Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-28967 State: PUBLISHED Published: 2021-10-22T19:20:08 Last Updated: 2024-08-04T16:48:01.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlashGet v1.9.6 was discovered to contain a buffer overflow in the 'current path directory' function. This vulnerability allows attackers to elevate local process privileges via overwriting the registers. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2248
CVE ID: CVE-2020-28968 State: PUBLISHED Published: 2021-10-22T19:20:05 Last Updated: 2024-08-04T16:48:00.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Draytek VigorAP 1000C contains a stored cross-site scripting (XSS) vulnerability in the RADIUS Setting - RADIUS Server Configuration module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username input field. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2244
CVE ID: CVE-2020-28969 State: PUBLISHED Published: 2021-10-22T19:20:05 Last Updated: 2024-08-04T16:48:00.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aplioxio PDF ShapingUp 5.0.0.139 contains a buffer overflow which allows attackers to cause a denial of service (DoS) via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://www.vulnerability-lab.com/get_content.php?id=2260
CVE ID: CVE-2020-28970 State: PUBLISHED Published: 2020-12-01T15:32:12 Last Updated: 2024-08-04T16:48:01.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin authentication bypass vulnerability could allow an unauthenticated user to execute privileged commands on the device via a cookie. (In addition, an upload endpoint could then be used by an authenticated administrator to upload executable PHP scripts.) Additional Analyst Notes: - CVE Program Container: References: - https://support.wdc.com/downloads.aspx?g=907&lang=en#downloads - https://www.westerndigital.com/support/productsecurity/
https://support.wdc.com/downloads.aspx?g=907&lang=en#downloads - https://www.westerndigital.com/support/productsecurity/wdc-20009-os5-firmware-5-06-115 - https://www.zerodayinitiative.com/advisories/ZDI-20-1448/
CVE ID: CVE-2020-28971 State: PUBLISHED Published: 2020-12-01T15:12:46 Last Updated: 2024-08-04T16:48:00.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin authentication bypass vulnerability could allow an unauthenticated user to execute privileged commands on the device via a cookie, because of insufficient validation of URI paths. Additional Analyst Notes: - CVE Program Container: References: - https://support.wdc.com/downloads.aspx?g=907&lang=en#downloads - https://www.westerndigital.com/support/productsecurity/wdc-20009-os5-firmware-5-06-115 - https://www.zerodayinitiative.com/advi
/www.westerndigital.com/support/productsecurity/wdc-20009-os5-firmware-5-06-115 - https://www.zerodayinitiative.com/advisories/ZDI-20-1447/
CVE ID: CVE-2020-28972 State: PUBLISHED Published: 2021-02-27T00:00:00 Last Updated: 2024-08-04T16:48:01.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the vmware.py files) does not always validate the SSL/TLS certificate. Additional Analyst Notes: - CVE Program Container: References: - https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedo
/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/ - https://security.gentoo.org/glsa/202103-01 - https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html - https://www.debian.org/security/2021/dsa-5011 - https://security.gentoo.org/glsa/202310-22
CVE ID: CVE-2020-28973 State: PUBLISHED Published: 2021-04-21T18:58:59 Last Updated: 2024-08-04T16:48:01.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ABUS Secvest wireless alarm system FUAA50000 (v3.01.17) fails to properly authenticate some requests to its built-in HTTPS interface. Someone can use this vulnerability to obtain sensitive information from the system, such as usernames and passwords. This information can then be used to reconfigure or disable the alarm system. Additional Analyst Notes: - CVE Program Container: References: - https://eye.security/en/blog/breaking-abus-secvest-internet-connected-alarm-systems-cve-2020-28973
CVE ID: CVE-2020-28974 State: PUBLISHED Published: 2020-11-20T17:49:57 Last Updated: 2024-08-04T16:48:01.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c4e0dff2095c579b142d5a0693257f1c58b4804 - https://seclists.org/oss-sec/2020/q4/104 - https
orvalds/linux.git/commit/?id=3c4e0dff2095c579b142d5a0693257f1c58b4804 - https://seclists.org/oss-sec/2020/q4/104 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.7 - http://www.openwall.com/lists/oss-security/2020/11/25/1 - https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html - https://security.netapp.com/advisory/ntap-20210108-0003/
CVE ID: CVE-2020-28975 State: PUBLISHED Published: 2020-11-21T00:00:00 Last Updated: 2024-08-04T16:48:01.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service (segmentation fault) via a crafted model SVM (introduced via pickle, json, or any other model permanence standard) with a large value in the _n_support array. NOTE: the scikit-learn vendor's position is that the behavior can only occur if the library's API is violated by an application that changes a private attribute. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Co
by an application that changes a private attribute. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/scikit-learn/scikit-learn/issues/18891 - https://github.com/cjlin1/libsvm/blob/9a3a9708926dec87d382c43b203f2ca19c2d56a0/svm.cpp#L2501 - http://seclists.org/fulldisclosure/2020/Nov/44 - http://packetstormsecurity.com/files/160281/SciKit-Learn-0.23.2-Denial-Of-Service.html - https://github.com/scikit-learn/scikit-learn/commit/1bf13d567d3cd74854aa8343fd25b61dd768bb85 - https://security.gentoo.org/glsa/202301-03
CVE ID: CVE-2020-28976 State: PUBLISHED Published: 2020-11-30T13:14:45 Last Updated: 2024-08-04T16:48:00.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/detail.php?subdomain=SSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CantoDAM/Canto-Wordpress-Plugin - https://www.canto.com/integrations/wordpress/ - https://wordpress.org/plugins/canto/#developers - https://gist.github.com/p4nk4jv/87aebd999ce4b28063943480e95fd9e0 - http://packetstormsecurity.com/files
to/#developers - https://gist.github.com/p4nk4jv/87aebd999ce4b28063943480e95fd9e0 - http://packetstormsecurity.com/files/160358/WordPress-Canto-1.3.0-Server-Side-Request-Forgery.html
CVE ID: CVE-2020-28977 State: PUBLISHED Published: 2020-11-30T13:19:08 Last Updated: 2024-08-04T16:48:00.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/get.php?subdomain=SSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CantoDAM/Canto-Wordpress-Plugin - https://www.canto.com/integrations/wordpress/ - https://wordpress.org/plugins/canto/#developers - https://gist.github.com/p4nk4jv/87aebd999ce4b28063943480e95fd9e0 - http://packetstormsecurity.com/files/1603
evelopers - https://gist.github.com/p4nk4jv/87aebd999ce4b28063943480e95fd9e0 - http://packetstormsecurity.com/files/160358/WordPress-Canto-1.3.0-Server-Side-Request-Forgery.html
CVE ID: CVE-2020-28978 State: PUBLISHED Published: 2020-11-30T13:21:27 Last Updated: 2024-08-04T16:48:00.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/tree.php?subdomain=SSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CantoDAM/Canto-Wordpress-Plugin - https://www.canto.com/integrations/wordpress/ - https://wordpress.org/plugins/canto/#developers - https://gist.github.com/p4nk4jv/87aebd999ce4b28063943480e95fd9e0 - http://packetstormsecurity.com/files/160
developers - https://gist.github.com/p4nk4jv/87aebd999ce4b28063943480e95fd9e0 - http://packetstormsecurity.com/files/160358/WordPress-Canto-1.3.0-Server-Side-Request-Forgery.html
CVE ID: CVE-2020-28984 State: PUBLISHED Published: 2020-11-23T21:48:53 Last Updated: 2024-08-04T16:48:01.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: prive/formulaires/configurer_preferences.php in SPIP before 3.2.8 does not properly validate the couleur, display, display_navigation, display_outils, imessage, and spip_ecran parameters. Additional Analyst Notes: - CVE Program Container: References: - https://git.spip.net/spip/spip/commit/ae4267eba1022dabc12831ddb021c5d6e09040f8 - https://git.spip.net/spip/spip/compare/v3.2.7...v3.2.8 - https://www.debian.org/security/2020/dsa-4798 - https://lists.debian.org/debian-lts-announce/2020/12/msg00036.html
CVE ID: CVE-2020-28991 State: PUBLISHED Published: 2020-11-24T00:29:39 Last Updated: 2024-08-04T16:48:01.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gitea 0.9.99 through 1.12.x before 1.12.6 does not prevent a git protocol path that specifies a TCP port number and also contains newlines (with URL encoding) in ParseRemoteAddr in modules/auth/repo_form.go. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/go-gitea/gitea/pull/13525 - https://github.com/go-gitea/gitea/releases/tag/v1.12.6
CVE ID: CVE-2020-28993 State: PUBLISHED Published: 2020-12-01T15:04:48 Last Updated: 2024-08-04T16:48:01.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and Pico CMTS through 2.0. Successful exploitation of this vulnerability would allow an unauthenticated attacker to retrieve administrator credentials by sending a malicious POST request. Additional Analyst Notes: - CVE Program Container: References: - https://atx.com/products/commercial-services-gateways/minicmts200a-broadband-gateway/ - https://www.exploit-db.com/exploits/49124
CVE ID: CVE-2020-28994 State: PUBLISHED Published: 2020-11-24T17:17:22 Last Updated: 2024-08-04T16:48:01.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability was discovered in Karenderia Multiple Restaurant System, affecting versions 5.4.2 and below. The vulnerability allows for an unauthenticated attacker to perform various tasks such as modifying and leaking all contents of the database. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/wes4m/e32080b02c2cd668d50eeac66613ca1d
CVE ID: CVE-2020-28998 State: PUBLISHED Published: 2021-01-26T01:22:15 Last Updated: 2024-08-04T16:48:01.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the Telnet service that allows a remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password. Additional Analyst Notes: - CVE Program Container: References: - https://support.mygeeni.com/hc/en-us - https://gist.github.com/tj-oconnor/e21adcf9c0539a12ad2841102928cbd5
CVE ID: CVE-2020-28999 State: PUBLISHED Published: 2021-01-26T01:23:41 Last Updated: 2024-08-04T16:48:01.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Apexis Streaming Video Web Application on Geeni GNC-CW013 doorbell 1.8.1 devices. A remote attacker can take full control of the camera with a high-privileged account. The vulnerability exists because a static username and password are compiled into a shared library (libhipcam.so) used to provide the streaming camera service. Additional Analyst Notes: - CVE Program Container: References: - https://support.mygeeni.com/hc/en-us - https://gist.github.com/tj-oconnor/74f9ebbad668f3a7ce31a968452190d7
CVE ID: CVE-2020-29000 State: PUBLISHED Published: 2021-01-26T01:24:59 Last Updated: 2024-08-04T16:48:01.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the RTSP service that allows a remote attacker to take full control of the device with a high-privileged account. By sending a crafted message, an attacker is able to remotely deliver a telnet session. Any attacker that has the ability to control DNS can exploit this vulnerability to remotely login to the device and gain access to the camera system. Additional Analyst Notes: - CVE Program Container: References: - https://support.mygee
gain access to the camera system. Additional Analyst Notes: - CVE Program Container: References: - https://support.mygeeni.com/hc/en-us - https://gist.github.com/tj-oconnor/d081f5f116a4865f888be81e2466d831
CVE ID: CVE-2020-29001 State: PUBLISHED Published: 2021-01-26T01:26:27 Last Updated: 2024-08-04T16:48:01.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Geeni GNC-CW028 Camera 2.7.2, Geeni GNC-CW025 Doorbell 2.9.5, Merkury MI-CW024 Doorbell 2.9.6, and Merkury MI-CW017 Camera 2.9.6 devices. A vulnerability exists in the RESTful Services API that allows a remote attacker to take full control of the camera with a high-privileged account. The vulnerability exists because a static username and password are compiled into the ppsapp RESTful application. Additional Analyst Notes: - CVE Program Container: References: - https://support.mygeeni.com/hc/en-us -
ul application. Additional Analyst Notes: - CVE Program Container: References: - https://support.mygeeni.com/hc/en-us - https://gist.github.com/tj-oconnor/371d34342c0cc2be015cc89d6dc2bc66
CVE ID: CVE-2020-29002 State: PUBLISHED Published: 2020-11-24T05:38:08 Last Updated: 2024-08-04T16:48:01.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: includes/CologneBlueTemplate.php in the CologneBlue skin for MediaWiki through 1.35 allows XSS via a qbfind message supplied by an administrator. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T267278 - https://gerrit.wikimedia.org/r/q/Ie798a4f16d0ac2a4871aefeb593d962966aeb6b0
CVE ID: CVE-2020-29003 State: PUBLISHED Published: 2020-11-24T05:37:50 Last Updated: 2024-08-04T16:48:01.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PollNY extension for MediaWiki through 1.35 allows XSS via an answer option for a poll question, entered during Special:CreatePoll or Special:UpdatePoll. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T266508
CVE ID: CVE-2020-29004 State: PUBLISHED Published: 2021-01-29T06:22:51 Last Updated: 2024-08-04T16:48:01.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: The API in the Push extension for MediaWiki through 1.35 did not require an edit token in ApiPushBase.php and therefore facilitated a CSRF attack. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T262724 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Push/+/625988 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Push/+/625988/10/src/api/ApiPushBase.php
CVE ID: CVE-2020-29005 State: PUBLISHED Published: 2021-01-29T06:19:43 Last Updated: 2024-08-04T16:48:01.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: The API in the Push extension for MediaWiki through 1.35 used cleartext for ApiPush credentials, allowing for potential information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T262724 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Push/+/625988
CVE ID: CVE-2020-29006 State: PUBLISHED Published: 2020-11-24T14:17:50 Last Updated: 2024-08-04T16:48:01.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/423750573d07f1a463f115ef37182c1825080da4 - https://github.com/MISP/MISP/compare/v2.4.134...v2.4.135
CVE ID: CVE-2020-29007 State: PUBLISHED Published: 2023-04-15T00:00:00.000Z Last Updated: 2025-02-06T16:18:07.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Score extension through 0.3.0 for MediaWiki has a remote code execution vulnerability due to improper sandboxing of the GNU LilyPond executable. This allows any user with an ability to edit articles (potentially including unauthenticated anonymous users) to execute arbitrary Scheme or shell code by using crafted {{Image data to generate musical scores containing malicious code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/seqred-s-a/cve-2020-29007 - http
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/seqred-s-a/cve-2020-29007 - https://www.mediawiki.org/wiki/Extension:Score - https://phabricator.wikimedia.org/T257062 - https://seqred.pl/en/cve-2020-29007-remote-code-execution-in-mediawiki-score/ - https://www.mediawiki.org/wiki/Extension:Score/2021_security_advisory
CVE ID: CVE-2020-29010 State: PUBLISHED Published: 2025-03-17T13:06:16.993Z Last Updated: 2025-03-17T13:32:38.996Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N/E:F/RL:X/RC:X) Vendors: Fortinet Products: FortiOS Problem Types: CWE-200 Description: An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS version 6.2.4 and below, version 6.0.10 and belowmay allow remote authenticated actors to read the SSL VPN events log entries of users in other VDOMs by executing "get vpn ssl monitor" from the CLI. The sensitive data includes usernames, user groups, and IP address. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
ncludes usernames, user groups, and IP address. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-20-103
CVE ID: CVE-2020-29011 State: PUBLISHED Published: 2021-08-04T15:26:11 Last Updated: 2024-10-25T13:53:16.367Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:X) Vendors: Fortinet Products: Fortinet FortiSandbox Problem Types: Execute unauthorized code or commands Description: Instances of SQL Injection vulnerabilities in the checksum search and MTA-quarantine modules of FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may allow an authenticated attacker to execute unauthorized code on the underlying SQL interpreter via specifically crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-20-171
CVE ID: CVE-2020-29012 State: PUBLISHED Published: 2021-09-08T10:26:31 Last Updated: 2024-10-25T13:50:10.503Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:F/RL:X/RC:X) Vendors: Fortinet Products: Fortinet FortiSandbox Problem Types: Information disclosure Description: An insufficient session expiration vulnerability in FortiSandbox versions 3.2.1 and below may allow an attacker to reuse the unexpired admin user session IDs to gain information about other users configured on the device, should the attacker be able to obtain that session ID (via other, hypothetical attacks) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
ther, hypothetical attacks) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-20-070
CVE ID: CVE-2020-29013 State: PUBLISHED Published: 2022-04-06T09:05:11 Last Updated: 2024-10-22T20:59:24.027Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:F/RL:X/RC:X) Vendors: Fortinet Products: Fortinet FortiSandbox Problem Types: Denial of service Description: An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to silently halt the sniffer via specifically crafted requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-20-178
CVE ID: CVE-2020-29014 State: PUBLISHED Published: 2021-07-09T18:26:29 Last Updated: 2024-10-25T13:57:04.775Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:X) Vendors: Fortinet Products: Fortinet FortiSandbox Problem Types: Escalation of privilege Description: A concurrent execution using shared resource with improper synchronization ('race condition') in the command shell of FortiSandbox before 3.2.2 may allow an authenticated attacker to bring the system into an unresponsive state via specifically orchestrated sequences of commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-20-185
CVE ID: CVE-2020-29015 State: PUBLISHED Published: 2021-01-14T16:07:20 Last Updated: 2024-10-25T14:23:13.381Z Vendors: n/a Products: Fortinet FortiWeb Problem Types: Execute unauthorized code or commands Description: A blind SQL injection in the user interface of FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauthenticated, remote attacker to execute arbitrary SQL queries or commands by sending a request with a crafted Authorization header containing a malicious SQL statement. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.fortiguard.com/psirt/FG-IR-20-124