Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-18757 State: PUBLISHED Published: 2021-08-13T16:08:39 Last Updated: 2024-08-04T14:08:30.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to cause persistent denial of service (DOS) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ni9htMar3/vulnerability/blob/master/PLC/DCCE/DCCE%20MAC1100%20PLC_DOS.md
CVE ID: CVE-2020-18758 State: PUBLISHED Published: 2021-08-13T16:08:40 Last Updated: 2024-08-04T14:08:29.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ni9htMar3/vulnerability/blob/master/PLC/DCCE/DCCE%20MAC1100%20PLC_upload.md
CVE ID: CVE-2020-18759 State: PUBLISHED Published: 2021-08-13T16:08:41 Last Updated: 2024-08-04T14:08:30.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information disclosure vulnerability exists in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ni9htMar3/vulnerability/blob/master/PLC/DCCE/DCCE%20MAC1100%20PLC_leak2.md
CVE ID: CVE-2020-18766 State: PUBLISHED Published: 2020-10-26T15:34:25 Last Updated: 2024-08-04T14:08:30.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AntSwordProject/antSword/issues/147
CVE ID: CVE-2020-18768 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-04T16:36:53.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://bugzilla.maptools.org/show_bug.cgi?id=2848
CVE ID: CVE-2020-18770 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-04T16:39:38.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gdraheim/zziplib/issues/69
CVE ID: CVE-2020-18771 State: PUBLISHED Published: 2021-08-23T00:00:00 Last Updated: 2024-11-18T21:43:21.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which can result in an information leak. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Exiv2/exiv2/issues/756 - https://cwe.mitre.org/data/definitions/126.html - https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html - https://security.gentoo.org/glsa/202312-06
CVE ID: CVE-2020-18773 State: PUBLISHED Published: 2021-08-23T00:00:00 Last Updated: 2024-08-04T14:08:30.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service (DOS) via a crafted tif file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/760 - https://security.gentoo.org/glsa/202312-06
CVE ID: CVE-2020-18774 State: PUBLISHED Published: 2021-08-23T00:00:00 Last Updated: 2024-08-04T14:08:30.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: A float point exception in the printLong function in tags_int.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service (DOS) via a crafted tif file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/759 - https://security.gentoo.org/glsa/202312-06
CVE ID: CVE-2020-18775 State: PUBLISHED Published: 2021-08-23T21:50:03 Last Updated: 2024-08-04T14:08:30.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Libav 12.3, there is a heap-based buffer over-read in vc1_decode_b_mb_intfi in vc1_block.c that allows an attacker to cause denial-of-service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1152 - https://cwe.mitre.org/data/definitions/126.html
CVE ID: CVE-2020-18776 State: PUBLISHED Published: 2021-08-23T21:50:04 Last Updated: 2024-08-04T14:08:30.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Libav 12.3, there is a segmentation fault in vc1_decode_b_mb_intfr in vc1_block.c that allows an attacker to cause denial-of-service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1153
CVE ID: CVE-2020-18778 State: PUBLISHED Published: 2021-08-23T21:50:04 Last Updated: 2024-08-04T14:08:30.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Libav 12.3, there is a heap-based buffer over-read in vc1_decode_p_mb_intfi in vc1_block.c that allows an attacker to cause denial-of-service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1155 - https://cwe.mitre.org/data/definitions/126.html
CVE ID: CVE-2020-18780 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-04T16:36:41.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392634
CVE ID: CVE-2020-18781 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-04T16:35:09.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mpruett/audiofile/issues/56
CVE ID: CVE-2020-18831 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-04T16:32:24.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Exiv2/exiv2/issues/828 - https://www.exiv2.org/download.html
CVE ID: CVE-2020-18839 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-04T16:30:40.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in HtmlOutputDev::page in poppler 0.75.0 allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.freedesktop.org/poppler/poppler/issues/742
CVE ID: CVE-2020-18875 State: PUBLISHED Published: 2021-08-18T16:55:53 Last Updated: 2024-08-04T14:08:30.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Access Control in DotCMS versions before 5.1 allows remote attackers to gain privileges by injecting client configurations via vtl (velocity) files. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/284.html - https://dotcms.com/security/SI-51 - https://github.com/dotCMS/core/issues/15882
CVE ID: CVE-2020-18877 State: PUBLISHED Published: 2021-08-20T13:20:04 Last Updated: 2024-08-04T14:08:30.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/175
CVE ID: CVE-2020-18878 State: PUBLISHED Published: 2021-08-20T13:20:19 Last Updated: 2024-08-04T14:08:30.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal in Skycaiji v1.3 allows remote attackers to obtain sensitive information via the component 'index.php?m=admin&c=Tool&a=log&file=D%3A%5CphpStudy%5CWWW%5Cindex.php'. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zorlan/skycaiji/issues/13
CVE ID: CVE-2020-18879 State: PUBLISHED Published: 2021-08-20T13:20:36 Last Updated: 2024-08-04T14:08:30.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted File Upload in Bludit v3.8.1 allows remote attackers to execute arbitrary code by uploading malicious files via the component 'bl-kereln/ajax/upload-logo.php'. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bludit/bludit/issues/1011
CVE ID: CVE-2020-18885 State: PUBLISHED Published: 2021-08-20T13:22:31 Last Updated: 2024-08-04T14:08:30.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command Injection in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the "text color" field of the component '/admin/web_config.php'. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gaozhifeng/PHPMyWind/issues/4 - https://cwe.mitre.org/data/definitions/77.html
CVE ID: CVE-2020-18886 State: PUBLISHED Published: 2021-08-20T13:22:46 Last Updated: 2024-08-04T14:08:30.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted File Upload in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the component 'admin/upload_file_do.php'. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gaozhifeng/PHPMyWind/issues/5
CVE ID: CVE-2020-18888 State: PUBLISHED Published: 2021-05-06T17:37:41 Last Updated: 2024-08-04T14:08:30.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary File Deletion vulnerability in puppyCMS v5.1 allows remote malicious attackers to delete the file/folder via /admin/functions.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/choregus/puppyCMS/issues/15
CVE ID: CVE-2020-18889 State: PUBLISHED Published: 2021-05-06T16:54:24 Last Updated: 2024-08-04T14:08:30.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/settings.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/choregus/puppyCMS/issues/13
CVE ID: CVE-2020-18890 State: PUBLISHED Published: 2021-05-06T17:04:20 Last Updated: 2024-08-04T14:08:30.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rmote Code Execution (RCE) vulnerability in puppyCMS v5.1 due to insecure permissions, which could let a remote malicious user getshell via /admin/functions.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/choregus/puppyCMS/issues/14
CVE ID: CVE-2020-18897 State: PUBLISHED Published: 2021-08-19T21:20:35 Last Updated: 2024-08-04T14:08:30.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: An use-after-free vulnerability in the libpff_item_tree_create_node function of libyal Libpff before 20180623 allows attackers to cause a denial of service (DOS) or execute arbitrary code via a crafted pff file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libyal/libpff/issues/61 - https://github.com/libyal/libpff/issues/62
CVE ID: CVE-2020-18898 State: PUBLISHED Published: 2021-08-19T21:20:36 Last Updated: 2024-08-04T14:08:30.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/741 - https://cwe.mitre.org/data/definitions/674.html
CVE ID: CVE-2020-18899 State: PUBLISHED Published: 2021-08-19T00:00:00 Last Updated: 2024-10-15T15:11:22.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of service (DOS) via a crafted input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Exiv2/exiv2/issues/742 - https://cwe.mitre.org/data/definitions/789.html - https://security.gentoo.org/glsa/202312-06
CVE ID: CVE-2020-18900 State: PUBLISHED Published: 2021-08-19T21:20:38 Last Updated: 2024-08-04T14:08:30.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow in the libexe_io_handle_read_coff_optional_header function of libyal libexe before 20181128. NOTE: the vendor has disputed this as described in libyal/libexe issue 1 on GitHub Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/libyal/libexe/issues/1
CVE ID: CVE-2020-18912 State: PUBLISHED Published: 2023-08-29T00:00:00 Last Updated: 2024-10-02T14:03:41.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Earcms Ear App v.20181124 allows a remote attacker to execute arbitrary code via the uload/index-uplog.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cnblogs.com/yiwd/archive/2013/03/03/2941269.html - https://www.cnblogs.com/hantom/p/10621198.html
CVE ID: CVE-2020-18913 State: PUBLISHED Published: 2021-08-24T19:34:08 Last Updated: 2024-08-04T14:08:30.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcms_web/Search.php component via the attr_array parameter. This vulnerability allows attackers to access sensitive database information. Additional Analyst Notes: - CVE Program Container: References: - http://tusk1.cn/2019/03/21/ESPCMS-P8%E5%89%8D%E5%8F%B0SQL%E6%B3%A8%E5%85%A5%E4%B8%8E%E6%96%87%E4%BB%B6%E5%8C%85%E5%90%AB%E6%BC%8F%E6%B4%9E/
CVE ID: CVE-2020-18917 State: PUBLISHED Published: 2021-08-24T19:34:10 Last Updated: 2024-08-04T14:08:30.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: The plus/search.php component in DedeCMS 5.7 SP2 allows remote attackers to execute arbitrary PHP code via the typename parameter because the contents of typename.inc are under an attacker's control. Additional Analyst Notes: - CVE Program Container: References: - http://tusk1.cn/2019/05/12/DeDecms-v5-7-sp2-CRSF-%E6%96%87%E4%BB%B6%E6%93%8D%E4%BD%9C-%E5%89%8D%E5%8F%B0getshell/
CVE ID: CVE-2020-18964 State: PUBLISHED Published: 2021-05-11T18:37:18 Last Updated: 2024-08-04T14:08:30.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saysky/ForestBlog/issues/20
CVE ID: CVE-2020-18971 State: PUBLISHED Published: 2021-08-25T15:54:02 Last Updated: 2024-08-04T14:08:30.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via the component 'src/base/PdfDictionary.cpp:65'. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/podofo/tickets/48/
CVE ID: CVE-2020-18972 State: PUBLISHED Published: 2021-08-25T15:54:03 Last Updated: 2024-08-04T14:08:30.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exposure of Sensitive Information to an Unauthorized Actor in PoDoFo v0.9.6 allows attackers to obtain sensitive information via 'IsNextToken' in the component 'src/base/PdfToenizer.cpp'. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/podofo/tickets/49/
CVE ID: CVE-2020-18974 State: PUBLISHED Published: 2021-08-25T15:54:04 Last Updated: 2024-08-04T14:08:30.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow in Netwide Assembler (NASM) v2.15.xx allows attackers to cause a denial of service via 'crc64i' in the component 'nasmlib/crc64'. This issue is different than CVE-2019-7147. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392568
CVE ID: CVE-2020-18976 State: PUBLISHED Published: 2021-08-25T15:54:05 Last Updated: 2024-08-04T14:08:30.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow in Tcpreplay v4.3.2 allows attackers to cause a Denial of Service via the 'do_checksum' function in 'checksum.c'. It can be triggered by sending a crafted pcap file to the 'tcpreplay-edit' binary. This issue is different than CVE-2019-8381. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/appneta/tcpreplay/issues/556
CVE ID: CVE-2020-18979 State: PUBLISHED Published: 2021-07-12T14:43:47 Last Updated: 2024-08-04T14:08:30.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Siste Scripting (XSS) vulnerablity in Halo 0.4.3 via the X-forwarded-for Header parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/halo-dev/halo/issues/126
CVE ID: CVE-2020-18980 State: PUBLISHED Published: 2021-07-12T14:56:13 Last Updated: 2024-08-04T14:08:30.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Code Executon vulnerability in Halo 0.4.3 via the remoteAddr and themeName parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/halo-dev/halo/issues/134
CVE ID: CVE-2020-18982 State: PUBLISHED Published: 2021-07-12T16:08:40 Last Updated: 2024-08-04T14:08:30.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Sie Scripting (XSS) vulnerability in Halo 0.4.3 via CommentAuthorUrl. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/halo-dev/halo/issues/127
CVE ID: CVE-2020-18984 State: PUBLISHED Published: 2021-12-15T22:17:28 Last Updated: 2024-08-04T14:08:30.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in the zimbraAdmin/public/secureRequest.jsp component of Zimbra Collaboration 8.8.12 allows unauthenticated attackers to execute arbitrary web scripts or HTML via a host header injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/buxu/bug/issues/2
CVE ID: CVE-2020-18985 State: PUBLISHED Published: 2021-12-15T22:17:29 Last Updated: 2024-08-04T14:08:30.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in /domain/service/.ewell-known/caldav of Zimbra Collaboration 8.8.12 allows attackers to redirect users to any arbitrary website of their choosing. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/buxu/bug/issues/3
CVE ID: CVE-2020-18998 State: PUBLISHED Published: 2021-08-27T18:16:46 Last Updated: 2024-08-04T14:08:30.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code via the component '/admin/custom/blog-plugin/add'. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xpleaf/Blog_mini/issues/44
CVE ID: CVE-2020-18999 State: PUBLISHED Published: 2021-08-27T18:16:47 Last Updated: 2024-08-04T14:08:30.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code via the component '/admin/submit-articles'. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xpleaf/Blog_mini/issues/44
CVE ID: CVE-2020-19000 State: PUBLISHED Published: 2021-08-27T18:16:48 Last Updated: 2024-08-04T14:08:30.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary code via line 54 of the component 'simiki/blob/master/simiki/generators.py'. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tankywoo/simiki/issues/123
CVE ID: CVE-2020-19001 State: PUBLISHED Published: 2021-08-27T18:16:48 Last Updated: 2024-08-04T14:08:30.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command Injection in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary system commands via line 64 of the component 'simiki/blob/master/simiki/config.py'. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tankywoo/simiki/issues/123 - https://cwe.mitre.org/data/definitions/77.html
CVE ID: CVE-2020-19002 State: PUBLISHED Published: 2021-08-27T18:16:49 Last Updated: 2024-08-04T14:08:30.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the 'Description' field of the component 'admin/blog/blogpost/add/'. This issue is different than CVE-2018-16632. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/stephenmcd/mezzanine/issues/1921
CVE ID: CVE-2020-19003 State: PUBLISHED Published: 2021-10-06T12:41:19 Last Updated: 2024-08-04T14:08:30.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/liftoff/GateOne/issues/728 - https://cwe.mitre.org/data/definitions/290.html
CVE ID: CVE-2020-19005 State: PUBLISHED Published: 2020-08-25T21:46:12 Last Updated: 2024-08-04T14:08:30.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: zrlog v2.1.0 has a vulnerability with the permission check. If admin account is logged in, other unauthorized users can download the database backup file directly. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/94fzb/zrlog/issues/48 - https://github.com/94fzb/zrlog/commit/b2b4415e2e59b6f18b0a62b633e71c96d63c43ba
CVE ID: CVE-2020-19007 State: PUBLISHED Published: 2020-08-26T13:21:12 Last Updated: 2024-08-04T14:08:30.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Halo blog 1.2.0 allows users to submit comments on blog posts via /api/content/posts/comments. The javascript code supplied by the attacker will then execute in the victim user's browser. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/halo-dev/halo/issues/547
CVE ID: CVE-2020-19028 State: PUBLISHED Published: 2023-06-05T00:00:00 Last Updated: 2025-01-08T19:42:19.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: *File Upload vulnerability found in Emlog EmlogCMS v.6.0.0 allows a remote attacker to gain access to sensitive information via the /admin/plugin.php function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/emlog/emlog - https://github.com/sincere-c/CVE/issues/1