Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-11358. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.html - https://www.zerodayinitiative.com/advisories/ZDI-20-1346/
CVE ID: CVE-2020-17436 State: PUBLISHED Published: 2021-02-09T15:46:09 Last Updated: 2024-08-04T13:53:17.488Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Foxit Products: Studio Photo Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CMP files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of a
The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-11432. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.html - https://www.zerodayinitiative.com/advisories/ZDI-20-1347/
CVE ID: CVE-2020-17437 State: PUBLISHED Published: 2020-12-11T22:24:38 Last Updated: 2024-08-04T13:53:17.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by calculating the offset at which the normal data should be present in the global buffer. However, the length of this offset is not checked; therefore, for large values of the Urgent pointer bytes, the data pointer can point to memory th
offset is not checked; therefore, for large values of the Urgent pointer bytes, the data pointer can point to memory that is way beyond the data buffer in uip_process in uip.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-541018.pdf
CVE ID: CVE-2020-17438 State: PUBLISHED Published: 2020-12-11T22:25:49 Last Updated: 2024-08-04T13:53:17.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that reassembles fragmented packets fails to properly validate the total length of an incoming packet specified in its IP header, as well as the fragmentation offset value specified in the IP header. By crafting a packet with specific values of the IP header length and the fragmentation offset, attackers can write into the .bss section of the program (past the statically allocated buffer that is used for storing the fragmented data) and ca
e .bss section of the program (past the statically allocated buffer that is used for storing the fragmented data) and cause a denial of service in uip_reass() in uip.c, or possibly execute arbitrary code on some target architectures. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
CVE ID: CVE-2020-17439 State: PUBLISHED Published: 2020-12-11T22:26:47 Last Updated: 2024-08-04T13:53:17.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate that the incoming DNS replies match outgoing DNS queries in newdata() in resolv.c. Also, arbitrary DNS replies are parsed if there was any outgoing DNS query with a transaction ID that matches the transaction ID of an incoming reply. Provided that the default DNS cache is quite small (only four records) and that the transaction ID has a very limited set of values that is quite easy to gues
quite small (only four records) and that the transaction ID has a very limited set of values that is quite easy to guess, this can lead to DNS cache poisoning. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
CVE ID: CVE-2020-17440 State: PUBLISHED Published: 2020-12-11T22:27:58 Last Updated: 2024-08-04T13:53:17.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate that domain names present in the DNS responses have '\0' termination. This results in errors when calculating the offset of the pointer that jumps over domain name bytes in DNS response packets when a name lacks this termination, and eventually leads to dereferencing the pointer at an invalid/arbitrary address, within newdata() and parse_name() in resolv.c. Additional Analyst Notes: - CVE
pointer at an invalid/arbitrary address, within newdata() and parse_name() in resolv.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
CVE ID: CVE-2020-17441 State: PUBLISHED Published: 2020-12-11T22:29:35 Last Updated: 2024-08-04T13:53:17.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 headers does not validate whether the IPv6 payload length field is equal to the actual size of the payload, which leads to an Out-of-Bounds read during the ICMPv6 checksum calculation, resulting in either Denial-of-Service or Information Disclosure. This affects pico_ipv6_extension_headers and pico_checksum_adder (in pico_ipv6.c and pico_frame.c). Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 -
ico_frame.c). Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
CVE ID: CVE-2020-17442 State: PUBLISHED Published: 2020-12-11T22:30:42 Last Updated: 2024-08-04T13:53:17.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in picoTCP 1.7.0. The code for parsing the hop-by-hop IPv6 extension headers does not validate the bounds of the extension header length value, which may result in Integer Wraparound. Therefore, a crafted extension header length value may cause Denial-of-Service because it affects the loop in which the extension headers are parsed in pico_ipv6_process_hopbyhop() in pico_ipv6.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa
onal Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
CVE ID: CVE-2020-17443 State: PUBLISHED Published: 2020-12-11T22:31:33 Last Updated: 2024-08-04T13:53:17.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in picoTCP 1.7.0. The code for creating an ICMPv6 echo replies doesn't check whether the ICMPv6 echo request packet's size is shorter than 8 bytes. If the size of the incoming ICMPv6 request packet is shorter than this, the operation that calculates the size of the ICMPv6 echo replies has an integer wrap around, leading to memory corruption and, eventually, Denial-of-Service in pico_icmp6_send_echoreply_not_frag in pico_icmp6.c. Additional Analyst Notes: - CVE Program Container: References: - https://w
cmp6_send_echoreply_not_frag in pico_icmp6.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
CVE ID: CVE-2020-17444 State: PUBLISHED Published: 2020-12-11T22:32:36 Last Updated: 2024-08-04T13:53:17.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in picoTCP 1.7.0. The routine for processing the next header field (and deducing whether the IPv6 extension headers are valid) doesn't check whether the header extension length field would overflow. Therefore, if it wraps around to zero, iterating through the extension headers will not increment the current data pointer. This leads to an infinite loop and Denial-of-Service in pico_ipv6_check_headers_sequence() in pico_ipv6.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.
6_check_headers_sequence() in pico_ipv6.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
CVE ID: CVE-2020-17445 State: PUBLISHED Published: 2020-12-11T22:33:46 Last Updated: 2024-08-04T13:53:17.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 destination options does not check for a valid length of the destination options header. This results in an Out-of-Bounds Read, and, depending on the memory protection mechanism, this may result in Denial-of-Service in pico_ipv6_process_destopt() in pico_ipv6.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
CVE ID: CVE-2020-17446 State: PUBLISHED Published: 2020-08-12T15:56:23 Last Updated: 2024-08-04T13:53:17.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized pointer in the array data decoder. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MagicStack/asyncpg/releases/tag/v0.21.0 - https://lists.debian.org/debian-lts-announce/2020/09/msg00002.html
CVE ID: CVE-2020-17447 State: REJECTED Published: 2020-08-09T17:40:30 Last Updated: 2020-08-17T16:43:53 Description: No description available.
CVE ID: CVE-2020-17448 State: PUBLISHED Published: 2020-08-11T16:02:42 Last Updated: 2024-08-04T13:53:17.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension. Additional Analyst Notes: - CVE Program Container: References: - https://telegram.org - https://github.com/VijayT007/Vulnerability-Database/blob/master/Telegram-CVE-2020-17448 - https://github.com/telegramdesktop/tdesktop/releases/tag/v2.2.0 - https://security.gentoo.org/glsa/202101-34
CVE ID: CVE-2020-17449 State: PUBLISHED Published: 2020-08-12T21:47:28 Last Updated: 2024-08-04T13:53:17.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP-Fusion 9.03 allows XSS via the error_log file. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/en/blog/advisories/multiple-cross-site-scripting-xss-vulnerabilities-in-php-fusion-cms/
CVE ID: CVE-2020-17450 State: PUBLISHED Published: 2020-08-12T21:49:46 Last Updated: 2024-08-04T13:53:17.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP-Fusion 9.03 allows XSS on the preview page. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/en/blog/advisories/multiple-cross-site-scripting-xss-vulnerabilities-in-php-fusion-cms/
CVE ID: CVE-2020-17451 State: PUBLISHED Published: 2020-08-09T18:47:43 Last Updated: 2024-08-04T13:53:17.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: flatCore before 1.5.7 allows XSS by an admin via the acp/acp.php?tn=pages&sub=edit&editpage=1 page_linkname, page_title, page_content, or page_extracontent parameter, or the acp/acp.php?tn=system&sub=sys_pref prefs_pagename, prefs_pagetitle, or prefs_pagesubtitle parameter. Additional Analyst Notes: - CVE Program Container: References: - https://lists.openwall.net/full-disclosure/2020/08/07/1 - https://sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-flatcore-cms/
CVE ID: CVE-2020-17452 State: PUBLISHED Published: 2020-08-09T18:47:35 Last Updated: 2024-08-04T13:53:17.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: flatCore before 1.5.7 allows upload and execution of a .php file by an admin. Additional Analyst Notes: - CVE Program Container: References: - https://lists.openwall.net/full-disclosure/2020/08/07/1 - https://sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-flatcore-cms/
CVE ID: CVE-2020-17453 State: PUBLISHED Published: 2021-04-05T00:00:00 Last Updated: 2024-08-04T13:53:17.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/JacksonHHax/status/1374681422678519813 - https://github.com/JHHAX/CVE-2020-17453-PoC - https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2021/WSO2-2020-1132/
CVE ID: CVE-2020-17454 State: PUBLISHED Published: 2020-10-21T21:40:49 Last Updated: 2024-08-04T13:53:17.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: WSO2 API Manager 3.1.0 and earlier has reflected XSS on the "publisher" component's admin interface. More precisely, it is possible to inject an XSS payload into the owner POST parameter, which does not filter user inputs. By putting an XSS payload in place of a valid Owner Name, a modal box appears that writes an error message concatenated to the injected payload (without any form of data encoding). This can also be exploited via CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/dis
n also be exploited via CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0843
CVE ID: CVE-2020-17456 State: PUBLISHED Published: 2020-08-19T18:20:46 Last Updated: 2024-08-04T13:53:17.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi page. Additional Analyst Notes: - CVE Program Container: References: - https://maj0rmil4d.github.io/Seowon-SlC-130-And-SLR-120S-Exploit/ - http://packetstormsecurity.com/files/158933/Seowon-SlC-130-Router-Remote-Code-Execution.html - http://packetstormsecurity.com/files/166273/Seowon-SLR-120-Router-Remote-Code-Execution.html - https://github.com/TAPESH-TEAM/CVE-2020-17456-Seowon-SLR-120S42G-RCE-Exploit-Unauthe
Router-Remote-Code-Execution.html - https://github.com/TAPESH-TEAM/CVE-2020-17456-Seowon-SLR-120S42G-RCE-Exploit-Unauthenticated - https://www.exploit-db.com/exploits/50821
CVE ID: CVE-2020-17457 State: PUBLISHED Published: 2021-03-17T15:08:10 Last Updated: 2024-08-04T13:53:17.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fujitsu ServerView Suite iRMC before 9.62F allows XSS. An authenticated attacker can store an XSS payload in the PSCU_FILE_INIT field of a Save Configuration XML document. The payload is triggered in the HTTP error response pages. Additional Analyst Notes: - CVE Program Container: References: - https://www.gruppotim.it/redteam - https://support.ts.fujitsu.com/IndexDownload.asp?Softwareguid=C67A44AE-B022-4150-8621-C4393C007ED9
CVE ID: CVE-2020-17458 State: PUBLISHED Published: 2020-09-02T13:05:22 Last Updated: 2024-08-04T13:53:17.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: A post-authenticated stored XSS was found in MultiUx v.3.1.12.0 via the /multiux/SaveMailbox LastName field. Additional Analyst Notes: - CVE Program Container: References: - https://www.gruppotim.it/redteam - https://www.fabbricadigitale.com/en/il-nuovo-aspetto-di-multiux/
CVE ID: CVE-2020-17462 State: PUBLISHED Published: 2020-08-14T14:10:31 Last Updated: 2024-08-04T13:53:17.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does not block .ptar files, a related issue to CVE-2017-16798. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/48742
CVE ID: CVE-2020-17463 State: PUBLISHED Published: 2020-08-13T12:28:57.000Z Last Updated: 2025-10-21T23:35:38.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cwe.mitre.org/data/definitions/89.html - https://getfuelcms.com - https://github.com/daylightstudio/FUEL-CMS/archive/master.zip - http://packetstormsecurity.com/files/158840/Fuel-CMS-1.4.7-SQL-Injection.html - https://github.com/daylightstudio/FUEL-CMS/releases/tag/1.4.8
CVE ID: CVE-2020-17464 State: REJECTED Published: 2020-08-14T19:28:47 Last Updated: 2020-08-14T19:28:47 Description: No description available.
CVE ID: CVE-2020-17465 State: PUBLISHED Published: 2020-08-31T15:27:37 Last Updated: 2024-08-04T13:53:17.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dashboards and progressiveProfileForms in ForgeRock Identity Manager before 7.0.0 are vulnerable to stored XSS. The vulnerability affects versions 6.5.0.4, 6.0.0.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.com/us/our-research/?research=Technical+advisories - https://gist.github.com/gajendkmr/261f45e06c41656131a651c920c7f406
CVE ID: CVE-2020-17466 State: PUBLISHED Published: 2020-08-11T16:03:50 Last Updated: 2024-08-04T13:53:17.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Turcom TRCwifiZone through 2020-08-10 allows authentication bypass by visiting manage/control.php and ignoring 302 Redirect responses. Additional Analyst Notes: - CVE Program Container: References: - https://www.turcom.com.tr/en/urunlerimiz-sorunsuz-internet-trcwifizone.asp - https://cxsecurity.com/issue/WLB-2020080046
CVE ID: CVE-2020-17467 State: PUBLISHED Published: 2020-12-11T22:36:31 Last Updated: 2024-08-04T13:53:17.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FNET through 4.6.4. The code for processing the hostname from an LLMNR request doesn't check for '\0' termination. Therefore, the deduced length of the hostname doesn't reflect the correct length of the actual data. This may lead to Information Disclosure in _fnet_llmnr_poll in fnet_llmnr.c during a response to a malicious request of the DNS class IN. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa
E Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 - http://fnet.sourceforge.net/manual/fnet_history.html
CVE ID: CVE-2020-17468 State: PUBLISHED Published: 2020-12-11T22:38:16 Last Updated: 2024-08-04T13:53:17.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FNET through 4.6.4. The code for processing the hop-by-hop header (in the IPv6 extension headers) doesn't check for a valid length of an extension header, and therefore an out-of-bounds read can occur in _fnet_ip6_ext_header_handler_options in fnet_ip6.c, leading to Denial-of-Service. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 - http://fnet.sourceforge.net/manual/fnet_history.html
CVE ID: CVE-2020-17469 State: PUBLISHED Published: 2020-12-11T22:39:54 Last Updated: 2024-08-04T13:53:17.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FNET through 4.6.4. The code for IPv6 fragment reassembly tries to access a previous fragment starting from a network incoming fragment that still doesn't have a reference to the previous one (which supposedly resides in the reassembly list). When faced with an incoming fragment that belongs to a non-empty fragment list, IPv6 reassembly must check that there are no empty holes between the fragments: this leads to an uninitialized pointer dereference in _fnet_ip6_reassembly in fnet_ip6.c, and causes
een the fragments: this leads to an uninitialized pointer dereference in _fnet_ip6_reassembly in fnet_ip6.c, and causes Denial-of-Service. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 - http://fnet.sourceforge.net/manual/fnet_history.html
CVE ID: CVE-2020-17470 State: PUBLISHED Published: 2020-12-11T22:40:55 Last Updated: 2024-08-04T13:53:17.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FNET through 4.6.4. The code that initializes the DNS client interface structure does not set sufficiently random transaction IDs (they are always set to 1 in _fnet_dns_poll in fnet_dns.c). This significantly simplifies DNS cache poisoning attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 - http://fnet.sourceforge.net/manual/fnet_history.html
CVE ID: CVE-2020-17473 State: PUBLISHED Published: 2020-08-14T19:12:48 Last Updated: 2024-08-04T13:53:17.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to obtain a long-lasting token by impersonating the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.trendmicro.com/vinfo/us/threat-encyclopedia/vulnerability/8131/zkteco-facedepot-7b-10213-and-zkbiosecurity-server-10020190723-long-lasting-token-vulnerability
CVE ID: CVE-2020-17474 State: PUBLISHED Published: 2020-08-14T19:22:08 Last Updated: 2024-08-04T13:53:17.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: A token-reuse vulnerability in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to create arbitrary new users, elevate users to administrators, delete users, and download user faces from the database. Additional Analyst Notes: - CVE Program Container: References: - https://www.trendmicro.com/vinfo/us/threat-encyclopedia/vulnerability/8134/zkteco-facedepot-7b-10213-and-zkbiosecurity-server-10020190723-improper-privilege-vulnerability
CVE ID: CVE-2020-17475 State: PUBLISHED Published: 2020-08-14T19:17:55 Last Updated: 2024-08-04T13:53:17.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lack of authentication in the network relays used in MEGVII Koala 2.9.1-c3s allows attackers to grant physical access to anyone by sending packet data to UDP port 5000. Additional Analyst Notes: - CVE Program Container: References: - https://www.trendmicro.com/vinfo/us/threat-encyclopedia/vulnerability/8137/megvii-koala-291c3s-architectural-vulnerability-on-network-relays
CVE ID: CVE-2020-17476 State: PUBLISHED Published: 2020-08-10T16:58:43 Last Updated: 2024-08-04T14:00:47.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mibew Messenger before 3.2.7 allows XSS via a crafted user name. Additional Analyst Notes: - CVE Program Container: References: - https://mibew.org/announcements/2020/07/09/mibew-messenger-3-2-7-has-been-released - https://github.com/Mibew/mibew/commit/84f5bca0a90b2fe470e35e9b5121548ccce0093c