Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4NKWG2EXAQQB6LMLATKZ7KLSRGCSHVAN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVFDBVM6E3JF3O7RYLRPRCH3RDRHJJY/ - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00068.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00071.html - https://www.debian.org/security/2020/dsa-4757 - https://www.oracle.com/security-alerts/cpuoct2020.html - https://security.netapp.com/advisory/ntap-20200814-0005/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00081.html - https://www.oracle.com/security-alerts/cpujan2021.h
ists.opensuse.org/opensuse-security-announce/2020-10/msg00081.html - https://www.oracle.com/security-alerts/cpujan2021.html - http://packetstormsecurity.com/files/160392/Apache-2.4.43-mod_http2-Memory-Corruption.html - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r09bb998baee74a2c316446bd1a41ae7f8d7049d09d9ff991471e8775%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs
.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdf3e5d0a5f5c3d90d6013bccc6c4d5af59cf1f8c8dea5d9a283d13ce%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r97d0faab6ed8fd0d439234b16d05d77b22a07b0c4817e7b3cca419cc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/ra4da876037477c06f2677d7a1e10b5a8613000fca99c813958070fe9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r3c5c3104813c1c5
d7a1e10b5a8613000fca99c813958070fe9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e485ce5a01c9dc3d4d785a7d28aa7400ead1e81884034ff1f03cfee%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0b6541c5fb2f8fb383861333400add7def625bc993300300de0b4f8d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfed9fea918e090383da33e393eb6c2755fccf05032bd7d6eb4737c9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2020-9491 State: PUBLISHED Published: 2020-10-01T19:57:34 Last Updated: 2024-08-04T10:26:16.409Z Vendors: n/a Products: Apache NiFi Problem Types: Use of weak TLS protocols Description: In Apache NiFi 1.2.0 to 1.11.4, the NiFi UI and API were protected by mandating TLS v1.2, as well as listening connections established by processors like ListenHTTP, HandleHttpRequest, etc. However intracluster communication such as cluster request replication, Site-to-Site, and load balanced queues continued to support TLS v1.0 or v1.1. Additional Analyst Notes: - CVE Program Container: References: - https://nifi.apache.org/security#CVE-2020-9491 - https://lists.apache.org/thread.html/re48582efe2
ntainer: References: - https://nifi.apache.org/security#CVE-2020-9491 - https://lists.apache.org/thread.html/re48582efe2ac973f8cff55c8b346825cb491c71935e15ab2d61ef3bf%40%3Ccommits.nifi.apache.org%3E - https://lists.apache.org/thread.html/r2d9c21f9ec35d66f2bb42f8abe876dabd786166b6284e9a33582c718%40%3Ccommits.nifi.apache.org%3E
CVE ID: CVE-2020-9492 State: PUBLISHED Published: 2021-01-26T12:55:29 Last Updated: 2024-08-04T10:26:16.405Z Vendors: n/a Products: Apache Hadoop Problem Types: Privilege Escalation Description: In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r513758942356ccd0d14538ba18a09903fc72716d74be1cb727ea91ff%40%3Cgeneral.hadoop.apache.org%3E - https://lists.apache.org/thread.html/rca4516b00b55b347905df45e5d0432186248223f30497db87aba8710%40%3Cannounce.apache.org%3E - http
ists.apache.org/thread.html/rca4516b00b55b347905df45e5d0432186248223f30497db87aba8710%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/r79323adac584edab99fd5e4b52a013844b784a5d4b600da0662b33d6%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/r941e9be04efe0f455d20aeac88516c0848decd7e7b1d93d5687060f4%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/rc0057ebf32b646ab47f7f5744a8948332e015c39044cbb9d87ea76cd%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/r0a534f1cde7555f7208e9f9b791c1ab396d215eaaef283b3a9153429%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/r6341f2a468ced8872a71997aa1
15eaaef283b3a9153429%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/r6341f2a468ced8872a71997aa1786ce036242413484f0fa68dc9ca02%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/r9328eb49305e4cacc80e182bfd8a2efd8e640d940e24f5bfd7d5cb26%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/r4a57de5215494c35c8304cf114be75d42df7abc6c0c54bf163c3e370%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/r6c2fa7949738e9d39606f1d7cd890c93a2633e3357c9aeaf886ea9a6%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/r49c9ab444ab1107c6a8be8a0d66602dec32a16d96c2631fec8d309fb%40%3Cissues.solr.apache.org%3E - http
s.apache.org/thread.html/r49c9ab444ab1107c6a8be8a0d66602dec32a16d96c2631fec8d309fb%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/re4129c6b9e0410848bbd3761187ce9c19bc1cd491037b253007df99e%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/r79201a209df9a4e7f761e537434131b4e39eabec4369a7d668904df4%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/rb12afaa421d483863c4175e42e5dbd0673917a3cff73f3fca4f8275f%40%3Cissues.solr.apache.org%3E - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.netapp.com/advisory/ntap-20210304-0001/
CVE ID: CVE-2020-9493 State: PUBLISHED Published: 2021-06-16T07:30:11 Last Updated: 2024-08-04T10:34:37.927Z Vendors: Apache Software Foundation Products: Apache Chainsaw Problem Types: CWE-502 Description: A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2021/06/16/1 - http://www.openwall.com/lists/oss-security/2021/06/16/1 - https://lists.apache.org/thread.html/r50d389c613ba6062a26aa57e163c09bfee4ff2d95d67331d75265b83%40%3Cannounce.apache.org%3E - http://www.openwall.com/lists/oss-security/2022/01/18/5
CVE ID: CVE-2020-9494 State: PUBLISHED Published: 2020-06-24T15:25:57 Last Updated: 2024-08-04T10:34:37.925Z Vendors: Apache Software Foundation Products: Apache Traffic Server Problem Types: Information Disclosure Description: Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to certain types of HTTP/2 HEADERS frames that can cause the server to allocate a large amount of memory and spin the thread. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/rf7f86917f42fdaf904d99560cba0c016e03baea6244c47efeb60ecbe%40%3Cdev.trafficserver.apache.org%3E - https://www.debian.org/security/2020/dsa-4710 - http://www.
baea6244c47efeb60ecbe%40%3Cdev.trafficserver.apache.org%3E - https://www.debian.org/security/2020/dsa-4710 - http://www.openwall.com/lists/oss-security/2021/03/01/2
CVE ID: CVE-2020-9495 State: PUBLISHED Published: 2020-06-19T18:59:20 Last Updated: 2024-08-04T10:34:38.175Z Vendors: n/a Products: Apache Archiva Problem Types: Information Disclosure Description: Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection. A attacker is able to retrieve user attribute data from the connected LDAP server by providing special values to the login form. With certain characters it is possible to modify the LDAP filter used to query the LDAP users. By measuring the response time for the login request, arbitrary attribute data can be retrieved from LDAP user objects. Additional Analyst Notes: - CVE Program Container: References: - http://archiva.apa
be retrieved from LDAP user objects. Additional Analyst Notes: - CVE Program Container: References: - http://archiva.apache.org/security.html#CVE-2020-9495 - https://lists.apache.org/thread.html/r7ae580f700ade57b00641a70a5c639a3ba576893bbf7f9fd93bc491d%40%3Cusers.maven.apache.org%3E - https://lists.apache.org/thread.html/r576eaabe3f772c045ec832a0200252494a2ce3f188f59450dd8f9b6d%40%3Cdev.archiva.apache.org%3E - https://lists.apache.org/thread.html/r576eaabe3f772c045ec832a0200252494a2ce3f188f59450dd8f9b6d%40%3Cusers.archiva.apache.org%3E - http://www.openwall.com/lists/oss-security/2020/06/19/1 - https://lists.apache.org/thread.html/r576eaabe3f772c045ec832a0200252494a2ce3f188f59450dd8f9b6d%40%
curity/2020/06/19/1 - https://lists.apache.org/thread.html/r576eaabe3f772c045ec832a0200252494a2ce3f188f59450dd8f9b6d%40%3Cannounce.apache.org%3E
CVE ID: CVE-2020-9496 State: PUBLISHED Published: 2020-07-15T15:39:31 Last Updated: 2024-08-04T10:34:37.912Z Vendors: n/a Products: Apache OFBiz Problem Types: XSS Vulnerability Description: XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03 Additional Analyst Notes: - CVE Program Container: References: - https://s.apache.org/l0994 - https://lists.apache.org/thread.html/raf6020f765f12711e817ce13df63ecd7d677eebea8001e0473ee7c84%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/rde93e1c91620335b72b798f78ab4459d3f7b06f96031d8ce86a18825%40%3Cnotifications.ofbiz.apache.org%3E - http://packetstormsecurity.com/files/158
b798f78ab4459d3f7b06f96031d8ce86a18825%40%3Cnotifications.ofbiz.apache.org%3E - http://packetstormsecurity.com/files/158887/Apache-OFBiz-XML-RPC-Java-Deserialization.html - https://lists.apache.org/thread.html/r8fb319dc1f196563955fbf5e9cf454fb9d6c27c2058066445af7f8cb%40%3Cuser.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/ra43cfe80226c3b23cd775f3543da10c035ad9c9943cfe8a680490730%40%3Cuser.ofbiz.apache.org%3E - http://packetstormsecurity.com/files/161769/Apache-OFBiz-XML-RPC-Java-Deserialization.html - https://lists.apache.org/thread.html/r0a0a701610b3bcdf14634047313adab3f1628bb9aa55cf29cd262ef5%40%3Ccommits.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/r108a964764b8
47313adab3f1628bb9aa55cf29cd262ef5%40%3Ccommits.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/r108a964764b8bd21ebd32ccd4f51c183ee80a251c105b849154a8e9d%40%3Ccommits.ofbiz.apache.org%3E - http://packetstormsecurity.com/files/163730/Apache-OfBiz-17.12.01-Remote-Command-Execution.html
CVE ID: CVE-2020-9497 State: PUBLISHED Published: 2020-07-02T12:30:33 Last Updated: 2024-08-04T10:34:38.227Z Vendors: n/a Products: Apache Guacamole Problem Types: Information Disclosure Description: Apache Guacamole 1.1.0 and older do not properly validate datareceived from RDP servers via static virtual channels. If a userconnects to a malicious or compromised RDP server, specially-craftedPDUs could result in disclosure of information within the memory ofthe guacd process handling the connection. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r65f75d3d65d1af68141f42071ebb27dda24af3e45570e593c1dbd81f%40%3Cannounce.guacamole.apache.org%3
ts.apache.org/thread.html/r65f75d3d65d1af68141f42071ebb27dda24af3e45570e593c1dbd81f%40%3Cannounce.guacamole.apache.org%3E - https://lists.apache.org/thread.html/r3f071de70ea1facd3601e0fa894e6cadc960627ee7199437b5a56f7f%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/r066543f0565e97b27c0dfe27e93e8a387b99e1e35764000224ed96e7%40%3Cuser.guacamole.apache.org%3E - https://lists.apache.org/thread.html/r181b1d5b1acb31cfa69f41b2c86ed3a2cb0b5bc09c2cbd31e9e7c847%40%3Cuser.guacamole.apache.org%3E - https://research.checkpoint.com/2020/apache-guacamole-rce/ - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44525 - https://lists.debian.org/debian-lts-announce/2020/11/msg
kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44525 - https://lists.debian.org/debian-lts-announce/2020/11/msg00010.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TVV5K2X4EXSAVUUL7IJ3MUJ3ADWMVSBM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNS7UHBOFV6JHWH5XOEZTE3BREGRSSQ3/ - https://lists.apache.org/thread.html/r90890afea72a9571d666820b2fe5942a0a5f86be406fa31da3dd0922%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7%40%3Cannounce.apache.org%3E
CVE ID: CVE-2020-9498 State: PUBLISHED Published: 2020-07-02T12:32:44 Last Updated: 2024-08-04T10:34:39.028Z Vendors: n/a Products: Apache Guacamole Problem Types: Expired Pointer Dereference Description: Apache Guacamole 1.1.0 and older may mishandle pointers involved inprocessing data received via RDP static virtual channels. If a userconnects to a malicious or compromised RDP server, a series ofspecially-crafted PDUs could result in memory corruption, possiblyallowing arbitrary code to be executed with the privileges of therunning guacd process. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/rff824b38ebd2fddc726b816f0e509696b83b9f7897
- CVE Program Container: References: - https://lists.apache.org/thread.html/rff824b38ebd2fddc726b816f0e509696b83b9f78979d0cd021ca623b%40%3Cannounce.guacamole.apache.org%3E - https://lists.apache.org/thread.html/r26fb170edebff842c74aacdb1333c1338f0e19e5ec7854d72e4680fc%40%3Cannounce.apache.org%3E - https://research.checkpoint.com/2020/apache-guacamole-rce/ - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44525 - https://lists.debian.org/debian-lts-announce/2020/11/msg00010.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TVV5K2X4EXSAVUUL7IJ3MUJ3ADWMVSBM/ - https://lists.fedoraproject.org/archives/list/package-announce%40
roject.org/message/TVV5K2X4EXSAVUUL7IJ3MUJ3ADWMVSBM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNS7UHBOFV6JHWH5XOEZTE3BREGRSSQ3/ - https://lists.apache.org/thread.html/r90890afea72a9571d666820b2fe5942a0a5f86be406fa31da3dd0922%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7%40%3Cannounce.apache.org%3E
CVE ID: CVE-2020-9499 State: PUBLISHED Published: 2020-04-09T13:19:23 Last Updated: 2024-08-04T10:34:38.218Z Vendors: n/a Products: IPC-HX2XXX Series,IPC-HXXX5X4X Series,IPC-HX5842H,IPC-HX7842H,NVR 5x Series,NVR 4x Series,SD6AL Series,SD5A Series,SD1A Series,PTZ1A Series,SD50/52C Series Problem Types: Denial of Service Description: Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific DDNS test command, which may cause the device to go down. Additional Analyst Notes: - CVE Program Container: References: - https://www.dahuasecurity.com/support/cybersecurity/details/727
CVE ID: CVE-2020-9500 State: PUBLISHED Published: 2020-04-09T13:21:01 Last Updated: 2024-08-04T10:34:37.927Z Vendors: n/a Products: IPC-HX2XXX Series,IPC-HXXX5X4X Series,IPC-HX5842H,IPC-HX7842H,NVR 5x Series,NVR 4x Series,SD6AL Series,SD5A Series,SD1A Series,PTZ1A Series,SD50/52C Series Problem Types: Denial of Service Description: Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account, the attacker sends a specific log query command, which may cause the device to go down. Additional Analyst Notes: - CVE Program Container: References: - https://www.dahuasecurity.com/support/cybersecurity/details/727
CVE ID: CVE-2020-9501 State: PUBLISHED Published: 2020-05-13T15:17:20 Last Updated: 2024-08-04T10:34:39.769Z Vendors: n/a Products: Web P2P control,P2P plartform server,client tools Problem Types: Information leakage Description: Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways. Cloud Key is used to authenticate the connection between the client tool and the platform. An attacker may use the leaked Cloud Key to impersonate the client to connect to the platform, resulting in additional consumption of platform server resources. Versions with Build time before April 2020 are affected. Additional Analyst Notes: - CVE Program Container: References: - http
ns with Build time before April 2020 are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.dahuasecurity.com/support/cybersecurity/details/757
CVE ID: CVE-2020-9502 State: PUBLISHED Published: 2020-05-13T15:21:12 Last Updated: 2024-08-04T10:34:38.156Z Vendors: n/a Products: IPC-HX2XXX Series,IPC-HXXX5X4X Series,IPC-HX5842H,IPC-HX7842H,NVR 5x Series,NVR 4x Series,SD6AL Series,SD5A Series,SD1A Series,PTZ1A Series,SD50/52C Series,IPC-HFW1431S Problem Types: Session hijacking Description: Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.dahuasecurity.com/support/cybersecurity/details/777
CVE ID: CVE-2020-9514 State: PUBLISHED Published: 2020-04-07T16:42:51 Last Updated: 2024-08-04T10:34:38.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the IMPress for IDX Broker plugin before 2.6.2 for WordPress. wrappers.php allows a logged-in user (with the Subscriber role) to permanently delete arbitrary posts and pages, create new posts with arbitrary subjects, and modify the subjects of existing posts and pages (via create_dynamic_page and delete_dynamic_page). Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/idx-broker-platinum/#developers - https://www.wordfence.com/blog/2020/03/vulnerabilities-p
https://wordpress.org/plugins/idx-broker-platinum/#developers - https://www.wordfence.com/blog/2020/03/vulnerabilities-patched-in-impress-for-idx-broker/
CVE ID: CVE-2020-9517 State: PUBLISHED Published: 2020-03-09T15:54:33 Last Updated: 2024-08-04T10:34:38.163Z Vendors: Micro Focus International Products: Service Manager Problem Types: Improper restriction of rendered UI layers or frames Description: There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60. The vulnerability may result in the ability of malicious users to perform UI redress attacks. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03604692
CVE ID: CVE-2020-9518 State: PUBLISHED Published: 2020-03-16T13:01:28 Last Updated: 2024-08-04T10:34:39.574Z Vendors: Micro Focus International Products: Service Manager (Web Tier). Problem Types: Login filter can access configuration files Description: Login filter can access configuration files vulnerability in Micro Focus Service Manager (Web Tier), affecting versions 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow unauthorized access to configuration data. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03607792
CVE ID: CVE-2020-9519 State: PUBLISHED Published: 2020-03-16T13:00:11 Last Updated: 2024-08-04T10:34:38.168Z Vendors: Micro Focus International Products: Service Manager (Server). Problem Types: HTTP methods reveled in Web services. Description: HTTP methods reveled in Web services vulnerability in Micro Focus Service manager (server), affecting versions 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62, 9.63. The vulnerability could be exploited to allow exposure of configuration data. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03607789
CVE ID: CVE-2020-9520 State: PUBLISHED Published: 2020-03-25T20:59:48 Last Updated: 2024-08-04T10:34:39.519Z Vendors: Micro Focus International Products: Micro Focus Vibe. Problem Types: Stored XSS Description: A stored XSS vulnerability was discovered in Micro Focus Vibe, affecting all Vibe version prior to 4.0.7. The vulnerability could allows a remote attacker to craft and store malicious content into Vibe such that when the content is viewed by another user of the system, attacker controlled JavaScript will execute in the security context of the target user’s browser. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03630475 -
dditional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03630475 - http://seclists.org/fulldisclosure/2020/Mar/50
CVE ID: CVE-2020-9521 State: PUBLISHED Published: 2020-03-26T14:21:41 Last Updated: 2024-08-04T10:34:38.230Z Vendors: Micro Focus International Products: Micro Focus - Service Manager Automation (SMA) Problem Types: SQL injection Description: An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA), affecting versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02. The vulnerability could allow for the improper neutralization of special elements in SQL commands and may lead to the product being vulnerable to SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03630615
CVE ID: CVE-2020-9522 State: PUBLISHED Published: 2020-06-16T13:07:40 Last Updated: 2024-08-04T10:34:38.146Z Vendors: n/a Products: ArcSight Enterprise Security Manager (ESM). Problem Types: Cross Site Scripting Description: Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, Affecting versions 7.0.x, 7.2 and 7.2.1 . The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03650888
CVE ID: CVE-2020-9523 State: PUBLISHED Published: 2020-04-17T14:18:04 Last Updated: 2024-08-04T10:34:38.203Z Vendors: n/a Products: Enterprise developer and server. Problem Types: Insufficiently protected credentials Description: Insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server, affecting all version prior to 4.0 Patch Update 16, and version 5.0 Patch Update 6. The vulnerability could allow an attacker to transmit hashed credentials for the user account running the Micro Focus Directory Server (MFDS) to an arbitrary site, compromising that account's security. Additional Analyst Notes: - CVE Program Container: References: - https://s
y site, compromising that account's security. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03634936