Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-13421 State: PUBLISHED Published: 2021-04-06T20:21:49 Last Updated: 2024-08-04T12:18:17.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenIAM before 4.2.0.3 has Incorrect Access Control for the Create User, Modify User Permissions, and Password Reset actions. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/284.html - https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md
CVE ID: CVE-2020-13422 State: PUBLISHED Published: 2021-04-06T20:24:39 Last Updated: 2024-08-04T12:18:17.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/* administrative actions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md - https://cwe.mitre.org/data/definitions/862.html
CVE ID: CVE-2020-13423 State: PUBLISHED Published: 2020-06-29T13:15:48 Last Updated: 2024-08-04T12:18:18.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Form Builder 2.1.0 for Magento has multiple XSS issues that can be exploited against Magento 2 admin accounts via the Current_url or email field, or the User-Agent HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://anothernetsecblog.com - https://landofcoder.com/magento-2-form-builder.html - https://anothernetsecblog.com/magento-2-extension-security/
CVE ID: CVE-2020-13424 State: PUBLISHED Published: 2020-05-23T18:27:30 Last Updated: 2024-08-04T12:18:18.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.xcloner.com/xcloner-news/security-release-available-for-archived-joomla-version/
CVE ID: CVE-2020-13425 State: PUBLISHED Published: 2020-05-23T19:07:31 Last Updated: 2024-08-04T12:18:18.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: TrackR devices through 2020-05-06 allow attackers to trigger the Beep (aka alarm) feature, which will eventually cause a denial of service when battery capacity is exhausted. Additional Analyst Notes: - CVE Program Container: References: - https://secretdiary.ninja/index.php/2020/05/06/trackr-users-private-information-exposed/
CVE ID: CVE-2020-13426 State: PUBLISHED Published: 2020-06-22T17:09:19 Last Updated: 2024-08-04T12:18:18.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Multi-Scheduler plugin 1.0.0 for WordPress has a Cross-Site Request Forgery (CSRF) vulnerability in the forms it presents, allowing the possibility of deleting records (users) when an ID is known. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/UnD3sc0n0c1d0 - https://wordpress.org/plugins/multi-scheduler/#developers - https://infayer.com/archivos/448 - https://www.exploit-db.com/exploits/48532 - https://packetstormsecurity.com/files/157867/WordPress-Multi-Scheduler-1.0.0-Cross-Site-Re
ploit-db.com/exploits/48532 - https://packetstormsecurity.com/files/157867/WordPress-Multi-Scheduler-1.0.0-Cross-Site-Request-Forgery.html - https://cxsecurity.com/issue/WLB-2020050235 - https://0day.today/exploit/34496 - https://research-labs.net/search/exploits/wordpress-plugin-multi-scheduler-100-cross-site-request-forgery-delete-user
CVE ID: CVE-2020-13427 State: PUBLISHED Published: 2020-06-22T17:34:56 Last Updated: 2024-08-04T12:18:18.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Victor CMS 1.0 has Persistent XSS in admin/users.php?source=add_user via the user_name, user_firstname, or user_lastname parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VictorAlagwu/CMSsite/commits/master - https://www.exploit-db.com/exploits/48511
CVE ID: CVE-2020-13428 State: PUBLISHED Published: 2020-06-08T18:13:04 Last Updated: 2024-08-04T12:18:18.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c in VideoLAN VLC media player before 3.0.11 for macOS/iOS allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted H.264 Annex-B video (.avi for example) file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/videolan/vlc/commits/master/modules/packetizer/hxxx_nal.c - http://git.videolan.org/?p=vlc/vlc-3.0.git%3Ba=commit%3Bh=d5c43c21c747ff30e
mmits/master/modules/packetizer/hxxx_nal.c - http://git.videolan.org/?p=vlc/vlc-3.0.git%3Ba=commit%3Bh=d5c43c21c747ff30ed19fcca745dea3481c733e0 - https://github.com/videolan/vlc-3.0/releases/tag/3.0.11 - https://www.debian.org/security/2020/dsa-4704 - https://www.videolan.org/security/sb-vlc3011.html
CVE ID: CVE-2020-13429 State: PUBLISHED Published: 2020-05-24T17:24:26 Last Updated: 2024-08-04T12:18:18.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: legend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS via the Values Header (aka legend header) option. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/grafana/piechart-panel/releases/tag/v1.5.0 - https://github.com/grafana/piechart-panel/issues/218
CVE ID: CVE-2020-13430 State: PUBLISHED Published: 2020-05-24T17:24:18 Last Updated: 2024-08-04T12:18:18.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/grafana/grafana/releases/tag/v7.0.0 - https://github.com/grafana/grafana/pull/24539 - https://security.netapp.com/advisory/ntap-20200528-0003/
CVE ID: CVE-2020-13431 State: PUBLISHED Published: 2020-06-16T12:26:26 Last Updated: 2024-08-04T12:18:18.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: I2P before 0.9.46 allows local users to gain privileges via a Trojan horse I2PSvc.exe file because of weak permissions on a certain %PROGRAMFILES% subdirectory. Additional Analyst Notes: - CVE Program Container: References: - https://geti2p.net/en - https://blog.blazeinfosec.com/security-advisory-i2p-for-windows-local-privilege-escalation/
CVE ID: CVE-2020-13432 State: PUBLISHED Published: 2020-06-08T17:25:10 Last Updated: 2024-08-04T12:18:18.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP requests with a long URI or long HTTP headers. Additional Analyst Notes: - CVE Program Container: References: - https://www.rejetto.com/hfs/?f=wn - https://github.com/rejetto/hfs2/commit/b8ebfc4e22948e1a61506cd66e397b61ea5ea5de - http://packetstormsecurity.com/files/157980/HFS-Http-File-Server-2.3m-Build-300-Buffer-Overflow.html - http://h
5ea5de - http://packetstormsecurity.com/files/157980/HFS-Http-File-Server-2.3m-Build-300-Buffer-Overflow.html - http://hyp3rlinx.altervista.org/advisories/HFS-HTTP-FILE-SERVER-v2.3-REMOTE-BUFFER-OVERFLOW-DoS.txt - https://packetstormsecurity.com/files/157980/HFS-Http-File-Server-2.3m-Build-300-Buffer-Overflow.html - http://seclists.org/fulldisclosure/2020/Jun/13 - http://seclists.org/fulldisclosure/2021/Apr/12
CVE ID: CVE-2020-13433 State: PUBLISHED Published: 2020-05-24T21:38:38 Last Updated: 2024-08-04T12:18:18.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jason2605 AdminPanel 4.0 allows SQL Injection via the editPlayer.php hidden parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Jason2605/AdminPanel/pull/41 - https://news.websec.nl/news-cve-report-0.html
CVE ID: CVE-2020-13434 State: PUBLISHED Published: 2020-05-24T21:55:27 Last Updated: 2024-08-04T12:18:18.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2020/05/msg00024.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/ - https://usn.ubuntu.com/4394-1/ - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.sqlite.org/src/info/23439ea582241138 - https://www.sqlite.org/src/info/d08d3405
ity-alerts/cpujul2020.html - https://www.sqlite.org/src/info/23439ea582241138 - https://www.sqlite.org/src/info/d08d3405878d394e - https://security.netapp.com/advisory/ntap-20200528-0004/ - https://security.gentoo.org/glsa/202007-26 - https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc - https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html - http://seclists.org/fulldisclosure/2020/Nov/19 - http://seclists.org/fulldisclosure/2020/Nov/20 - http://seclists.org/fulldisclosure/2020/Nov/22 - http://seclists.org/fulldisclosure/2020/Dec/32 - https://support.apple.com/kb/HT211843 - https://support.apple.com/kb/HT211850 - https://support.apple.com/kb/HT211844 - https://su
pport.apple.com/kb/HT211843 - https://support.apple.com/kb/HT211850 - https://support.apple.com/kb/HT211844 - https://support.apple.com/kb/HT211931 - https://www.oracle.com/security-alerts/cpuApr2021.html - https://support.apple.com/kb/HT211952 - https://support.apple.com/kb/HT211935 - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2020-13435 State: PUBLISHED Published: 2020-05-24T21:55:17 Last Updated: 2024-08-04T12:18:18.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/ - https://usn.ubuntu.com/4394-1/ - https://www.oracle.com/security-alerts/cpujul2020.html - https://security.netapp.com/advisory/ntap-20200528-0004/ - https://www.sqlite.org/src/info/7a5279a25c57adf1 - https://security.gentoo.org/glsa/202007-26 - https
p-20200528-0004/ - https://www.sqlite.org/src/info/7a5279a25c57adf1 - https://security.gentoo.org/glsa/202007-26 - https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc - http://seclists.org/fulldisclosure/2020/Nov/19 - http://seclists.org/fulldisclosure/2020/Nov/20 - http://seclists.org/fulldisclosure/2020/Nov/22 - http://seclists.org/fulldisclosure/2020/Dec/32 - https://support.apple.com/kb/HT211843 - https://support.apple.com/kb/HT211850 - https://support.apple.com/kb/HT211844 - https://support.apple.com/kb/HT211931 - https://www.oracle.com/security-alerts/cpuApr2021.html - https://support.apple.com/kb/HT211952 - https://support.apple.com/kb/HT211935
CVE ID: CVE-2020-13438 State: PUBLISHED Published: 2020-05-24T22:29:36 Last Updated: 2024-08-04T12:18:18.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: ffjpeg through 2020-02-24 has an invalid read in jfif_encode in jfif.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rockcarry/ffjpeg/issues/23
CVE ID: CVE-2020-13439 State: PUBLISHED Published: 2020-05-24T22:29:04 Last Updated: 2024-08-04T12:18:18.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfif_decode in jfif.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rockcarry/ffjpeg/issues/24
CVE ID: CVE-2020-13440 State: PUBLISHED Published: 2020-05-24T22:29:24 Last Updated: 2024-08-04T12:18:18.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: ffjpeg through 2020-02-24 has an invalid write in bmp_load in bmp.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rockcarry/ffjpeg/issues/22
CVE ID: CVE-2020-13442 State: PUBLISHED Published: 2020-05-25T14:25:00 Last Updated: 2024-08-04T12:18:18.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Remote code execution vulnerability exists in DEXT5Upload in DEXT5 through 2.7.1402870. An attacker can upload a PHP file via dext5handler.jsp handler because the uploaded file is stored under dext5uploadeddata/. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kbgsft/vuln-dext5upload/wiki/File-Upload-to-RCE-in-DEXT5Upload-2.7.1402870-by-xcuter
CVE ID: CVE-2020-13443 State: PUBLISHED Published: 2020-06-24T14:34:44 Last Updated: 2024-08-04T12:18:18.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: ExpressionEngine before 5.3.2 allows remote attackers to upload and execute arbitrary code in a .php%20 file via Compose Msg, Add attachment, and Save As Draft actions. A user with low privileges (member) is able to upload this. It is possible to bypass the MIME type check and file-extension check while uploading new files. Short aliases are not used for an attachment; instead, direct access is allowed to the uploaded files. It is possible to upload PHP only if one has member access, or registration/forum is enabled and one c
e uploaded files. It is possible to upload PHP only if one has member access, or registration/forum is enabled and one can create a member with the default group id of 5. To exploit this, one must to be able to send and compose messages (at least). Additional Analyst Notes: - CVE Program Container: References: - https://expressionengine.com/blog - https://gist.github.com/mariuszpoplwski/51604d8a6d7d78fffdf590c25e844e09
CVE ID: CVE-2020-13444 State: PUBLISHED Published: 2020-06-10T18:17:13 Last Updated: 2024-08-04T12:18:18.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Liferay Portal 7.x before 7.3.2, and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack 5 does not sanitize the information returned by the DDMDataProvider API, which allows remote authenticated users to obtain the password to REST Data Providers. Additional Analyst Notes: - CVE Program Container: References: - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/119317396 - https://issues.liferay.com/browse/LPE-17009
CVE ID: CVE-2020-13445 State: PUBLISHED Published: 2020-06-10T18:09:38 Last Updated: 2024-08-04T12:18:18.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Liferay Portal before 7.3.2 and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack 6, the template API does not restrict user access to sensitive objects, which allows remote authenticated users to execute arbitrary code via crafted FreeMarker and Velocity templates. Additional Analyst Notes: - CVE Program Container: References: - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/119317411 - https://issues.liferay.com/browse/LPE-17023
known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/119317411 - https://issues.liferay.com/browse/LPE-17023 - https://securitylab.github.com/advisories/GHSL-2020-043-liferay_ce
CVE ID: CVE-2020-13448 State: PUBLISHED Published: 2020-06-01T15:19:42 Last Updated: 2024-08-04T12:18:18.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8 allows an authenticated remote attacker to execute code on the server via command injection in the servicestart parameter. Additional Analyst Notes: - CVE Program Container: References: - https://s1gh.sh/cve-2020-13448-quickbox-authenticated-rce/ - http://packetstormsecurity.com/files/157898/QuickBox-Pro-2.1.8-Remote-Code-Execution.html
CVE ID: CVE-2020-13449 State: PUBLISHED Published: 2021-01-07T21:17:06 Last Updated: 2024-08-04T12:18:18.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory traversal vulnerability in the Markdown engine of Gotenberg through 6.2.1 allows an attacker to read any container files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thecodingmachine/gotenberg/issues/199 - http://packetstormsecurity.com/files/160744/Gotenberg-6.2.0-Traversal-Code-Execution-Insecure-Permissions.html
CVE ID: CVE-2020-13450 State: PUBLISHED Published: 2021-01-07T21:17:01 Last Updated: 2024-08-04T12:18:18.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory traversal vulnerability in file upload function of Gotenberg through 6.2.1 allows an attacker to upload and overwrite any writable files outside the intended folder. This can lead to DoS, a change to program behavior, or code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thecodingmachine/gotenberg/issues/199 - http://packetstormsecurity.com/files/160744/Gotenberg-6.2.0-Traversal-Code-Execution-Insecure-Permissions.html
CVE ID: CVE-2020-13451 State: PUBLISHED Published: 2021-01-07T21:16:56 Last Updated: 2024-08-04T12:18:18.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: An incomplete-cleanup vulnerability in the Office rendering engine of Gotenberg through 6.2.1 allows an attacker to overwrite LibreOffice configuration files and execute arbitrary code via macros. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thecodingmachine/gotenberg/issues/199 - http://packetstormsecurity.com/files/160744/Gotenberg-6.2.0-Traversal-Code-Execution-Insecure-Permissions.html
CVE ID: CVE-2020-13452 State: PUBLISHED Published: 2021-01-07T21:16:51 Last Updated: 2024-08-04T12:18:18.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Gotenberg through 6.2.1, insecure permissions for tini (writable by user gotenberg) potentially allow an attacker to overwrite the file, which can lead to denial of service or code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thecodingmachine/gotenberg/issues/199 - http://packetstormsecurity.com/files/160744/Gotenberg-6.2.0-Traversal-Code-Execution-Insecure-Permissions.html
CVE ID: CVE-2020-13458 State: PUBLISHED Published: 2020-05-25T16:34:01 Last Updated: 2024-08-04T12:18:18.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/verbb/image-resizer/blob/craft-3/CHANGELOG.md
CVE ID: CVE-2020-13459 State: PUBLISHED Published: 2020-05-25T16:33:50 Last Updated: 2024-08-04T12:18:18.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/verbb/image-resizer/blob/craft-3/CHANGELOG.md
CVE ID: CVE-2020-13460 State: PUBLISHED Published: 2021-02-09T04:39:38 Last Updated: 2024-08-04T12:18:18.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Request Forgery (CSRF) vulnerabilities were present in Tufin SecureTrack, affecting all versions prior to R20-2 GA. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md
CVE ID: CVE-2020-13461 State: PUBLISHED Published: 2021-02-09T04:45:53 Last Updated: 2024-08-04T12:18:18.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Username enumeration in present in Tufin SecureTrack. It's affecting all versions of SecureTrack. The vendor has decided not to fix this vulnerability. Vendor's response: "This attack requires access to the internal network. If an attacker is part of the internal network, they do not require access to TOS to know the usernames". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md
CVE ID: CVE-2020-13462 State: PUBLISHED Published: 2021-02-09T05:36:01 Last Updated: 2024-08-04T12:18:18.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions prior to R20-2 GA. Fixed in version R20-2 GA. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md
CVE ID: CVE-2020-13463 State: PUBLISHED Published: 2020-08-31T15:21:01 Last Updated: 2024-08-04T12:18:18.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling. Additional Analyst Notes: - CVE Program Container: References: - https://www.usenix.org/system/files/woot20-paper-obermaier.pdf
CVE ID: CVE-2020-13464 State: PUBLISHED Published: 2020-08-31T15:22:24 Last Updated: 2024-08-04T12:18:18.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module. Additional Analyst Notes: - CVE Program Container: References: - https://www.usenix.org/system/files/woot20-paper-obermaier.pdf
CVE ID: CVE-2020-13465 State: PUBLISHED Published: 2020-08-31T15:23:34 Last Updated: 2024-08-04T12:18:18.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: The security protection in Gigadevice GD32F103 devices allows physical attackers to redirect the control flow and execute arbitrary code via the debug interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.usenix.org/system/files/woot20-paper-obermaier.pdf
CVE ID: CVE-2020-13466 State: PUBLISHED Published: 2020-08-31T15:25:01 Last Updated: 2024-08-04T12:18:18.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: STMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration. Additional Analyst Notes: - CVE Program Container: References: - https://www.usenix.org/system/files/woot20-paper-obermaier.pdf
CVE ID: CVE-2020-13467 State: PUBLISHED Published: 2020-08-31T15:26:29 Last Updated: 2024-08-04T12:18:18.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling. Additional Analyst Notes: - CVE Program Container: References: - https://www.usenix.org/system/files/woot20-paper-obermaier.pdf
CVE ID: CVE-2020-13468 State: PUBLISHED Published: 2020-08-31T15:28:03 Last Updated: 2024-08-04T12:18:18.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection into inter-IC bonding wires (which have insufficient physical protection). Additional Analyst Notes: - CVE Program Container: References: - https://www.usenix.org/system/files/woot20-paper-obermaier.pdf
CVE ID: CVE-2020-13469 State: PUBLISHED Published: 2020-08-31T15:29:58 Last Updated: 2024-08-04T12:18:18.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: The flash memory readout protection in Gigadevice GD32VF103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU. Additional Analyst Notes: - CVE Program Container: References: - https://www.usenix.org/system/files/woot20-paper-obermaier.pdf