Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-10505 State: PUBLISHED Published: 2020-04-15T06:15:21.457989Z Last Updated: 2024-09-17T01:21:26.334Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ALLE INFORMATION CO., LTD. Products: School Manage System Problem Types: CWE-89 Description: The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of SQL Injection, an attacker can use a union based injection query string to get databases schema and username/password. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-3530-53d32-1.html - https://www.chtsecurity.com/news/be93c576-e421-489f-9453-a
es: - https://www.twcert.org.tw/tw/cp-132-3530-53d32-1.html - https://www.chtsecurity.com/news/be93c576-e421-489f-9453-a462bdd4c90d
CVE ID: CVE-2020-10506 State: PUBLISHED Published: 2020-04-15T06:15:21.891317Z Last Updated: 2024-09-16T20:11:54.141Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ALLE INFORMATION CO., LTD. Products: School Manage System Problem Types: Path Traversal Description: The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Path Traversal, allowing attackers to access arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://www.chtsecurity.com/news/be93c576-e421-489f-9453-a462bdd4c90d - https://www.twcert.org.tw/tw/cp-132-3531-cba24-1.html
CVE ID: CVE-2020-10507 State: PUBLISHED Published: 2020-04-15T06:15:22.358026Z Last Updated: 2024-09-17T00:45:33.709Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ALLE INFORMATION CO., LTD. Products: School Manage System Problem Types: Security Misconfiguration Description: The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Unrestricted file upload (RCE) , that would allow attackers to gain access in the hosting machine. Additional Analyst Notes: - CVE Program Container: References: - https://www.chtsecurity.com/news/be93c576-e421-489f-9453-a462bdd4c90d - https://www.twcert.org.tw/tw/cp-132-3532-26
s: - https://www.chtsecurity.com/news/be93c576-e421-489f-9453-a462bdd4c90d - https://www.twcert.org.tw/tw/cp-132-3532-26d71-1.html
CVE ID: CVE-2020-10508 State: PUBLISHED Published: 2020-03-27T07:35:23.455721Z Last Updated: 2024-09-16T22:25:42.504Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Sunnet Products: eHRD Problem Types: Sensitive Data Exposure Description: Sunnet eHRD, a human training and development management system, improperly stores system files. Attackers can use a specific URL and capture confidential information. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-3448-76a35-1.html - https://www.chtsecurity.com/news/30772cf1-2e7e-4afe-9282-b5a196b22e71
CVE ID: CVE-2020-10509 State: PUBLISHED Published: 2020-03-27T07:35:23.858373Z Last Updated: 2024-09-16T20:07:38.857Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Sunnet Products: eHRD Problem Types: CWE-79 Description: Sunnet eHRD, a human training and development management system, contains vulnerability of Cross-Site Scripting (XSS), attackers can inject arbitrary command into the system and launch XSS attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.chtsecurity.com/news/30772cf1-2e7e-4afe-9282-b5a196b22e71 - https://www.twcert.org.tw/tw/cp-132-3449-c87d8-1.html
CVE ID: CVE-2020-10510 State: PUBLISHED Published: 2020-03-27T07:35:24.288858Z Last Updated: 2024-09-16T18:17:54.224Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Sunnet Products: eHRD Problem Types: Broken Access Control Description: Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. After login, attackers can use a specific URL, access unauthorized functionality and data. Additional Analyst Notes: - CVE Program Container: References: - https://www.chtsecurity.com/news/30772cf1-2e7e-4afe-9282-b5a196b22e71 - https://www.twcert.org.tw/tw/cp-132-3450-69466-1.html
CVE ID: CVE-2020-10511 State: PUBLISHED Published: 2020-04-15T06:20:22.802038Z Last Updated: 2024-09-16T23:06:55.203Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: HGiga Products: C&Cmail Problem Types: Broken Access Control Description: HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-3535-e40ec-1.html - https://gist.github.com/tonykuo76/7d41c414f23ef1e47c97f7b97e1b33b0 - https://
wcert.org.tw/tw/cp-132-3535-e40ec-1.html - https://gist.github.com/tonykuo76/7d41c414f23ef1e47c97f7b97e1b33b0 - https://www.chtsecurity.com/news/19400b04-ea92-4eaa-afa7-2449fd9b2e0b
CVE ID: CVE-2020-10512 State: PUBLISHED Published: 2020-04-15T06:20:23.231502Z Last Updated: 2024-09-16T20:07:25.313Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: HGiga Products: C&Cmail Problem Types: CWE-89 Description: HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a SQL Injection vulnerability which allows attackers to injecting SQL commands in the URL parameter to execute unauthorized commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-3536-79545-1.html - https://gist.github.com/tonykuo76/d52014bbe81995eda499201446aec57a -
://www.twcert.org.tw/tw/cp-132-3536-79545-1.html - https://gist.github.com/tonykuo76/d52014bbe81995eda499201446aec57a - https://www.chtsecurity.com/news/545daf88-adb4-4417-9870-426490c1429e
CVE ID: CVE-2020-10513 State: PUBLISHED Published: 2020-04-15T06:20:23.661955Z Last Updated: 2024-09-17T00:10:42.527Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: iCatch Inc. Products: DVR firmware Problem Types: Broken Access Control Description: The file management interface of iCatch DVR firmware before 20200103 contains broken access control which allows the attacker to remotely manipulate arbitrary file. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-3533-10afe-1.html - https://www.chtsecurity.com/news/008fcbe8-198e-4c21-9417-5ba79a6b0e7d
CVE ID: CVE-2020-10514 State: PUBLISHED Published: 2020-04-15T06:20:24.071996Z Last Updated: 2024-09-16T20:07:33.562Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: iCatch Inc. Products: DVR firmware Problem Types: Command Injection Description: iCatch DVR firmware before 20200103 do not validate function parameter properly, resulting attackers executing arbitrary command. Additional Analyst Notes: - CVE Program Container: References: - https://www.chtsecurity.com/news/008fcbe8-198e-4c21-9417-5ba79a6b0e7d - https://www.twcert.org.tw/tw/cp-132-3534-fc7f5-1.html
CVE ID: CVE-2020-10515 State: PUBLISHED Published: 2020-04-02T21:30:17 Last Updated: 2024-08-04T11:06:09.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: STARFACE UCC Client before 6.7.1.204 on WIndows allows binary planting to execute code with System rights, aka usd-2020-0006. Additional Analyst Notes: - CVE Program Container: References: - https://herolab.usd.de/security-advisories/ - https://www.starface.com/en/business-telephony/ - https://support.starface.de/forum/showthread.php?7916-UCC-Client-f%FCr-Windows-Version-6-7-1-204-Released-26-03-2020&p=47548
CVE ID: CVE-2020-10516 State: PUBLISHED Published: 2020-06-03T13:31:24 Last Updated: 2024-08-04T11:06:09.534Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-285 Description: An improper access control vulnerability was identified in the GitHub Enterprise Server API that allowed an organization member to escalate permissions and gain access to unauthorized repositories within an organization. This vulnerability affected all versions of GitHub Enterprise Server prior to 2.21 and was fixed in 2.20.9, 2.19.15, and 2.18.20. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CVE Program Container: References: - https://enterprise.g
via the GitHub Bug Bounty program. Additional Analyst Notes: - CVE Program Container: References: - https://enterprise.github.com/releases/2.20.9/notes - https://enterprise.github.com/releases/2.19.15/notes - https://enterprise.github.com/releases/2.18.20/notes
CVE ID: CVE-2020-10517 State: PUBLISHED Published: 2020-08-27T21:55:16 Last Updated: 2024-08-04T11:06:09.569Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-285 Description: An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to determine the names of unauthorized private repositories given their numerical IDs. This vulnerability did not allow unauthorized access to any repository content besides the name. This vulnerability affected all versions of GitHub Enterprise Server prior to 2.22 and was fixed in versions 2.21.6, 2.20.15, and 2.19.21. This vulnerability was reported via the GitHub
er prior to 2.22 and was fixed in versions 2.21.6, 2.20.15, and 2.19.21. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CVE Program Container: References: - https://enterprise.github.com/releases/2.19.21/notes - https://enterprise.github.com/releases/2.20.15/notes - https://enterprise.github.com/releases/2.21.6/notes
CVE ID: CVE-2020-10518 State: PUBLISHED Published: 2020-08-27T21:55:11 Last Updated: 2024-08-04T11:06:09.883Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-77 Description: A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configuration of the underlying parsers used by GitHub Pages were not sufficiently restricted and made it possible to execute commands on the GitHub Enterprise Server instance. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affec
ed permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 2.22 and was fixed in 2.21.6, 2.20.15, and 2.19.21. The underlying issues contributing to this vulnerability were identified both internally and through the GitHub Security Bug Bounty program. Additional Analyst Notes: - CVE Program Container: References: - https://enterprise.github.com/releases/2.19.21/notes - https://enterprise.github.com/releases/2.20.15/notes - https://enterprise.github.com/releases/2.21.6/notes
CVE ID: CVE-2020-10519 State: PUBLISHED Published: 2021-03-03T03:25:21 Last Updated: 2024-08-04T11:06:09.542Z Vendors: GitHub Products: GitHub Enterprise Server Problem Types: CWE-77 Description: A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configuration of the underlying parsers used by GitHub Pages were not sufficiently restricted and made it possible to execute commands on the GitHub Enterprise Server instance. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affec
ed permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 2.22.7 and was fixed in 2.22.7, 2.21.15, and 2.20.24. The underlying issues contributing to this vulnerability were identified through the GitHub Security Bug Bounty program. Additional Analyst Notes: - CVE Program Container: References: - https://docs.github.com/en/enterprise-server%402.20/admin/release-notes#2.20.24 - https://docs.github.com/en/enterprise-server%402.21/admin/release-notes#2.21.15 - https://docs.github.com/en/enterprise-server%402.22/admin/release-notes#2.22.7
CVE ID: CVE-2020-10531 State: PUBLISHED Published: 2020-03-12T18:09:40 Last Updated: 2024-08-04T11:06:09.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2020:0738 - https://security.gentoo.org/glsa/202003-15 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3B5RWJQD5LA45MYLLR55KZJOJ5NVZGP/ - https://lis
ect.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3B5RWJQD5LA45MYLLR55KZJOJ5NVZGP/ - https://lists.debian.org/debian-lts-announce/2020/03/msg00024.html - https://www.debian.org/security/2020/dsa-4646 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/ - https://usn.ubuntu.com/4305-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00004.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4OOYAMJVLLCLXDTHW3V5UXNULZBBK4O6/ - https://www.oracle.com/security-alerts/cpujan2021.html - https://chromereleases.googleblog.com/202
THW3V5UXNULZBBK4O6/ - https://www.oracle.com/security-alerts/cpujan2021.html - https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_24.html - https://bugs.chromium.org/p/chromium/issues/detail?id=1044570 - https://chromium.googlesource.com/chromium/deps/icu/+/9f4020916eb1f28f3666f018fdcbe6c9a37f0e08 - https://unicode-org.atlassian.net/browse/ICU-20958 - https://github.com/unicode-org/icu/pull/971 - https://github.com/unicode-org/icu/commit/b7d08bc04a4296982fcef8b6b8a354a9e4e7afca - https://www.oracle.com//security-alerts/cpujul2021.html - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2020-10532 State: PUBLISHED Published: 2020-03-12T18:21:27 Last Updated: 2024-08-04T11:06:09.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/services/tdr/tdr_ad_helper_c.html - https://www.redteam-pentesting.de/en/advisories/rt-sa-2020-001/-credential-disclosure-in-watchguard-fireware-ad-helper-component
CVE ID: CVE-2020-10534 State: PUBLISHED Published: 2020-03-12T22:14:41 Last Updated: 2024-08-04T11:06:09.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation resulted in blocked users re-gaining escalated privileges. This is related to the case in which an IP address is contained in two ranges, one of which is locally disabled. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T229731 - https://gerrit.wikimedia.org/r/#/q/I9cc5fb2c08c78bbd797a5fc6d89f4577c8cc118b
CVE ID: CVE-2020-10535 State: PUBLISHED Published: 2020-03-12T22:25:52 Last Updated: 2024-08-04T11:06:09.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab 12.8.x before 12.8.6, when sign-up is enabled, allows remote attackers to bypass email domain restrictions within the two-day grace period for an unconfirmed email address. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/releases/2020/03/11/critical-security-release-gitlab-12-dot-8-dot-6-released/
CVE ID: CVE-2020-10537 State: PUBLISHED Published: 2021-02-05T09:17:38 Last Updated: 2024-08-04T11:06:09.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Epikur before 20.1.1. A Glassfish 4.1 server with a default configuration is running on TCP port 4848. No password is required to access it with the administrator account. Additional Analyst Notes: - CVE Program Container: References: - https://www.x41-dsec.de/lab/advisories/x41-2020-003-epikur
CVE ID: CVE-2020-10538 State: PUBLISHED Published: 2021-02-05T09:18:55 Last Updated: 2024-08-04T11:06:09.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Epikur before 20.1.1. It stores the secret passwords of the users as MD5 hashes in the database. MD5 can be brute-forced efficiently and should not be used for such purposes. Additionally, since no salt is used, rainbow tables can speed up the attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.x41-dsec.de/lab/advisories/x41-2020-003-epikur
CVE ID: CVE-2020-10539 State: PUBLISHED Published: 2021-02-05T09:21:27 Last Updated: 2024-08-04T11:06:09.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Epikur before 20.1.1. The Epikur server contains the checkPasswort() function that, upon user login, checks the submitted password against the user password's MD5 hash stored in the database. It is also compared to a second MD5 hash, which is the same for every user (aka a "Backdoor Password" of 3p1kursupport). If the submitted password matches either one, access is granted. Additional Analyst Notes: - CVE Program Container: References: - https://www.x41-dsec.de/lab/advisories/x41-2020-003-epikur
CVE ID: CVE-2020-10540 State: PUBLISHED Published: 2020-03-13T05:25:16 Last Updated: 2024-08-04T11:06:09.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules. Additional Analyst Notes: - CVE Program Container: References: - https://help.untis.at/hc/de/articles/360008456699-WebUntis-Release-Notes
CVE ID: CVE-2020-10541 State: PUBLISHED Published: 2020-03-13T05:34:26 Last Updated: 2024-08-04T11:06:09.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request. This was fixed in 12.5.108. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125108
CVE ID: CVE-2020-10543 State: PUBLISHED Published: 2020-06-05T13:17:49 Last Updated: 2024-08-04T11:06:09.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/202006-03 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN3TTBO5KSGWE5IRIKDJ5JSQRH7ANNXE/ - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https:/
.org/opensuse-security-announce/2020-06/msg00044.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://github.com/perl/perl5/commit/897d1f7fd515b828e4b198d8b8bef76c6faf03ed - https://github.com/Perl/perl5/compare/v5.30.2...v5.30.3 - https://github.com/Perl/perl5/blob/blead/pod/perl5303delta.pod - https://security.netapp.com/advisory/ntap-20200611-0001/ - https://www.oracle.com/security-alerts/cpujan2021.html - https://www.oracle.com/security-alerts/cpuApr2021.html - https://www.oracle.com//security-alerts/cpujul2021.html - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.oracle.com/security-alerts/
lerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2020-10544 State: PUBLISHED Published: 2020-03-13T14:32:14 Last Updated: 2024-08-04T11:06:09.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11. In a web application using PrimeFaces, an attacker can provide JavaScript code in an input field whose data is later used as a tooltip title without any input validation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/primefaces/primefaces/issues/5642
CVE ID: CVE-2020-10546 State: PUBLISHED Published: 2020-06-04T03:25:04 Last Updated: 2024-08-04T11:06:09.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: rConfig 3.9.4 and previous versions has unauthenticated compliancepolicies.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/theguly/exploits/blob/master/CVE-2020-10546.py - https://theguly.github.io/2020/09/rconfig-3.9.4-multiple-vulnerabilities/
CVE ID: CVE-2020-10547 State: PUBLISHED Published: 2020-06-04T03:24:41 Last Updated: 2024-08-04T11:06:09.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/theguly/exploits/blob/master/CVE-2020-10547.py - https://theguly.github.io/2020/09/rconfig-3.9.4-multiple-vulnerabilities/
CVE ID: CVE-2020-10548 State: PUBLISHED Published: 2020-06-04T03:24:33 Last Updated: 2024-08-04T11:06:09.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: rConfig 3.9.4 and previous versions has unauthenticated devices.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/theguly/exploits/blob/master/CVE-2020-10548.py - https://theguly.github.io/2020/09/rconfig-3.9.4-multiple-vulnerabilities/
CVE ID: CVE-2020-10549 State: PUBLISHED Published: 2020-06-04T03:24:25 Last Updated: 2024-08-04T11:06:10.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/theguly/exploits/blob/master/CVE-2020-10549.py - https://theguly.github.io/2020/09/rconfig-3.9.4-multiple-vulnerabilities/
CVE ID: CVE-2020-10551 State: PUBLISHED Published: 2020-04-09T12:38:40 Last Updated: 2024-08-04T11:06:09.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: QQBrowser before 10.5.3870.400 installs a Windows service TsService.exe. This file is writable by anyone belonging to the NT AUTHORITY\Authenticated Users group, which includes all local and remote users. This can be abused by local attackers to escalate privileges to NT AUTHORITY\SYSTEM by writing a malicious executable to the location of TsService. Additional Analyst Notes: - CVE Program Container: References: - https://seqred.pl/en/cve-2020-10551-privilege-escalation-in-qqbrowser/ - https://github.com/seqred-s-a/CVE-2020-1
ces: - https://seqred.pl/en/cve-2020-10551-privilege-escalation-in-qqbrowser/ - https://github.com/seqred-s-a/CVE-2020-10551