Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-2969 State: PUBLISHED Published: 2020-07-15T17:34:36 Last Updated: 2024-09-26T20:34:55.610Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Oracle Corporation Products: Oracle Database Problem Types: Difficult to exploit vulnerability allows high privileged attacker having DBA role account privilege with network access via Oracle Net to compromise Data Pump. Successful attacks of this vulnerability can result in takeover of Data Pump. Description: Vulnerability in the Data Pump component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows hig
versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows high privileged attacker having DBA role account privilege with network access via Oracle Net to compromise Data Pump. Successful attacks of this vulnerability can result in takeover of Data Pump. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpujul2020.html
CVE ID: CVE-2020-2971 State: PUBLISHED Published: 2020-07-15T17:34:36 Last Updated: 2024-09-26T20:34:45.803Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Oracle Corporation Products: Application Express Problem Types: Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application Express. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Express, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, inser
CVE ID: CVE-2020-2972 State: PUBLISHED Published: 2020-07-15T17:34:36 Last Updated: 2024-09-26T20:34:35.310Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Oracle Corporation Products: Application Express Problem Types: Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application Express. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Express, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, inser
CVE ID: CVE-2020-2973 State: PUBLISHED Published: 2020-07-15T17:34:36 Last Updated: 2024-09-26T20:34:25.523Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Oracle Corporation Products: Application Express Problem Types: Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application Express. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Express, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, inser
CVE ID: CVE-2020-2974 State: PUBLISHED Published: 2020-07-15T17:34:36 Last Updated: 2024-09-26T20:34:14.186Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Oracle Corporation Products: Application Express Problem Types: Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application Express. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Express, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, inser
CVE ID: CVE-2020-2975 State: PUBLISHED Published: 2020-07-15T17:34:36 Last Updated: 2024-09-26T20:34:00.706Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Oracle Corporation Products: Application Express Problem Types: Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application Express. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Express, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, inser
CVE ID: CVE-2020-2976 State: PUBLISHED Published: 2020-07-15T17:34:36 Last Updated: 2024-09-26T20:33:51.868Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Oracle Corporation Products: Application Express Problem Types: Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application Express. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Express, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, inser
CVE ID: CVE-2020-2977 State: PUBLISHED Published: 2020-07-15T17:34:36 Last Updated: 2024-09-26T20:33:39.223Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Oracle Corporation Products: Application Express Problem Types: Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromise Oracle Application Express. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Express accessible data as well as unauthorized read access
date, insert or delete access to some of Oracle Application Express accessible data as well as unauthorized read access to a subset of Oracle Application Express accessible data. Description: Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromise Oracle Application Express. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle
r. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Express accessible data as well as unauthorized read access to a subset of Oracle Application Express accessible data. CVSS 3.1 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpujul2020.html
CVE ID: CVE-2020-2978 State: PUBLISHED Published: 2020-07-15T00:00:00 Last Updated: 2024-09-27T18:44:51.925Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N) Vendors: Oracle Corporation Products: Oracle Database Problem Types: Easily exploitable vulnerability allows high privileged attacker having DBA role account privilege with network access via Oracle Net to compromise Oracle Database - Enterprise Edition. While the vulnerability is in Oracle Database - Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Database - Enterprise E
this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Database - Enterprise Edition accessible data. Description: Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA role account privilege with network access via Oracle Net to compromise Oracle Database - Enterprise Edition. While the vulnerability is in Oracle Database - Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorize
attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Database - Enterprise Edition accessible data. CVSS 3.1 Base Score 4.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpujul2020.html - https://databasesecurityninja.wordpress.com/2020/12/01/cve-2020-2978-rman-audit-table-point-in-time-recovery-not-logged/ - http://packetstormsecurity.com/files/172183/Oracle-RMAN-Missing-Auditing.html
CVE ID: CVE-2020-2981 State: PUBLISHED Published: 2020-07-15T17:34:36 Last Updated: 2024-09-26T20:33:28.645Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Oracle Corporation Products: Oracle Berkeley DB Problem Types: Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. Description: Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 18.1.4
lnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 18.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-
ditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpujul2020.html
CVE ID: CVE-2020-2982 State: PUBLISHED Published: 2020-07-15T17:34:36 Last Updated: 2024-09-26T20:33:15.977Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: Oracle Corporation Products: Enterprise Manager Base Platform Problem Types: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data. Descripti
l as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data. Description: Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected are 13.3.0.0 and 13.4.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Ent
Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpujul2020.html
CVE ID: CVE-2020-2983 State: PUBLISHED Published: 2020-07-15T17:34:37 Last Updated: 2024-09-26T20:33:04.487Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: Oracle Corporation Products: Data Masking and Subsetting Problem Types: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data Masking and Subsetting. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Data Masking and Subsetting accessible data as well as unauthorized update, insert or delete access to some of Oracle Data Masking and Subsetting accessible data. Descript
as unauthorized update, insert or delete access to some of Oracle Data Masking and Subsetting accessible data. Description: Vulnerability in the Oracle Data Masking and Subsetting product of Oracle Enterprise Manager (component: Data Masking). Supported versions that are affected are 13.3.0.0 and 13.4.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data Masking and Subsetting. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Data Masking and Subsetting accessible data as well as unauthorized update, insert or delete access to some of Oracle Data
a Masking and Subsetting accessible data as well as unauthorized update, insert or delete access to some of Oracle Data Masking and Subsetting accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpujul2020.html
CVE ID: CVE-2020-2984 State: PUBLISHED Published: 2020-07-15T17:34:37 Last Updated: 2024-09-26T20:32:52.528Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: Oracle Corporation Products: Configuration Manager Problem Types: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Configuration Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Configuration Manager accessible data as well as unauthorized update, insert or delete access to some of Oracle Configuration Manager accessible data. Description: Vulnerability in th
pdate, insert or delete access to some of Oracle Configuration Manager accessible data. Description: Vulnerability in the Oracle Configuration Manager product of Oracle Enterprise Manager (component: Discovery and collection script). The supported version that is affected is 12.1.2.0.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Configuration Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Configuration Manager accessible data as well as unauthorized update, insert or delete access to some of Oracle Configuration Manager accessible data.
le data as well as unauthorized update, insert or delete access to some of Oracle Configuration Manager accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpujul2020.html
CVE ID: CVE-2020-35012 State: PUBLISHED Published: 2021-12-01T22:50:10 Last Updated: 2024-08-04T16:55:10.657Z Vendors: Unknown Products: Events Manager Problem Types: CWE-89 Description: The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape a parameter before using it in a SQL statement, leading to an SQL Injection Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/323140b1-66c4-4e7d-85a4-1c922e40866f - https://plugins.trac.wordpress.org/changeset/2336019/events-manager
CVE ID: CVE-2020-35037 State: PUBLISHED Published: 2021-12-01T22:50:11 Last Updated: 2024-08-04T16:55:10.598Z Vendors: Unknown Products: Events Manager Problem Types: CWE-79 Description: The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape some search parameter before outputing them in pages, which could lead to Cross-Site Scripting issues Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset/2336019/events-manager - https://wpscan.com/vulnerability/937b9bdb-7e8e-4ea8-82ec-aa5f6bd70619
CVE ID: CVE-2020-35076 State: REJECTED Published: 2020-12-10T19:49:01 Last Updated: 2020-12-10T19:49:01 Description: No description available.
CVE ID: CVE-2020-35090 State: REJECTED Published: 2020-12-10T19:48:41 Last Updated: 2020-12-10T19:48:41 Description: No description available.
CVE ID: CVE-2020-35110 State: REJECTED Published: 2020-12-10T19:49:31 Last Updated: 2020-12-10T19:49:31 Description: No description available.
CVE ID: CVE-2020-35111 State: PUBLISHED Published: 2021-01-07T13:50:26 Last Updated: 2024-08-04T16:55:10.596Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: The proxy.onRequest API did not catch view-source URLs Description: When an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have inadvertently leaked their IP address. This vulnerability affects Firefox < 84, Thunderbird < 78.6, and Firefox ESR < 78.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/
78.6, and Firefox ESR < 78.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-54/ - https://www.mozilla.org/security/advisories/mfsa2020-56/ - https://www.mozilla.org/security/advisories/mfsa2020-55/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1657916
CVE ID: CVE-2020-35112 State: PUBLISHED Published: 2021-01-07T13:50:05 Last Updated: 2024-08-04T16:55:10.836Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Opening an extension-less download may have inadvertently launched an executable instead Description: If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads directory with the same name but with an executable extension (such as .bat or .exe) that executable would have been launched instead. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability
*Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox < 84, Thunderbird < 78.6, and Firefox ESR < 78.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-54/ - https://www.mozilla.org/security/advisories/mfsa2020-56/ - https://www.mozilla.org/security/advisories/mfsa2020-55/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1661365
CVE ID: CVE-2020-35113 State: PUBLISHED Published: 2021-01-07T13:49:42 Last Updated: 2024-08-04T16:55:10.635Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6 Description: Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 84, Thunderbird < 78.6, and Firefox ESR < 78.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisorie
ESR < 78.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-54/ - https://www.mozilla.org/security/advisories/mfsa2020-56/ - https://www.mozilla.org/security/advisories/mfsa2020-55/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1664831%2C1673589
CVE ID: CVE-2020-35114 State: PUBLISHED Published: 2021-01-07T13:49:08 Last Updated: 2024-08-04T16:55:10.630Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 84 Description: Mozilla developers reported memory safety bugs present in Firefox 83. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 84. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-54/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1607449%2C1640416%2C1656459%2C1669914%2C1673567
CVE ID: CVE-2020-35121 State: PUBLISHED Published: 2020-12-15T22:07:41 Last Updated: 2024-08-04T16:55:10.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could insert arbitrary JavaScript into saved macro parameters that would execute when a user viewed a page with that instance of the macro. Additional Analyst Notes: - CVE Program Container: References: - https://bitbucket.org/keysight/keysight-plugins-for-atlassian-products/wiki/Confluence%20Plugins/Database%20Plugin
CVE ID: CVE-2020-35122 State: PUBLISHED Published: 2020-12-15T22:07:30 Last Updated: 2024-08-04T16:55:10.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could bypass the access controls for using a saved database connection profile to submit arbitrary SQL against a saved database connection. Additional Analyst Notes: - CVE Program Container: References: - https://bitbucket.org/keysight/keysight-plugins-for-atlassian-products/wiki/Confluence%20Plugins/Database%20Plugin
CVE ID: CVE-2020-35123 State: PUBLISHED Published: 2020-12-17T03:52:42 Last Updated: 2024-08-04T16:55:10.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zimbra Collaboration Suite Network Edition versions < 9.0.0 P10 and 8.8.15 P17, there exists an XXE vulnerability in the saml consumer store extension, which is vulnerable to XXE attacks. This has been fixed in Zimbra Collaboration Suite Network edition 9.0.0 Patch 10 and 8.8.15 Patch 17. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.zimbra.com/wiki/Security_Center - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P10 - https://wik
//wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P10 - https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P17