Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-23968 State: PUBLISHED Published: 2020-11-10T19:44:02 Last Updated: 2024-08-04T15:05:11.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ilex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a symlink attack on ProgramData\Ilex\S&G\Logs\000-sngWSService1.log. Additional Analyst Notes: - CVE Program Container: References: - http://ilex.com - http://signgo.com - https://ricardojba.github.io/CVE-Pending-ILEX-SignGo-EoP/
CVE ID: CVE-2020-23971 State: PUBLISHED Published: 2020-09-01T15:05:13 Last Updated: 2024-08-04T15:05:11.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: gmapfp.org Joomla Component GMapFP J3.30pro is affected by Insecure Permissions. An attacker can access the upload function without authenticating to the application and also can upload files due the issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double extensions. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/156889/Joomla-GMapFP-3.30-Arbitrary-File-Upload.html
CVE ID: CVE-2020-23972 State: PUBLISHED Published: 2020-08-27T13:03:45 Last Updated: 2024-08-04T15:05:11.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double extensions. Additional Analyst Notes: - CVE Program Container: References: - https://raw.githubusercontent.com/me4yoursecurity/Reports/master/README.md - http://packetstormsecurity.com/files/159072/Joomla-GMapFP-J3.5-J3.5F-Arbitrary-File-Upl
urity/Reports/master/README.md - http://packetstormsecurity.com/files/159072/Joomla-GMapFP-J3.5-J3.5F-Arbitrary-File-Upload.html
CVE ID: CVE-2020-23973 State: PUBLISHED Published: 2020-08-27T13:21:35 Last Updated: 2024-08-04T15:05:11.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/157049/KandNconcepts-Club-CMS-1.1-1.2-Cross-Site-Scripting-SQL-Injection.html
CVE ID: CVE-2020-23974 State: PUBLISHED Published: 2020-08-27T13:42:00 Last Updated: 2024-08-04T15:05:11.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Create-Project Manager 1.07 has Multi Persistent Cross-site Scripting and HTML injection in via Online chat, Social feed,Message(title-tag), Add new client (all-tags). Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/157599/Create-Project-Manager-1.07-Cross-Site-Scripting-HTML-Injection.html - https://cxsecurity.com/issue/WLB-2020050071
CVE ID: CVE-2020-23975 State: PUBLISHED Published: 2020-08-27T13:45:33 Last Updated: 2024-08-04T15:05:11.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has cross site scripting via the 'search.php' id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/156948/Webexcels-Ecommerce-CMS-2.x-SQL-Injection-Cross-Site-Scripting.html - https://cxsecurity.com/issue/WLB-2020030174
CVE ID: CVE-2020-23976 State: PUBLISHED Published: 2020-08-27T13:48:16 Last Updated: 2024-08-04T15:05:11.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/156948/Webexcels-Ecommerce-CMS-2.x-SQL-Injection-Cross-Site-Scripting.html - https://cxsecurity.com/issue/WLB-2020030174
CVE ID: CVE-2020-23977 State: PUBLISHED Published: 2020-08-27T13:52:47 Last Updated: 2024-08-04T15:05:11.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/157049/KandNconcepts-Club-CMS-1.1-1.2-Cross-Site-Scripting-SQL-Injection.html
CVE ID: CVE-2020-23978 State: PUBLISHED Published: 2020-08-27T13:59:43 Last Updated: 2024-08-04T15:05:11.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection can occur in Soluzione Globale Ecommerce CMS v1 via the parameter " offerta.php" Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/156939/Soluzione-Globale-Ecommerce-CMS-1-SQL-Injection.html - https://cxsecurity.com/issue/WLB-2020030150
CVE ID: CVE-2020-23979 State: PUBLISHED Published: 2020-08-27T14:02:21 Last Updated: 2024-08-04T15:05:11.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: 13enforme CMS 1.0 has SQL Injection via the 'content.php' id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/157094/13enforme-CMS-SQL-Injection-Cross-Site-Scripting.html
CVE ID: CVE-2020-23980 State: PUBLISHED Published: 2020-08-27T12:45:50 Last Updated: 2024-08-04T15:05:11.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/156959/DesignMasterEvents-CMS-1.0-SQL-Injection-Cross-Site-Scripting.html - https://cxsecurity.com/issue/WLB-2020030177
CVE ID: CVE-2020-23981 State: PUBLISHED Published: 2020-08-27T14:04:06 Last Updated: 2024-08-04T15:05:11.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: 13enforme CMS 1.0 has Cross Site Scripting via the "content.php" id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/157094/13enforme-CMS-SQL-Injection-Cross-Site-Scripting.html
CVE ID: CVE-2020-23982 State: PUBLISHED Published: 2020-08-27T14:07:46 Last Updated: 2024-08-04T15:05:11.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: DesignMasterEvents Conference management 1.0.0 has cross site scripting via the 'certificate.php' Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/156959/DesignMasterEvents-CMS-1.0-SQL-Injection-Cross-Site-Scripting.html - https://cxsecurity.com/issue/WLB-2020030177
CVE ID: CVE-2020-23983 State: PUBLISHED Published: 2020-08-27T14:35:30 Last Updated: 2024-08-04T15:05:11.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Michael-design iChat Realtime PHP Live Support System 1.6 has persistent Cross-site Scripting via chat,text-filed tags. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/157594/iChat-1.6-Cross-Site-Scripting.html
CVE ID: CVE-2020-23984 State: PUBLISHED Published: 2020-08-27T14:31:52 Last Updated: 2024-08-04T15:05:11.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer registration-form all-tags. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/157117/Online-Hotel-Booking-System-Pro-1.3-Cross-Site-Scripting.html
CVE ID: CVE-2020-23986 State: PUBLISHED Published: 2022-01-05T23:37:44 Last Updated: 2024-08-04T15:05:11.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Github Read Me Stats commit 3c7220e4f7144f6cb068fd433c774f6db47ccb95 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the function renderError. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/anuraghazra/github-readme-stats/pull/255
CVE ID: CVE-2020-23989 State: PUBLISHED Published: 2020-11-02T21:49:25 Last Updated: 2024-08-04T15:05:11.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: NeDi 1.9C allows pwsec.php oid XSS. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/harsh-bothra/d8c86b8279b23ff6d371f832ba0a5b6b
CVE ID: CVE-2020-23992 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T19:56:29.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in Nagios XI 5.7.1 allows remote attackers to run arbitrary code via returnUrl parameter in a crafted GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/EmreOvunc/Nagios-XI-Reflected-XSS
CVE ID: CVE-2020-23995 State: PUBLISHED Published: 2021-05-13T19:49:35 Last Updated: 2024-08-04T15:05:11.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information disclosure vulnerability in ILIAS before 5.3.19, 5.4.12 and 6.0 allows remote authenticated attackers to get the upload data path via a workspace upload. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/209.html - https://github.com/ILIAS-eLearning/ILIAS/commit/94d9b16010ec3abeae8d2cbb05622ccd999119ad - https://docu.ilias.de/goto_docu_pg_122177_35.html - https://docu.ilias.de/goto_docu_pg_118817_35.html - https://docu.ilias.de/goto_docu_pg_124761_35.html
CVE ID: CVE-2020-23996 State: PUBLISHED Published: 2021-05-13T19:49:54 Last Updated: 2024-08-04T15:05:11.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: A local file inclusion vulnerability in ILIAS before 5.3.19, 5.4.10 and 6.0 allows remote authenticated attackers to execute arbitrary code via the import of personal data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ILIAS-eLearning/ILIAS/commit/6717c4ecc6d076154ce185f1ea052f07f37e3537 - https://docu.ilias.de/goto_docu_pg_122177_35.html - https://docu.ilias.de/goto_docu_pg_118823_35.html - https://docu.ilias.de/goto_docu_pg_118817_35.html
CVE ID: CVE-2020-24000 State: PUBLISHED Published: 2021-11-03T16:08:21 Last Updated: 2024-08-04T15:05:11.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in eyoucms cms v1.4.7, allows attackers to execute arbitrary code and disclose sensitive information, via the tid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eyoucms/eyoucms/issues/13
CVE ID: CVE-2020-24003 State: PUBLISHED Published: 2021-01-11T15:26:26 Last Updated: 2024-08-04T15:05:11.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Skype Client's microphone and camera access. Additional Analyst Notes: - CVE Program Container: References: - https://www.hdwsec.fr/blog/20200608-skype/
CVE ID: CVE-2020-24007 State: PUBLISHED Published: 2020-08-26T13:51:20 Last Updated: 2024-08-04T15:05:11.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Umanni RH 1.0 does not limit the number of authentication attempts. An unauthenticated user may exploit this vulnerability to launch a brute-force authentication attack against the Login page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/inflixim4be/Brute-Force-on-Umanni-RH - https://www.umanni.com.br/
CVE ID: CVE-2020-24008 State: PUBLISHED Published: 2020-08-26T13:37:04 Last Updated: 2024-08-04T15:05:11.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Umanni RH 1.0 has a user enumeration vulnerability. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: References: - https://www.umanni.com.br/ - https://github.com/inflixim4be/User-Enumeration-on-Umanni-RH
CVE ID: CVE-2020-24020 State: PUBLISHED Published: 2021-05-26T14:36:15 Last Updated: 2024-08-04T15:05:11.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnn_execute_layer_pad in libavfilter/dnn/dnn_backend_native_layer_pad.c due to a call to memcpy without length checks, which could let a remote malicious user execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8718 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=584f396132aa19d21bb1e38ad9a5d428869290cb
CVE ID: CVE-2020-24025 State: PUBLISHED Published: 2021-01-11T18:14:41 Last Updated: 2024-08-04T15:05:11.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sass/node-sass/pull/567#issuecomment-656609236
CVE ID: CVE-2020-24026 State: PUBLISHED Published: 2021-05-18T14:23:38 Last Updated: 2024-08-04T15:05:11.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: TinyShop, a free and open source mall based on RageFrame2, has a stored XSS vulnerability that affects version 1.2.0. TinyShop allows XSS via the explain_first and again_explain parameters of the /evaluate/index.php page. The vulnerability may be exploited remotely, resulting in cross-site scripting (XSS) or information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jianyan74/TinyShop/issues/14 - https://github.com/jianyan74/TinyShop - https://github.com/stavyan/TinyShop-UniApp
CVE ID: CVE-2020-24027 State: PUBLISHED Published: 2021-01-11T19:41:52 Last Updated: 2024-08-04T15:05:11.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling of a RTSP "PLAY" command, when the command specifies seeking by absolute time. Additional Analyst Notes: - CVE Program Container: References: - http://www.live555.com/liveMedia/public/changelog.txt - http://lists.live555.com/pipermail/live-devel/2020-July/021662.html
CVE ID: CVE-2020-24028 State: PUBLISHED Published: 2020-09-02T16:14:18.000Z Last Updated: 2025-10-14T12:57:12.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. NOTE: as of 2025-10-14, the Supplier's perspective is that this "does not allow administrative privilege gain. Authorization is enforced server-side, restricting actions to the user’s own permission scope." Additional Analyst Notes: - CVE Program Container: References: - https://forlogic.net - https://qualiex.com - https://github.com/underprotection/CVE-2020-24028
CVE ID: CVE-2020-24029 State: PUBLISHED Published: 2020-09-02T16:09:41.000Z Last Updated: 2025-10-14T12:55:30.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "corrected in all maintained versions. Password reset requests are validated against registered user emails and require a valid, short-lived token." Additional Analyst Notes: - CVE Program Container: References: - https://qualiex.com - https://github.com/underprotection/CVE-2020-24029
CVE ID: CVE-2020-24030 State: PUBLISHED Published: 2020-09-02T16:08:48.000Z Last Updated: 2025-10-14T12:52:47.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "not exploitable in the current implementation. Tokens are properly expired, invalidated, and bound to session context. Attempts to alter the token payload to extend its validity do not affect server-side validation." Additional Analyst Notes: - CVE Program Container: References: - https://qualiex.com
ot affect server-side validation." Additional Analyst Notes: - CVE Program Container: References: - https://qualiex.com - https://github.com/underprotection/CVE-2020-24030
CVE ID: CVE-2020-24032 State: PUBLISHED Published: 2020-08-18T20:15:45 Last Updated: 2024-08-04T15:05:11.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone. Additional Analyst Notes: - CVE Program Container: References: - https://www.stor2rrd.com/download.php - https://pastebin.com/dHhawgx8 - https://pastebin.com/G8981Fj8
CVE ID: CVE-2020-24033 State: PUBLISHED Published: 2020-10-22T13:53:41 Last Updated: 2024-08-04T15:05:11.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in fs.com S3900 24T4S 1.7.0 and earlier. The form does not have an authentication or token authentication mechanism that allows remote attackers to forge requests on behalf of a site administrator to change all settings including deleting users, creating new users with escalated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/M0NsTeRRR/S3900-24T4S-CSRF-vulnerability - https://github.com/M0NsTeRRR/CVE-2020-24033
CVE ID: CVE-2020-24034 State: PUBLISHED Published: 2020-09-01T17:20:23 Last Updated: 2024-08-04T15:05:11.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sagemcom F@ST 5280 routers using firmware version 1.150.61 have insecure deserialization that allows any authenticated user to perform a privilege escalation to any other user. By making a request with valid sess_id, nonce, and ha1 values inside of the serialized session cookie, an attacker may alter the user value inside of this cookie, and assume the role and permissions of the user specified. By assuming the role of the user internal, which is inaccessible to end users by default, the attacker gains the permissions of the
the role of the user internal, which is inaccessible to end users by default, the attacker gains the permissions of the internal account, which includes the ability to flash custom firmware to the router, allowing the attacker to achieve a complete compromise. Additional Analyst Notes: - CVE Program Container: References: - https://support.sagemcom.com/fr/haut-debit - https://seclists.org/fulldisclosure/2020/Sep/3 - http://seclists.org/fulldisclosure/2020/Sep/3 - http://packetstormsecurity.com/files/159026/Sagemcom-F-ST-5280-Privilege-Escalation.html
CVE ID: CVE-2020-24036 State: PUBLISHED Published: 2021-03-04T12:28:05 Last Updated: 2024-08-04T15:05:11.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP object injection in the Ajax endpoint of the backend in ForkCMS below version 5.8.3 allows an authenticated remote user to execute malicious code. Additional Analyst Notes: - CVE Program Container: References: - http://forkcms.com - https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories/ait-sa-20210215-04 - https://tech.feedyourhead.at/content/ForkCMS-PHP-Object-Injection-CVE-2020-24036 - http://seclists.org/fulldisclosure/2021/Mar/31
CVE ID: CVE-2020-24038 State: PUBLISHED Published: 2021-07-07T13:32:27 Last Updated: 2024-08-04T15:05:11.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: myFax version 229 logs sensitive information in the export log module which allows any user to access critical information. Additional Analyst Notes: - CVE Program Container: References: - https://myfax.com/ - https://github.com/Dmitriy-area51/Exploit/tree/master/CVE-2020-24038
CVE ID: CVE-2020-24045 State: PUBLISHED Published: 2020-09-17T16:37:18 Last Updated: 2024-08-04T15:05:11.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. The restricted shell can be bypassed by presenting a fake vmware-tools ISO image to the guest virtual machine running SpamTitan Gateway. This ISO image should contain a valid Perl script at the vmware-freebsd-tools/vmware-tools-distrib/vmware-install.pl path. The fake ISO image will be mounted and the script wmware-install.pl will be exe
re-tools-distrib/vmware-install.pl path. The fake ISO image will be mounted and the script wmware-install.pl will be executed with super-user privileges as soon as the hidden option to install VMware Tools is selected in the main menu of the restricted shell (option number 5). The contents of the script can be whatever the attacker wants, including a backdoor or similar. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/felmoltor - https://twitter.com/felmoltor - https://www.titanhq.com/ - https://sensepost.com/blog/2020/clash-of-the-spamtitan/
CVE ID: CVE-2020-24046 State: PUBLISHED Published: 2020-09-17T16:39:31 Last Updated: 2024-08-04T15:05:11.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. This restricted shell can be bypassed after changing the properties of the user admin in the operating system file /etc/passwd. This file cannot be accessed though the restricted shell, but it can be modified by abusing the Backup/Import Backup functionality of the web interface. An authenticated attacker would be able to obtain the file
the Backup/Import Backup functionality of the web interface. An authenticated attacker would be able to obtain the file /var/tmp/admin.passwd after executing a Backup operation. This file can be manually modified to change the GUID of the user to 0 (root) and change the restricted shell to a normal shell /bin/sh. After the modification is done, the file can be recompressed to a .tar.bz file and imported again via the Import Backup functionality. The properties of the admin user will be overwritten and a root shell will be granted to the user upon the next successful login. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/felmoltor - https://twitter.com/fel
Additional Analyst Notes: - CVE Program Container: References: - https://github.com/felmoltor - https://twitter.com/felmoltor - https://www.titanhq.com - https://sensepost.com/blog/2020/clash-of-the-spamtitan/
CVE ID: CVE-2020-24051 State: PUBLISHED Published: 2020-08-21T14:23:54 Last Updated: 2024-08-04T15:05:11.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Moog EXO Series EXVF5C-2 and EXVP7C2-3 units support the ONVIF interoperability IP-based physical security protocol, which requires authentication for some of its operations. It was found that the authentication check for those ONVIF operations can be bypassed. An attacker can abuse this issue to execute privileged operations without authentication, for instance, to create a new Administrator user. Additional Analyst Notes: - CVE Program Container: References: - https://ioactive.com/moog-exo-series-multiple-vulnerabilitie
ional Analyst Notes: - CVE Program Container: References: - https://ioactive.com/moog-exo-series-multiple-vulnerabilities/ - https://ioac.tv/3hy1xu6