Last Updated: 2024-09-17T01:30:56.645Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H) Vendors: Bitdefender Products: Bitdefender Total Security 2020 Problem Types: CWE-59 Description: A vulnerability in the improper handling of junctions before deletion in Bitdefender Total Security 2020 can allow an attacker to to trigger a denial of service on the affected device. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/bitdefender-total-security-link-resolution-denial-service-vulnerability-va-4021 - https://www.zerodayiniti
ty-advisories/bitdefender-total-security-link-resolution-denial-service-vulnerability-va-4021 - https://www.zerodayinitiative.com/advisories/ZDI-20-198/
CVE ID: CVE-2020-8096 State: PUBLISHED Published: 2020-04-07T08:00:22.306076Z Last Updated: 2024-09-16T16:42:32.895Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: Bitdefender Products: High-Level Antimalware SDK for Windows Problem Types: CWE-426 Description: Untrusted Search Path vulnerability in Bitdefender High-Level Antimalware SDK for Windows allows an attacker to load third party code from a DLL library in the search path. This issue affects: Bitdefender High-Level Antimalware SDK for Windows versions prior to 3.0.1.204 . Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/untrusted
Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/untrusted-search-path-vulnerability-high-level-antimalware-sdk-windows/
CVE ID: CVE-2020-8097 State: PUBLISHED Published: 2020-08-30T20:35:15.822830Z Last Updated: 2024-09-17T02:51:32.473Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H) Vendors: Bitdefender Products: Endpoinit Security Tools for Windows, Endpoint Security SDK Problem Types: CWE-287 Description: An improper authentication vulnerability in Bitdefender Endpoint Security Tools for Windows and Bitdefender Endpoint Security SDK allows an unprivileged local attacker to escalate privileges or tamper with the product's security settings. This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.18.261. This issue affects: Bitdefender Endpoint Securit
ender Endpoint Security Tools for Windows versions prior to 6.6.18.261. This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.18.261. Bitdefender Endpoint Security SDK versions prior to 6.6.18.261. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/improper-authentication-vulnerability-bitdefender-endpoint-security-tools-endpoint-security-sdk-va-8646
CVE ID: CVE-2020-8099 State: PUBLISHED Published: 2020-04-21T10:40:15.465328Z Last Updated: 2024-09-16T20:58:15.875Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L) Vendors: Bitdefender Products: Antivirus Free Problem Types: CWE-59 Description: A vulnerability in the improper handling of junctions in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This issue affects: Bitdefender Antivirus Free versions prior to 1.0.17. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/link-resolution-privilege-escalation-vulnerabil
r: References: - https://www.bitdefender.com/support/security-advisories/link-resolution-privilege-escalation-vulnerability-in-bitdefender-antivirus-free-va-8387/
CVE ID: CVE-2020-8100 State: PUBLISHED Published: 2020-05-15T09:20:11.849876Z Last Updated: 2024-09-16T20:43:36.252Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Bitdefender Products: Bitdefender Engines Problem Types: CWE-20 Description: Improper Input Validation vulnerability in the cevakrnl.rv0 module as used in the Bitdefender Engines allows an attacker to trigger a denial of service while scanning a specially-crafted sample. This issue affects: Bitdefender Bitdefender Engines versions prior to 7.84063. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/incomplete-validation-detecti
E Program Container: References: - https://www.bitdefender.com/support/security-advisories/incomplete-validation-detection-code-bitdefender-engines-va-8589/
CVE ID: CVE-2020-8101 State: PUBLISHED Published: 2021-02-02T11:10:14.062948Z Last Updated: 2024-09-17T02:06:52.109Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:L) Vendors: ADT Products: LifeShield DIY HD Video Doorbell Problem Types: CWE-77 Description: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in HTTP interface of ADT LifeShield DIY HD Video Doorbell allows an attacker on the same network to execute commands on the device. This issue affects: ADT LifeShield DIY HD Video Doorbell version 1.0.02R09 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://labs.bitdefender.com/
02R09 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://labs.bitdefender.com/2021/01/cracking-the-lifeshield-unauthorized-live-streaming-in-your-home/
CVE ID: CVE-2020-8102 State: PUBLISHED Published: 2020-06-22T09:35:14.496444Z Last Updated: 2024-09-17T02:11:50.403Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bitdefender Products: Bitdefender Total Security 2020 Problem Types: CWE-20 Description: Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total Security 2020 allows an external, specially crafted web page to run remote commands inside the Safepay Utility process. This issue affects Bitdefender Total Security 2020 versions prior to 24.0.20.116. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisori
. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/insufficient-url-sanitization-validation-safepay-browser-va-8631/
CVE ID: CVE-2020-8103 State: PUBLISHED Published: 2020-06-05T11:10:13.595887Z Last Updated: 2024-09-16T23:36:04.518Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Bitdefender Products: Bitdefender Antivirus Free Problem Types: CWE-59 Description: A vulnerability in the improper handling of symbolic links in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This issue affects Bitdefender Antivirus Free versions prior to 1.0.17.178. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/link-resolution-privilege-e
CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/link-resolution-privilege-escalation-vulnerability-bitdefender-antivirus-free-va-8604/
CVE ID: CVE-2020-8105 State: PUBLISHED Published: 2021-12-20T13:40:10.796365Z Last Updated: 2024-09-17T00:10:38.804Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Abode Products: iota All-In-One Security Kit Problem Types: CWE-78 Description: OS Command Injection vulnerability in the wirelessConnect handler of Abode iota All-In-One Security Kit allows an attacker to inject commands and gain root access. This issue affects: Abode iota All-In-One Security Kit versions prior to 1.0.2.23_6.9V_dev_t2_homekit_RF_2.0.19_s2_kvsABODE oz. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/blog/labs/vulnerabilities-identifi
nal Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-theabode-iota-security-system-fake-image-injectioninto-timeline
CVE ID: CVE-2020-8106 State: REJECTED Published: 2021-03-17T12:30:21 Last Updated: 2021-03-17T12:30:21 Description: No description available.
CVE ID: CVE-2020-8107 State: PUBLISHED Published: 2022-02-18T08:20:11.896490Z Last Updated: 2024-09-16T17:39:04.749Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Bitdefender Products: Antivirus Plus, Internet Security, Total Security Problem Types: CWE-114 Description: A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions prior to 24.0.26.136. Bitdefender Total Security versions prior to 24.0.26.136. Additional Analyst No
Security versions prior to 24.0.26.136. Bitdefender Total Security versions prior to 24.0.26.136. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/process-control-vulnerability-bitdefender-antivirus-plus-va-8709/
CVE ID: CVE-2020-8108 State: PUBLISHED Published: 2020-08-03T11:55:14.875995Z Last Updated: 2024-09-16T17:43:54.443Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Bitdefender Products: Endpoint Security for Mac Problem Types: CWE-287 Description: Improper Authentication vulnerability in Bitdefender Endpoint Security for Mac allows an unprivileged process to restart the main service and potentially inject third-party code into a trusted process. This issue affects: Bitdefender Endpoint Security for Mac versions prior to 4.12.80. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/insufficien
nalyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/insufficient-client-validation-bitdefender-endpoint-security-mac-va-8759/
CVE ID: CVE-2020-8109 State: PUBLISHED Published: 2020-10-01T13:05:23.197488Z Last Updated: 2024-09-17T02:27:57.606Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Bitdefender Products: Bitdefender Engines Problem Types: CWE-787 Description: A vulnerability has been discovered in the ace.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. This can result in denial-of-service. This issue affects: Bitdefender Engines version 7.84892 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisor
s. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/bitdefender-ace-xmd-parser-out-of-bounds-write-va-8772
CVE ID: CVE-2020-8110 State: PUBLISHED Published: 2020-10-02T09:55:17.917005Z Last Updated: 2024-09-16T21:03:42.414Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Bitdefender Products: Bitdefender Engines Problem Types: CWE-824 Description: A vulnerability has been discovered in the ceva_emu.cvd module that results from a lack of proper validation of user-supplied data, which can result in a pointer that is fetched from uninitialized memory. This can lead to denial-of-service. This issue affects: Bitdefender Engines version 7.84897 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/secur
ior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/bitdefender-cevakrnl-xmd-parser-denial-of-service-va-8766
CVE ID: CVE-2020-8111 State: REJECTED Published: 2021-03-17T12:30:22 Last Updated: 2021-03-17T12:30:22 Description: No description available.
CVE ID: CVE-2020-8112 State: PUBLISHED Published: 2020-01-28T17:22:42 Last Updated: 2024-08-04T09:48:25.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2020/01/msg00035.html - https://access.redhat.com/errata/RHSA-2020:0550 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFEVEKETJV7GOXD5RDWL35ESEDHC663E/ - https://access.redhat.com/errata/RHSA-2
e-announce%40lists.fedoraproject.org/message/TFEVEKETJV7GOXD5RDWL35ESEDHC663E/ - https://access.redhat.com/errata/RHSA-2020:0570 - https://access.redhat.com/errata/RHSA-2020:0569 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EFM77GIFWHOECNIERYJQPI2ZJU57GZD5/ - https://access.redhat.com/errata/RHSA-2020:0694 - https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://github.com/uclouvain/openjpeg/issues/1231 - https://www.debian.org/security/2021/dsa-4882
CVE ID: CVE-2020-8113 State: PUBLISHED Published: 2020-03-06T17:20:21 Last Updated: 2024-08-04T09:48:25.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab 10.7 and later through 12.7.2 has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/releases/categories/releases/ - https://gitlab.com/gitlab-org/gitlab/issues/31599 - https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/
CVE ID: CVE-2020-8114 State: PUBLISHED Published: 2020-02-05T14:44:19 Last Updated: 2024-08-04T09:48:25.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab EE 8.9 and later through 12.7.2 has Insecure Permission Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/releases/categories/releases/ - https://gitlab.com/gitlab-org/gitlab/issues/37468 - https://about.gitlab.com/releases/2020/01/30/security-release-gitlab-12-7-4-released/
CVE ID: CVE-2020-8115 State: PUBLISHED Published: 2020-02-04T19:08:57 Last Updated: 2024-08-04T09:48:25.645Z Vendors: n/a Products: https://github.com/revive-adserver/revive-adserver Problem Types: CWE-79 Description: A reflected XSS vulnerability has been discovered in the publicly accessible afr.php delivery script of Revive Adserver <= 5.0.3 by Jacopo Tediosi. There are currently no known exploits: the session identifier cannot be accessed as it is stored in an http-only cookie as of v3.2.2. On older versions, however, under specific circumstances, it could be possible to steal the session identifier and gain access to the admin interface. The query string sent to the www/delivery/afr.php
o steal the session identifier and gain access to the admin interface. The query string sent to the www/delivery/afr.php script was printed back without proper escaping in a JavaScript context, allowing an attacker to execute arbitrary JS code on the browser of the victim. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/775693 - https://www.revive-adserver.com/security/revive-sa-2020-001/
CVE ID: CVE-2020-8116 State: PUBLISHED Published: 2020-02-04T19:08:57 Last Updated: 2024-08-04T09:48:25.632Z Vendors: n/a Products: dot-prop Problem Types: CWE-471 Description: Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/719856 - https://github.com/sindresorhus/dot-prop/tree/v4 - https://github.com/advisories/GHSA-ff7x-qrg7-qggm - https://github.com/sindresorhus/dot-prop/issues/63
CVE ID: CVE-2020-8117 State: PUBLISHED Published: 2020-02-04T19:08:57 Last Updated: 2024-08-04T09:48:25.578Z Vendors: n/a Products: Nextcloud Server Problem Types: CWE-280 Description: Improper preservation of permissions in Nextcloud Server 14.0.3 causes the event details to be leaked when sharing a non-public event. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/439828 - https://nextcloud.com/security/advisory/?id=NC-SA-2020-013
CVE ID: CVE-2020-8118 State: PUBLISHED Published: 2020-02-04T19:08:57 Last Updated: 2024-08-04T09:48:25.506Z Vendors: n/a Products: Nextcloud Server Problem Types: CWE-918 Description: An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote services when adding a new subscription in the calendar application. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/427835 - https://nextcloud.com/security/advisory/?id=NC-SA-2019-014 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00019.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00022.html
CVE ID: CVE-2020-8119 State: PUBLISHED Published: 2020-02-04T19:08:57 Last Updated: 2024-08-04T09:48:25.609Z Vendors: n/a Products: Nextcloud Server Problem Types: CWE-285 Description: Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/719426 - https://nextcloud.com/security/advisory/?id=NC-SA-2019-012 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00019.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00022.html
CVE ID: CVE-2020-8120 State: PUBLISHED Published: 2020-02-04T19:08:57 Last Updated: 2024-08-04T09:48:25.682Z Vendors: n/a Products: Nextcloud Server Problem Types: CWE-79 Description: A reflected Cross-Site Scripting vulnerability in Nextcloud Server 16.0.1 was discovered in the svg generation. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/605915 - https://nextcloud.com/security/advisory/?id=NC-SA-2019-004
CVE ID: CVE-2020-8121 State: PUBLISHED Published: 2020-02-04T19:08:57 Last Updated: 2024-08-04T09:48:25.641Z Vendors: n/a Products: Nextcloud Server Problem Types: CWE-284 Description: A bug in Nextcloud Server 14.0.4 could expose more data in reshared link shares than intended by the sharer. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/452854 - https://nextcloud.com/security/advisory/?id=NC-SA-2019-003
CVE ID: CVE-2020-8122 State: PUBLISHED Published: 2020-02-04T19:08:57 Last Updated: 2024-08-04T09:48:25.648Z Vendors: n/a Products: Nextcloud server Problem Types: CWE-284 Description: A missing check in Nextcloud Server 14.0.3 could give recipient the possibility to extend the expiration date of a share they received. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/447494 - https://nextcloud.com/security/advisory/?id=NC-SA-2019-002
CVE ID: CVE-2020-8123 State: PUBLISHED Published: 2020-02-04T19:08:57 Last Updated: 2024-08-04T09:48:25.652Z Vendors: n/a Products: Strapi Problem Types: CWE-400 Description: A denial of service exists in strapi v3.0.0-beta.18.3 and earlier that can be abused in the admin console using admin rights can lead to arbitrary restart of the application. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/768574
CVE ID: CVE-2020-8124 State: PUBLISHED Published: 2020-02-04T19:08:56 Last Updated: 2024-08-04T09:48:25.621Z Vendors: n/a Products: url-parse Problem Types: CWE-20 Description: Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/496293
CVE ID: CVE-2020-8125 State: PUBLISHED Published: 2020-02-04T19:08:56 Last Updated: 2024-08-04T09:48:25.907Z Vendors: n/a Products: klona npm module Problem Types: CWE-20 Description: Flaw in input validation in npm package klona version 1.1.0 and earlier may allow prototype pollution attack that may result in remote code execution or denial of service of applications using klona. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/778414
CVE ID: CVE-2020-8126 State: PUBLISHED Published: 2020-02-07T14:56:17 Last Updated: 2024-08-04T09:48:25.653Z Vendors: n/a Products: EdgeSwitch Problem Types: Privilege Escalation (CAPEC-233) Description: A privilege escalation in the EdgeSwitch prior to version 1.7.1, an CGI script don't fully sanitize the user input resulting in local commands execution, allowing an operator user (Privilege-1) to escalate privileges and became administrator (Privilege-15). Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/197958