Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-11085 State: PUBLISHED Published: 2020-05-29T00:00:00 Last Updated: 2024-08-04T11:21:14.579Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: FreeRDP Products: FreeRDP Problem Types: CWE-125 Description: In FreeRDP before 2.1.0, there is an out-of-bounds read in cliprdr_read_format_list. Clipboard format data read (by client or server) might read data out-of-bounds. This has been fixed in 2.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2j4w-v45m-95hf - https://github.com/FreeRDP/FreeRDP/commit/b73143cf7ee5fe4cdabcbf56908aa15d8a883821 - http://lists.opensuse.org/o
-95hf - https://github.com/FreeRDP/FreeRDP/commit/b73143cf7ee5fe4cdabcbf56908aa15d8a883821 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html - https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE ID: CVE-2020-11086 State: PUBLISHED Published: 2020-05-29T00:00:00 Last Updated: 2024-08-04T11:21:14.624Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: FreeRDP Products: FreeRDP Problem Types: CWE-125 Description: In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_ntlm_v2_client_challenge that reads up to 28 bytes out-of-bound to an internal structure. This has been fixed in 2.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fg8v-w34r-c974 - https://github.com/FreeRDP/FreeRDP/commit/c098f21fdaadca57ff649eee1674f6cc321a2ec4 - http://lists.opensu
g8v-w34r-c974 - https://github.com/FreeRDP/FreeRDP/commit/c098f21fdaadca57ff649eee1674f6cc321a2ec4 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html - https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE ID: CVE-2020-11087 State: PUBLISHED Published: 2020-05-29T00:00:00 Last Updated: 2024-08-04T11:21:14.621Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: FreeRDP Products: FreeRDP Problem Types: CWE-125 Description: In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_AuthenticateMessage. This has been fixed in 2.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-84vj-g73m-chw7 - https://github.com/FreeRDP/FreeRDP/commit/8241ab42fdf0cc89cf69fc574bf6360c9977a0d4 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html - https://lis
0cc89cf69fc574bf6360c9977a0d4 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html - https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE ID: CVE-2020-11088 State: PUBLISHED Published: 2020-05-29T00:00:00 Last Updated: 2024-08-04T11:21:14.714Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: FreeRDP Products: FreeRDP Problem Types: CWE-125 Description: In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_NegotiateMessage. This has been fixed in 2.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xh4f-fh87-43hp - https://github.com/FreeRDP/FreeRDP/commit/8fa38359634a9910b91719818ab02f23c320dbae - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html - https://lists.
10b91719818ab02f23c320dbae - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html - https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE ID: CVE-2020-11089 State: PUBLISHED Published: 2020-05-29T00:00:00 Last Updated: 2024-08-04T11:21:14.612Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: FreeRDP Products: FreeRDP Problem Types: CWE-125 Description: In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions (parallel_process_irp_create, serial_process_irp_create, drive_process_irp_write, printer_process_irp_write, rdpei_recv_pdu, serial_process_irp_write). This has been fixed in 2.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hfc7-c5gv-8c2h - https://github.com/FreeRDP/FreeRDP/commit/6b485b146a1
thub.com/FreeRDP/FreeRDP/security/advisories/GHSA-hfc7-c5gv-8c2h - https://github.com/FreeRDP/FreeRDP/commit/6b485b146a1b9d6ce72dfd7b5f36456c166e7a16 - https://github.com/FreeRDP/FreeRDP/commit/795842f4096501fcefc1a7f535ccc8132feb31d7 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html - https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE ID: CVE-2020-11090 State: PUBLISHED Published: 2020-06-11T00:05:14 Last Updated: 2024-08-04T11:21:14.678Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Hyperledger Products: Indy Node Problem Types: CWE-400 Description: In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy Node has a bug in TAA handling code. The current primary can be crashed with a malformed transaction from a client, which leads to a view change. Repeated rapid view changes have the potential of bringing down the network. This is fixed in version 1.12.3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hyperledger/ind
d in version 1.12.3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hyperledger/indy-node/security/advisories/GHSA-3gw4-m5w7-v89c - https://pypi.org/project/indy-node/1.12.3/ - https://github.com/hyperledger/indy-node/blob/master/CHANGELOG.md#1123
CVE ID: CVE-2020-11091 State: PUBLISHED Published: 2020-06-03T22:55:13 Last Updated: 2024-08-04T11:21:14.680Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N) Vendors: weaveworks Products: Weave Problem Types: CWE-350 Description: In Weave Net before version 2.6.3, an attacker able to run a process as root in a container is able to respond to DNS requests from the host and thereby insert themselves as a fake service. In a cluster with an IPv4 internal network, if IPv6 is not totally disabled on the host (via ipv6.disable=1 on the kernel cmdline), it will be either unconfigured or configured on some interfaces, but it's pretty likely that ipv6 forwarding is disabled, i
will be either unconfigured or configured on some interfaces, but it's pretty likely that ipv6 forwarding is disabled, ie /proc/sys/net/ipv6/conf//forwarding == 0. Also by default, /proc/sys/net/ipv6/conf//accept_ra == 1. The combination of these 2 sysctls means that the host accepts router advertisements and configure the IPv6 stack using them. By sending rogue router advertisements, an attacker can reconfigure the host to redirect part or all of the IPv6 traffic of the host to the attacker controlled container. Even if there was no IPv6 traffic before, if the DNS returns A (IPv4) and AAAA (IPv6) records, many HTTP libraries will try to connect via IPv6 first then fallback to IPv4, giving a
A (IPv4) and AAAA (IPv6) records, many HTTP libraries will try to connect via IPv6 first then fallback to IPv4, giving an opportunity to the attacker to respond. If by chance you also have on the host a vulnerability like last year's RCE in apt (CVE-2019-3462), you can now escalate to the host. Weave Net version 2.6.3 disables the accept_ra option on the veth devices that it creates. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/weaveworks/weave/security/advisories/GHSA-59qg-grp7-5r73 - https://github.com/weaveworks/weave/commit/15f21f1899060f7716c70a8555a084e836f39a60
CVE ID: CVE-2020-11093 State: PUBLISHED Published: 2020-12-24T20:05:15 Last Updated: 2024-08-04T11:21:14.718Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: hyperledger Products: indy-node Problem Types: CWE-347 Description: Hyperledger Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In Hyperledger Indy before version 1.12.4, there is lack of signature verification on a specific transaction which enables an attacker to make certain unauthorized alterations to the ledger. Updating a DID with a nym transaction will be written to the ledger if neither ROLE or VERKEY are being changed, regardless of sender. A mali
nym transaction will be written to the ledger if neither ROLE or VERKEY are being changed, regardless of sender. A malicious DID with no particular role can ask an update for another DID (but cannot modify its verkey or role). This is bad because 1) Any DID can write a nym transaction to the ledger (i.e., any DID can spam the ledger with nym transactions), 2) Any DID can change any other DID's alias, 3) The update transaction modifies the ledger metadata associated with a DID. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hyperledger/indy-node/security/advisories/GHSA-wh2w-39f4-rpv2 - https://github.com/hyperledger/indy-node/blob/master/CHANGELOG.md#112
ndy-node/security/advisories/GHSA-wh2w-39f4-rpv2 - https://github.com/hyperledger/indy-node/blob/master/CHANGELOG.md#1124 - https://github.com/hyperledger/indy-node/blob/master/docs/source/auth_rules.md - https://github.com/hyperledger/indy-node/commit/55056f22c83b7c3520488b615e1577e0f895d75a
CVE ID: CVE-2020-11094 State: PUBLISHED Published: 2020-06-03T23:20:12 Last Updated: 2024-08-04T11:21:14.539Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: rainlab Products: debugbar-plugin Problem Types: CWE-532 Description: The October CMS debugbar plugin before version 3.1.0 contains a feature where it will log all requests (and all information pertaining to each request including session data) whenever it is enabled. This presents a problem if the plugin is ever enabled on a system that is open to untrusted users as the potential exists for them to use this feature to view all requests being made to the application and obtain sensitive information from
ts for them to use this feature to view all requests being made to the application and obtain sensitive information from those requests. There even exists the potential for account takeovers of authenticated users by non-authenticated public users, which would then lead to a number of other potential issues as an attacker could theoretically get full access to the system if the required conditions existed. Issue has been patched in v3.1.0 by locking down access to the debugbar to all users; it now requires an authenticated backend user with a specifically enabled permission before it is even usable, and the feature that allows access to stored request information is restricted behind a diffe
before it is even usable, and the feature that allows access to stored request information is restricted behind a different permission that's more restrictive. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rainlab/debugbar-plugin/security/advisories/GHSA-c8wh-6jw4-2h79 - https://github.com/rainlab/debugbar-plugin/commit/86dd29f9866d712de7d98f5f9dc67751b82ecd18
CVE ID: CVE-2020-11095 State: PUBLISHED Published: 2020-06-22T00:00:00 Last Updated: 2024-08-04T11:21:14.625Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: FreeRDP Products: FreeRDP Problem Types: CWE-125 Description: In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.freerdp.com/2020/06/22/2_1_2-released - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-563r-pvh7-4fw2 - https://github.com/FreeRDP/FreeR
released - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-563r-pvh7-4fw2 - https://github.com/FreeRDP/FreeRDP/commit/733ee3208306b1ea32697b356c0215180fc3f049 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOZLH35OJWIQLM7FYDXAP2EAUBDXE76V/ - https://usn.ubuntu.com/4481-1/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE ID: CVE-2020-11096 State: PUBLISHED Published: 2020-06-22T00:00:00 Last Updated: 2024-08-04T11:21:14.608Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: FreeRDP Products: FreeRDP Problem Types: CWE-125 Description: In FreeRDP before version 2.1.2, there is a global OOB read in update_read_cache_bitmap_v3_order. As a workaround, one can disable bitmap cache with -bitmap-cache (default). This is fixed in version 2.1.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.freerdp.com/2020/06/22/2_1_2-released - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mjw7-3mq2-996x - https://github.com/FreeRDP/FreeRDP/commit/b8beb559
/github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mjw7-3mq2-996x - https://github.com/FreeRDP/FreeRDP/commit/b8beb55913471952f92770c90c372139d78c16c0 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOZLH35OJWIQLM7FYDXAP2EAUBDXE76V/ - https://usn.ubuntu.com/4481-1/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE ID: CVE-2020-11097 State: PUBLISHED Published: 2020-06-22T00:00:00 Last Updated: 2024-08-04T11:21:14.615Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: FreeRDP Products: FreeRDP Problem Types: CWE-125 Description: In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.freerdp.com/2020/06/22/2_1_2-released - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c8x2-c3c9-9r3f - https://github.com/FreeRDP/FreeR
released - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c8x2-c3c9-9r3f - https://github.com/FreeRDP/FreeRDP/commit/58a3122250d54de3a944c487776bcd4d1da4721e - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOZLH35OJWIQLM7FYDXAP2EAUBDXE76V/ - https://usn.ubuntu.com/4481-1/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE ID: CVE-2020-11098 State: PUBLISHED Published: 2020-06-22T00:00:00 Last Updated: 2024-08-04T11:21:14.493Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: FreeRDP Products: FreeRDP Problem Types: CWE-125 Description: In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put. This affects all FreeRDP clients with `+glyph-cache` option enabled This is fixed in version 2.1.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.freerdp.com/2020/06/22/2_1_2-released - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jr57-f58x-hjmv - https://github.com/FreeRDP/FreeRDP/commit/c0fd449ec0870b050d350d6d844b1ea
eRDP/security/advisories/GHSA-jr57-f58x-hjmv - https://github.com/FreeRDP/FreeRDP/commit/c0fd449ec0870b050d350d6d844b1ea6dad4bc7d - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOZLH35OJWIQLM7FYDXAP2EAUBDXE76V/ - https://usn.ubuntu.com/4481-1/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE ID: CVE-2020-11099 State: PUBLISHED Published: 2020-06-22T00:00:00 Last Updated: 2024-08-04T11:21:14.623Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: FreeRDP Products: FreeRDP Problem Types: CWE-125 Description: In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-977w-866x-4v5h - https://github.com/FreeRDP/FreeRDP/commit/6ade7b4cbfd71c54b3d724e8f2d6ac76a58e879
urity/advisories/GHSA-977w-866x-4v5h - https://github.com/FreeRDP/FreeRDP/commit/6ade7b4cbfd71c54b3d724e8f2d6ac76a58e879a - http://www.freerdp.com/2020/06/22/2_1_2-released - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y35HBHG2INICLSGCIKNAR7GCXEHQACQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOZLH35OJWIQLM7FYDXAP2EAUBDXE76V/ - https://usn.ubuntu.com/4481-1/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE ID: CVE-2020-11100 State: PUBLISHED Published: 2020-04-02T14:23:05 Last Updated: 2024-08-04T11:21:14.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.haproxy.org - https://www.haproxy.org/download/2.1/src/CHANGELOG - https://lists.debian.org/debian-security-announce/2020/msg00052.html - https://www.mail-archive.com/haproxy%40formilux.org/msg36876.html -
n.org/debian-security-announce/2020/msg00052.html - https://www.mail-archive.com/haproxy%40formilux.org/msg36876.html - https://bugzilla.redhat.com/show_bug.cgi?id=1819111 - https://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=5dfc5d5cd0d2128d77253ead3acf03a421ab5b88 - https://bugzilla.suse.com/show_bug.cgi?id=1168023 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00002.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MNW5RZLIX7LOXRLV7WMHX22CI43XSXKW/ - https://www.debian.org/security/2020/dsa-4649 - https://usn.ubuntu.com/4321-1/ - http://packetstormsecurity.com/files/157323/haproxy-hpack-tbl.c-Out-Of-Bounds-Write.ht
https://usn.ubuntu.com/4321-1/ - http://packetstormsecurity.com/files/157323/haproxy-hpack-tbl.c-Out-Of-Bounds-Write.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/264C7UL3X7L7QE74ZJ557IOUFS3J4QQC/ - https://security.gentoo.org/glsa/202012-22
CVE ID: CVE-2020-11101 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T16:20:13.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sierra Wireless AirLink Mobility Manager (AMM) before 2.17 mishandles sessions and thus an unauthenticated attacker can obtain a login session with administrator privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sierrawireless.com/company/security/ - https://source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2020-007---amm-unauthenticated-login.ashx
CVE ID: CVE-2020-11102 State: PUBLISHED Published: 2020-04-06T15:39:56 Last Updated: 2024-08-04T11:21:14.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because the frame size is not validated against the r/w data length. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2020-03/msg08322.html - http://www.openwall.com/lists/oss-security/2020/04/06/1 - http://www.openwall.com/lists/oss-security/2020/04/06/1 - https://security.gentoo.org/glsa/202005-02
CVE ID: CVE-2020-11103 State: PUBLISHED Published: 2020-12-30T20:36:48 Last Updated: 2024-08-04T11:21:14.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: JsLink in Webswing before 2.6.12 LTS, and 2.7.x and 20.x before 20.1, allows remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://bitbucket.org/meszarv/webswing/issues/375/webswing-jslink-mechanism-remote-code - https://www.webswing.org/docs/2.6/discover/release_notes.html#release-notes-2-6-12
CVE ID: CVE-2020-11104 State: PUBLISHED Published: 2020-03-30T21:30:24 Last Updated: 2024-08-04T11:21:14.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in USC iLab cereal through 1.3.0. Serialization of an (initialized) C/C++ long double variable into a BinaryArchive or PortableBinaryArchive leaks several bytes of stack or heap memory, from which sensitive information (such as memory layout or private keys) can be gleaned if the archive is distributed outside of a trusted context. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/USCiLab/cereal/issues/625
CVE ID: CVE-2020-11105 State: PUBLISHED Published: 2020-03-30T21:30:10 Last Updated: 2024-08-04T11:21:14.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::shared_ptr values, using the raw pointer address as a unique identifier. This becomes problematic if an std::shared_ptr variable goes out of scope and is freed, and a new std::shared_ptr is allocated at the same address. Serialization fidelity thereby becomes dependent upon memory layout. In short, serialized std::shared_ptr variables cannot always be expected to serialize back into their original values. This can have any number of consequen
variables cannot always be expected to serialize back into their original values. This can have any number of consequences, depending on the context within which this manifests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/USCiLab/cereal/issues/636
CVE ID: CVE-2020-11106 State: PUBLISHED Published: 2020-03-30T21:52:07 Last Updated: 2024-08-04T11:21:14.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Responsive Filemanager through 9.14.0. In the dialog.php page, the session variable $_SESSION['RF']["view_type"] wasn't sanitized if it was already set. This made stored XSS possible if one opens ajax_calls.php and uses the "view" action and places a payload in the type parameter, and then returns to the dialog.php page. This occurs because ajax_calls.php was also able to set the $_SESSION['RF']["view_type"] variable, but there it wasn't sanitized. Additional Analyst Notes: - CVE Program Container:
_SESSION['RF']["view_type"] variable, but there it wasn't sanitized. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/trippo/ResponsiveFilemanager/issues/603
CVE ID: CVE-2020-11107 State: PUBLISHED Published: 2020-04-02T17:44:24 Last Updated: 2024-08-04T11:21:14.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users (including admins) to enable arbitrary command execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.apachefriends.org/blog/new_xampp_20200401.html - http://packetstormsecurity.com/files/164292/XAMPP-7.4.3-Privilege-Escalation.html