Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-24619 State: PUBLISHED Published: 2020-09-22T11:51:44 Last Updated: 2024-08-04T15:19:07.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: In mainwindow.cpp in Shotcut before 20.09.13, the upgrade check misuses TLS because of setPeerVerifyMode(QSslSocket::VerifyNone). A man-in-the-middle attacker could offer a spoofed download resource. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mltframework/shotcut/commit/f008adc039642307f6ee3378d378cdb842e52c1d - https://shotcut.org/blog/new-release-200913/
CVE ID: CVE-2020-24620 State: PUBLISHED Published: 2020-10-01T16:25:48 Last Updated: 2024-08-04T15:19:07.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unisys Stealth(core) before 4.0.134 stores passwords in a recoverable format. Therefore, a search of Enterprise Manager can potentially reveal credentials. Additional Analyst Notes: - CVE Program Container: References: - https://public.support.unisys.com/common/public/vulnerability/NVD_Home.aspx - https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=56
CVE ID: CVE-2020-24621 State: PUBLISHED Published: 2020-09-25T03:40:21 Last Updated: 2024-08-04T15:19:09.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution (RCE) vulnerability was discovered in the htmlformentry (aka HTML Form Entry) module before 3.11.0 for OpenMRS. By leveraging path traversal, a malicious Velocity Template Language file could be written to a directory. This file could then be accessed and executed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openmrs/openmrs-module-htmlformentry/pull/178 - https://issues.openmrs.org/browse/HTML-730 - https://github.com/openmrs/openmrs-module-uiframework/pull/59 -
pull/178 - https://issues.openmrs.org/browse/HTML-730 - https://github.com/openmrs/openmrs-module-uiframework/pull/59 - https://www.contrastsecurity.com/security-influencers - https://www.contrastsecurity.com/security-influencers/authenticated-remote-code-execution-openmrs
CVE ID: CVE-2020-24622 State: PUBLISHED Published: 2020-08-25T18:17:49 Last Updated: 2024-08-04T15:19:08.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user. Additional Analyst Notes: - CVE Program Container: References: - https://issues.sonatype.org/browse/NEXUS-25019 - https://support.sonatype.com/hc/en-us/articles/360053516793
CVE ID: CVE-2020-24623 State: PUBLISHED Published: 2020-09-18T16:11:44 Last Updated: 2024-08-04T15:19:09.112Z Vendors: n/a Products: HPE Universal API Framework for VMware ESXi (OVA) in HPE Universal API Framework for VMware Esxi v2.5.2 and HPE Universal API Framework for Microsoft Hyper-V (VHD) Problem Types: remote sql injection Description: A potential security vulnerability has been identified in Hewlett Packard Enterprise Universal API Framework. The vulnerability could be remotely exploited to allow SQL injection in HPE Universal API Framework for VMware Esxi v2.5.2 and HPE Universal API Framework for Microsoft Hyper-V (VHD). Additional Analyst Notes: - CVE Program Container: Reference
nd HPE Universal API Framework for Microsoft Hyper-V (VHD). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04024en_us - https://www.zerodayinitiative.com/advisories/ZDI-20-1208/
CVE ID: CVE-2020-24624 State: PUBLISHED Published: 2020-09-23T12:41:00 Last Updated: 2024-08-04T15:19:08.970Z Vendors: n/a Products: HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter Problem Types: Directory traversal information disclosure vulnerability Description: Unathenticated directory traversal in the DownloadServlet class execute() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04037en_us
CVE ID: CVE-2020-24625 State: PUBLISHED Published: 2020-09-23T12:41:13 Last Updated: 2024-08-04T15:19:08.371Z Vendors: n/a Products: HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter Problem Types: Directory traversal information disclosure vulnerability Description: Unathenticated directory traversal in the ReceiverServlet class doGet() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04037en_us
CVE ID: CVE-2020-24626 State: PUBLISHED Published: 2020-09-23T12:41:19 Last Updated: 2024-08-04T15:19:09.168Z Vendors: n/a Products: HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter Problem Types: Directory traversal remote code execution Description: Unathenticated directory traversal in the ReceiverServlet class doPost() method can lead to arbitrary remote code execution in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04037en_us
CVE ID: CVE-2020-24627 State: PUBLISHED Published: 2020-10-02T18:50:15 Last Updated: 2024-08-04T15:19:08.558Z Vendors: n/a Products: HPE KVM IP Console Switches Problem Types: remote stored xss Description: A remote stored xss vulnerability was discovered in HPE KVM IP Console Switches version(s): G2 4x1Ex32 Prior to 2.8.3. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04044en_us
CVE ID: CVE-2020-24628 State: PUBLISHED Published: 2020-10-02T18:50:37 Last Updated: 2024-08-04T15:19:07.868Z Vendors: n/a Products: HPE KVM IP Console Switches Problem Types: remote code injection Description: A remote code injection vulnerability was discovered in HPE KVM IP Console Switches version(s): G2 4x1Ex32 Prior to 2.8.3. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04044en_us
CVE ID: CVE-2020-24629 State: PUBLISHED Published: 2020-10-19T17:33:48 Last Updated: 2024-08-04T15:19:08.578Z Vendors: n/a Products: HPE Intelligent Management Center (iMC) Problem Types: remote urlaccesscontroller authentication bypass vulnerability Description: A remote urlaccesscontroller authentication bypass vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04036en_us
CVE ID: CVE-2020-24630 State: PUBLISHED Published: 2020-10-19T17:34:06 Last Updated: 2024-08-04T15:19:09.209Z Vendors: n/a Products: HPE Intelligent Management Center (iMC) Problem Types: remote operatoronlinelist_content privilege escalation vulnerability Description: A remote operatoronlinelist_content privilege escalation vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04036en_us
CVE ID: CVE-2020-24631 State: PUBLISHED Published: 2020-10-26T15:22:32 Last Updated: 2024-08-04T15:19:08.903Z Vendors: n/a Products: Aruba Airwave Software Problem Types: remote execution of arbitrary commands Description: A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04051en_us
CVE ID: CVE-2020-24632 State: PUBLISHED Published: 2020-10-26T15:23:01 Last Updated: 2024-08-04T15:19:08.766Z Vendors: n/a Products: Aruba Airwave Software Problem Types: remote execution of arbitrary commandss Description: A remote execution of arbitrary commandss vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04051en_us
CVE ID: CVE-2020-24633 State: PUBLISHED Published: 2020-12-11T01:26:14 Last Updated: 2024-08-04T15:19:09.283Z Vendors: n/a Products: Aruba 9000 Gateway, Aruba 7000 Series Mobility Controllers, Aruba 7200 Series Mobility Controllers Problem Types: remote buffer overflow Description: There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211) of access-points or controllers in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17,
obility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04072en_us
CVE ID: CVE-2020-24634 State: PUBLISHED Published: 2020-12-11T01:22:50 Last Updated: 2024-08-04T15:19:09.075Z Vendors: n/a Products: Aruba 9000 Gateway, Aruba 7000 Series Mobility Controllers, Aruba 7200 Series Mobility Controllers Problem Types: remote injection of arbitrary commands Description: An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI (Aruba Networks AP Management protocol) UDP port (8211) of access-pointsor controllers in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.
ies Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below ; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04072en_us
CVE ID: CVE-2020-24635 State: PUBLISHED Published: 2021-03-29T19:05:06 Last Updated: 2024-08-04T15:19:09.087Z Vendors: n/a Products: Aruba Instant Access Points Problem Types: remote execution of arbitrary commands Description: A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.5 and below; Aruba Instant 8.7.x: 8.7.0.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability. Additional Analyst Notes: - CVE Program Contain
ased patches for Aruba Instant that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf
CVE ID: CVE-2020-24636 State: PUBLISHED Published: 2021-03-29T19:08:15 Last Updated: 2024-08-04T15:19:09.295Z Vendors: n/a Products: Aruba Instant Access Points Problem Types: remote execution of arbitrary commands Description: A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.5 and below; Aruba Instant 8.7.x: 8.7.0.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability. Additional Analyst Notes: - CVE Program Contain
CVE ID: CVE-2020-24637 State: PUBLISHED Published: 2020-12-11T01:33:22 Last Updated: 2024-08-04T15:19:09.053Z Vendors: n/a Products: Aruba 9000 Gateway, Aruba 7000 Series Mobility Controllers, Aruba 7200 Series Mobility Controllers Problem Types: remote buffer overflow Description: Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot. Successful exploitation of this vulnerability this could lead to remote compromise of system integrity by allowing an attacker to load an untrusted or modified kernel in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6
Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below ; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04072en_us
CVE ID: CVE-2020-24638 State: PUBLISHED Published: 2021-01-15T18:29:17 Last Updated: 2024-08-04T15:19:08.901Z Vendors: n/a Products: Aruba AirWave Glass Software Problem Types: Multiple Authenticated Command Injections via glassadmin cli Description: Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli. These allow for a user with glassadmin privileges to execute arbitrary code as root on the underlying host operating system. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-001.txt
CVE ID: CVE-2020-24639 State: PUBLISHED Published: 2021-01-15T18:33:41 Last Updated: 2024-08-04T15:19:09.284Z Vendors: n/a Products: Aruba AirWave Glass Software Problem Types: Unauthenticated Arbitrary Code Execution in Web Administrative Interface Description: There is a vulnerability caused by unsafe Java deserialization that allows for arbitrary command execution in a containerized environment within Airwave Glass before 1.3.3. Successful exploitation can lead to complete compromise of the underlying host operating system. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-001.txt
CVE ID: CVE-2020-24640 State: PUBLISHED Published: 2021-01-15T18:48:35 Last Updated: 2024-08-04T15:19:08.922Z Vendors: n/a Products: Aruba AirWave Glass Software Problem Types: Unauthenticated Arbitrary Command Execution in Web Administrative Interface Description: There is a vulnerability caused by insufficient input validation that allows for arbitrary command execution in a containerized environment within Airwave Glass before 1.3.3. Successful exploitation can lead to complete compromise of the underlying host operating system. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-001.txt
CVE ID: CVE-2020-24641 State: PUBLISHED Published: 2021-01-15T18:26:04 Last Updated: 2024-08-04T15:19:08.639Z Vendors: n/a Products: Aruba AirWave Glass Software Problem Types: Remote Authentication Bypass via Unauthenticated Server-Side Request Forgery Description: In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated endpoint that if successfully exploited can result in disclosure of sensitive information. This can be used to perform an authentication bypass and ultimately gain administrative access on the web administrative interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.co
administrative interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-001.txt
CVE ID: CVE-2020-24642 State: REJECTED Published: N/A Last Updated: 2023-01-06T15:21:08.290Z Description: No description available.
CVE ID: CVE-2020-24643 State: REJECTED Published: N/A Last Updated: 2023-01-06T15:21:11.262Z Description: No description available.
CVE ID: CVE-2020-24644 State: REJECTED Published: N/A Last Updated: 2023-01-06T15:21:14.018Z Description: No description available.
CVE ID: CVE-2020-24645 State: REJECTED Published: N/A Last Updated: 2023-01-06T15:21:16.732Z Description: No description available.
CVE ID: CVE-2020-24646 State: PUBLISHED Published: 2020-10-19T17:34:23 Last Updated: 2024-08-04T15:19:08.955Z Vendors: n/a Products: HPE Intelligent Management Center (iMC) Problem Types: tftpserver stack-based buffer overflow remote code execution Description: A tftpserver stack-based buffer overflow remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04036en_us
CVE ID: CVE-2020-24647 State: PUBLISHED Published: 2020-10-19T17:34:37 Last Updated: 2024-08-04T15:19:08.987Z Vendors: n/a Products: HPE Intelligent Management Center (iMC) Problem Types: remote accessmgrservlet classname input validation code execution vulnerability Description: A remote accessmgrservlet classname input validation code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04036en_us
CVE ID: CVE-2020-24648 State: PUBLISHED Published: 2020-10-19T17:36:07 Last Updated: 2024-08-04T15:19:09.104Z Vendors: n/a Products: HPE Intelligent Management Center (iMC) Problem Types: accessmgrservlet classname deserialization of untrusted data remote code execution Description: A accessmgrservlet classname deserialization of untrusted data remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04036en_us
CVE ID: CVE-2020-24649 State: PUBLISHED Published: 2020-10-19T17:36:13 Last Updated: 2024-08-04T15:19:09.162Z Vendors: n/a Products: HPE Intelligent Management Center (iMC) Problem Types: remote bytemessageresource transformentity" input validation code execution vulnerability Description: A remote bytemessageresource transformentity" input validation code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04036en_us
CVE ID: CVE-2020-24650 State: PUBLISHED Published: 2020-10-19T17:36:19 Last Updated: 2024-08-04T15:19:09.263Z Vendors: n/a Products: HPE Intelligent Management Center (iMC) Problem Types: legend expression language injection remote code execution Description: A legend expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04036en_us
CVE ID: CVE-2020-24651 State: PUBLISHED Published: 2020-10-19T17:36:26 Last Updated: 2024-08-04T15:19:09.079Z Vendors: n/a Products: HPE Intelligent Management Center (iMC) Problem Types: syslogtempletselectwin expression language injection remote code execution Description: A syslogtempletselectwin expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04036en_us
CVE ID: CVE-2020-24652 State: PUBLISHED Published: 2020-10-19T17:36:33 Last Updated: 2024-08-04T15:19:08.704Z Vendors: n/a Products: HPE Intelligent Management Center (iMC) Problem Types: addvsiinterfaceinfo expression language injection remote code execution Description: A addvsiinterfaceinfo expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04036en_us
CVE ID: CVE-2020-24653 State: PUBLISHED Published: 2020-08-26T04:04:26 Last Updated: 2024-08-04T15:19:09.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: secure-store in Expo through 2.16.1 on iOS provides the insecure kSecAttrAccessibleAlwaysThisDeviceOnly policy when WHEN_UNLOCKED_THIS_DEVICE_ONLY is used. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/expo/expo/pull/9264
CVE ID: CVE-2020-24654 State: PUBLISHED Published: 2020-09-02T16:22:10 Last Updated: 2024-08-04T15:19:08.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: In KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the extraction directory, as demonstrated by a write operation to a user's home directory. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00001.html - https://github.com/KDE/ark/commit/8bf8c5ef07b0ac5e914d752681e470dea403a5bd - https://bugzilla.suse.com/show_bug.cgi?id=1175857 - https://kde.org/info/security/advisory-20200827-1.txt - https://www.debian.org/s
illa.suse.com/show_bug.cgi?id=1175857 - https://kde.org/info/security/advisory-20200827-1.txt - https://www.debian.org/security/2020/dsa-4759 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LXMMXNJDYOCJRZTESIUGHG6CS4RJKECX/ - https://usn.ubuntu.com/4482-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YJOZ6YRNPZX5MJGVBMOCOA7N6Z4EU2OK/ - https://security.gentoo.org/glsa/202010-06 - https://security.gentoo.org/glsa/202101-06 - https://lists.debian.org/debian-lts-announce/2022/05/msg00026.html
CVE ID: CVE-2020-24655 State: PUBLISHED Published: 2020-09-10T01:32:44 Last Updated: 2024-08-04T15:19:08.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: A race condition in the Twilio Authy 2-Factor Authentication application before 24.3.7 for Android allows a user to potentially approve/deny an access request prior to unlocking the application with a PIN on older Android devices (effectively bypassing the PIN requirement). Additional Analyst Notes: - CVE Program Container: References: - https://www.twilio.com/changelog
CVE ID: CVE-2020-24656 State: PUBLISHED Published: 2020-08-26T04:27:53 Last Updated: 2024-08-04T15:19:09.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maltego before 4.2.12 allows XXE attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.maltego.com/changelog/ - https://www.hackersforchange.com/post/maltego-cve-2020-24656-analysis