Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-23738 State: PUBLISHED Published: 2020-12-03T18:36:40 Last Updated: 2024-08-04T15:05:10.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a local denial of service vulnerability in Advanced SystemCare 13 PRO 13.5.0.174. Attackers can use a constructed program to cause a computer crash (BSOD) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/y5s5k5/POCtemp6 - http://www.advancedsystemcare.cn - https://github.com/y5s5k5/CVE-2020-23738
CVE ID: CVE-2020-23740 State: PUBLISHED Published: 2020-12-03T18:16:10 Last Updated: 2024-08-04T15:05:10.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: In DriverGenius 9.61.5480.28 there is a local privilege escalation vulnerability in the driver wizard, attackers can use constructed programs to increase user privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.drivergenius.com/ - https://github.com/y5s5k5/POCtemp8 - https://github.com/y5s5k5/CVE-2020-23740 - https://www.cnvd.org.cn/flaw/show/2438470
CVE ID: CVE-2020-23741 State: PUBLISHED Published: 2020-12-03T18:28:11 Last Updated: 2024-08-04T15:05:10.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: In AnyView (network police) network monitoring software 4.6.0.1, there is a local denial of service vulnerability in AnyView, attackers can use a constructed program to cause a computer crash (BSOD). Additional Analyst Notes: - CVE Program Container: References: - http://www.amoisoft.com/ - https://github.com/y5s5k5/POCtemp9 - https://github.com/y5s5k5/CVE-2020-23741
CVE ID: CVE-2020-23754 State: PUBLISHED Published: 2021-11-02T17:45:17 Last Updated: 2024-08-04T15:05:11.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in infusions/member_poll_panel/poll_admin.php in PHP-Fusion 9.03.50, allows attackers to execute arbitrary code, via the polls feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/php-fusion/PHP-Fusion/issues/2315 - https://user-images.githubusercontent.com/62001260/81574112-9412e100-93cf-11ea-9493-615a70162034.PNG - https://user-images.githubusercontent.com/62001260/81574006-6fb70480-93cf-11ea-814c-55a96d2fe95e.PNG
CVE ID: CVE-2020-23761 State: PUBLISHED Published: 2021-04-09T17:49:15 Last Updated: 2024-08-04T15:05:10.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in subrion CMS Version <= 4.2.1 allows remote attackers to execute arbitrary web script via the "payment gateway" column on transactions tab. Additional Analyst Notes: - CVE Program Container: References: - https://subrion.org/ - http://hidden-one.co.in/2021/04/09/cve-2020-23761-stored-xss-vulnerability-in-subrion-cms-version/
CVE ID: CVE-2020-23762 State: PUBLISHED Published: 2021-04-09T17:50:11 Last Updated: 2024-08-04T15:05:11.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in the Larsens Calender plugin Version <= 1.2 for WordPress allows remote attackers to execute arbitrary web script via the "titel" column on the "Eintrage hinzufugen" tab. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/larsens-calender/ - http://hidden-one.co.in/2021/04/09/cve-2020-23762-stored-xss-vulnerability-in-the-larsens-calender-plugin-version/
CVE ID: CVE-2020-23763 State: PUBLISHED Published: 2021-04-09T17:51:37 Last Updated: 2024-08-04T15:05:10.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection in admin.php in Online Book Store 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - https://projectworlds.in/free-projects/php-projects/online-book-store-project-in-php/ - http://hidden-one.co.in/2021/04/09/cve-2020-23763-sql-injection-leading-to-authentication-bypass-in-online-book-store-1-0/
CVE ID: CVE-2020-23765 State: PUBLISHED Published: 2021-05-21T17:11:40 Last Updated: 2024-08-04T15:05:11.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: A file upload vulnerability was discovered in the file path /bl-plugins/backup/plugin.php on Bludit version 3.12.0. If an attacker is able to gain Administrator rights they will be able to use unsafe plugins to upload a backup file and control the server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bludit/bludit/issues/1218
CVE ID: CVE-2020-23766 State: PUBLISHED Published: 2021-05-21T17:11:44 Last Updated: 2024-08-04T15:05:11.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file deletion vulnerability was discovered on htmly v2.7.5 which allows remote attackers to use any absolute path to delete any file in the server should they gain Administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/danpros/htmly/issues/412
CVE ID: CVE-2020-23768 State: PUBLISHED Published: 2021-05-21T17:11:47 Last Updated: 2024-08-04T15:05:11.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information disclosure vulnerability was discovered in alipay_function.php in the log file of Alibaba payment interface on PHPPYUN prior to version 5.0.1. If exploited, this vulnerability will allow attackers to obtain users' personally identifiable information including e-mail address and telephone numbers. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/whiskey-jj/w2s2x2222.github.io/issues/1
CVE ID: CVE-2020-23774 State: PUBLISHED Published: 2021-01-26T21:02:11 Last Updated: 2024-08-04T15:05:10.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected XSS vulnerability exists in tohtml/convert.php of Winmail 6.5, which can cause JavaScript code to be executed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhonghaozhao/winmail/issues/2
CVE ID: CVE-2020-23776 State: PUBLISHED Published: 2021-01-26T21:02:19 Last Updated: 2024-08-04T15:05:10.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on. An attacker can use this vulnerability to cause the server to send a request to a specific URL. An attacker can modify the request header 'HOST' value to cause the server to send the request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhonghaozhao/winmail/issues/3
CVE ID: CVE-2020-23790 State: PUBLISHED Published: 2021-05-12T15:25:44 Last Updated: 2024-08-04T15:05:10.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Arbitrary File Upload vulnerability was discovered in the Golo Laravel theme v 1.1.5. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vladvector/vladvector.github.io/blob/master/exploit/2020-07-02-golo-business-listing-city-travel-guide-laravel-theme-v1-1-5.txt - https://codecanyon.net/item/golo-city-guide-laravel-theme/25785389
CVE ID: CVE-2020-23793 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T19:57:03.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in spice-server spice-server-0.14.0-6.el7_6.1.x86_64 of Redhat's VDI product. There is a security vulnerablility that can restart KVMvirtual machine without any authorization. It is not yet known if there will be other other effects. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zelat/spice-security-issues
CVE ID: CVE-2020-23804 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-08-04T15:05:11.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/poppler/poppler/-/issues/936 - https://lists.debian.org/debian-lts-announce/2023/10/msg00022.html
CVE ID: CVE-2020-23811 State: PUBLISHED Published: 2020-09-03T16:58:01 Last Updated: 2024-08-04T15:05:11.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: xxl-job 2.2.0 allows Information Disclosure of username, model, and password via job/admin/controller/UserController.java. Additional Analyst Notes: - CVE Program Container: References: - https://www.ccsq8.com/issues.html
CVE ID: CVE-2020-23814 State: PUBLISHED Published: 2020-09-03T16:58:11 Last Updated: 2024-08-04T15:05:10.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) AppName and (2)AddressList parameter in JobGroupController.java file. Additional Analyst Notes: - CVE Program Container: References: - https://www.ccsq8.com/issues.html - https://github.com/xuxueli/xxl-job/issues/1866
CVE ID: CVE-2020-23824 State: PUBLISHED Published: 2020-09-11T20:28:37 Last Updated: 2024-08-04T15:05:11.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: ArGo Soft Mail Server 1.8.8.9 is affected by Cross Site Request Forgery (CSRF) for perform remote arbitrary code execution. The component is the Administration dashboard. When using admin/user credentials, if the admin/user admin opens a website with the malicious page that will run the CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/V1n1v131r4/CSRF-on-ArGoSoft-Mail-Server/blob/master/README.md
CVE ID: CVE-2020-23826 State: PUBLISHED Published: 2021-01-22T19:06:44 Last Updated: 2024-08-04T15:05:11.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to remote command execution (RCE) through command injection via the HTTP API. NOTE: This may be a duplicate of CVE-2020-10176 Additional Analyst Notes: - CVE Program Container: References: - https://firedome.io/blog/firedome-discloses-0-day-vulnerabilities-in-yale-ip-cameras/ - https://whiterosezex.blogspot.com/2021/01/cve-2020-23826-rce-vulnerability-in.html - https://lp.firedome.io/hubfs/Yale%20WIPC-301W%20RCE%20Vulnerability%20Report%205-6.pdf
CVE ID: CVE-2020-23828 State: PUBLISHED Published: 2020-09-15T21:08:56 Last Updated: 2024-08-04T15:05:11.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: A File Upload vulnerability in SourceCodester Online Course Registration v1.0 allows remote attackers to achieve Remote Code Execution (RCE) on the hosting webserver by uploading a crafted PHP web-shell that bypasses the image upload filters. An attack uses /Online%20Course%20Registration/my-profile.php with the POST parameter photo. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14251/online-course-registration.html - https://www.exploit-db.com/exploits/48704
CVE ID: CVE-2020-23829 State: PUBLISHED Published: 2020-09-01T16:42:44 Last Updated: 2024-08-04T15:05:11.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: interface/new/new_comprehensive_save.php in LibreHealth EHR 2.0.0 suffers from an authenticated file upload vulnerability, allowing remote attackers to achieve remote code execution (RCE) on the hosting webserver by uploading a maliciously crafted image. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/boku7/LibreHealth-authRCE - https://www.exploit-db.com/exploits/48702
CVE ID: CVE-2020-23830 State: PUBLISHED Published: 2020-09-02T16:06:42 Last Updated: 2024-08-04T15:05:11.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 allows remote attackers to deny future logins by changing an authenticated victim's username when they visit a third-party site. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14366/stock-management-system-php.html - https://www.exploit-db.com/exploits/48783
CVE ID: CVE-2020-23831 State: PUBLISHED Published: 2020-09-01T16:42:18 Last Updated: 2024-08-04T15:05:11.477Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AC:H/AV:N/A:L/C:H/I:L/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Stock Management System v1.0 allows remote attackers to harvest login credentials and session cookies when an unauthenticated victim clicks on a malicious URL and enters credentials. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/boku7/StockManagement-XSS-Login-CredHarvester - https://packetstormsecurity.com/fi
ner: References: - https://github.com/boku7/StockManagement-XSS-Login-CredHarvester - https://packetstormsecurity.com/files/158813/Tailor-MS-1.0-Cross-Site-Scripting.html
CVE ID: CVE-2020-23832 State: PUBLISHED Published: 2020-10-06T12:55:54 Last Updated: 2024-08-04T15:05:11.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Persistent Cross-Site Scripting (XSS) vulnerability in message_admin.php in Projectworlds Car Rental Management System v1.0 allows unauthenticated remote attackers to harvest an admin login session cookie and steal an admin session upon an admin login. Additional Analyst Notes: - CVE Program Container: References: - https://projectworlds.in - https://github.com/projectworlds32/Car-Rental-Syatem-PHP-MYSQL/archive/master.zip - https://packetstormsecurity.com/files/158795/Car-Rental-Management-System-1.0-Cross-Site-Scripting.h
rchive/master.zip - https://packetstormsecurity.com/files/158795/Car-Rental-Management-System-1.0-Cross-Site-Scripting.html
CVE ID: CVE-2020-23833 State: PUBLISHED Published: 2020-09-15T21:09:00 Last Updated: 2024-08-04T15:05:11.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Projectworlds House Rental v1.0 suffers from an unauthenticated SQL Injection vulnerability, allowing remote attackers to execute arbitrary code on the hosting webserver via a malicious index.php POST request. Additional Analyst Notes: - CVE Program Container: References: - https://projectworlds.in - https://projectworlds.in/wp-content/uploads/2019/06/home-rental.zip - https://packetstormsecurity.com/files/158811/House-Rental-1.0-SQL-Injection.html
CVE ID: CVE-2020-23834 State: PUBLISHED Published: 2020-09-04T03:38:40 Last Updated: 2024-08-04T15:05:11.312Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Service File Permissions in the bd service in Real Time Logic BarracudaDrive v6.5 allow local attackers to escalate privileges to admin by replacing the %SYSTEMDRIVE%\bd\bd.exe file. When the computer next starts, the new bd.exe will be run as LocalSystem. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/boku7/BarracudaDrivev6.5-LocalPrivEsc - https://www.exploit-db.com/exploits/48789
CVE ID: CVE-2020-23835 State: PUBLISHED Published: 2020-09-01T16:40:52 Last Updated: 2024-08-04T15:05:11.748Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AC:H/AV:N/A:L/C:H/I:L/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Tailor Management System v1.0 allows remote attackers to harvest keys pressed by an unauthenticated victim who clicks on a malicious URL and begins typing. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/boku7/tailorMS-rXSS-Keylogger - https://www.exploit-db.com/exploits/48813
CVE ID: CVE-2020-23836 State: PUBLISHED Published: 2020-09-01T16:41:29 Last Updated: 2024-08-04T15:05:11.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) vulnerability in edit_user.php in OSWAPP Warehouse Inventory System (aka OSWA-INV) through 2020-08-10 allows remote attackers to change the admin's password after an authenticated admin visits a third-party site. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/siamon123/warehouse-inventory-system/issues/55 - https://www.exploit-db.com/exploits/48738
CVE ID: CVE-2020-23837 State: PUBLISHED Published: 2020-09-25T03:53:35 Last Updated: 2024-08-04T15:05:11.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote attackers to add admin (or other) users after an authenticated admin visits a third-party site or clicks on a URL. Additional Analyst Notes: - CVE Program Container: References: - http://get-simple.info/extend/plugin/multi-user/133/ - https://www.exploit-db.com/exploits/48745
CVE ID: CVE-2020-23839 State: PUBLISHED Published: 2020-09-01T16:40:11 Last Updated: 2024-08-04T15:05:11.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpage, allows remote attackers to execute JavaScript code in the client's browser and harvest login credentials after a client clicks a link, enters credentials, and submits the login form. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1330 - http://packetstormsecurity.com/files/162016/GetSimple-CMS-3.3.16-Cross-Site-Scripting-Shell-Upload.h
leCMS/issues/1330 - http://packetstormsecurity.com/files/162016/GetSimple-CMS-3.3.16-Cross-Site-Scripting-Shell-Upload.html - https://www.exploit-db.com/exploits/49726 - https://github.com/boku7/CVE-2020-23839
CVE ID: CVE-2020-23849 State: PUBLISHED Published: 2021-01-11T13:36:14 Last Updated: 2024-08-04T15:05:11.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/josdejong/jsoneditor/issues/1029
CVE ID: CVE-2020-23851 State: PUBLISHED Published: 2021-05-18T14:03:55 Last Updated: 2024-08-04T15:05:11.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt, BMP *pb) function at ffjpeg/src/jfif.c:513:28, which could cause a denial of service by submitting a malicious jpeg image. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rockcarry/ffjpeg/issues/27
CVE ID: CVE-2020-23852 State: PUBLISHED Published: 2021-05-18T14:12:26 Last Updated: 2024-08-04T15:05:11.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt, BMP *pb) function at ffjpeg/src/jfif.c (line 544 & line 545), which could cause a denial of service by submitting a malicious jpeg image. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rockcarry/ffjpeg/issues/28
CVE ID: CVE-2020-23856 State: PUBLISHED Published: 2021-05-18T14:41:03 Last Updated: 2024-08-04T15:05:11.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-Free vulnerability in cflow 1.6 in the void call(char *name, int line) function at src/parser.c, which could cause a denial of service via the pointer variable caller->callee. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/bug-cflow/2020-07/msg00000.html - https://github.com/yangjiageng/PoC/blob/master/PoC_cflow_uaf_parser_line1284 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZTTKZX274BVFZX7TMPEZG6UWL6UPMQF/ -
s.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZTTKZX274BVFZX7TMPEZG6UWL6UPMQF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BLSXGFK2NYPCJMPHSHE3W56ZU3ZO6RD7/
CVE ID: CVE-2020-23861 State: PUBLISHED Published: 2021-05-18T15:02:32 Last Updated: 2024-08-04T15:05:11.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, which causes a denial of service by submitting a dwg file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibreDWG/libredwg/issues/248
CVE ID: CVE-2020-23864 State: PUBLISHED Published: 2020-10-27T13:28:02 Last Updated: 2024-08-04T15:05:11.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue exits in IOBit Malware Fighter version 8.0.2.547. Local escalation of privileges is possible by dropping a malicious DLL file into the WindowsApps folder. Additional Analyst Notes: - CVE Program Container: References: - http://daniels-it-blog.blogspot.com/2020/07/iobit-malware-fighter-arbitrary-code.html
CVE ID: CVE-2020-23868 State: PUBLISHED Published: 2020-11-02T21:57:29 Last Updated: 2024-08-04T15:05:11.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: NeDi 1.9C allows inc/rt-popup.php d XSS. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/harsh-bothra/f4285d20a7718d2e1934c042b04d9fac
CVE ID: CVE-2020-23872 State: PUBLISHED Published: 2021-11-10T21:25:49 Last Updated: 2024-08-04T15:05:11.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference in the function TextPage::restoreState of pdf2xml v2.0 allows attackers to cause a denial of service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kermitt2/pdf2xml/issues/10 - https://github.com/Aurorainfinity/Poc/tree/master/pdf2xml
CVE ID: CVE-2020-23873 State: PUBLISHED Published: 2021-11-10T21:25:49 Last Updated: 2024-08-04T15:05:11.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/122.html - https://github.com/Aurorainfinity/Poc/tree/master/pdf2xml - https://github.com/kermitt2/pdf2xml/issues/11
CVE ID: CVE-2020-23874 State: PUBLISHED Published: 2021-11-10T21:25:50 Last Updated: 2024-08-04T15:05:11.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::addAttributsNode. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/122.html - https://github.com/Aurorainfinity/Poc/tree/master/pdf2xml - https://github.com/kermitt2/pdf2xml/issues/12
CVE ID: CVE-2020-23876 State: PUBLISHED Published: 2021-11-10T21:25:51 Last Updated: 2024-08-04T15:05:11.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: pdf2xml v2.0 was discovered to contain a memory leak in the function TextPage::testLinkedText. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Aurorainfinity/Poc/tree/master/pdf2xml - https://github.com/kermitt2/pdf2xml/issues/14
CVE ID: CVE-2020-23877 State: PUBLISHED Published: 2021-11-10T21:25:51 Last Updated: 2024-08-04T15:05:11.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: pdf2xml v2.0 was discovered to contain a stack buffer overflow in the component getObjectStream. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Aurorainfinity/Poc/tree/master/pdf2xml - https://github.com/kermitt2/pdf2xml/issues/15