Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.5.3 and earlier (Movable Type 6.5), Movable Type Advanced 6.5.3 and earlier (Movable Type Advanced 6.5), Movable Type 6.3.11 and earlier (Movable Type 6.3), Movable Type Advanced 6.3.11 and earlier (Movable Type 6.3), Movable Type Premium 1.29 and earlier, and Movable Type Premium Advanced 1.29 and earlier) allows remote attackers to inject arbitrary HTML attribute value via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://movabletype.org/news/2020/05/mt-730-660-6312-released.html - https://jvn.jp/en/jp/JVN28806943/index.html
CVE ID: CVE-2020-5575 State: PUBLISHED Published: 2020-05-14T01:00:21 Last Updated: 2024-08-04T08:30:24.605Z Vendors: Six Apart Ltd. Products: Movable Type Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type for AWS 7 r.4606 (7.2.1) and earlier (Movable Type for AWS 7), Movable Type 6.5.3 and earlier (Movable Type 6.5), Movable Type Advanced 6.5.3 and earlier (Movable Type Advanced 6.5), Movable Type 6.3.11 and earlier (Movable Type 6.3), Movable Type Advanced 6.3.11 and earlier (Movable
pe Advanced 6.5), Movable Type 6.3.11 and earlier (Movable Type 6.3), Movable Type Advanced 6.3.11 and earlier (Movable Type 6.3), Movable Type Premium 1.29 and earlier, and Movable Type Premium Advanced 1.29 and earlier) allows remote attackers to inject arbitrary script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://movabletype.org/news/2020/05/mt-730-660-6312-released.html - https://jvn.jp/en/jp/JVN28806943/index.html
CVE ID: CVE-2020-5576 State: PUBLISHED Published: 2020-05-14T01:00:22 Last Updated: 2024-08-04T08:30:24.817Z Vendors: Six Apart Ltd. Products: Movable Type Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type for AWS 7 r.4606 (7.2.1) and earlier (Movable Type for AWS 7), Movable Type 6.5.3 and earlier (Movable Type 6.5), Movable Type Advanced 6.5.3 and earlier (Movable Type Advanced 6.5), Movable Type 6.3.11 and earlier (Movable Type 6.3), Movable Type Advanced 6.3.11 an
earlier (Movable Type Advanced 6.5), Movable Type 6.3.11 and earlier (Movable Type 6.3), Movable Type Advanced 6.3.11 and earlier (Movable Type 6.3), Movable Type Premium 1.29 and earlier, and Movable Type Premium Advanced 1.29 and earlier) allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://movabletype.org/news/2020/05/mt-730-660-6312-released.html - https://jvn.jp/en/jp/JVN28806943/index.html
CVE ID: CVE-2020-5577 State: PUBLISHED Published: 2020-05-14T01:00:22 Last Updated: 2024-08-04T08:30:24.546Z Vendors: Six Apart Ltd. Products: Movable Type Problem Types: Unrestricted Upload of File with Dangerous Type Description: Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type for AWS 7 r.4606 (7.2.1) and earlier (Movable Type for AWS 7), Movable Type 6.5.3 and earlier (Movable Type 6.5), Movable Type Advanced 6.5.3 and earlier (Movable Type Advanced 6.5), Movable Type 6.3.11 and earlier (Movable Type 6.3), Movable Type Advanced 6.3.11 and earlier (Movable Type 6.3),
6.5), Movable Type 6.3.11 and earlier (Movable Type 6.3), Movable Type Advanced 6.3.11 and earlier (Movable Type 6.3), Movable Type Premium 1.29 and earlier, and Movable Type Premium Advanced 1.29 and earlier) allow remote authenticated attackers to upload arbitrary files and execute a php script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://movabletype.org/news/2020/05/mt-730-660-6312-released.html - https://jvn.jp/en/jp/JVN28806943/index.html
CVE ID: CVE-2020-5579 State: PUBLISHED Published: 2020-05-20T10:15:21 Last Updated: 2024-08-04T08:30:24.535Z Vendors: Stranger Studios Products: Paid Memberships Problem Types: SQL Injection Description: SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.paidmembershipspro.com/pmpro-update-2-3-3-security-release/ - https://jvn.jp/en/jp/JVN20248858/index.html
CVE ID: CVE-2020-5580 State: PUBLISHED Published: 2020-06-30T10:20:40 Last Updated: 2024-08-04T08:30:24.566Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Fails to restrict access Description: Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to view and/or alter Single sign-on settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.cybozu.support/article/36391 - https://jvn.jp/en/jp/JVN55497111/index.html
CVE ID: CVE-2020-5581 State: PUBLISHED Published: 2020-06-30T10:20:41 Last Updated: 2024-08-04T08:30:24.622Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Path Traversal Description: Path traversal vulnerability in Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to obtain unintended information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN55497111/index.html - https://kb.cybozu.support/article/36393
CVE ID: CVE-2020-5582 State: PUBLISHED Published: 2020-06-30T10:20:41 Last Updated: 2024-08-04T08:30:24.684Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Fails to restrict access Description: Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to alter the data for the file attached to Report via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN55497111/index.html - https://kb.cybozu.support/article/36455/
CVE ID: CVE-2020-5583 State: PUBLISHED Published: 2020-06-30T10:20:42 Last Updated: 2024-08-04T08:30:24.599Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Fails to restrict access Description: Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to obtain unauthorized Multi-Report's data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN55497111/index.html - https://kb.cybozu.support/article/36408/
CVE ID: CVE-2020-5584 State: PUBLISHED Published: 2020-06-30T10:20:42 Last Updated: 2024-08-04T08:30:24.584Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Information Disclosure Description: Cybozu Garoon 4.0.0 to 5.0.1 allow remote attackers to obtain unintended information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN55497111/index.html - https://kb.cybozu.support/article/36433/
CVE ID: CVE-2020-5585 State: PUBLISHED Published: 2020-06-30T10:20:43 Last Updated: 2024-08-04T08:30:24.653Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN55497111/index.html - https://kb.cybozu.support/article/36432/
CVE ID: CVE-2020-5586 State: PUBLISHED Published: 2020-06-30T10:20:43 Last Updated: 2024-08-04T08:30:24.548Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Cybozu Garoon 4.10.3 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN55497111/index.html - https://kb.cybozu.support/article/36453/
CVE ID: CVE-2020-5587 State: PUBLISHED Published: 2020-06-30T10:20:44 Last Updated: 2024-08-04T08:30:24.547Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Information Disclosure Description: Cybozu Garoon 4.0.0 to 5.0.1 allow remote authenticated attackers to obtain unintended information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN55497111/index.html - https://kb.cybozu.support/article/36409/
CVE ID: CVE-2020-5588 State: PUBLISHED Published: 2020-06-30T10:20:44 Last Updated: 2024-08-04T08:30:24.579Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Path Traversal Description: Path traversal vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to obtain unintended information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN55497111/index.html - https://kb.cybozu.support/article/36410/
CVE ID: CVE-2020-5589 State: PUBLISHED Published: 2020-06-09T08:00:17 Last Updated: 2024-08-04T08:30:24.643Z Vendors: Sony Corporation Products: Sony wireless headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N, WI-SP600N Problem Types: CWE-306 Description: SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware versions prior to 4.5.2 have vulnerability that someone within the Bluetooth range can make the Bluetooth pairing and operate such as changing volume of the product. Additional Analyst Notes: - CVE Program Container: R
uetooth pairing and operate such as changing volume of the product. Additional Analyst Notes: - CVE Program Container: References: - https://www.sony.com/electronics/support/audio-video-headphones - https://jvn.jp/en/jp/JVN67447798/
CVE ID: CVE-2020-5590 State: PUBLISHED Published: 2020-06-19T09:35:19 Last Updated: 2024-08-04T08:30:24.521Z Vendors: EC-CUBE CO.,LTD. Products: EC-CUBE Problem Types: Directory traversal Description: Directory traversal vulnerability in EC-CUBE 3.0.0 to 3.0.18 and 4.0.0 to 4.0.3 allows remote authenticated attackers to delete arbitrary files and/or directories on the server via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.ec-cube.net/info/weakness/weakness.php?id=73 - https://www.ec-cube.net/info/weakness/weakness.php?id=74 - https://jvn.jp/en/jp/JVN77458946/index.html
CVE ID: CVE-2020-5591 State: PUBLISHED Published: 2020-06-05T10:05:15 Last Updated: 2024-08-04T08:30:24.525Z Vendors: XACK, Inc. Products: XACK DNS Problem Types: Denial-of-service (DoS) Description: XACK DNS 1.11.0 to 1.11.4, 1.10.0 to 1.10.8, 1.8.0 to 1.8.23, 1.7.0 to 1.7.18, and versions before 1.7.0 allow remote attackers to cause a denial of service condition resulting in degradation of the recursive resolver's performance or compromising the recursive resolver as a reflector in a reflection attack. Additional Analyst Notes: - CVE Program Container: References: - https://xack.co.jp/info/?ID=622 - https://jvn.jp/en/jp/JVN40208370/index.html
CVE ID: CVE-2020-5592 State: PUBLISHED Published: 2020-06-11T07:00:18 Last Updated: 2024-08-04T08:30:24.520Z Vendors: Zenphoto Products: Zenphoto Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.zenphoto.org/news/zenphoto-1.5.7/ - https://jvn.jp/en/jp/JVN32252648/index.html
CVE ID: CVE-2020-5593 State: PUBLISHED Published: 2020-06-11T07:00:19 Last Updated: 2024-08-04T08:30:24.642Z Vendors: Zenphoto Products: Zenphoto Problem Types: Code injection Description: Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file. Additional Analyst Notes: - CVE Program Container: References: - https://www.zenphoto.org/news/zenphoto-1.5.7/ - https://jvn.jp/en/jp/JVN32252648/index.html
CVE ID: CVE-2020-5594 State: PUBLISHED Published: 2020-06-23T07:35:23 Last Updated: 2024-08-04T08:30:24.558Z Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules Problem Types: Cleartext Transmission of Sensitive Information Description: Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a vulnerability that allows cleartext transmission of sensitive information between CPU modules and GX Works3 and/or GX Works2 via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-003_en.pdf - https://www.mitsubishiel
: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-003_en.pdf - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-003.pdf - https://jvn.jp/en/vu/JVNVU91424496/index.html
CVE ID: CVE-2020-5595 State: PUBLISHED Published: 2020-07-07T08:05:39 Last Updated: 2024-08-04T08:30:24.610Z Vendors: Mitsubishi Electric Corporation Products: GOT2000 series GT27, GT25, and GT23 Problem Types: Improper Restriction of Operations within the Bounds of a Memory Buffer Description: TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains a buffer overflow vulnerability, which may allow a remote attacker to stop the network functions of the products or execute a malicious program via a specially crafted packet. Additional Analyst Notes: - CVE Program Container:
ducts or execute a malicious program via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-005_en.pdf - https://jvn.jp/en/vu/JVNVU95413676/index.html
CVE ID: CVE-2020-5596 State: PUBLISHED Published: 2020-07-07T08:05:39 Last Updated: 2024-08-04T08:30:24.615Z Vendors: Mitsubishi Electric Corporation Products: GOT2000 series GT27, GT25, and GT23 Problem Types: Session fixation Description: TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) does not properly manage sessions, which may allow a remote attacker to stop the network functions of the products or execute a malicious program via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vuln
acket. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-005_en.pdf - https://jvn.jp/en/vu/JVNVU95413676/index.html
CVE ID: CVE-2020-5597 State: PUBLISHED Published: 2020-07-07T08:05:39 Last Updated: 2024-08-04T08:30:24.631Z Vendors: Mitsubishi Electric Corporation Products: GOT2000 series GT27, GT25, and GT23 Problem Types: NULL Pointer Dereference Description: TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains a null pointer dereference vulnerability, which may allow a remote attacker to stop the network functions of the products or execute a malicious program via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishiel
ia a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-005_en.pdf - https://jvn.jp/en/vu/JVNVU95413676/index.html
CVE ID: CVE-2020-5598 State: PUBLISHED Published: 2020-07-07T08:05:40 Last Updated: 2024-08-04T08:30:24.545Z Vendors: Mitsubishi Electric Corporation Products: GOT2000 series GT27, GT25, and GT23 Problem Types: Improper Access Control Description: TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains an improper access control vulnerability, which may which may allow a remote attacker tobypass access restriction and stop the network functions of the products or execute a malicious program via a specially crafted packet. Additional Analyst Notes: - CVE Program Container:
CVE ID: CVE-2020-5599 State: PUBLISHED Published: 2020-07-07T08:05:40 Last Updated: 2024-08-04T08:30:24.627Z Vendors: Mitsubishi Electric Corporation Products: GOT2000 series GT27, GT25, and GT23 Problem Types: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Description: TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains an improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability, which may allow a remote attacker to stop the network functions of the products or execute a malicious program via
ity, which may allow a remote attacker to stop the network functions of the products or execute a malicious program via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-005_en.pdf - https://jvn.jp/en/vu/JVNVU95413676/index.html
CVE ID: CVE-2020-5600 State: PUBLISHED Published: 2020-07-07T08:05:41 Last Updated: 2024-08-04T08:30:24.613Z Vendors: Mitsubishi Electric Corporation Products: GOT2000 series GT27, GT25, and GT23 Problem Types: Resource Management Errors Description: TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains a resource management error vulnerability, which may allow a remote attacker to stop the network functions of the products or execute a malicious program via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubish
m via a specially crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-005_en.pdf - https://jvn.jp/en/vu/JVNVU95413676/index.html
CVE ID: CVE-2020-5601 State: PUBLISHED Published: 2020-06-30T10:20:44 Last Updated: 2024-08-04T08:30:24.550Z Vendors: National Tax Agency Products: Chrome Extension for e-Tax Reception System Problem Types: Arbitrary command execution Description: Chrome Extension for e-Tax Reception System Ver1.0.0.0 allows remote attackers to execute an arbitrary command via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.e-tax.nta.go.jp/topics/topics_200618.htm - https://jvn.jp/en/jp/JVN40039627/index.html
CVE ID: CVE-2020-5602 State: PUBLISHED Published: 2020-06-30T10:20:45 Last Updated: 2024-08-04T08:30:24.529Z Vendors: Mitsubishi Electric Corporation Products: Mitsubishi Electoric FA Engineering Software Problem Types: XML external entities (XXE) Description: Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit (EM Configurator) Ver. 1.010L and earlier, GT Designer3 (GOT2000) Ver. 1.221F and earlier, GX LogViewer Ver. 1.96A and earlier, GX Works2 Ver. 1.586L and earlier, GX Works3 Ver. 1.058L and earlier, M_CommDTM-HART Ver. 1.00A, M_CommDTM-IO-Link Ver. 1.02C and earl
1.586L and earlier, GX Works3 Ver. 1.058L and earlier, M_CommDTM-HART Ver. 1.00A, M_CommDTM-IO-Link Ver. 1.02C and earlier, MELFA-Works Ver. 4.3 and earlier, MELSEC-L Flexible High-Speed I/O Control Module Configuration Tool Ver.1.004E and earlier, MELSOFT FieldDeviceConfigurator Ver. 1.03D and earlier, MELSOFT iQ AppPortal Ver. 1.11M and earlier, MELSOFT Navigator Ver. 2.58L and earlier, MI Configurator Ver. 1.003D and earlier, Motion Control Setting Ver. 1.005F and earlier, MR Configurator2 Ver. 1.72A and earlier, MT Works2 Ver. 1.156N and earlier, RT ToolBox2 Ver. 3.72A and earlier, and RT ToolBox3 Ver. 1.50C and earlier) allows an attacker to conduct XML External Entity (XXE) attacks vi
and earlier, and RT ToolBox3 Ver. 1.50C and earlier) allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-004_en.pdf - https://jvn.jp/en/vu/JVNVU90307594/index.html
CVE ID: CVE-2020-5603 State: PUBLISHED Published: 2020-06-30T10:20:45 Last Updated: 2024-08-04T08:30:24.586Z Vendors: Mitsubishi Electric Corporation Products: Mitsubishi Electoric FA Engineering Software Problem Types: Uncontrolled Resource Consumption Description: Uncontrolled resource consumption vulnerability in Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit (EM Configurator) Ver. 1.010L and earlier, GT Designer3 (GOT2000) Ver. 1.221F and earlier, GX LogViewer Ver. 1.96A and earlier, GX Works2 Ver. 1.586L and earlier, GX Works3 Ver. 1.058L and earlier, M_CommD
lier, GX LogViewer Ver. 1.96A and earlier, GX Works2 Ver. 1.586L and earlier, GX Works3 Ver. 1.058L and earlier, M_CommDTM-HART Ver. 1.00A, M_CommDTM-IO-Link Ver. 1.02C and earlier, MELFA-Works Ver. 4.3 and earlier, MELSEC-L Flexible High-Speed I/O Control Module Configuration Tool Ver.1.004E and earlier, MELSOFT FieldDeviceConfigurator Ver. 1.03D and earlier, MELSOFT iQ AppPortal Ver. 1.11M and earlier, MELSOFT Navigator Ver. 2.58L and earlier, MI Configurator Ver. 1.003D and earlier, Motion Control Setting Ver. 1.005F and earlier, MR Configurator2 Ver. 1.72A and earlier, MT Works2 Ver. 1.156N and earlier, RT ToolBox2 Ver. 3.72A and earlier, and RT ToolBox3 Ver. 1.50C and earlier) allows an
MT Works2 Ver. 1.156N and earlier, RT ToolBox2 Ver. 3.72A and earlier, and RT ToolBox3 Ver. 1.50C and earlier) allows an attacker to cause a denial of service (DoS) condition attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-004_en.pdf - https://jvn.jp/en/vu/JVNVU90307594/index.html
CVE ID: CVE-2020-5604 State: PUBLISHED Published: 2020-07-09T01:05:20 Last Updated: 2024-08-04T08:30:24.580Z Vendors: Mercari, Inc. Products: Android App 'Mercari' (Japan version) Problem Types: Exposed Dangerous Method or Function Description: Android App 'Mercari' (Japan version) prior to version 3.52.0 allows arbitrary method execution of a Java object by a remote attacker via a Man-In-The-Middle attack by using Java Reflection API of JavaScript code on WebView. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN93167107/index.html
CVE ID: CVE-2020-5605 State: PUBLISHED Published: 2020-09-18T05:05:24 Last Updated: 2024-08-04T08:30:24.565Z Vendors: BUFFALO INC. Products: WHR-G54S Problem Types: Directory traversal Description: Directory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to access sensitive information such as setting values via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.buffalo.jp/news/detail/20200911-01.html - https://jvn.jp/en/jp/JVN09166495/index.html