Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
82-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00054.html
CVE ID: CVE-2020-11527 State: PUBLISHED Published: 2020-04-04T16:26:25 Last Updated: 2024-08-04T11:35:12.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attacker can send a specially crafted URI to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/network-monitoring/help/read-me-complete.html#124181
CVE ID: CVE-2020-11528 State: PUBLISHED Published: 2020-04-04T16:48:50 Last Updated: 2024-08-04T11:35:13.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: bit2spr 1992-06-07 has a stack-based buffer overflow (129-byte write) in conv_bitmap in bit2spr.c via a long line in a bitmap file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/14isnot40/vul_discovery/blob/14isnot40-patch-1/README.md - https://github.com/14isnot40/vul_discovery/blob/06d04dbbc6f792a82321c00376d4dbf3add00f4f/poc/bit2spr%20vulnerability%20discovery.md.pdf
CVE ID: CVE-2020-11529 State: PUBLISHED Published: 2020-04-04T18:17:52 Last Updated: 2024-08-04T11:35:13.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Common/Grav.php in Grav before 1.7 has an Open Redirect. This is partially fixed in 1.6.23 and still present in 1.6.x. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/getgrav/grav/commit/2eae104c7a4bf32bc26cb8073d5c40464bfda3f7 - https://getgrav.org/#changelog - https://github.com/getgrav/grav/issues/3134
CVE ID: CVE-2020-11530 State: PUBLISHED Published: 2020-05-08T19:10:36 Last Updated: 2024-08-04T11:35:13.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: A blind SQL injection vulnerability is present in Chop Slider 3, a WordPress plugin. The vulnerability is introduced in the id GET parameter supplied to get_script/index.php, and allows an attacker to execute arbitrary SQL queries in the context of the WP database user. Additional Analyst Notes: - CVE Program Container: References: - https://idangero.us/ - https://github.com/idangerous/Plugins/tree/master/Chop%20Slider%203 - http://seclists.org/fulldisclosure/2020/May/26 - http://packetstormsecurity.com/files/157607/WordPress
op%20Slider%203 - http://seclists.org/fulldisclosure/2020/May/26 - http://packetstormsecurity.com/files/157607/WordPress-ChopSlider-3-SQL-Injection.html - http://packetstormsecurity.com/files/157655/WordPress-ChopSlider3-3.4-SQL-Injection.html
CVE ID: CVE-2020-11531 State: PUBLISHED Published: 2020-05-08T20:01:36 Last Updated: 2024-08-04T11:35:12.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DataEngine Xnode Server application in Zoho ManageEngine DataSecurity Plus prior to 6.0.1 does not validate the database schema name when handling a DR-SCHEMA-SYNC request. This allows an authenticated attacker to execute code in the context of the product by writing a JSP file to the webroot directory via directory traversal. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2020/May/27 - http://packetstormsecurity.com/files/157604/ManageEngine-DataSecurity-Plus-Path-Trav
ts.org/fulldisclosure/2020/May/27 - http://packetstormsecurity.com/files/157604/ManageEngine-DataSecurity-Plus-Path-Traversal-Code-Execution.html - https://pitstop.manageengine.com/portal/community/topic/upgrade-datasecurity-plus-to-the-build-6013-to-fix-security-issues
CVE ID: CVE-2020-11532 State: PUBLISHED Published: 2020-05-08T20:02:24 Last Updated: 2024-08-04T11:35:13.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine DataSecurity Plus prior to 6.0.1 uses default admin credentials to communicate with a DataEngine Xnode server. This allows an attacker to bypass authentication for this server and execute all operations in the context of admin user. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2020/May/28 - http://packetstormsecurity.com/files/157609/ManageEngine-DataSecurity-Plus-Authentication-Bypass.html - https://pitstop.manageengine.com/portal/community/topic/upgrad
nageEngine-DataSecurity-Plus-Authentication-Bypass.html - https://pitstop.manageengine.com/portal/community/topic/upgrade-datasecurity-plus-to-the-build-6013-to-fix-security-issues
CVE ID: CVE-2020-11533 State: PUBLISHED Published: 2020-04-04T19:02:47 Last Updated: 2024-08-04T11:35:13.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ivanti Workspace Control before 10.4.30.0, when SCCM integration is enabled, allows local users to obtain sensitive information (keying material). Additional Analyst Notes: - CVE Program Container: References: - https://forums.ivanti.com/s/article/A-locally-authenticated-user-with-low-privileges-can-recover-keying-material-due-to-an-unspecified-attack-vector
CVE ID: CVE-2020-11534 State: PUBLISHED Published: 2020-04-15T14:56:35 Last Updated: 2024-08-04T11:35:13.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can craft a malicious .docx file, and exploit the NSFileDownloader function to pass parameters to a binary (such as curl or wget) and remotely execute code on a victim's server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#551 - https://gist.github.com/andrewaeva/beb92d3d2f1c5672dbda5050e323f6a0
CVE ID: CVE-2020-11535 State: PUBLISHED Published: 2020-04-15T14:56:21 Last Updated: 2024-08-04T11:35:12.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can craft a malicious .docx file, and exploit XML injection to enter an attacker-controlled parameter into the x2t binary, to rewrite this binary and/or libxcb.so.1, and execute code on a victim's server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#551 - https://gist.github.com/andrewaeva/beb92d3d2f1c5672dbda5050e323f6a0
CVE ID: CVE-2020-11536 State: PUBLISHED Published: 2020-04-15T14:56:10 Last Updated: 2024-08-04T11:35:13.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can craft a malicious .docx file, and exploit the unzip function to rewrite a binary and remotely execute code on a victim's server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#551 - https://gist.github.com/andrewaeva/beb92d3d2f1c5672dbda5050e323f6a0
CVE ID: CVE-2020-11537 State: PUBLISHED Published: 2020-04-15T14:56:05 Last Updated: 2024-08-04T11:35:13.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can execute arbitrary SQL queries via injection to DocID parameter of Websocket API. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#551 - https://gist.github.com/andrewaeva/beb92d3d2f1c5672dbda5050e323f6a0
CVE ID: CVE-2020-11538 State: PUBLISHED Published: 2020-06-25T18:32:06 Last Updated: 2024-08-04T11:35:13.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311. Additional Analyst Notes: - CVE Program Container: References: - https://pillow.readthedocs.io/en/stable/releasenotes/index.html - https://github.com/python-pillow/Pillow/pull/4538 - https://pillow.readthedocs.io/en/stable/releasenotes/7.1.0.html - https://github.com/python-pillow/Pillow/pull/4504 - https://lists.fedoraproject.org/archives/list/package-announce%40
- https://github.com/python-pillow/Pillow/pull/4504 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HOKHNWV2VS5GESY7IBD237E7C6T3I427/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEBCPE4F2VHTIT6EZA2YZQZLPVDEBJGD/ - https://usn.ubuntu.com/4430-1/ - https://usn.ubuntu.com/4430-2/
CVE ID: CVE-2020-11539 State: PUBLISHED Published: 2020-04-22T13:27:10 Last Updated: 2024-08-04T11:35:13.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing (mode 0 Bluetooth LE security level) The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't have any authentication or signature verification. Thus, any attacker can control a parameter of the device. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40sayliambure/hacking-a-5-smartband-824763ab6e8f - http
otes: - CVE Program Container: References: - https://medium.com/%40sayliambure/hacking-a-5-smartband-824763ab6e8f - https://github.com/the-girl-who-lived/CVE-2020-11539/
CVE ID: CVE-2020-11541 State: PUBLISHED Published: 2020-05-08T13:05:06 Last Updated: 2024-08-04T11:35:13.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TechSmith SnagIt 11.2.1 through 20.0.3, an XML External Entity (XXE) injection issue exists that would allow a local attacker to exfiltrate data under the local Administrator account. Additional Analyst Notes: - CVE Program Container: References: - https://support.techsmith.com/hc/en-us/articles/115006435067-Snagit-Windows-Version-History
CVE ID: CVE-2020-11542 State: PUBLISHED Published: 2020-04-04T21:26:53 Last Updated: 2024-08-04T11:35:12.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: 3xLOGIC Infinias eIDC32 2.213 devices with Web 1.107 allow Authentication Bypass via CMD.HTM?CMD= because authentication depends on the client side's interpretation of the <KEY>MYKEY</KEY> substring. Additional Analyst Notes: - CVE Program Container: References: - https://www.criticalstart.com/authentication-bypass-vulnerability-discovered-in-infinias-eidc32-webserver/
CVE ID: CVE-2020-11543 State: PUBLISHED Published: 2020-04-07T23:32:00 Last Updated: 2024-08-04T11:35:13.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpsRamp Gateway before 7.0.0 has a backdoor account vadmin with the password 9vt@f3Vt that allows root SSH access to the server. This issue has been resolved in OpsRamp Gateway firmware version 7.0.0 where an administrator and a system user accounts are the only available user accounts for the gateway appliance. Additional Analyst Notes: - CVE Program Container: References: - https://www.criticalstart.com/hard-coded-administrator-password-discovered-in-opsramp/ - https://docs.opsramp.com/about/release-notes/summer-2020-update
rd-coded-administrator-password-discovered-in-opsramp/ - https://docs.opsramp.com/about/release-notes/summer-2020-update/#simplified-gateway-appliance-accounts
CVE ID: CVE-2020-11544 State: PUBLISHED Published: 2020-04-06T15:26:56 Last Updated: 2024-08-04T11:35:13.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Project Worlds Official Car Rental System 1. It allows the admin user to run commands on the server with their account because the upload section on the file-manager page contains an arbitrary file upload vulnerability via add_cars.php. There are no upload restrictions for executable files. Additional Analyst Notes: - CVE Program Container: References: - https://frostylabs.net/writeups/cve-2020-11544/
CVE ID: CVE-2020-11545 State: PUBLISHED Published: 2020-04-06T15:25:20 Last Updated: 2024-08-04T11:35:13.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters (account.php), uname and pass parameters (login.php), and id parameter (book_car.php) This allows an attacker to dump the MySQL database and to bypass the login authentication prompt. Additional Analyst Notes: - CVE Program Container: References: - https://frostylabs.net/writeups/cve-2020-11545/
CVE ID: CVE-2020-11546 State: PUBLISHED Published: 2020-07-14T19:16:21 Last Updated: 2024-08-04T11:35:13.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailingupgrade.php. An unauthenticated remote attacker can exploit this behavior to execute arbitrary PHP code via Code Injection. Additional Analyst Notes: - CVE Program Container: References: - https://blog.to.com/advisory-superwebmailer-cve-2020-11546/
CVE ID: CVE-2020-11547 State: PUBLISHED Published: 2020-04-04T23:23:04 Last Updated: 2024-08-04T11:35:12.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself (CPU usage, memory, Windows version, and internal statistics) via an HTTP request, as demonstrated by type=probes to login.htm or index.htm. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ch-rigu/PRTG-Network-Monitor-Information-Disclosure
CVE ID: CVE-2020-11548 State: PUBLISHED Published: 2020-04-04T23:48:14 Last Updated: 2024-08-04T11:35:13.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be any formula. The attacker could achieve remote code execution via CSV injection if a wp-admin/index.php?page=search-meter Export is performed. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/48197 - https://wordpress.org/plugins/search-meter/#developers
CVE ID: CVE-2020-11549 State: PUBLISHED Published: 2020-05-18T15:47:26 Last Updated: 2024-08-04T11:35:13.341Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AC:H/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and Pro Tri-Band Business WiFi Router (SRR60) AC3000 V2.5.1.106. The root account has the same password as the Web-admin component. Thus, by exploiting CVE-2020-11551, it is possible to achieve remote code execution with root privileges on the embedded Linux system. Additional Analyst Notes: - CVE Program Contain
remote code execution with root privileges on the embedded Linux system. Additional Analyst Notes: - CVE Program Container: References: - https://www.modzero.com/advisories/MZ-20-02-Netgear-Orbi-Pro-Security.txt - https://www.modzero.com/modlog/archives/2020/05/18/how_netgear_meshed_up_wifi_for_business/index.html - https://github.com/modzero/MZ-20-02-NETGEAR-Orbi-Security
CVE ID: CVE-2020-11550 State: PUBLISHED Published: 2020-05-18T15:46:26 Last Updated: 2024-08-04T11:35:13.286Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AC:L/AV:A/A:N/C:H/I:N/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and Pro Tri-Band Business WiFi Router (SRR60) AC3000 V2.5.1.106. The administrative SOAP interface allows an unauthenticated remote leak of sensitive/arbitrary Wi-Fi information, such as SSIDs and Pre-Shared-Keys (PSK). Additional Analyst Notes: - CVE Program Container: References: - https://www.modzero.com/advis
nd Pre-Shared-Keys (PSK). Additional Analyst Notes: - CVE Program Container: References: - https://www.modzero.com/advisories/MZ-20-02-Netgear-Orbi-Pro-Security.txt - https://www.modzero.com/modlog/archives/2020/05/18/how_netgear_meshed_up_wifi_for_business/index.html - https://github.com/modzero/MZ-20-02-NETGEAR-Orbi-Security
CVE ID: CVE-2020-11551 State: PUBLISHED Published: 2020-05-18T15:45:30 Last Updated: 2024-08-04T11:35:13.071Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and Pro Tri-Band Business WiFi Router (SRR60) AC3000 V2.5.1.106. The administrative SOAP interface allows an unauthenticated remote write of arbitrary Wi-Fi configuration data such as authentication details (e.g., the Web-admin password), network settings, DNS settings, system administration interface configu
tication details (e.g., the Web-admin password), network settings, DNS settings, system administration interface configuration, etc. Additional Analyst Notes: - CVE Program Container: References: - https://www.modzero.com/advisories/MZ-20-02-Netgear-Orbi-Pro-Security.txt - https://www.modzero.com/modlog/archives/2020/05/18/how_netgear_meshed_up_wifi_for_business/index.html - https://github.com/modzero/MZ-20-02-NETGEAR-Orbi-Security
CVE ID: CVE-2020-11552 State: PUBLISHED Published: 2020-08-11T15:43:14 Last Updated: 2024-08-04T11:35:13.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: An elevation of privilege vulnerability exists in ManageEngine ADSelfService Plus before build 6003 because it does not properly enforce user privileges associated with a Certificate dialog. This vulnerability could allow an unauthenticated attacker to escalate privileges on a Windows host. An attacker does not require any privilege on the target system in order to exploit this vulnerability. One option is the self-service option on the Windows login screen. Upon selecting this option, the thick-client software is launched, w
he self-service option on the Windows login screen. Upon selecting this option, the thick-client software is launched, which connects to a remote ADSelfService Plus server to facilitate self-service operations. An unauthenticated attacker having physical access to the host could trigger a security alert by supplying a self-signed SSL certificate to the client. The View Certificate option from the security alert allows an attacker to export a displayed certificate to a file. This can further cascade to a dialog that can open Explorer as SYSTEM. By navigating from Explorer to \windows\system32, cmd.exe can be launched as a SYSTEM. Additional Analyst Notes: - CVE Program Container: References:
\windows\system32, cmd.exe can be launched as a SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com - http://seclists.org/fulldisclosure/2020/Aug/4 - http://packetstormsecurity.com/files/158820/ManageEngine-ADSelfService-Plus-6000-Remote-Code-Execution.html - https://pitstop.manageengine.com/portal/en/community/topic/adselfservice-plus-6003-release-faceid-support - https://www.exploit-db.com/exploits/48739 - http://seclists.org/fulldisclosure/2020/Aug/6
CVE ID: CVE-2020-11553 State: PUBLISHED Published: 2020-04-09T12:35:28 Last Updated: 2024-08-04T11:35:13.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There is pervasive CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/tsscyber/noc-noc-whos-there-your-nms-is-pwned-1826174e0dee
CVE ID: CVE-2020-11554 State: PUBLISHED Published: 2020-04-09T12:34:08 Last Updated: 2024-08-04T11:35:12.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote attackers to obtain sensitive information via info.php4. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/tsscyber/noc-noc-whos-there-your-nms-is-pwned-1826174e0dee
CVE ID: CVE-2020-11555 State: PUBLISHED Published: 2020-04-09T12:31:59 Last Updated: 2024-08-04T11:35:13.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote attackers to obtain sensitive credential information from backup files. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/tsscyber/noc-noc-whos-there-your-nms-is-pwned-1826174e0dee
CVE ID: CVE-2020-11556 State: PUBLISHED Published: 2020-04-09T12:31:01 Last Updated: 2024-08-04T11:35:13.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There are multiple persistent (stored) and reflected XSS vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/tsscyber/noc-noc-whos-there-your-nms-is-pwned-1826174e0dee
CVE ID: CVE-2020-11557 State: PUBLISHED Published: 2020-04-09T12:29:27 Last Updated: 2024-08-04T11:35:13.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It includes the username and password values in cleartext within each request's cookie value. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/tsscyber/noc-noc-whos-there-your-nms-is-pwned-1826174e0dee
CVE ID: CVE-2020-11558 State: PUBLISHED Published: 2020-04-05T20:00:33 Last Updated: 2024-08-04T11:35:13.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audio_sample_entry_Read in isomedia/box_code_base.c does not properly decide when to make gf_isom_box_del calls. This leads to various use-after-free outcomes involving mdia_Read, gf_isom_delete_movie, and gf_isom_parse_movie_boxes. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/commit/6063b1a011c3f80cee25daade18154e15e4c058c - https://github.com/gpac/gpac/issues/1440
CVE ID: CVE-2020-11560 State: PUBLISHED Published: 2020-04-07T00:00:00 Last Updated: 2024-08-04T11:35:13.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: NCH Express Invoice 7.25 allows local users to discover the cleartext password by reading the configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://tejaspingulkar.blogspot.com/2020/03/cve-cve-2020-11560-title-clear-text.html - https://www.youtube.com/watch?v=V0BWq33qVCs&feature=youtu.be - http://packetstormsecurity.com/files/173117/NCH-Express-Invoice-7.25-Cleartext-Password.html
CVE ID: CVE-2020-11561 State: PUBLISHED Published: 2020-04-07T14:31:14 Last Updated: 2024-08-04T11:35:13.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as the "Add New Item" screen. Additional Analyst Notes: - CVE Program Container: References: - https://tejaspingulkar.blogspot.com - https://tejaspingulkar.blogspot.com/2020/03/cve-cve-2020-11561-title-escalation-via.html - https://youtu.be/-i2KtBgO3Kw
CVE ID: CVE-2020-11565 State: PUBLISHED Published: 2020-04-06T00:08:41 Last Updated: 2024-08-04T11:35:13.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing, aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability because the issue “is a bug in parsing mount options which can only be specified by a privileged user, so triggering the bug does not grant any powers not already held.” Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Prog