Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
;h=9f39ed4a92578a020ae10459643e1fe72573d134 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/ - https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/tree/contrib/lips4/gdevlips.c?h=ghostscript-9.18#n163
CVE ID: CVE-2020-16297 State: PUBLISHED Published: 2020-08-13T02:08:34.000Z Last Updated: 2025-03-04T18:44:47.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in FloydSteinbergDitheringC() in contrib/gdevbjca.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701800 - https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=bf72f1a3dd5392ee8291e3b1518a0c2c5dc6ba39 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - htt
ff;h=bf72f1a3dd5392ee8291e3b1518a0c2c5dc6ba39 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/ - https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=bf72f1a3dd5392ee8291e3b1518a0c2c5dc6ba39 - https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/tree/contrib/gdevbjca.c?h=ghostpdl-9.18#n659
CVE ID: CVE-2020-16298 State: PUBLISHED Published: 2020-08-13T02:08:40 Last Updated: 2024-08-04T13:37:54.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in mj_color_correct() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701799 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=849e74e5ab450dd581942192da7101e0664fa5af - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debia
b450dd581942192da7101e0664fa5af - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/
CVE ID: CVE-2020-16299 State: PUBLISHED Published: 2020-08-13T02:08:45 Last Updated: 2024-08-04T13:37:54.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Division by Zero vulnerability in bj10v_print_page() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701801 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=4fcbece46870 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=19cebe708b9ee3d9e0f8bcdd79dbc6ef9ddc70d2 - https://lis
6870 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=19cebe708b9ee3d9e0f8bcdd79dbc6ef9ddc70d2 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/
CVE ID: CVE-2020-16300 State: PUBLISHED Published: 2020-08-13T02:08:50 Last Updated: 2024-08-04T13:37:54.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in tiff12_print_page() in devices/gdevtfnx.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701807 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=714e8995cd582d418276915cbbec3c70711fb19e - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.o
2d418276915cbbec3c70711fb19e - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/
CVE ID: CVE-2020-16301 State: PUBLISHED Published: 2020-08-13T02:08:58 Last Updated: 2024-08-04T13:37:54.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in okiibm_print_page1() in devices/gdevokii.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701808 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=f54414c8b15b2c27d1dcadd92cfe84f6d15f18dc - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/
7d1dcadd92cfe84f6d15f18dc - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/
CVE ID: CVE-2020-16302 State: PUBLISHED Published: 2020-08-13T02:09:02 Last Updated: 2024-08-04T13:37:54.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted PDF file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701815 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=366ad48d076c1aa4c8f83c65011258a04e348207 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/s
c8f83c65011258a04e348207 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/
CVE ID: CVE-2020-16303 State: PUBLISHED Published: 2020-08-13T02:09:06 Last Updated: 2024-08-04T13:37:54.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use-after-free vulnerability in xps_finish_image_path() in devices/vector/gdevxps.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted PDF file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701818 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=94d8955cb77 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748
77 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/
CVE ID: CVE-2020-16304 State: PUBLISHED Published: 2020-08-13T02:09:12.000Z Last Updated: 2025-03-04T18:37:21.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in image_render_color_thresh() in base/gxicolor.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to escalate privileges via a crafted eps file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701816 - http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=027c546e0dd11e0526f1780a7f3c2c66acffe209 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.
546e0dd11e0526f1780a7f3c2c66acffe209 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/ - https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/tree/base/gxicolor.c?h=ghostscript-9.18#n825
CVE ID: CVE-2020-16305 State: PUBLISHED Published: 2020-08-13T02:09:22 Last Updated: 2024-08-04T13:37:54.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in pcx_write_rle() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701819 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=2793769ff107d8d22dadd30c6e68cd781b569550 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debi
f107d8d22dadd30c6e68cd781b569550 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/
CVE ID: CVE-2020-16306 State: PUBLISHED Published: 2020-08-13T02:09:26 Last Updated: 2024-08-04T13:37:54.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: A null pointer dereference vulnerability in devices/gdevtsep.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701821 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=aadb53eb834b3def3ef68d78865ff87a68901804 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/secur
8d78865ff87a68901804 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/
CVE ID: CVE-2020-16307 State: PUBLISHED Published: 2020-08-13T02:09:44 Last Updated: 2024-08-04T13:37:54.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: A null pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701822 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=407c98a38c3a6ac1681144ed45cc2f4fc374c91f - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - http
3Bh=407c98a38c3a6ac1681144ed45cc2f4fc374c91f - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/
CVE ID: CVE-2020-16308 State: PUBLISHED Published: 2020-08-13T02:09:49 Last Updated: 2024-08-04T13:37:54.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in p_print_image() in devices/gdevcdj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701829 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=af004276fd8f6c305727183c159b83021020f7d6 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/se
727183c159b83021020f7d6 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/
CVE ID: CVE-2020-16309 State: PUBLISHED Published: 2020-08-13T02:09:56 Last Updated: 2024-08-04T13:37:54.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in lxm5700m_print_page() in devices/gdevlxm.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted eps file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701827 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=a6f7464dddc689386668a38b92dfd03cc1b38a10 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.
689386668a38b92dfd03cc1b38a10 - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/
CVE ID: CVE-2020-16310 State: PUBLISHED Published: 2020-08-13T02:10:04 Last Updated: 2024-08-04T13:37:54.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: A division by zero vulnerability in dot24_print_page() in devices/gdevdm24.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=701828 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=eaba1d97b62831b42c51840cc8ee2bc4576c942e - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.o
31b42c51840cc8ee2bc4576c942e - https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html - https://www.debian.org/security/2020/dsa-4748 - https://security.gentoo.org/glsa/202008-20 - https://usn.ubuntu.com/4469-1/
CVE ID: CVE-2020-16526 State: REJECTED Published: 2021-01-12T21:23:29 Last Updated: 2021-01-12T22:07:33 Description: No description available.
CVE ID: CVE-2020-16587 State: PUBLISHED Published: 2020-12-09T00:00:00 Last Updated: 2024-08-04T13:37:54.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AcademySoftwareFoundation/openexr/issues/491 - https://github.com/AcademySoftwareFoundation/openexr/commit/8b5370c688a7362673c3a5256d93695617a4cd9a - https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html - https://lists.de
88a7362673c3a5256d93695617a4cd9a - https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html - https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html
CVE ID: CVE-2020-16588 State: PUBLISHED Published: 2020-12-09T00:00:00 Last Updated: 2024-08-04T13:37:54.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AcademySoftwareFoundation/openexr/issues/493 - https://github.com/AcademySoftwareFoundation/openexr/commit/74504503cff86e986bac441213c403b0ba28d58f - https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html
CVE ID: CVE-2020-16589 State: PUBLISHED Published: 2020-12-09T00:00:00 Last Updated: 2024-08-04T13:45:33.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile.cpp that can cause a denial of service via a crafted EXR file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AcademySoftwareFoundation/openexr/issues/494 - https://github.com/AcademySoftwareFoundation/openexr/commit/6bb36714528a9563dd3b92720c5063a1284b86f8 - https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html
CVE ID: CVE-2020-16590 State: PUBLISHED Published: 2020-12-09T21:05:04 Last Updated: 2024-08-04T13:45:33.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_symbol_table, as demonstrated in readelf, via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=25821 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=c98a4545dc7bf2bcaf1de539c4eb84784680eaa4 - https://security.netapp.com/advisory/ntap-20210115-0003/
CVE ID: CVE-2020-16591 State: PUBLISHED Published: 2020-12-09T21:05:24 Last Updated: 2024-08-04T13:45:33.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in process_symbol_table, as demonstrated in readeif. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=25822 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=001890e1f9269697f7e0212430a51479271bdab2 - https://security.netapp.com/advisory/ntap-20210115-0003/
CVE ID: CVE-2020-16592 State: PUBLISHED Published: 2020-12-09T21:05:46 Last Updated: 2024-08-04T13:45:33.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as demonstrated in nm-new, that can cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=25823 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=7ecb51549ab1ec22aba5aaf34b70323cf0b8509a - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message
5aaf34b70323cf0b8509a - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UKIMSD5FIC3QFJDKNHR2PSO6JYJGCLHB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJIW6KKY2TSLD43XEZXG56WREIIBUIIQ/ - https://security.netapp.com/advisory/ntap-20210115-0003/
CVE ID: CVE-2020-16593 State: PUBLISHED Published: 2020-12-09T21:06:03 Last Updated: 2024-08-04T13:45:33.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in scan_unit_for_symbols, as demonstrated in addr2line, that can cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=25827 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=aec72fda3b320c36eb99fc1c4cf95b10fc026729 - https://security.netapp.com/advisory/ntap-20210122-0
i?p=binutils-gdb.git%3Bh=aec72fda3b320c36eb99fc1c4cf95b10fc026729 - https://security.netapp.com/advisory/ntap-20210122-0003/
CVE ID: CVE-2020-16598 State: REJECTED Published: 2020-12-09T21:06:19 Last Updated: 2021-01-06T19:37:20 Description: No description available.
CVE ID: CVE-2020-16599 State: PUBLISHED Published: 2020-12-09T21:06:35 Last Updated: 2024-08-04T13:45:33.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in _bfd_elf_get_symbol_version_string, as demonstrated in nm-new, that can cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=25842 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=8d55d10ac0d112c586eaceb92e75bd9b80aadcc4 - https://security.netapp.com/advisory/ntap-
/gitweb.cgi?p=binutils-gdb.git%3Bh=8d55d10ac0d112c586eaceb92e75bd9b80aadcc4 - https://security.netapp.com/advisory/ntap-20210122-0003/
CVE ID: CVE-2020-16600 State: PUBLISHED Published: 2020-12-09T21:06:55 Last Updated: 2024-08-04T13:45:33.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newband_writer. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=702253 - http://git.ghostscript.com/?p=mupdf.git%3Bh=96751b25462f83d6e16a9afaf8980b0c3f979c8b
CVE ID: CVE-2020-16602 State: PUBLISHED Published: 2020-09-02T12:57:41 Last Updated: 2024-08-04T13:45:33.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a race condition in which a file created under "%PROGRAMDATA%\Razer Chroma\SDK\Apps" can be replaced before it is executed by the server. The attacker must have access to port 54236 for a registration step. Additional Analyst Notes: - CVE Program Container: References: - https://assets.razerzone.com/dev_portal/REST/html/index.html - https://www.youtube.com/watch?v=fkESBVhIdIA - https://www.angelystor.com/2020/09
e.com/dev_portal/REST/html/index.html - https://www.youtube.com/watch?v=fkESBVhIdIA - https://www.angelystor.com/2020/09/cve-2020-16602-remote-file-execution-on.html - http://packetstormsecurity.com/files/160225/Razer-Chroma-SDK-Server-3.16.02-Race-Condition.html
CVE ID: CVE-2020-16608 State: PUBLISHED Published: 2020-12-10T21:08:35 Last Updated: 2024-08-04T13:45:34.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Notable 1.8.4 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/notable/notable - https://sghosh2402.medium.com/cve-2020-16608-8cdad9f4d9b4
CVE ID: CVE-2020-16610 State: PUBLISHED Published: 2020-08-28T16:06:00 Last Updated: 2024-08-04T13:45:33.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery (CSRF). When an attacker induces authenticated admin user to a malicious web page, any accounts can be deleted without admin user's intention. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/havok89/Hoosk/issues/53 - https://github.com/havok89/Hoosk/pull/56
CVE ID: CVE-2020-16629 State: PUBLISHED Published: 2021-02-08T14:33:34 Last Updated: 2024-08-04T13:45:33.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through SQL, and then call the attachment replacement function through api.php to write a PHP file to the target path. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Gh0stF/phpok_cve/issues/1
CVE ID: CVE-2020-16630 State: PUBLISHED Published: 2021-09-20T19:20:50 Last Updated: 2024-08-04T13:45:33.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: TI’s BLE stack caches and reuses the LTK’s property for a bonded mobile. A LTK can be an unauthenticated-and-no-MITM-protection key created by Just Works or an authenticated-and-MITM-protection key created by Passkey Entry, Numeric Comparison or OOB. Assume that a victim mobile uses secure pairing to pair with a victim BLE device based on TI chips and generate an authenticated-and-MITM-protection LTK. If a fake mobile with the victim mobile’s MAC address uses Just Works and pairs with the victim device, the generated LTK stil
ake mobile with the victim mobile’s MAC address uses Just Works and pairs with the victim device, the generated LTK still has the property of authenticated-and-MITM-protection. Therefore, the fake mobile can access attributes with the authenticated read/write permission. Additional Analyst Notes: - CVE Program Container: References: - http://software-dl.ti.com/simplelink/esd/simplelink_cc13x2_26x2_sdk/3.20.00.68/exports/changelog.html - https://www.usenix.org/system/files/sec20-zhang-yue.pdf