Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-15377 State: PUBLISHED Published: 2021-06-09T15:15:05 Last Updated: 2024-08-04T13:15:20.483Z Vendors: n/a Products: Brocade SANnav Problem Types: Server-Side Request Forgery (SSRF) Description: Webtools in Brocade SANnav before version 2.1.1 allows unauthenticated users to make requests to arbitrary hosts due to a misconfiguration; this is commonly referred to as Server-Side Request Forgery (SSRF). Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1480
CVE ID: CVE-2020-15378 State: PUBLISHED Published: 2021-06-09T15:15:11 Last Updated: 2024-08-04T13:15:20.207Z Vendors: n/a Products: Brocade SANnav Problem Types: Open ports Description: The OVA version of Brocade SANnav before version 2.1.1 installation with IPv6 networking exposes the docker container ports to the network, increasing the potential attack surface. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1481
CVE ID: CVE-2020-15379 State: PUBLISHED Published: 2021-06-09T15:15:19 Last Updated: 2024-08-04T13:15:20.150Z Vendors: n/a Products: Brocade SANnav Problem Types: Denial of Service Description: Brocade SANnav before v.2.1.0a could allow remote attackers cause a denial-of-service condition due to a lack of proper validation, of the length of user-supplied data as name for custom field name. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1319
CVE ID: CVE-2020-15380 State: PUBLISHED Published: 2021-06-09T15:15:27 Last Updated: 2024-08-04T13:15:20.281Z Vendors: n/a Products: Brocade SANnav Problem Types: Insertion of Sensitive Information into Log File Description: Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1482
CVE ID: CVE-2020-15381 State: PUBLISHED Published: 2021-06-09T14:32:17 Last Updated: 2024-08-04T13:15:20.273Z Vendors: n/a Products: Brocade SANnav Problem Types: Improper Authentication Description: Brocade SANnav before version 2.1.1 contains an Improper Authentication vulnerability that allows cleartext transmission of authentication credentials of the jmx server. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1483
CVE ID: CVE-2020-15382 State: PUBLISHED Published: 2021-06-09T14:32:23 Last Updated: 2024-08-04T13:15:20.697Z Vendors: n/a Products: Brocade SANnav Problem Types: Hard-coding credentials Description: Brocade SANnav before version 2.1.1 uses a hard-coded administrator account with the weak password ‘passw0rd’ if a password is not provided for PostgreSQL at install-time. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1484
CVE ID: CVE-2020-15383 State: PUBLISHED Published: 2021-06-09T14:32:31 Last Updated: 2024-08-04T13:15:20.568Z Vendors: n/a Products: Brocade Fabric OS Problem Types: Denail of Service Description: Running security scans against the SAN switch can cause config and secnotify processes within the firmware before Brocade Fabric OS v9.0.0, v8.2.2d and v8.2.1e to consume all memory leading to denial of service impacts possibly including a switch panic. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1496 - https://security.netapp.com/advisory/ntap-20210819-0002/
CVE ID: CVE-2020-15384 State: PUBLISHED Published: 2021-06-09T15:42:52 Last Updated: 2024-08-04T13:15:20.726Z Vendors: n/a Products: Brocade SANnav Problem Types: information disclosure vulnerability Description: Brocade SANNav before version 2.1.1 contains an information disclosure vulnerability. Successful exploitation of internal server information in the initial login response header. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1485
CVE ID: CVE-2020-15385 State: PUBLISHED Published: 2021-06-09T15:42:57 Last Updated: 2024-08-04T13:15:20.385Z Vendors: n/a Products: Brocade SANnav Problem Types: information disclosure vulnerability Description: Brocade SANnav before version 2.1.1 allows an authenticated attacker to list directories, and list files without permission. As a result, users without permission can see folders, and hidden files, and can create directories without permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1486
CVE ID: CVE-2020-15386 State: PUBLISHED Published: 2021-06-09T15:43:02 Last Updated: 2024-08-04T13:15:20.565Z Vendors: n/a Products: Brocade Fabric OS Problem Types: Denial of Service Description: Brocade Fabric OS prior to v9.0.1a and 8.2.3a and after v9.0.0 and 8.2.2d may observe high CPU load during security scanning, which could lead to a slower response to CLI commands and other operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1495 - https://security.netapp.com/advisory/ntap-20210819-0002/
CVE ID: CVE-2020-15387 State: PUBLISHED Published: 2021-06-09T15:24:45 Last Updated: 2024-08-04T13:15:20.616Z Vendors: n/a Products: Brocade SANnav & Brocade Fabric OS Problem Types: information disclosure vulnerability Description: The host SSH servers of Brocade Fabric OS before Brocade Fabric OS v7.4.2h, v8.2.1c, v8.2.2, v9.0.0, and Brocade SANnav before v2.1.1 utilize keys of less than 2048 bits, which may be vulnerable to man-in-the-middle attacks and/or insecure SSH communications. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1291
CVE ID: CVE-2020-15388 State: PUBLISHED Published: 2022-03-18T17:59:10 Last Updated: 2024-08-04T13:15:20.585Z Vendors: n/a Products: Brocade Fabric OS Problem Types: Improper Limitation of a Pathname to a Restricted Directory Description: A vulnerability in the Brocade Fabric OS before Brocade Fabric OS v9.0.1a, v8.2.3, v8.2.0_CBN4, and v7.4.2h could allow an authenticated CLI user to abuse the history command to write arbitrary content to files. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1493
CVE ID: CVE-2020-15389 State: PUBLISHED Published: 2020-06-29T20:30:15 Last Updated: 2024-08-04T13:15:20.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opj_image_destroy twice. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/uclouvain/openjpeg/issues/1261 - https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https:
s.debian.org/debian-lts-announce/2020/07/msg00008.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://pastebin.com/4sDKQ7U8 - https://security.gentoo.org/glsa/202101-29 - https://www.debian.org/security/2021/dsa-4882 - https://www.oracle.com//security-alerts/cpujul2021.html
CVE ID: CVE-2020-15390 State: PUBLISHED Published: 2021-04-12T18:18:20 Last Updated: 2024-08-04T13:15:20.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: pyActivity in Pega Platform 8.4.0.237 has a security misconfiguration that leads to an improper access control vulnerability via =GetWebInfo. Additional Analyst Notes: - CVE Program Container: References: - https://jayaramyalla.medium.com/sensitive-information-disclosure-due-to-improper-access-control-cve-2020-15390-124573c15824
CVE ID: CVE-2020-15391 State: PUBLISHED Published: 2020-07-23T19:45:02 Last Updated: 2024-08-04T13:15:20.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UI in DevSpace 4.13.0 allows web sites to execute actions on pods (on behalf of a victim) because of a lack of authentication for the WebSocket protocol. This leads to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/devspace-cloud/devspace/tags - https://github.com/devspace-cloud/devspace/releases/tag/v4.14.0
CVE ID: CVE-2020-15392 State: PUBLISHED Published: 2020-07-07T13:58:47 Last Updated: 2024-08-04T13:15:20.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: A user enumeration vulnerability flaw was found in Venki Supravizio BPM 10.1.2. This issue occurs during password recovery, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames. Additional Analyst Notes: - CVE Program Container: References: - https://www.venki.com.br/ - https://github.com/inflixim4be/CVE-2020-15392
CVE ID: CVE-2020-15393 State: PUBLISHED Published: 2020-06-29T21:58:55 Last Updated: 2024-08-04T13:15:20.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel 4.4 through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebeb8db770. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=28ebeb8db77035e058a510ce9bd17c2b9a009dba - https://lkml.org/lkml/2020/6/2/968 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00071.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html - https://lists.debian.org/
7/msg00071.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00019.html - https://usn.ubuntu.com/4463-1/ - https://usn.ubuntu.com/4465-1/ - https://usn.ubuntu.com/4483-1/ - https://usn.ubuntu.com/4485-1/ - https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html - https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=831eebad70a25f55b5745453ac252d4afe997187
CVE ID: CVE-2020-15394 State: PUBLISHED Published: 2020-09-25T06:11:41 Last Updated: 2024-08-04T13:15:20.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REST API in Zoho ManageEngine Applications Manager before build 14740 allows an unauthenticated SQL Injection via a crafted request, leading to Remote Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com - https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2020-15394.html - https://www.manageengine.com/products/applications_manager/issues.html#v14740
CVE ID: CVE-2020-15395 State: PUBLISHED Published: 2020-06-30T10:25:46 Last Updated: 2024-08-04T13:15:20.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multiple/File_MpegPs.cpp (aka an off-by-one during MpegPs parsing). Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mediainfo/bugs/1127/ - https://mediaarea.net/en/MediaInfo - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QQJCEQRRPTN5CY5URDFTEJU3A2VKLNBA/
CVE ID: CVE-2020-15396 State: PUBLISHED Published: 2020-06-30T11:17:21 Last Updated: 2024-08-04T13:15:20.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: In HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in user-owned directories. By winning a race, a local attacker could use this to escalate his privileges to root. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/hylafax/HylaFAX+/2534/ - https://bugzilla.suse.com/show_bug.cgi?id=1173521 - https://security.gentoo.org/glsa/202007-06 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y46FOVJUS5SO44A
07-06 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y46FOVJUS5SO44A2VEKR7DXEHTI4WK5L/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J52QFVREJWJ35YSEEDDRMZQ2LM2H2WE6/ - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00039.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00046.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00054.html
CVE ID: CVE-2020-15397 State: PUBLISHED Published: 2020-06-30T11:17:37 Last Updated: 2024-08-04T13:15:20.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root). Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/hylafax/HylaFAX+/2534/ - https://bugzilla.suse.com/show_bug.cgi?id=1173519 - https://security.gentoo.org/glsa/202007-06 - htt
ax/HylaFAX+/2534/ - https://bugzilla.suse.com/show_bug.cgi?id=1173519 - https://security.gentoo.org/glsa/202007-06 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y46FOVJUS5SO44A2VEKR7DXEHTI4WK5L/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J52QFVREJWJ35YSEEDDRMZQ2LM2H2WE6/ - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00039.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00046.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00054.html
CVE ID: CVE-2020-15400 State: PUBLISHED Published: 2020-06-30T11:42:19 Last Updated: 2024-08-04T13:15:20.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: CakePHP before 4.0.6 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS. Additional Analyst Notes: - CVE Program Container: References: - https://bakery.cakephp.org/2020/04/18/cakephp_406_released.html
CVE ID: CVE-2020-15401 State: PUBLISHED Published: 2020-06-30T11:50:09 Last Updated: 2024-08-04T13:15:20.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOBit Malware Fighter Pro 8.0.2.547 allows local users to gain privileges for file deletion by manipulating malicious flagged file locations with an NTFS junction and an Object Manager symbolic link. Additional Analyst Notes: - CVE Program Container: References: - http://daniels-it-blog.blogspot.com/2020/06/when-your-anti-virus-turns-against-you.html
CVE ID: CVE-2020-15408 State: PUBLISHED Published: 2020-07-28T14:59:21 Last Updated: 2024-08-04T13:15:20.690Z Severity: LOW (CVSS 3.7 CVSS:3.1/AC:H/AV:N/A:N/C:L/I:L/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Pulse Secure Pulse Connect Secure before 9.1R8. An authenticated attacker can access the admin page console via the end-user web interface because of a rewrite. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/?atype=sa - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516
CVE ID: CVE-2020-15411 State: PUBLISHED Published: 2020-06-30T13:15:20 Last Updated: 2024-08-04T13:15:20.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MISP 2.4.128. app/Controller/AttributesController.php has insufficient ACL checks in the attachment downloader. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/d14ce7de709cdde3ecc9433e38e14c682894e88a
CVE ID: CVE-2020-15412 State: PUBLISHED Published: 2020-06-30T13:15:40 Last Updated: 2024-08-04T13:15:20.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MISP 2.4.128. app/Controller/EventsController.php lacks an event ACL check before proceeding to allow a user to send an event contact form. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/b0be3b07fee2ab9bf1869ef81a7f24f58bd687ef
CVE ID: CVE-2020-15415 State: PUBLISHED Published: 2020-06-30T13:37:56.000Z Last Updated: 2025-10-21T23:35:41.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote command execution via shell metacharacters in a filename when the text/x-python-script content type is used, a different issue than CVE-2020-14472. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.draytek.com/about/security-advisory - https://github.com/CLP-team/Vigor-Commond-Injection
CVE ID: CVE-2020-15416 State: PUBLISHED Published: 2020-07-28T17:10:39 Last Updated: 2024-08-04T13:15:20.578Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NETGEAR Products: R6700 Problem Types: CWE-121 Description: This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, stack-based buffer.
ack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9703. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-712/
CVE ID: CVE-2020-15417 State: PUBLISHED Published: 2020-07-28T17:10:39 Last Updated: 2024-08-04T13:15:20.713Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: NETGEAR Products: R6700 Problem Types: CWE-121 Description: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. A crafted gui_region in a string table file can trigger an overflow of a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute c
e can trigger an overflow of a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the web server. Was ZDI-CAN-9756. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-713/
CVE ID: CVE-2020-15418 State: PUBLISHED Published: 2020-07-28T17:10:17 Last Updated: 2024-08-04T13:15:20.733Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Veeam Products: ONE Problem Types: CWE-611 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.0.0.750_20200415. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SSRSReport class. Due to the improper restriction of XML External Entity (XXE) references, a specially crafted document specifying a URI causes the XML parser to access the URI and embed the contents back into the XML d
lly crafted document specifying a URI causes the XML parser to access the URI and embed the contents back into the XML document for further processing. An attacker can leverage this vulnerability to disclose file contents in the context of SYSTEM. Was ZDI-CAN-10709. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-821/ - https://www.veeam.com/kb3221
CVE ID: CVE-2020-15419 State: PUBLISHED Published: 2020-07-28T17:10:18 Last Updated: 2024-08-04T13:15:20.694Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Veeam Products: ONE Problem Types: CWE-611 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.0.0.750_20200415. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Reporter_ImportLicense class. Due to the improper restriction of XML External Entity (XXE) references, a specially crafted document specifying a URI causes the XML parser to access the URI and embed the contents back in
es, a specially crafted document specifying a URI causes the XML parser to access the URI and embed the contents back into the XML document for further processing. An attacker can leverage this vulnerability to disclose file contents in the context of SYSTEM. Was ZDI-CAN-10710. Additional Analyst Notes: - CVE Program Container: References: - https://www.veeam.com/kb3221 - https://www.zerodayinitiative.com/advisories/ZDI-20-822/
CVE ID: CVE-2020-15420 State: PUBLISHED Published: 2020-07-28T17:01:06 Last Updated: 2024-08-04T13:15:20.788Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-el7-0.9.8.891. Authentication is not required to exploit this vulnerability. The specific flaw exists within loader_ajax.php. When parsing the line parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability t
validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9259. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-737/
CVE ID: CVE-2020-15421 State: PUBLISHED Published: 2020-07-28T17:01:06 Last Updated: 2024-08-04T13:15:20.802Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CentOS Web Panel Products: CentOS Web Panel Problem Types: CWE-78 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the check_ip parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulne
t properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9707. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-738/