Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-7462 State: PUBLISHED Published: 2021-03-26T20:48:01 Last Updated: 2024-08-04T09:25:49.060Z Vendors: n/a Products: FreeBSD Problem Types: Use After Free Description: In 11.4-PRERELEASE before r360733 and 11.3-RELEASE before p13, improper mbuf handling in the kernel causes a use-after-free bug by sending IPv6 Hop-by-Hop options over the loopback interface. The use-after-free situation may result in unintended kernel behaviour including a kernel panic. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-20:24.ipv6.asc
CVE ID: CVE-2020-7463 State: PUBLISHED Published: 2021-03-26T20:48:18 Last Updated: 2024-08-04T09:33:18.739Z Vendors: n/a Products: FreeBSD Problem Types: Use After Free Description: In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free bug by sending large user messages from multiple threads on the same SCTP socket. The use-after-free situation may result in unintended kernel behaviour including a kernel panic. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-20:25.sctp.asc - https
Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-20:25.sctp.asc - https://support.apple.com/kb/HT212317 - https://support.apple.com/kb/HT212319 - https://support.apple.com/kb/HT212325 - https://support.apple.com/kb/HT212323 - https://support.apple.com/kb/HT212324 - https://support.apple.com/kb/HT212321 - https://support.apple.com/kb/HT212318 - http://seclists.org/fulldisclosure/2021/Apr/49 - http://seclists.org/fulldisclosure/2021/Apr/50 - http://seclists.org/fulldisclosure/2021/Apr/59 - http://seclists.org/fulldisclosure/2021/Apr/58 - http://seclists.org/fulldisclosure/2021/Apr/57
CVE ID: CVE-2020-7464 State: PUBLISHED Published: 2021-03-26T20:55:25 Last Updated: 2024-08-04T09:33:18.651Z Vendors: n/a Products: FreeBSD Problem Types: Improper Calculation of Buffer Size Description: In FreeBSD 12.2-STABLE before r365730, 11.4-STABLE before r365738, 12.1-RELEASE before p10, 11.4-RELEASE before p4, and 11.3-RELEASE before p14, a programming error in the ure(4) device driver caused some Realtek USB Ethernet interfaces to incorrectly report packets with more than 2048 bytes in a single USB transfer as having a length of only 2048 bytes. An adversary can exploit this to cause the driver to misinterpret part of the payload of a large packet as a separate packet, and thereby i
ploit this to cause the driver to misinterpret part of the payload of a large packet as a separate packet, and thereby inject packets across security boundaries such as VLANs. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-20:27.ure.asc
CVE ID: CVE-2020-7465 State: PUBLISHED Published: 2020-10-06T13:40:03 Last Updated: 2024-08-04T09:33:18.770Z Vendors: n/a Products: MPD: FreeBSD PPP daemon Problem Types: CWE-787 Description: The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service (memory corruption). Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mpd/bugs/70/ - https://sourceforge.net/p/mpd/svn/2377/
CVE ID: CVE-2020-7466 State: PUBLISHED Published: 2020-10-06T13:43:31 Last Updated: 2024-08-04T09:33:18.519Z Vendors: n/a Products: MPD: FreeBSD PPP daemon Problem Types: CWE-125 Description: The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the daemon to read beyond allocated memory buffer, which would result in a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mpd/svn/2374/ - https://sourceforge.net/p/mpd/bugs/69/
CVE ID: CVE-2020-7467 State: PUBLISHED Published: 2021-03-26T20:27:06 Last Updated: 2024-08-04T09:33:19.943Z Vendors: n/a Products: FreeBSD Problem Types: Improper initialization Description: In FreeBSD 12.2-STABLE before r365767, 11.4-STABLE before r365769, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a number of AMD virtualization instructions operate on host physical addresses, are not subject to nested page table translation, and guest use of these instructions was not trapped. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-20:29.bhyve_svm.asc
CVE ID: CVE-2020-7468 State: PUBLISHED Published: 2021-03-26T20:27:13 Last Updated: 2024-08-04T09:33:19.881Z Vendors: n/a Products: FreeBSD Problem Types: Missing authorization Description: In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd(8) bug in the implementation of the file system sandbox, combined with capabilities available to an authenticated FTP user, can be used to escape the file system restriction configured in ftpchroot(5). Moreover, the bug allows a malicious client to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD
lient to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-20:30.ftpd.asc
CVE ID: CVE-2020-7469 State: PUBLISHED Published: 2021-06-04T11:55:55 Last Updated: 2024-08-04T09:33:19.700Z Vendors: n/a Products: FreeBSD Problem Types: Use after free Description: In FreeBSD 12.2-STABLE before r367402, 11.4-STABLE before r368202, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 the handler for a routing option caches a pointer into the packet buffer holding the ICMPv6 message. However, when processing subsequent options the packet buffer may be freed, rendering the cached pointer invalid. The network stack may later dereference the pointer, potentially triggering a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - h
the pointer, potentially triggering a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-20:31.icmp6.asc - https://security.netapp.com/advisory/ntap-20210720-0001/
CVE ID: CVE-2020-7470 State: PUBLISHED Published: 2020-01-21T14:07:57 Last Updated: 2024-08-04T09:33:18.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sonoff TH 10 and 16 devices with firmware 6.6.0.21 allows XSS via the Friendly Name 1 field (after a successful login with the Web Admin Password). Additional Analyst Notes: - CVE Program Container: References: - https://sku11army.blogspot.com/2020/01/sonoff-sonoff-th-module-vuln-xss.html
CVE ID: CVE-2020-7471 State: PUBLISHED Published: 2020-02-03T11:59:20 Last Updated: 2024-08-04T09:33:19.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter). By passing a suitably crafted delimiter to a contrib.postgres.aggregates.StringAgg instance, it was possible to break escaping and inject malicious SQL. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21topic/django-annou
Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21topic/django-announce/X45S86X5bZI - https://docs.djangoproject.com/en/3.0/releases/security/ - https://www.openwall.com/lists/oss-security/2020/02/03/1 - https://www.djangoproject.com/weblog/2020/feb/03/security-releases/ - http://www.openwall.com/lists/oss-security/2020/02/03/1 - https://github.com/django/django/commit/eb31d845323618d688ad429479c6dda973056136 - https://usn.ubuntu.com/4264-1/ - https://seclists.org/bugtraq/2020/Feb/30 - https://www.debian.org/security/2020/dsa-4629 - https://security.netapp.com/advisory/ntap-20200221-0006/ - https://security.gentoo.org/glsa/202004-17 - https
dsa-4629 - https://security.netapp.com/advisory/ntap-20200221-0006/ - https://security.gentoo.org/glsa/202004-17 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4A2AP4T7RKPBCLTI2NNQG3T6MINDUUMZ/
CVE ID: CVE-2020-7472 State: PUBLISHED Published: 2020-11-12T17:33:23 Last Updated: 2024-08-04T09:33:18.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7, 9.0 before 9.0.4, and 10.0 before 10.0.0 allows for unauthenticated remote code execution against a configured SugarCRM instance via crafted HTTP requests. (This is exploitable even after installation is completed.). Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2020-043/ - https://support.sugarcrm.com/Documentatio
ces: - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2020-043/ - https://support.sugarcrm.com/Documentation/Sugar_Versions/10.0/Pro/Sugar_10.0.0_Release_Notes/
CVE ID: CVE-2020-7473 State: PUBLISHED Published: 2020-05-07T13:54:24 Last Updated: 2024-08-04T09:33:19.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: In certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticated attackers to access the documents and folders of ShareFile users. NOTE: unlike most CVEs, exploitability depends on the product version that was in use when a particular setup step was performed, NOT the product version that is in use during a current assessment of a CVE consumer's product inventory. Specifically, the vulnerability can be exploited
use during a current assessment of a CVE consumer's product inventory. Specifically, the vulnerability can be exploited if a storage zone was created by one of these product versions: 5.9.0, 5.8.0, 5.7.0, 5.6.0, 5.5.0, or earlier. This CVE differs from CVE-2020-8982 and CVE-2020-8983 but has essentially the same risk. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX269106
CVE ID: CVE-2020-7474 State: PUBLISHED Published: 2020-03-23T18:53:45 Last Updated: 2024-08-04T09:33:18.721Z Vendors: n/a Products: ProSoft Configurator v1.002 and prior, for the PMEPXM0100 (H) module Problem Types: CWE-427 Description: A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProSoft Configurator (v1.002 and prior), for the PMEPXM0100 (H) module, which could cause the execution of untrusted code when using double click to open a project file which may trigger execution of a malicious DLL. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-042-01/
CVE ID: CVE-2020-7475 State: PUBLISHED Published: 2020-03-23T18:56:18 Last Updated: 2024-08-04T09:33:18.769Z Vendors: n/a Products: EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20), Modicon M580 (all versions prior to V3.10) Problem Types: CWE-74 Description: A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), reflective DLL, vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20), Modicon M580 (all versions prior to V3.10), which, if exploited, could
ons), Modicon M340 (all versions prior to V3.20), Modicon M580 (all versions prior to V3.10), which, if exploited, could allow attackers to transfer malicious code to the controller. Additional Analyst Notes: - CVE Program Container: References: - http://www.se.com/ww/en/download/document/SEVD-2020-080-01
CVE ID: CVE-2020-7476 State: PUBLISHED Published: 2020-03-23T19:01:22 Last Updated: 2024-08-04T09:33:18.739Z Vendors: n/a Products: ZigBee Installation Toolkit (Versions prior to 1.0.1) Problem Types: CWE-426 Description: A CWE-426: Untrusted Search Path vulnerability exists in ZigBee Installation Kit (Versions prior to 1.0.1), which could cause execution of malicious code when a malicious file is put in the search path. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-070-03
CVE ID: CVE-2020-7477 State: PUBLISHED Published: 2020-03-23T19:14:31 Last Updated: 2024-08-04T09:33:18.651Z Vendors: n/a Products: Modicon Quantum Ethernet Network module and Quantum / Premium COPRO (Quantum Ethernet Network module 140NOE771x1, versions 7.0 and prior, Quantum processors with integrated Ethernet – 140CPU65xxxxx, all versions, Premium processors with integrated Ethernet, all versions) Problem Types: CWE-754 Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Quantum Ethernet Network module 140NOE771x1 (Versions 7.0 and prior), Quantum processors with integrated Ethernet – 140CPU65xxxxx (all Versions), and Premium processors wit
s 7.0 and prior), Quantum processors with integrated Ethernet – 140CPU65xxxxx (all Versions), and Premium processors with integrated Ethernet (all Versions), which could cause a Denial of Service when sending a specially crafted command over Modbus. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-070-02/
CVE ID: CVE-2020-7478 State: PUBLISHED Published: 2020-03-23T19:17:11 Last Updated: 2024-08-04T09:33:18.779Z Vendors: n/a Products: IGSS (Interactive Graphical SCADA System) (IGSS Version prior to 14.0.0.20009) Problem Types: CWE-22 Description: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory exists in IGSS (Versions 14 and prior using the service: IGSSupdate), which could allow a remote unauthenticated attacker to read arbitrary files from the IGSS server PC on an unrestricted or shared network when the IGSS Update Service is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-070-01/ - https://
st Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-070-01/ - https://www.zerodayinitiative.com/advisories/ZDI-20-371/
CVE ID: CVE-2020-7479 State: PUBLISHED Published: 2020-03-23T19:18:26 Last Updated: 2024-08-04T09:33:19.829Z Vendors: n/a Products: IGSS (Interactive Graphical SCADA System) (IGSS Version prior to 14.0.0.20009) Problem Types: CWE-306 Description: A CWE-306: Missing Authentication for Critical Function vulnerability exists in IGSS (Versions 14 and prior using the service: IGSSupdate), which could allow a local user to execute processes that otherwise require escalation privileges when sending local network commands to the IGSS Update Service. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-070-01/ - https://www.zerodayiniti
Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-070-01/ - https://www.zerodayinitiative.com/advisories/ZDI-20-370/
CVE ID: CVE-2020-7480 State: PUBLISHED Published: 2020-03-23T19:24:37 Last Updated: 2024-08-04T09:33:19.649Z Vendors: n/a Products: Andover Continuum (All versions) Problem Types: CWE-94 Description: A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists in Andover Continuum (All versions), which could cause files on the application server filesystem to be viewable when an attacker interferes with an application's processing of XML data. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-070-04/
CVE ID: CVE-2020-7481 State: PUBLISHED Published: 2020-03-23T19:23:49 Last Updated: 2024-08-04T09:33:19.682Z Vendors: n/a Products: Andover Continuum (All versions) Problem Types: CWE-79 Description: A CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists Andover Continuum (All versions), which could enable a successful Cross-site Scripting (XSS attack) when using the products' web server. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-070-04/
CVE ID: CVE-2020-7482 State: PUBLISHED Published: 2020-03-23T19:23:57 Last Updated: 2024-08-04T09:33:18.775Z Vendors: n/a Products: Andover Continuum (All versions) Problem Types: CWE-79 Description: A CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists Andover Continuum (All versions), which could cause a Reflective Cross-site Scripting (XSS attack) when using the products' web server. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-070-04/
CVE ID: CVE-2020-7483 State: PUBLISHED Published: 2020-04-15T21:03:17 Last Updated: 2024-08-04T09:33:18.776Z Vendors: n/a Products: TriStation TS1131 (v4.0.0 to v4.9.0, v4.10.0) Problem Types: cleartext Description: **VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause certain data to be visible on the network when the 'password' feature is enabled. This vulnerability was discovered in and remediated in versions v4.9.1 and v4.10.1 on May 30, 2013. The 'password' feature is an additional optional check performed by TS1131 that it is connected to a specific controller. This data is sent as clear text and is visible on the network. This feature is not present in TriStation 1131 ve
roller. This data is sent as clear text and is visible on the network. This feature is not present in TriStation 1131 versions v4.9.1 and v4.10.1 through current. Therefore, the vulnerability is not present in these versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SESB-2020-105-01 - https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01
CVE ID: CVE-2020-7484 State: PUBLISHED Published: 2020-04-15T21:03:24 Last Updated: 2024-08-04T09:33:19.606Z Vendors: n/a Products: TriStation TS1131 (v4.0.0 to v4.9.0, v4.10.0) Problem Types: denial of service Description: **VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability with the former 'password' feature could allow a denial of service attack if the user is not following documented guidelines pertaining to dedicated TriStation connection and key-switch protection. This vulnerability was discovered and remediated in versions v4.9.1 and v4.10.1 on May 30, 2013. This feature is not present in version v4.9.1 and v4.10.1 through current. Therefore, the vulnerability is not present in the
feature is not present in version v4.9.1 and v4.10.1 through current. Therefore, the vulnerability is not present in these versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SESB-2020-105-01 - https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01
CVE ID: CVE-2020-7485 State: PUBLISHED Published: 2020-04-15T21:03:31 Last Updated: 2024-08-04T09:33:19.254Z Vendors: n/a Products: TriStation TS1131 (v4.0.0 to v4.9.0, v4.10.0) Problem Types: improper access Description: **VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper access to the TriStation host machine. This was addressed in TriStation version v4.9.1 and v4.10.1 released on May 30, 2013.1 Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SESB-2020-105-01 - https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01
CVE ID: CVE-2020-7486 State: PUBLISHED Published: 2020-04-15T21:03:37 Last Updated: 2024-08-04T09:33:19.372Z Vendors: n/a Products: Tricon TCM Model 4351, 4352, 4351A/B, 4352A/B (v10.3.x, v10.4.x) Problem Types: denial of service Description: **VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause TCM modules to reset when under high network load in TCM v10.4.x and in system v10.3.x. This vulnerability was discovered and remediated in version v10.5.x on August 13, 2009. TCMs from v10.5.x and on will no longer exhibit this behavior. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SESB-2020-105-01 - https://us-cert.cisa.go
E Program Container: References: - https://www.se.com/ww/en/download/document/SESB-2020-105-01 - https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01
CVE ID: CVE-2020-7487 State: PUBLISHED Published: 2020-04-22T18:50:25 Last Updated: 2024-08-04T09:33:18.793Z Vendors: n/a Products: EcoStruxure Machine Expert (all versions)SoMachine, SoMachine Motion (all versions)Modicon M218 Logic Controller (all versions)Modicon M241 Logic Controller (all versions)Modicon M251 Logic Controller (all versions)Modicon M258 Logic Controller (all versions) Problem Types: CWE-345 Description: A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.c
218, M241, M251, and M258 controllers. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-105-02
CVE ID: CVE-2020-7488 State: PUBLISHED Published: 2020-04-22T18:51:26 Last Updated: 2024-08-04T09:33:19.616Z Vendors: n/a Products: EcoStruxure Machine Expert (all versions)SoMachine, SoMachine Motion (all versions)Modicon M218 Logic Controller (all versions)Modicon M241 Logic Controller (all versions)Modicon M251 Logic Controller (all versions)Modicon M258 Logic Controller (all versions) Problem Types: CWE-319 Description: A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers. Additional Analyst Notes: - CVE Program Container: References: -
and the Modicon M218, M241, M251, and M258 controllers. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-105-02
CVE ID: CVE-2020-7489 State: PUBLISHED Published: 2020-04-22T18:15:57 Last Updated: 2024-08-04T09:33:18.769Z Vendors: n/a Products: SoMachine Basic (all versions)EcoStruxure Machine Expert – Basic (all versions)Modicon M100 Logic Controller (all versions)Modicon M200 Logic Controller (all versions)Modicon M221 Logic Controller (all versions) Problem Types: CWE-74 Description: A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software (versions in security notification). The result of this vulnerability, DLL substitution, could allow the transfer
ftware (versions in security notification). The result of this vulnerability, DLL substitution, could allow the transference of malicious code to the controller. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-105-01
CVE ID: CVE-2020-7490 State: PUBLISHED Published: 2020-04-22T18:48:47 Last Updated: 2024-08-04T09:33:19.453Z Vendors: n/a Products: Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 SP9 and prior) Problem Types: CWE-426 Description: A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 SP9 and prior), which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-105-03