Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-13985 State: PUBLISHED Published: 2020-12-11T21:35:13 Last Updated: 2024-08-04T12:32:14.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Contiki through 3.0. A memory corruption vulnerability exists in the uIP TCP/IP stack component when handling RPL extension headers of IPv6 network packets in rpl_remove_header in net/rpl/rpl-ext-header.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
CVE ID: CVE-2020-13986 State: PUBLISHED Published: 2020-12-11T21:36:06 Last Updated: 2024-08-04T12:32:14.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack component when handling RPL extension headers of IPv6 network packets in rpl_remove_header in net/rpl/rpl-ext-header.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
CVE ID: CVE-2020-13987 State: PUBLISHED Published: 2020-12-11T21:37:06 Last Updated: 2024-08-04T12:32:14.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-541018.pdf
CVE ID: CVE-2020-13988 State: PUBLISHED Published: 2020-12-11T21:37:56 Last Updated: 2024-08-04T12:32:14.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Contiki through 3.0. An Integer Overflow exists in the uIP TCP/IP Stack component when parsing TCP MSS options of IPv4 network packets in uip_process in net/ipv4/uip.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
CVE ID: CVE-2020-13991 State: PUBLISHED Published: 2020-09-24T22:13:16 Last Updated: 2024-08-04T12:32:14.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: vm/opcodes.c in JerryScript 2.2.0 allows attackers to hijack the flow of control by controlling a register. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jerryscript-project/jerryscript/pull/3867 - https://github.com/jerryscript-project/jerryscript/issues/3860 - https://github.com/jerryscript-project/jerryscript/issues/3859 - https://github.com/jerryscript-project/jerryscript/issues/3858 - https://github.com/googleprojectzero/fuzzilli#JerryScript
CVE ID: CVE-2020-13992 State: PUBLISHED Published: 2020-07-09T14:48:52 Last Updated: 2024-08-04T12:32:14.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A Stored XSS issue allows remote unauthenticated attackers to abuse a helpdesk user's logged in session. A user with sufficient privileges to change their login-page image must open a crafted ticket. Additional Analyst Notes: - CVE Program Container: References: - https://loca1gh0s7.github.io/MFH-from-XSS-to-RCE-loca1gh0st-exercise
CVE ID: CVE-2020-13993 State: PUBLISHED Published: 2020-07-09T14:51:14 Last Updated: 2024-08-04T12:32:14.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A blind time-based SQL injection issue allows remote unauthenticated attackers to retrieve information from the database via a ticket. Additional Analyst Notes: - CVE Program Container: References: - https://loca1gh0s7.github.io/MFH-from-XSS-to-RCE-loca1gh0st-exercise/
CVE ID: CVE-2020-13994 State: PUBLISHED Published: 2020-07-09T14:53:43 Last Updated: 2024-08-04T12:32:14.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A privileged user can achieve code execution on the server via a ticket because of improper access control of uploaded resources. This might be exploitable in conjunction with CVE-2020-13992 by an unauthenticated attacker. Additional Analyst Notes: - CVE Program Container: References: - https://loca1gh0s7.github.io/MFH-from-XSS-to-RCE-loca1gh0st-exercise/
CVE ID: CVE-2020-13995 State: PUBLISHED Published: 2020-09-25T12:58:27 Last Updated: 2024-08-04T12:32:14.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: U.S. Air Force Sensor Data Management System extract75 has a buffer overflow that leads to code execution. An overflow in a global variable (sBuffer) leads to a Write-What-Where outcome. Writing beyond sBuffer will clobber most global variables until reaching a pointer such as DES_info or image_info. By controlling that pointer, one achieves an arbitrary write when its fields are assigned. The data written is from a potentially untrusted NITF file in the form of an integer. The attacker can gain control of the instruction poi
s from a potentially untrusted NITF file in the form of an integer. The attacker can gain control of the instruction pointer. Additional Analyst Notes: - CVE Program Container: References: - https://www.riverloopsecurity.com/blog/2020/09/nitf-extract75-cve-2020-13995/
CVE ID: CVE-2020-13996 State: PUBLISHED Published: 2020-06-09T20:47:49 Last Updated: 2024-08-04T12:32:14.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager. Additional Analyst Notes: - CVE Program Container: References: - https://www.j2store.org/download-j2store/j2store-v3-3-3-13.html - https://www.j2store.org/resources/change-log.html
CVE ID: CVE-2020-13997 State: PUBLISHED Published: 2020-07-28T20:18:24 Last Updated: 2024-08-04T12:32:14.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Shopware before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://www.shopware.com/en/changelog/#6-2-3 - https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-07-2020
CVE ID: CVE-2020-13998 State: PUBLISHED Published: 2020-06-11T01:59:35 Last Updated: 2024-08-04T12:32:14.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA error page only occurs after a valid username is entered. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/kampji/11e259d68ad98a6f0f898132f1961a96
CVE ID: CVE-2020-13999 State: PUBLISHED Published: 2020-06-15T16:01:44 Last Updated: 2024-08-04T12:32:14.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: ScaleViewPortExtEx in libemf.cpp in libEMF (aka ECMA-234 Metafile Library) 1.0.12 allows an integer overflow and denial of service via a crafted EMF file. Additional Analyst Notes: - CVE Program Container: References: - http://libemf.sourceforge.net/index.html - https://sourceforge.net/projects/libemf/ - https://sourceforge.net/p/libemf/code/HEAD/tree/ - https://sourceforge.net/p/libemf/news/2020/06/release-of-libemf-1013/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVZXY
of-libemf-1013/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVZXYNDM4YOONMXYPW2GTMIS6V6JBIL6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/555PIBSHDUZD26UCJ5DHCQ4W7RXEZC66/
CVE ID: CVE-2020-14000 State: PUBLISHED Published: 2020-07-16T14:41:40 Last Updated: 2024-08-04T12:32:14.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: MIT Lifelong Kindergarten Scratch scratch-vm before 0.2.0-prerelease.20200714185213 loads extension URLs from untrusted project.json files with certain _ characters, resulting in remote code execution because the URL's content is treated as a script and is executed as a worker. The responsible code is getExtensionIdForOpcode in serialization/sb3.js. The use of _ is incompatible with a protection mechanism in older versions, in which URLs were split and consequently deserialization attacks were prevented. NOTE: the scratch.mit
older versions, in which URLs were split and consequently deserialization attacks were prevented. NOTE: the scratch.mit.edu hosted service is not affected because of the lack of worker scripts. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LLK/scratch-vm/pull/2476 - https://scratch.mit.edu/discuss/topic/422904/?page=1#post-4223443
CVE ID: CVE-2020-14001 State: PUBLISHED Published: 2020-07-17T15:27:54 Last Updated: 2024-08-04T12:32:14.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such as template="/etc/passwd") or unintended embedded Ruby code execution (such as a string that begins with template="string://<%= `). NOTE: kramdown is used in Jekyll, GitLab Pages, GitHub Pages, and Thredded Forum. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gettalong/kramdown - https://kramdown.gettalong.org - https://rubygems.org/gems/kram
r: References: - https://github.com/gettalong/kramdown - https://kramdown.gettalong.org - https://rubygems.org/gems/kramdown - https://kramdown.gettalong.org/news.html - https://github.com/gettalong/kramdown/commit/1b8fd33c3120bfc6e5164b449e2c2fc9c9306fde - https://github.com/gettalong/kramdown/compare/REL_2_2_1...REL_2_3_0 - https://security.netapp.com/advisory/ntap-20200731-0004/ - https://lists.apache.org/thread.html/r96df7899fbb456fe2705882f710a0c8e8614b573fbffd8d12e3f54d2%40%3Cnotifications.fluo.apache.org%3E - https://lists.debian.org/debian-lts-announce/2020/08/msg00014.html - https://www.debian.org/security/2020/dsa-4743 - https://lists.fedoraproject.org/archives/list/package-announc
014.html - https://www.debian.org/security/2020/dsa-4743 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KBLTGBYU7NKOUOHDKVCU4GFZMGA6BP4L/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ENMMGKHRQIZ3QKGOMBBBGB6B4LB5I7NQ/ - https://usn.ubuntu.com/4562-1/
CVE ID: CVE-2020-14002 State: PUBLISHED Published: 2020-06-29T00:00:00 Last Updated: 2024-08-04T12:32:14.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: PuTTY 0.68 through 0.73 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). Additional Analyst Notes: - CVE Program Container: References: - https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html - https://lists.tartarus.org/pipermail/putty-announce/ - https://www.fzi.de/en/news/news/detail-en/artikel/fsa-2020-2-ausnutzung-eines-informat
s.org/pipermail/putty-announce/ - https://www.fzi.de/en/news/news/detail-en/artikel/fsa-2020-2-ausnutzung-eines-informationslecks-fuer-gezielte-mitm-angriffe-auf-ssh-clients/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26TACCSQYYCPWAJYNAUIXJGZ5RGORJZV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JPV4A77EDCT4BTFO5BE26ZH72BG4E5IJ/ - https://security.netapp.com/advisory/ntap-20200717-0003/ - https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html
CVE ID: CVE-2020-14004 State: PUBLISHED Published: 2020-06-12T15:04:10 Last Updated: 2024-08-04T12:32:14.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script (run as part of the icinga2 systemd service) executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrary files can be changed to mode 2750 by the unprivileged icinga2 user. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2020-14004 - https://github.com/Icinga/icinga2/pull
ntainer: References: - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2020-14004 - https://github.com/Icinga/icinga2/pull/8045/commits/2f0f2e8c355b75fa4407d23f85feea037d2bc4b6 - https://github.com/Icinga/icinga2/releases - http://www.openwall.com/lists/oss-security/2020/06/12/1 - https://github.com/Icinga/icinga2/compare/v2.12.0-rc1...master - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00014.html
CVE ID: CVE-2020-14005 State: PUBLISHED Published: 2020-06-24T13:28:21 Last Updated: 2024-08-04T12:32:14.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code via a defined event. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/alert3/c9dcce5474e55f408c93c086c30cdbb7 - https://www.zerodayinitiative.com/advisories/ZDI-21-063/ - https://www.zerodayinitiative.com/advisories/ZDI-21-065/
CVE ID: CVE-2020-14006 State: PUBLISHED Published: 2020-06-24T13:27:26 Last Updated: 2024-08-04T12:32:14.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible Team. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/alert3/f8d33412ab0c671d3cac6a50b132a894
CVE ID: CVE-2020-14007 State: PUBLISHED Published: 2020-06-24T13:24:58 Last Updated: 2024-08-04T12:32:14.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an alert definition. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/alert3/f8d33412ab0c671d3cac6a50b132a894
CVE ID: CVE-2020-14008 State: PUBLISHED Published: 2020-09-04T14:14:15 Last Updated: 2024-08-04T12:32:14.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com - https://www.manageengine.com/products/applications_manager/issues.html#14730 - http://packetstormsecurity.com/files/159066/ManageEngine-Applications-Manager-Authenticated-Remote-Code-Execution.html
CVE ID: CVE-2020-14009 State: PUBLISHED Published: 2021-05-07T11:33:10 Last Updated: 2024-08-04T12:32:14.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Proofpoint Enterprise Protection (PPS/PoD) before 8.16.4 contains a vulnerability that could allow an attacker to deliver an email message with a malicious attachment that bypasses scanning and file-blocking rules. The vulnerability exists because messages with certain crafted and malformed multipart structures are not properly handled. Additional Analyst Notes: - CVE Program Container: References: - https://www.proofpoint.com/us/security/security-advisories - https://www.proofpoint.com/us/security/security-advisories/pfpt-sa
/www.proofpoint.com/us/security/security-advisories - https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0006
CVE ID: CVE-2020-14010 State: PUBLISHED Published: 2020-06-10T17:17:36 Last Updated: 2024-08-04T12:32:14.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Laborator Xenon theme 1.3 for WordPress allows Reflected XSS via the data/typeahead-generate.php q (aka name) parameter. Additional Analyst Notes: - CVE Program Container: References: - https://knassar702.github.io/cve/xenon/
CVE ID: CVE-2020-14011 State: PUBLISHED Published: 2020-06-15T14:36:56 Last Updated: 2024-08-04T12:32:14.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lansweeper 6.0.x through 7.2.x has a default installation in which the admin password is configured for the admin account, unless "Built-in admin" is manually unchecked. This allows command execution via the Add New Package and Scheduled Deployments features. Additional Analyst Notes: - CVE Program Container: References: - https://www.lansweeper.com/knowledgebase/restricting-access-to-the-web-console/ - https://pastebin.com/EUkMx94X - http://packetstormsecurity.com/files/158205/Lansweeper-7.2-Default-Account-Remote-Code-Execu
s://pastebin.com/EUkMx94X - http://packetstormsecurity.com/files/158205/Lansweeper-7.2-Default-Account-Remote-Code-Execution.html
CVE ID: CVE-2020-14012 State: PUBLISHED Published: 2020-06-10T17:56:20 Last Updated: 2024-08-04T12:32:14.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: scp/categories.php in osTicket 1.14.2 allows XSS via a Knowledgebase Category Name or Category Description. The attacker must be an Agent. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osTicket/osTicket/issues/5514
CVE ID: CVE-2020-14014 State: PUBLISHED Published: 2020-06-24T14:22:55 Last Updated: 2024-08-04T12:32:14.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Navigate CMS 2.8 and 2.9 r1433. The query parameter fid on the resource navigate.php does not perform sufficient data validation and/or encoding, making it vulnerable to reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2018090182 - https://blog.sean-wright.com/navigate-cms/
CVE ID: CVE-2020-14015 State: PUBLISHED Published: 2020-06-24T14:23:32 Last Updated: 2024-08-04T12:32:14.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Navigate CMS 2.9 r1433. When performing a password reset, a user is emailed an activation code that allows them to reset their password. There is, however, a flaw when no activation code is supplied. The system will allow an unauthorized user to continue setting a password, even though no activation code was supplied, setting the password for the most recently created user in the system (the user with the highest user id). Additional Analyst Notes: - CVE Program Container: References: - https://blog
ystem (the user with the highest user id). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sean-wright.com/navigate-cms/
CVE ID: CVE-2020-14016 State: PUBLISHED Published: 2020-06-24T14:24:01 Last Updated: 2024-08-04T12:32:14.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Navigate CMS 2.9 r1433. The forgot-password feature allows users to reset their passwords by using either their username or the email address associated with their account. However, the feature returns a not_found message when the provided username or email address does not match a user in the system. This can be used to enumerate users. Additional Analyst Notes: - CVE Program Container: References: - https://blog.sean-wright.com/navigate-cms/ - https://cwe.mitre.org/data/definitions/204.html
CVE ID: CVE-2020-14017 State: PUBLISHED Published: 2020-06-24T14:24:59 Last Updated: 2024-08-04T12:32:14.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Navigate CMS 2.9 r1433. Sessions, as well as associated information such as CSRF tokens, are stored in cleartext files in the directory /private/sessions. An unauthenticated user could use a brute-force approach to attempt to identify existing sessions, or view the contents of this file to discover details about a session. Additional Analyst Notes: - CVE Program Container: References: - https://blog.sean-wright.com/navigate-cms/
CVE ID: CVE-2020-14018 State: PUBLISHED Published: 2020-06-24T14:25:27 Last Updated: 2024-08-04T12:32:14.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Navigate CMS 2.9 r1433. There is a stored XSS vulnerability that is executed on the page to view users, and on the page to edit users. This is present in both the User field and the E-Mail field. On the Edit user page, the XSS is only triggered via the E-Mail field; however, on the View user page the XSS is triggered via either the User field or the E-Mail field. Additional Analyst Notes: - CVE Program Container: References: - https://blog.sean-wright.com/navigate-cms/
CVE ID: CVE-2020-14019 State: PUBLISHED Published: 2020-06-19T10:49:59 Last Updated: 2024-08-04T12:32:14.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/open-iscsi/rtslib-fb/pull/162 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNMCV2DJJTX345YYBXAMJBXNNVUZQ5UH/ - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00012.html
CVE ID: CVE-2020-14021 State: PUBLISHED Published: 2020-09-18T17:19:39 Last Updated: 2024-08-04T12:32:14.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The ASP.net SMS module can be used to read and validate the source code of ASP files. By altering the path, it can be made to read any file on the Operating System, usually with NT AUTHORITY\SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.ozeki.hu/index.php?owpn=231 - https://www.ozeki.hu/index.php?ow_page_number=1017&downloadaction=email&download_product_id=1&os=windows&dpath=%2Fattachments%2F702%2Finstallwindows_1
?ow_page_number=1017&downloadaction=email&download_product_id=1&os=windows&dpath=%2Fattachments%2F702%2Finstallwindows_1590575794_OzekiNG-SMS-Gateway_4.17.6.zip&dname=Ozeki+NG+SMS+Gateway+v4.17.6&dsize=+%2817.8+MB%29&platform=Windows - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-14021-Arbitrary%20File%20Read-Ozeki%20SMS%20Gateway
CVE ID: CVE-2020-14022 State: PUBLISHED Published: 2020-09-22T17:43:45 Last Updated: 2024-08-04T12:32:14.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk importing new contacts ("Import Contacts" functionality) from a file. It is possible to upload an executable or .bat file that can be executed with the help of a functionality (E.g. the "Application Starter" module) within the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.ozeki.hu/index.php?owpn=231 - https://www.ozeki.hu/index.php?ow_page_number=1017&downloadaction=email&download_product_id=1&os=windo
ex.php?owpn=231 - https://www.ozeki.hu/index.php?ow_page_number=1017&downloadaction=email&download_product_id=1&os=windows&dpath=%2Fattachments%2F702%2Finstallwindows_1590575794_OzekiNG-SMS-Gateway_4.17.6.zip&dname=Ozeki+NG+SMS+Gateway+v4.17.6&dsize=+%2817.8+MB%29&platform=Windows - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-14022-Dangerous%20File%20Upload-Ozeki%20SMS%20Gateway