Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-13700 State: PUBLISHED Published: 2020-06-24T14:25:30 Last Updated: 2024-08-04T12:25:16.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the acf-to-rest-api plugin through 3.1.0 for WordPress. It allows an insecure direct object reference via permalinks manipulation, as demonstrated by a wp-json/acf/v3/options/ request that reads sensitive information in the wp_options table, such as the login and pass values. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/airesvsg/acf-to-rest-api - https://wordpress.org/plugins/acf-to-rest-api/#developers - https://gist.github.com/mariuszpoplwski/4fbaab7f271bea99
i - https://wordpress.org/plugins/acf-to-rest-api/#developers - https://gist.github.com/mariuszpoplwski/4fbaab7f271bea99c733e3f2a4bafbb5
CVE ID: CVE-2020-13702 State: PUBLISHED Published: 2020-06-11T18:16:01 Last Updated: 2024-08-04T12:25:16.528Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AC:L/AV:A/A:N/C:L/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: The Rolling Proximity Identifier used in the Apple/Google Exposure Notification API beta through 2020-05-29 enables attackers to circumvent Bluetooth Smart Privacy because there is a secondary temporary UID. An attacker with access to Beacon or IoT networks can seamlessly track individual device movement via a Bluetooth LE discovery mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/normanluhrmann/infosec/raw/m
hanism. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/normanluhrmann/infosec/raw/master/exposure-notification-vulnerability-20200611.pdf - https://blog.google/documents/70/Exposure_Notification_-_Bluetooth_Specification_v1.2.2.pdf - https://github.com/normanluhrmann/infosec/raw/master/exposure-notification-vulnerability-20200616.pdf - https://github.com/normanluhrmann/infosec/raw/master/exposure-notification-vulnerability-20200616-2.pdf - https://github.com/google/exposure-notifications-internals/commit/8f751a666697c3cae0a56ae3464c2c6cbe31b69e - https://github.com/google/exposure-notifications-internals/commit/8f751a666697
CVE ID: CVE-2020-13712 State: PUBLISHED Published: 2024-12-20T21:37:35.021Z Last Updated: 2024-12-26T19:29:55.387Z Vendors: Sierra Wireless Products: MGOS Problem Types: CWE-78 Description: A command injection is possible through the user interface, allowing arbitrary command execution as the root user. oMG2000 running MGOS 3.15.1 or earlier is affected. MG90 running MGOS 4.2.1 or earlier is affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2020-006---mgos-security-update.ashx
CVE ID: CVE-2020-13713 State: REJECTED Published: 2022-01-14T17:27:19 Last Updated: 2022-01-14T17:27:19 Description: No description available.
CVE ID: CVE-2020-13714 State: REJECTED Published: 2022-01-14T17:27:20 Last Updated: 2022-01-14T17:27:20 Description: No description available.
CVE ID: CVE-2020-13715 State: REJECTED Published: 2022-01-14T17:27:21 Last Updated: 2022-01-14T17:27:21 Description: No description available.
CVE ID: CVE-2020-13716 State: REJECTED Published: 2022-01-14T17:27:23 Last Updated: 2022-01-14T17:27:23 Description: No description available.
CVE ID: CVE-2020-13717 State: REJECTED Published: 2022-01-14T17:27:24 Last Updated: 2022-01-14T17:27:24 Description: No description available.
CVE ID: CVE-2020-13718 State: REJECTED Published: 2022-01-14T17:27:25 Last Updated: 2022-01-14T17:27:25 Description: No description available.
CVE ID: CVE-2020-13719 State: REJECTED Published: 2022-01-14T17:27:27 Last Updated: 2022-01-14T17:27:27 Description: No description available.
CVE ID: CVE-2020-13720 State: REJECTED Published: 2022-01-14T17:27:28 Last Updated: 2022-01-14T17:27:28 Description: No description available.
CVE ID: CVE-2020-13721 State: REJECTED Published: 2022-01-14T17:27:29 Last Updated: 2022-01-14T17:27:29 Description: No description available.
CVE ID: CVE-2020-13722 State: REJECTED Published: 2022-01-14T17:27:31 Last Updated: 2022-01-14T17:27:31 Description: No description available.
CVE ID: CVE-2020-13723 State: REJECTED Published: 2022-01-14T17:27:32 Last Updated: 2022-01-14T17:27:32 Description: No description available.
CVE ID: CVE-2020-13724 State: REJECTED Published: 2022-01-14T17:27:33 Last Updated: 2022-01-14T17:27:33 Description: No description available.
CVE ID: CVE-2020-13725 State: REJECTED Published: 2022-01-14T17:27:35 Last Updated: 2022-01-14T17:27:35 Description: No description available.
CVE ID: CVE-2020-13726 State: REJECTED Published: 2022-01-14T17:27:36 Last Updated: 2022-01-14T17:27:36 Description: No description available.
CVE ID: CVE-2020-13727 State: REJECTED Published: 2022-01-14T17:27:37 Last Updated: 2022-01-14T17:27:37 Description: No description available.
CVE ID: CVE-2020-13728 State: REJECTED Published: 2022-01-14T17:27:39 Last Updated: 2022-01-14T17:27:39 Description: No description available.
CVE ID: CVE-2020-13729 State: REJECTED Published: 2022-01-14T17:27:40 Last Updated: 2022-01-14T17:27:40 Description: No description available.
CVE ID: CVE-2020-13730 State: REJECTED Published: 2022-01-14T17:27:41 Last Updated: 2022-01-14T17:27:41 Description: No description available.
CVE ID: CVE-2020-13731 State: REJECTED Published: 2022-01-14T17:27:43 Last Updated: 2022-01-14T17:27:43 Description: No description available.
CVE ID: CVE-2020-13732 State: REJECTED Published: 2022-01-14T17:27:44 Last Updated: 2022-01-14T17:27:44 Description: No description available.
CVE ID: CVE-2020-13733 State: REJECTED Published: 2022-01-14T17:27:46 Last Updated: 2022-01-14T17:27:46 Description: No description available.
CVE ID: CVE-2020-13734 State: REJECTED Published: 2022-01-14T17:27:47 Last Updated: 2022-01-14T17:27:47 Description: No description available.
CVE ID: CVE-2020-13735 State: REJECTED Published: 2022-01-14T17:27:49 Last Updated: 2022-01-14T17:27:49 Description: No description available.
CVE ID: CVE-2020-13736 State: REJECTED Published: 2022-01-14T17:27:50 Last Updated: 2022-01-14T17:27:50 Description: No description available.
CVE ID: CVE-2020-13737 State: REJECTED Published: 2022-01-14T17:27:51 Last Updated: 2022-01-14T17:27:51 Description: No description available.
CVE ID: CVE-2020-13738 State: REJECTED Published: 2022-01-14T17:27:52 Last Updated: 2022-01-14T17:27:52 Description: No description available.
CVE ID: CVE-2020-13739 State: REJECTED Published: 2022-01-14T17:27:54 Last Updated: 2022-01-14T17:27:54 Description: No description available.
CVE ID: CVE-2020-13740 State: REJECTED Published: 2022-01-14T17:27:55 Last Updated: 2022-01-14T17:27:55 Description: No description available.
CVE ID: CVE-2020-13741 State: REJECTED Published: 2022-01-14T17:27:57 Last Updated: 2022-01-14T17:27:57 Description: No description available.
CVE ID: CVE-2020-13742 State: REJECTED Published: 2022-01-14T17:27:58 Last Updated: 2022-01-14T17:27:58 Description: No description available.
CVE ID: CVE-2020-13743 State: REJECTED Published: 2022-01-14T17:27:59 Last Updated: 2022-01-14T17:27:59 Description: No description available.
CVE ID: CVE-2020-13744 State: REJECTED Published: 2022-01-14T17:28:01 Last Updated: 2022-01-14T17:28:01 Description: No description available.
CVE ID: CVE-2020-13745 State: REJECTED Published: 2022-01-14T17:28:03 Last Updated: 2022-01-14T17:28:03 Description: No description available.
CVE ID: CVE-2020-13746 State: REJECTED Published: 2022-01-14T17:28:05 Last Updated: 2022-01-14T17:28:05 Description: No description available.
CVE ID: CVE-2020-13747 State: REJECTED Published: 2022-01-14T17:28:07 Last Updated: 2022-01-14T17:28:07 Description: No description available.
CVE ID: CVE-2020-13748 State: REJECTED Published: 2022-01-14T17:28:09 Last Updated: 2022-01-14T17:28:09 Description: No description available.
CVE ID: CVE-2020-13749 State: REJECTED Published: 2022-01-14T17:28:10 Last Updated: 2022-01-14T17:28:10 Description: No description available.
CVE ID: CVE-2020-13750 State: REJECTED Published: 2022-01-14T17:28:11 Last Updated: 2022-01-14T17:28:11 Description: No description available.
CVE ID: CVE-2020-13751 State: REJECTED Published: 2022-01-14T17:28:13 Last Updated: 2022-01-14T17:28:13 Description: No description available.
CVE ID: CVE-2020-13752 State: REJECTED Published: 2022-01-14T17:28:15 Last Updated: 2022-01-14T17:28:15 Description: No description available.
CVE ID: CVE-2020-13753 State: PUBLISHED Published: 2020-07-14T13:07:18 Last Updated: 2024-08-04T12:25:16.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl. CLONE_NEWUSER could potentially be used to confuse xdg-desktop-portal, which allows access outside the sandbox. TIOCSTI can be used to directly execute commands outside the sandbox by writing to the controlling terminal's input buffer, similar to CVE-2017-5226. Additional Analyst Notes: - CVE Program Container: References: - https://trac.webkit.org/changeset/262368/webkit - https://www.o
al Analyst Notes: - CVE Program Container: References: - https://trac.webkit.org/changeset/262368/webkit - https://www.openwall.com/lists/oss-security/2020/07/10/1 - https://www.debian.org/security/2020/dsa-4724 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GER2ATKZXDHM7FFYJH67ZPNZZX5VOUVM/ - https://usn.ubuntu.com/4422-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00074.html - https://security.gentoo.org/glsa/202007-11
CVE ID: CVE-2020-13754 State: PUBLISHED Published: 2020-06-02T13:37:25 Last Updated: 2024-08-04T12:25:16.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: hw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a crafted address in an msi-x mmio operation. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2020-06/msg00004.html - http://www.openwall.com/lists/oss-security/2020/06/01/6 - https://security.netapp.com/advisory/ntap-20200608-0007/ - http://www.openwall.com/lists/oss-security/2020/06/15/8 - https://www.debian.org/security/2020/dsa-4728 - https://lists.debian.org/debian-lts-an
lists/oss-security/2020/06/15/8 - https://www.debian.org/security/2020/dsa-4728 - https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html - https://usn.ubuntu.com/4467-1/ - https://security.gentoo.org/glsa/202011-09
CVE ID: CVE-2020-13756 State: PUBLISHED Published: 2020-06-03T13:46:56.000Z Last Updated: 2025-11-03T17:30:46.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors() or getSelectorsBySpecificity() is called with input from an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sabberworm/PHP-CSS-Parser/commit/2ebf59e8bfbf6cfc1653a5f0ed743b95062c62a4 - https://github.com/sabberworm/PHP-CSS-Parser/releases/tag/8.3.1 - http://seclists.org/fulldisclosure/2020/Jun/7 - http://packetstormsecurity.com/files/
HP-CSS-Parser/releases/tag/8.3.1 - http://seclists.org/fulldisclosure/2020/Jun/7 - http://packetstormsecurity.com/files/157923/Sabberworm-PHP-CSS-Code-Injection.html
CVE ID: CVE-2020-13757 State: PUBLISHED Published: 2020-06-01T18:17:07 Last Updated: 2024-08-04T12:25:16.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sybrenstuvel/python-rsa/issues/146 - https://github.com/sybrenstuvel/python-rsa/issues/146#issuecomment-641845667 -
.com/sybrenstuvel/python-rsa/issues/146 - https://github.com/sybrenstuvel/python-rsa/issues/146#issuecomment-641845667 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2KILTHBHNSDUCYV22ODLOKTICJJ7JQIQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZYB65VNILRBTXL6EITQTH2PZPK7I23MW/ - https://usn.ubuntu.com/4478-1/
CVE ID: CVE-2020-13758 State: PUBLISHED Published: 2020-06-01T18:32:20 Last Updated: 2024-08-04T12:25:16.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules/security/classes/general.post_filter.php/post_filter.php in the Web Application Firewall in Bitrix24 through 20.0.950 allows XSS by placing %00 before the payload. Additional Analyst Notes: - CVE Program Container: References: - https://blog.deteact.com/bitrix-waf-bypass/
CVE ID: CVE-2020-13759 State: PUBLISHED Published: 2020-06-02T18:24:23 Last Updated: 2024-08-04T12:25:16.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: rust-vmm vm-memory before 0.1.1 and 0.2.x before 0.2.1 allows attackers to cause a denial of service (loss of IP networking) because read_obj and write_obj do not properly access memory. This affects aarch64 (with musl or glibc) and x86_64 (with musl). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rust-vmm/vm-memory/issues/93 - https://github.com/rust-vmm/vm-memory/releases/tag/v0.1.1 - https://github.com/rust-vmm/vm-memory/releases/tag/v0.2.1
CVE ID: CVE-2020-13760 State: PUBLISHED Published: 2020-06-02T19:25:43 Last Updated: 2024-08-04T12:25:16.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Joomla! before 3.9.19, missing token checks in com_postinstall lead to CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/817-20200605-core-csrf-in-com-postinstall
CVE ID: CVE-2020-13761 State: PUBLISHED Published: 2020-06-02T19:25:32 Last Updated: 2024-08-04T12:25:16.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Joomla! before 3.9.19, lack of input validation in the heading tag option of the "Articles - Newsflash" and "Articles - Categories" modules allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/813-20200601-core-xss-in-modules-heading-tag-option
CVE ID: CVE-2020-13762 State: PUBLISHED Published: 2020-06-02T19:25:15 Last Updated: 2024-08-04T12:25:16.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Joomla! before 3.9.19, incorrect input validation of the module tag option in com_modules allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/815-20200603-core-xss-in-com-modules-tag-options
CVE ID: CVE-2020-13763 State: PUBLISHED Published: 2020-06-02T19:24:24 Last Updated: 2024-08-04T12:25:16.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Joomla! before 3.9.19, the default settings of the global textfilter configuration do not block HTML inputs for Guest users. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/814-20200602-core-inconsistent-default-textfilter-settings
CVE ID: CVE-2020-13764 State: PUBLISHED Published: 2020-06-02T20:33:11 Last Updated: 2024-08-04T12:25:16.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: common.php in the Gravity Forms plugin before 2.4.9 for WordPress can leak hashed passwords because user_pass is not considered a special case for a $current_user->get($property) call. Additional Analyst Notes: - CVE Program Container: References: - https://docs.gravityforms.com/gravityforms-change-log/ - https://github.com/wp-premium/gravityforms/compare/2.4.8...2.4.9
CVE ID: CVE-2020-13765 State: PUBLISHED Published: 2020-06-04T15:26:17 Last Updated: 2024-08-04T12:25:16.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation. Additional Analyst Notes: - CVE Program Container: References: - https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e423455c4f23a1a828901c78fe6d03b7dde79319 - https://www.openwall.com/lists/oss-security/2020/06/03/6 - https://security.netapp.com/advisory/ntap-20200619-0006/ - https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html - https://l
netapp.com/advisory/ntap-20200619-0006/ - https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html - https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html - https://usn.ubuntu.com/4467-1/ - https://github.com/qemu/qemu/commit/4f1c6cb2f9afafda05eab150fd2bd284edce6676
CVE ID: CVE-2020-13767 State: PUBLISHED Published: 2020-08-26T17:58:49 Last Updated: 2024-08-04T12:25:16.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mitel MiCollab application before 9.1.332 for iOS could allow an unauthorized user to access restricted files and folders due to insufficient access control. An exploit requires a rooted iOS device, and (if successful) could allow an attacker to gain access to sensitive information, Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0008
CVE ID: CVE-2020-13768 State: PUBLISHED Published: 2020-06-04T20:25:50 Last Updated: 2024-08-04T12:25:16.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MiniShare before 1.4.2, there is a stack-based buffer overflow via an HTTP PUT request, which allows an attacker to achieve arbitrary code execution, a similar issue to CVE-2018-19861, CVE-2018-19862, and CVE-2019-17601. NOTE: this product is discontinued. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sartlabs/OSCE-Prep/blob/9a9d2471a9de09457f970be4ea1b57a74d26705a/My%20CVEs/Minishare_BOF_PUT.py
CVE ID: CVE-2020-13769 State: PUBLISHED Published: 2020-11-16T15:28:05 Last Updated: 2024-08-04T12:25:16.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: LDMS/alert_log.aspx in Ivanti Endpoint Manager through 2020.1 allows SQL Injection via a /remotecontrolauth/api/device request. Additional Analyst Notes: - CVE Program Container: References: - https://forums.ivanti.com/s/ - https://labs.jumpsec.com/advisory-cve-2020-13769-ivanti-uem-sql-injection/
CVE ID: CVE-2020-13770 State: PUBLISHED Published: 2020-11-12T17:38:03 Last Updated: 2024-08-04T12:25:16.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Several services are accessing named pipes in Ivanti Endpoint Manager through 2020.1.1 with default or overly permissive security attributes; as these services run as user ‘NT AUTHORITY\SYSTEM’, the issue can be used to escalate privileges from a local standard or service account having SeImpersonatePrivilege (eg. user ‘NT AUTHORITY\NETWORK SERVICE’). Additional Analyst Notes: - CVE Program Container: References: - https://labs.jumpsec.com/advisory-cve-2020-13770-ivanti-uem-named-pipe-token-impersonation/
CVE ID: CVE-2020-13771 State: PUBLISHED Published: 2020-11-12T17:13:04 Last Updated: 2024-08-04T12:25:16.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a (nonexistent) library file, allowing (under certain conditions) one to gain code execution (and elevation of privileges to the level of privilege held by the vulnerable component such as NT AUTHORITY\SYSTEM) via DLL hijacking. This affects ldiscn32.exe, IpmiRedirectionService.exe, LDAPWhoAmI.exe, and ldprofile.exe. Additional Analyst Notes: - CVE Program Container: References: - https://labs.jumpsec.com/advisory-cve-2020
profile.exe. Additional Analyst Notes: - CVE Program Container: References: - https://labs.jumpsec.com/advisory-cve-2020-13771-ivanti-uem-dll-hijacking/
CVE ID: CVE-2020-13772 State: PUBLISHED Published: 2020-11-16T15:24:46 Last Updated: 2024-08-04T12:25:16.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: In /ldclient/ldprov.cgi in Ivanti Endpoint Manager through 2020.1.1, an attacker is able to disclose information about the server operating system, local pathnames, and environment variables with no authentication required. Additional Analyst Notes: - CVE Program Container: References: - https://forums.ivanti.com/s/ - https://labs.jumpsec.com/cve-2020-13772-ivanti-uem-system-information-disclosure/
CVE ID: CVE-2020-13773 State: PUBLISHED Published: 2020-11-16T15:30:14 Last Updated: 2024-08-04T12:25:16.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ivanti Endpoint Manager through 2020.1.1 allows XSS via /LDMS/frm_splitfrm.aspx, /LDMS/licensecheck.aspx, /LDMS/frm_splitcollapse.aspx, /LDMS/alert_log.aspx, /LDMS/ServerList.aspx, /LDMS/frm_coremainfrm.aspx, /LDMS/frm_findfrm.aspx, /LDMS/frm_taskfrm.aspx, and /LDMS/query_browsecomp.aspx. Additional Analyst Notes: - CVE Program Container: References: - https://forums.ivanti.com/s/ - https://labs.jumpsec.com/cve-2020-13773-ivanti-uem-reflected-xss/
CVE ID: CVE-2020-13774 State: PUBLISHED Published: 2020-11-12T19:22:15 Last Updated: 2024-08-04T12:25:16.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unrestricted file-upload issue in EditLaunchPadDialog.aspx in Ivanti Endpoint Manager 2019.1 and 2020.1 allows an authenticated attacker to gain remote code execution by uploading a malicious aspx file. The issue is caused by insufficient file extension validation and insecure file operations on the uploaded image, which upon failure will leave the temporarily created files in an accessible location on the server. Additional Analyst Notes: - CVE Program Container: References: - https://labs.jumpsec.com/advisory-cve-2020-13
e server. Additional Analyst Notes: - CVE Program Container: References: - https://labs.jumpsec.com/advisory-cve-2020-13774-ivanti-uem-rce/
CVE ID: CVE-2020-13775 State: PUBLISHED Published: 2020-06-02T22:51:38 Last Updated: 2024-08-04T12:25:16.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZNC 1.8.0 up to 1.8.1-rc1 allows authenticated users to trigger an application crash (with a NULL pointer dereference) if echo-message is not enabled and there is no network. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/znc/znc/commit/2390ad111bde16a78c98ac44572090b33c3bd2d8 - https://github.com/znc/znc/commit/d229761821da38d984a9e4098ad96842490dc001 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HS3DWGXLVRROQQA57UIPMDM6XMVEMBRA/ - http
oraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HS3DWGXLVRROQQA57UIPMDM6XMVEMBRA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DNVBE4T2DRJRQHFRMHYBTN4OSOL6DBHR/
CVE ID: CVE-2020-13776 State: PUBLISHED Published: 2020-06-03T02:05:22.000Z Last Updated: 2025-06-09T15:46:14.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/systemd/systemd/issues/15985 - https://security.netapp.com/advisory/ntap-20200611-0003/ - https://lists.fedoraproject.org/a
temd/systemd/issues/15985 - https://security.netapp.com/advisory/ntap-20200611-0003/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IYGLFEKG45EYBJ7TPQMLWROWPTZBEU63/