Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-19618 State: PUBLISHED Published: 2021-04-01T19:01:44 Last Updated: 2024-08-04T14:15:27.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post content field to /post/editing. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/langhsu/mblog/issues/27
CVE ID: CVE-2020-19619 State: PUBLISHED Published: 2021-04-01T19:03:08 Last Updated: 2024-08-04T14:15:27.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the signature field to /settings/profile. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/langhsu/mblog/issues/27
CVE ID: CVE-2020-19625 State: PUBLISHED Published: 2021-03-26T14:31:21 Last Updated: 2024-08-04T14:15:27.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Code Execution Vulnerability in tests/support/stores/test_grid_filter.php in oria gridx 1.3, allows remote attackers to execute arbitrary code, via crafted value to the $query parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/oria/gridx/issues/433 - http://mayoterry.com/file/cve/Remote_Code_Execution_Vulnerability_in_gridx_latest_version.pdf
CVE ID: CVE-2020-19626 State: PUBLISHED Published: 2021-03-26T14:31:18 Last Updated: 2024-08-04T14:15:28.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in craftcms 3.1.31, allows remote attackers to inject arbitrary web script or HTML, via /admin/settings/sites/new. Additional Analyst Notes: - CVE Program Container: References: - http://mayoterry.com/file/cve/XSS_vuluerability_in_Craftcms_3.1.31.pdf - https://github.com/craftcms/cms/commit/76a2168b6a5e30144f5c06da4ff264f4eca577ff
CVE ID: CVE-2020-19639 State: PUBLISHED Published: 2021-03-30T02:24:01 Last Updated: 2024-08-04T14:15:27.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B, via all fields to WebUI. Additional Analyst Notes: - CVE Program Container: References: - https://xn--sb-lka.org/cve/INSMA.txt
CVE ID: CVE-2020-19640 State: PUBLISHED Published: 2021-03-30T02:25:16 Last Updated: 2024-08-04T14:15:27.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. An unauthenticated attacker can reboot the device causing a Denial of Service, via a hidden reboot command to '/media/?action=cmd'. Additional Analyst Notes: - CVE Program Container: References: - https://xn--sb-lka.org/cve/INSMA.txt
CVE ID: CVE-2020-19641 State: PUBLISHED Published: 2021-03-30T02:27:33 Last Updated: 2024-08-04T14:15:28.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. Authenticated attackers with the "Operator" Privilege can gain admin privileges via a crafted request to '/goform/formUserMng'. Additional Analyst Notes: - CVE Program Container: References: - https://xn--sb-lka.org/cve/INSMA.txt
CVE ID: CVE-2020-19642 State: PUBLISHED Published: 2021-03-30T02:31:42 Last Updated: 2024-08-04T14:15:27.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted GoAhead ASP-file on the SD card. Additional Analyst Notes: - CVE Program Container: References: - https://xn--sb-lka.org/cve/INSMA.txt
CVE ID: CVE-2020-19643 State: PUBLISHED Published: 2021-03-30T02:33:34 Last Updated: 2024-08-04T14:15:27.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B via all fields in the FTP settings page to the "goform/formSetFtpCfg" settings page. Additional Analyst Notes: - CVE Program Container: References: - https://xn--sb-lka.org/cve/INSMA.txt
CVE ID: CVE-2020-19660 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T16:49:51.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) pandao editor.md 1.5.0 allows attackers to execute arbitrary code via crafted linked url values. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pandao/editor.md/issues/697 - https://github.com/pandao/editor.md
CVE ID: CVE-2020-19664 State: PUBLISHED Published: 2020-12-31T01:23:10 Last Updated: 2024-08-04T14:15:27.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/minghangshen/bug_poc - https://nosec.org/home/detail/4631.html - https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-remote-code-injection/execution-vulnerability-%28cve-2020-19664%29/
CVE ID: CVE-2020-19667 State: PUBLISHED Published: 2020-11-20T00:00:00 Last Updated: 2024-08-04T14:15:27.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1895 - https://lists.debian.org/debian-lts-announce/2021/01/msg00010.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-19668 State: PUBLISHED Published: 2020-11-20T15:39:12 Last Updated: 2024-08-04T14:15:28.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unverified indexs into the array lead to out of bound access in the gif_out_code function in fromgif.c in libsixel 1.8.6. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saitoha/libsixel/issues/136
CVE ID: CVE-2020-19669 State: PUBLISHED Published: 2021-08-18T18:23:58 Last Updated: 2024-08-04T14:15:28.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin&c=Admin&a=admin_add&lang=cn. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eyoucms/eyoucms/issues/4
CVE ID: CVE-2020-19670 State: PUBLISHED Published: 2020-09-30T17:20:50 Last Updated: 2024-08-04T14:15:28.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be bypassed, causing administrators to reset any passwords. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bluecity/CMS/blob/master/niushop%20v1.11-passwd/Niushop%20V1.11.md
CVE ID: CVE-2020-19672 State: PUBLISHED Published: 2020-09-30T17:34:15 Last Updated: 2024-08-04T14:15:27.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter upload, bypass the getimagesize function, upload php file, getshell. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bluecity/CMS/blob/master/niushop%20v1.1-upload/Niushop%20Multi-business%20V1.11-en.md
CVE ID: CVE-2020-19676 State: PUBLISHED Published: 2020-09-30T17:52:39 Last Updated: 2024-08-04T14:15:28.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nacos 1.1.4 is affected by: Incorrect Access Control. An environment can be set up locally to get the service details interface. Then other Nacos service names can be accessed through the service list interface. Service details can then be accessed when not logged in. (detail:https://github.com/alibaba/nacos/issues/2284) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/alibaba/nacos/issues/2284
CVE ID: CVE-2020-19678 State: PUBLISHED Published: 2023-04-06T00:00:00.000Z Last Updated: 2025-02-12T16:02:27.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability found in Pfsense v.2.1.3 and Pfsense Suricata v.1.4.6 pkg v.1.0.1 allows a remote attacker to obtain sensitive information via the file parameter to suricata/suricata_logs_browser.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.2ngon.com/2015/01/lfi-vulnerability-suricata-146-pkg-v101.html - https://github.com/pfsense/pfsense-packages/commit/59ed3438729fd56452f58a0f79f0c288db982ac3 - https://pastebin.com/8dj59053
CVE ID: CVE-2020-19682 State: PUBLISHED Published: 2021-12-09T17:08:06 Last Updated: 2024-08-04T14:15:27.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Request Forgery (CSRF) vulnerability exits in ZZZCMS V1.7.1 via the save_user funciton in save.php. Additional Analyst Notes: - CVE Program Container: References: - https://zhhhy.github.io/2019/06/28/zzzcms/
CVE ID: CVE-2020-19683 State: PUBLISHED Published: 2021-12-09T17:18:58 Last Updated: 2024-08-04T14:15:28.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting (XSS) exists in ZZZCMS V1.7.1 via an editfile action in save.php. Additional Analyst Notes: - CVE Program Container: References: - https://zhhhy.github.io/2019/06/28/zzzcms/
CVE ID: CVE-2020-19692 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-18T17:00:26.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerabilty found in Nginx NJS v.0feca92 allows a remote attacker to execute arbitrary code via the njs_module_read in the njs_module.c file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nginx/njs/issues/187
CVE ID: CVE-2020-19693 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-18T17:01:01.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Espruino Espruino 6ea4c0a allows an attacker to execute arbitrrary code via oldFunc parameter of the jswrap_object.c:jswrap_function_replacewith endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/espruino/Espruino/issues/1684
CVE ID: CVE-2020-19695 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-14T19:15:32.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njs_object_property parameter of the njs/njs_vm.c function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nginx/njs/issues/188
CVE ID: CVE-2020-19697 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-14T19:14:27.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script in the <iframe>src parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pandao/editor.md/issues/701
CVE ID: CVE-2020-19698 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-14T18:33:58.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the editor parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pandao/editor.md/issues/700
CVE ID: CVE-2020-19699 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-14T18:26:27.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in KOHGYLW Kiftd v.1.0.18 allows a remote attacker to execute arbitrary code via the <ifram> tag in the upload file page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/KOHGYLW/kiftd/issues/32#issuecomment-509868583 - https://kohgylw.gitee.io/
CVE ID: CVE-2020-19703 State: PUBLISHED Published: 2021-08-26T02:22:53 Last Updated: 2024-08-04T14:15:28.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the referer parameter of Dzzoffice 2.02 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zyx0814/dzzoffice/issues/107
CVE ID: CVE-2020-19704 State: PUBLISHED Published: 2021-08-26T02:22:54 Last Updated: 2024-08-04T14:15:28.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability via ResourceController.java in spring-boot-admin as of 20190710 allows attackers to execute arbitrary web scripts or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sail-y/spring-boot-admin/issues/7
CVE ID: CVE-2020-19705 State: PUBLISHED Published: 2021-08-26T02:23:33 Last Updated: 2024-08-04T14:15:28.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: thinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jorycn/thinkphp-zcms/issues/2
CVE ID: CVE-2020-19709 State: PUBLISHED Published: 2021-08-26T02:22:56 Last Updated: 2024-08-04T14:15:28.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient filtering of the tag parameters in feehicms 0.1.3 allows attackers to execute arbitrary web or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/liufee/feehicms/issues/2
CVE ID: CVE-2020-19715 State: REJECTED Published: 2021-07-13T21:33:05 Last Updated: 2021-08-10T17:07:58 Description: No description available.
CVE ID: CVE-2020-19716 State: PUBLISHED Published: 2021-07-13T00:00:00 Last Updated: 2024-08-04T14:15:28.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a denial of service (DOS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/980 - https://lists.debian.org/debian-lts-announce/2022/11/msg00013.html
CVE ID: CVE-2020-19717 State: PUBLISHED Published: 2021-07-13T21:33:07 Last Updated: 2024-08-04T14:15:28.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unhandled memory allocation failure in Core/Ap48bdlAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/416
CVE ID: CVE-2020-19718 State: PUBLISHED Published: 2021-07-13T21:33:08 Last Updated: 2024-08-04T14:15:28.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/417
CVE ID: CVE-2020-19719 State: PUBLISHED Published: 2021-07-13T21:33:09 Last Updated: 2024-08-04T14:15:28.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in Ap4ElstAtom.cpp of Bento 1.5.1-628 leads to a denial of service (DOS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/414
CVE ID: CVE-2020-19720 State: PUBLISHED Published: 2021-07-13T21:33:10 Last Updated: 2024-08-04T14:15:28.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unhandled memory allocation failure in Core/AP4IkmsAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/413
CVE ID: CVE-2020-19721 State: PUBLISHED Published: 2021-07-13T21:33:11 Last Updated: 2024-08-04T14:15:28.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap buffer overflow vulnerability in Ap4TrunAtom.cpp of Bento 1.5.1-628 may lead to an out-of-bounds write while running mp42aac, leading to system crashes and a denial of service (DOS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/415 - https://cwe.mitre.org/data/definitions/122.html
CVE ID: CVE-2020-19722 State: PUBLISHED Published: 2021-07-13T21:33:12 Last Updated: 2024-08-04T14:15:28.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dereference, leading to a denial of service (DOS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/418
CVE ID: CVE-2020-19724 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-04T16:26:45.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory consumption issue in get_data function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a denial of service via crafted command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=25362 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=805f38bc551de820bcd7b31d3c5731ae27cf853a
CVE ID: CVE-2020-19725 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-04T16:07:10.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a use-after-free vulnerability in file pdd_simplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Z3Prover/z3/issues/3363
CVE ID: CVE-2020-19726 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-04T16:24:21.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=26240 - https://sourceware.org/bugzilla/show_bug.cgi?id=26241
CVE ID: CVE-2020-19750 State: PUBLISHED Published: 2021-09-07T19:42:05 Last Updated: 2024-08-04T14:15:28.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in gpac 0.8.0. The strdup function in box_code_base.c has a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1262 - https://cwe.mitre.org/data/definitions/126.html
CVE ID: CVE-2020-19751 State: PUBLISHED Published: 2021-09-07T19:42:13 Last Updated: 2024-08-04T14:15:28.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in gpac 0.8.0. The gf_odf_del_ipmp_tool function in odf_code.c has a heap-based buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1272 - https://cwe.mitre.org/data/definitions/126.html
CVE ID: CVE-2020-19752 State: PUBLISHED Published: 2021-09-07T19:42:08 Last Updated: 2024-08-04T14:15:28.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: The find_color_or_error function in gifsicle 1.92 contains a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kohler/gifsicle/issues/140 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7H3ASG2BD4D4SAUUI6TOLUZYP2QYYHXY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DH7X7PGUN5BYXKW533DAX4KAEM4HPMJC/
CVE ID: CVE-2020-19762 State: PUBLISHED Published: 2021-02-22T14:43:13 Last Updated: 2024-08-04T14:15:28.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Automated Logic Corporation (ALC) WebCTRL System 6.5 and prior allows remote attackers to execute any JavaScript code via a XSS payload for the first parameter in a GET request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ismailerkek/CVEs/blob/main/CVE-2020-19762-RESERVED.md
CVE ID: CVE-2020-19765 State: PUBLISHED Published: 2021-09-07T21:59:22 Last Updated: 2024-08-04T14:15:28.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the noReentrance() modifier of the Ethereum-based contract Accounting 1.0 allows attackers to carry out a reentrancy attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OSUPlayer/CVEs/blob/master/Reentrancy/2019-07-09-01.md
CVE ID: CVE-2020-19766 State: PUBLISHED Published: 2021-09-07T21:59:23 Last Updated: 2024-08-04T14:15:28.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: The time check operation of PepeAuctionSale 1.0 can be rendered ineffective by assigning a large number to the _duration variable, compromising access control to the application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OSUPlayer/CVEs/blob/master/Reentrancy/2019-07-09-02.md
CVE ID: CVE-2020-19767 State: PUBLISHED Published: 2021-09-07T21:59:27 Last Updated: 2024-08-04T14:15:28.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of target address verification in the destroycontract() function of 0xRACER 1.0 allows attackers to steal tokens from victim users via a crafted script. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OSUPlayer/CVEs/blob/master/Suicidal/2019-07-09-03.md
CVE ID: CVE-2020-19768 State: PUBLISHED Published: 2021-09-07T21:59:24 Last Updated: 2024-08-04T14:15:28.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of target address verification in the selfdestructs() function of ICOVO 1.0 allows attackers to steal tokens from victim users via a crafted script. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OSUPlayer/CVEs/blob/master/Suicidal/2019-07-09-02.md
CVE ID: CVE-2020-19769 State: PUBLISHED Published: 2021-09-07T21:59:25 Last Updated: 2024-08-04T14:15:28.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of target address verification in the BurnMe() function of Rob The Bank 1.0 allows attackers to steal tokens from victim users via a crafted script. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OSUPlayer/CVEs/blob/master/Suicidal/2019-07-09-01.md
CVE ID: CVE-2020-19770 State: PUBLISHED Published: 2021-12-21T17:27:38 Last Updated: 2024-08-04T14:15:28.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the system bulletin component of WUZHI CMS v4.1.0 allows attackers to steal the admin's cookie. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/180