Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-14066 State: PUBLISHED Published: 2020-07-15T19:12:45 Last Updated: 2024-08-04T12:32:14.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to access. Additional Analyst Notes: - CVE Program Container: References: - https://www.icewarp.com/download-premise/server/ - https://github.com/networksecure/icewarp_insecure_permissions
CVE ID: CVE-2020-14067 State: PUBLISHED Published: 2020-06-15T00:41:38 Last Updated: 2024-08-04T12:32:14.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: The install_from_hash functionality in Navigate CMS 2.9 does not consider the .phtml extension when examining files within a ZIP archive that may contain PHP code, in check_upload in lib/packages/extensions/extension.class.php and lib/packages/themes/theme.class.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NavigateCMS/Navigate-CMS/commit/f1f47126b359d73a2635306ae46d8719c14d240b
CVE ID: CVE-2020-14068 State: PUBLISHED Published: 2020-06-29T16:24:56 Last Updated: 2024-08-04T12:32:14.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MK-AUTH 19.01. The web login functionality allows an attacker to bypass authentication and gain client privileges via SQL injection in central/executar_login.php. Additional Analyst Notes: - CVE Program Container: References: - http://mk-auth.com.br/page/changelog-1 - https://gist.github.com/merhawi023/a1155913df3cf0c17971b0fb7dcd8f20
CVE ID: CVE-2020-14069 State: PUBLISHED Published: 2020-06-29T16:26:45 Last Updated: 2024-08-04T12:32:14.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MK-AUTH 19.01. There are SQL injection issues in mkt/ PHP scripts, as demonstrated by arp.php, dhcp.php, hotspot.php, ip.php, pgaviso.php, pgcorte.php, pppoe.php, queues.php, and wifi.php. Additional Analyst Notes: - CVE Program Container: References: - http://mk-auth.com.br/page/changelog-1 - https://gist.github.com/merhawi023/a1155913df3cf0c17971b0fb7dcd8f20
CVE ID: CVE-2020-14070 State: PUBLISHED Published: 2020-06-29T16:27:58 Last Updated: 2024-08-04T12:32:14.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MK-AUTH 19.01. There is authentication bypass in the web login functionality because guessable credentials to admin/executar_login.php result in admin access. Additional Analyst Notes: - CVE Program Container: References: - http://mk-auth.com.br/page/changelog-1 - https://gist.github.com/merhawi023/a1155913df3cf0c17971b0fb7dcd8f20
CVE ID: CVE-2020-14071 State: PUBLISHED Published: 2020-06-29T16:28:41 Last Updated: 2024-08-04T12:32:14.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MK-AUTH 19.01. XSS vulnerabilities in admin and client scripts allow an attacker to execute arbitrary JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://mk-auth.com.br/page/changelog-1 - https://gist.github.com/merhawi023/a1155913df3cf0c17971b0fb7dcd8f20
CVE ID: CVE-2020-14072 State: PUBLISHED Published: 2020-06-29T16:29:38 Last Updated: 2024-08-04T12:32:14.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MK-AUTH 19.01. It allows command execution as root via shell metacharacters to /auth admin scripts. Additional Analyst Notes: - CVE Program Container: References: - http://mk-auth.com.br/page/changelog-1 - https://gist.github.com/merhawi023/a1155913df3cf0c17971b0fb7dcd8f20
CVE ID: CVE-2020-14073 State: PUBLISHED Published: 2020-06-23T19:09:54 Last Updated: 2024-08-04T12:32:14.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties. An attacker with Read/Write privileges can create a map, and then use the Map Designer Properties screen to insert JavaScript code. This can be exploited against any user with View Maps or Edit Maps access. Additional Analyst Notes: - CVE Program Container: References: - https://www.paessler.com/prtg/history/stable - https://gist.github.com/alert3/e058baa33c31695f4168a1dbf77103df - https://kb.paessler.com/en/topic/88223-what-s-the-open-vulnerability-r
hub.com/alert3/e058baa33c31695f4168a1dbf77103df - https://kb.paessler.com/en/topic/88223-what-s-the-open-vulnerability-report-cve-2020-14073-that-my-security-tracker-informed-me-about - http://packetstormsecurity.com/files/160312/PRTG-Network-Monitor-20.4.63.1412-Cross-Site-Scripting.html
CVE ID: CVE-2020-14074 State: PUBLISHED Published: 2020-06-15T03:37:08 Last Updated: 2024-08-04T12:32:14.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action kick_ban_wifi_mac_allow with a sufficiently long qcawifi.wifi0_vap0.maclist key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/kick_ban_wifi_mac_allow_overflow.pdf - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TREN
t/TEW-827/kick_ban_wifi_mac_allow_overflow.pdf - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-kick_ban_wifi.pdf
CVE ID: CVE-2020-14075 State: PUBLISHED Published: 2020-06-15T03:36:58 Last Updated: 2024-08-04T12:32:14.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action pppoe_connect, ru_pppoe_connect, or dhcp_connect with the key wan_ifname (or wan0_dns), allowing an authenticated user to run arbitrary commands on the device. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-dhcp_connect.pdf - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/dhcp_connect_command.pdf
CVE ID: CVE-2020-14076 State: PUBLISHED Published: 2020-06-15T12:46:46 Last Updated: 2024-08-04T12:32:14.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action st_dev_connect, st_dev_disconnect, or st_dev_rconnect with a sufficiently long wan_type key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/st_dev_connect_overflow.pdf - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/s
ster/Trendnet/TEW-827/st_dev_connect_overflow.pdf - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/st_dev_disconnect_overflow.pdf - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/st_dev_rconnect_overflow.pdf - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-st_dev.pdf
CVE ID: CVE-2020-14077 State: PUBLISHED Published: 2020-06-15T03:36:50 Last Updated: 2024-08-04T12:39:35.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action set_sta_enrollee_pin_wifi1 (or set_sta_enrollee_pin_wifi0) with a sufficiently long wps_sta_enrollee_pin key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/set_sta_enrollee_pin_wifi_overflow.pdf - https://github.com/kuc001/IoTFirmware/bl
TFirmware/blob/master/Trendnet/TEW-827/set_sta_enrollee_pin_wifi_overflow.pdf - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-set_sta_enrollee.pdf
CVE ID: CVE-2020-14078 State: PUBLISHED Published: 2020-06-15T03:36:43 Last Updated: 2024-08-04T12:39:35.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action wifi_captive_portal_login with a sufficiently long REMOTE_ADDR key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/wifi_captive_portal_login_overflow.pdf - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-wifi_c
i_captive_portal_login_overflow.pdf - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-wifi_captive.pdf
CVE ID: CVE-2020-14079 State: PUBLISHED Published: 2020-06-15T03:36:34 Last Updated: 2024-08-04T12:39:35.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action auto_up_fw (or auto_up_lp) with a sufficiently long update_file_name key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-auto_up_fw.pdf - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/auto_up_fw_overflow.pdf
27/TRENDnet-auto_up_fw.pdf - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/auto_up_fw_overflow.pdf - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-auto_up_lp.pdf - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/auto_up_lp_overflow.pdf
CVE ID: CVE-2020-14080 State: PUBLISHED Published: 2020-06-15T03:36:27 Last Updated: 2024-08-04T12:39:35.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an unauthenticated user to execute arbitrary code by POSTing to apply_sec.cgi via the action ping_test with a sufficiently long ping_ipaddr key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-ping_test.pdf - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/ping_test_overflow.pdf
CVE ID: CVE-2020-14081 State: PUBLISHED Published: 2020-06-15T03:36:16 Last Updated: 2024-08-04T12:39:35.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action send_log_email with the key auth_acname (or auth_passwd), allowing an authenticated user to run arbitrary commands on the device. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/send_log_email_command.pdf
CVE ID: CVE-2020-14092 State: PUBLISHED Published: 2020-07-02T15:20:01 Last Updated: 2024-08-04T12:39:35.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.dwbooster.com/forms/payment-form-for-paypal-pro - https://wordpress.org/plugins/payment-form-for-paypal-pro/#developers - https://wpvulndb.com/vulnerabilities/10287
CVE ID: CVE-2020-14093 State: PUBLISHED Published: 2020-06-15T04:06:04 Last Updated: 2024-08-04T12:39:35.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response. Additional Analyst Notes: - CVE Program Container: References: - http://www.mutt.org - https://github.com/muttmua/mutt/commit/3e88866dc60b5fa6aaba6fd7c1710c12c1c3cd01 - https://www.debian.org/security/2020/dsa-4707 - https://bugs.gentoo.org/728300 - https://www.debian.org/security/2020/dsa-4708 - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2020-06
suse.org/opensuse-security-announce/2020-06/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00070.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00039.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00040.html - https://usn.ubuntu.com/4401-1/ - https://security.gentoo.org/glsa/202007-57
CVE ID: CVE-2020-14094 State: PUBLISHED Published: 2020-06-24T15:51:22 Last Updated: 2024-08-04T12:39:35.788Z Vendors: Xiaomi Products: Xiaomi router R3600 Problem Types: remote code execution Description: In Xiaomi router R3600, ROM version<1.0.20, the connection service can be injected through the web interface, resulting in stack overflow or remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=17&locale=zh
CVE ID: CVE-2020-14095 State: PUBLISHED Published: 2020-06-24T15:17:35 Last Updated: 2024-08-04T12:39:35.694Z Vendors: Xiaomi Products: Xiaomi router R3600 Problem Types: stack overflow or remote code execution Description: In Xiaomi router R3600, ROM version<1.0.20, a connect service suffers from an injection vulnerability through the web interface, leading to a stack overflow or remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=18&locale=en
CVE ID: CVE-2020-14096 State: PUBLISHED Published: 2020-09-11T13:36:15 Last Updated: 2024-08-04T12:39:35.834Z Vendors: n/a Products: Xiaomi AI speaker Problem Types: Memory overflow Description: Memory overflow in Xiaomi AI speaker Rom version <1.59.6 can happen when the speaker verifying a malicious firmware during OTA process. Additional Analyst Notes: - CVE Program Container: References: - https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=19&locale=en
CVE ID: CVE-2020-14097 State: PUBLISHED Published: 2021-01-13T22:27:49 Last Updated: 2024-08-04T12:39:35.712Z Vendors: n/a Products: Xiaomi router AX6 Problem Types: Unauthorized download Description: Wrong nginx configuration, causing specific paths to be downloaded without authorization. This affects Xiaomi router AX6 ROM version < 1.0.18. Additional Analyst Notes: - CVE Program Container: References: - https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=21&locale=en
CVE ID: CVE-2020-14098 State: PUBLISHED Published: 2021-01-13T22:30:41 Last Updated: 2024-08-04T12:39:35.729Z Vendors: n/a Products: Xiaomi router AX1800, Xiaomi route RM1800 Problem Types: Authentication bypass Description: The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26. Additional Analyst Notes: - CVE Program Container: References: - https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=22&locale=en
CVE ID: CVE-2020-14099 State: PUBLISHED Published: 2021-04-08T17:52:45 Last Updated: 2024-08-04T12:39:36.163Z Vendors: n/a Products: Xiaomi Router AX1800,Xiaomi Rourer RM1800 Problem Types: Information disclosure Description: On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password. Additional Analyst Notes: - CVE Program Container: References: - https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=25&locale=zh
CVE ID: CVE-2020-14100 State: PUBLISHED Published: 2020-09-11T13:42:01 Last Updated: 2024-08-04T12:39:35.851Z Vendors: n/a Products: Xiaomi router R3600 Problem Types: remote code execution Description: In Xiaomi router R3600 ROM version<1.0.66, filters in the set_WAN6 interface can be bypassed, causing remote code execution. The router administrator can gain root access from this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=20&locale=en
CVE ID: CVE-2020-14101 State: PUBLISHED Published: 2021-01-13T22:25:07 Last Updated: 2024-08-04T12:39:35.663Z Vendors: n/a Products: Xiaomi router AX1800, Xiaomi route RM1800 Problem Types: Information leakage Description: The data collection SDK of the router web management interface caused the leakage of the token. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26. Additional Analyst Notes: - CVE Program Container: References: - https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=24&locale=en
CVE ID: CVE-2020-14102 State: PUBLISHED Published: 2021-01-13T22:33:05 Last Updated: 2024-08-04T12:39:35.901Z Vendors: n/a Products: Xiaomi router AX1800, Xiaomi route RM1800 Problem Types: command injection Description: There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26. Additional Analyst Notes: - CVE Program Container: References: - https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=23&locale=en
CVE ID: CVE-2020-14103 State: PUBLISHED Published: 2021-04-08T20:23:25 Last Updated: 2024-08-04T12:39:35.761Z Vendors: n/a Products: Xiaomi 10 Problem Types: Information disclosure Description: The application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI < 2020.01.15. Additional Analyst Notes: - CVE Program Container: References: - https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=27&locale=zh
CVE ID: CVE-2020-14104 State: PUBLISHED Published: 2021-04-08T17:44:10 Last Updated: 2024-08-04T12:39:36.181Z Vendors: n/a Products: Xiaomi router AX3600 Problem Types: Remote code execution Description: A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50. Additional Analyst Notes: - CVE Program Container: References: - https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=26&locale=zh
CVE ID: CVE-2020-14105 State: PUBLISHED Published: 2021-04-20T15:49:21 Last Updated: 2024-08-04T12:39:35.975Z Vendors: n/a Products: Xiaomi 10 Problem Types: Information disclosure Description: The application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI < 2020.01.15. Additional Analyst Notes: - CVE Program Container: References: - https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=28&locale=zh
CVE ID: CVE-2020-14106 State: PUBLISHED Published: 2021-04-08T20:57:52 Last Updated: 2024-08-04T12:39:35.715Z Vendors: n/a Products: Xiaomi Mobile Phone Problem Types: Information disclosure Description: The application in the mobile phone can unauthorized access to the list of running processes in the mobile phone, Xiaomi Mobile Phone MIUI < 2021.01.26. Additional Analyst Notes: - CVE Program Container: References: - https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=29&locale=zh
CVE ID: CVE-2020-14107 State: PUBLISHED Published: 2022-01-18T16:52:15 Last Updated: 2024-08-04T12:39:35.727Z Vendors: n/a Products: Xiaomi mirror screen Problem Types: Denial of Service Description: A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN. Additional Analyst Notes: - CVE Program Container: References: - https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=92
CVE ID: CVE-2020-14109 State: PUBLISHED Published: 2021-09-16T11:55:33 Last Updated: 2024-08-04T12:39:35.777Z Vendors: n/a Products: Xiaomi Router AX3600 Problem Types: resulting in command execution under administrator authority Description: There is command injection in the meshd program in the routing system, resulting in command execution under administrator authority on Xiaomi router AX3600 with ROM version =< 1.1.12 Additional Analyst Notes: - CVE Program Container: References: - https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=25&locale=zh
CVE ID: CVE-2020-14110 State: PUBLISHED Published: 2022-01-18T16:51:43 Last Updated: 2024-08-04T12:39:36.192Z Vendors: n/a Products: miwifi6 AX3600 Problem Types: AX3600 router sensitive information leaked Description: AX3600 router sensitive information leaked.There is an unauthorized interface through luci to obtain sensitive information and log in to the web background. Additional Analyst Notes: - CVE Program Container: References: - https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=40
CVE ID: CVE-2020-14111 State: PUBLISHED Published: 2022-03-07T15:24:50 Last Updated: 2024-08-04T12:39:36.102Z Vendors: n/a Products: Xiaomi Router Router AX3600 Problem Types: Command Injection Description: A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attackers can exploit this vulnerability to execute code. Additional Analyst Notes: - CVE Program Container: References: - https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=18
CVE ID: CVE-2020-14112 State: PUBLISHED Published: 2022-03-07T14:06:49 Last Updated: 2024-08-04T12:39:35.767Z Vendors: n/a Products: Router AX6000 Problem Types: Information Leak Description: Information Leak Vulnerability exists in the Xiaomi Router AX6000. The vulnerability is caused by incorrect routing configuration. Attackers can exploit this vulnerability to download part of the files in Xiaomi Router AX6000. Additional Analyst Notes: - CVE Program Container: References: - https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=34
CVE ID: CVE-2020-14114 State: PUBLISHED Published: 2022-07-22T15:32:00 Last Updated: 2024-08-04T12:39:36.202Z Vendors: n/a Products: Xiaomi SmartHome APP Problem Types: Information leakage Description: information leakage vulnerability exists in the Xiaomi SmartHome APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=277
CVE ID: CVE-2020-14115 State: PUBLISHED Published: 2022-03-07T15:33:20 Last Updated: 2024-08-04T12:39:35.895Z Vendors: n/a Products: Xiaomi Router AX3600 Problem Types: Command injection Description: A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attackers can exploit this vulnerability to execute code. Additional Analyst Notes: - CVE Program Container: References: - https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=37
CVE ID: CVE-2020-14116 State: PUBLISHED Published: 2022-04-21T17:22:21 Last Updated: 2024-08-04T12:39:35.991Z Vendors: n/a Products: Mi Browser Problem Types: Intent redirection Description: An intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by the Mi Browser does not verify the validity of the incoming data. Attackers can perform sensitive operations by exploiting this. Additional Analyst Notes: - CVE Program Container: References: - https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=148