Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-6728 State: REJECTED Published: 2021-01-12T20:02:46 Last Updated: 2021-01-12T20:02:46 Description: No description available.
CVE ID: CVE-2020-6729 State: REJECTED Published: 2021-01-12T20:02:46 Last Updated: 2021-01-12T20:02:46 Description: No description available.
CVE ID: CVE-2020-6730 State: REJECTED Published: 2021-01-12T20:02:46 Last Updated: 2021-01-12T20:02:46 Description: No description available.
CVE ID: CVE-2020-6731 State: REJECTED Published: 2021-01-12T20:02:46 Last Updated: 2021-01-12T20:02:46 Description: No description available.
CVE ID: CVE-2020-6732 State: REJECTED Published: 2021-01-12T20:02:46 Last Updated: 2021-01-12T20:02:46 Description: No description available.
CVE ID: CVE-2020-6733 State: REJECTED Published: 2021-01-12T20:02:46 Last Updated: 2021-01-12T20:02:46 Description: No description available.
CVE ID: CVE-2020-6734 State: REJECTED Published: 2021-01-12T20:02:46 Last Updated: 2021-01-12T20:02:46 Description: No description available.
CVE ID: CVE-2020-6735 State: REJECTED Published: 2021-01-12T20:02:47 Last Updated: 2021-01-12T20:02:47 Description: No description available.
CVE ID: CVE-2020-6736 State: REJECTED Published: 2021-01-12T20:02:47 Last Updated: 2021-01-12T20:02:47 Description: No description available.
CVE ID: CVE-2020-6737 State: REJECTED Published: 2021-01-12T20:02:47 Last Updated: 2021-01-12T20:02:47 Description: No description available.
CVE ID: CVE-2020-6738 State: REJECTED Published: 2021-01-12T20:02:47 Last Updated: 2021-01-12T20:02:47 Description: No description available.
CVE ID: CVE-2020-6739 State: REJECTED Published: 2021-01-12T20:02:47 Last Updated: 2021-01-12T20:02:47 Description: No description available.
CVE ID: CVE-2020-6740 State: REJECTED Published: 2021-01-12T20:02:47 Last Updated: 2021-01-12T20:02:47 Description: No description available.
CVE ID: CVE-2020-6741 State: REJECTED Published: 2021-01-12T20:02:47 Last Updated: 2021-01-12T20:02:47 Description: No description available.
CVE ID: CVE-2020-6742 State: REJECTED Published: 2021-01-12T20:02:47 Last Updated: 2021-01-12T20:02:47 Description: No description available.
CVE ID: CVE-2020-6743 State: REJECTED Published: 2021-01-12T20:02:47 Last Updated: 2021-01-12T20:02:47 Description: No description available.
CVE ID: CVE-2020-6744 State: REJECTED Published: 2021-01-12T20:02:47 Last Updated: 2021-01-12T20:02:47 Description: No description available.
CVE ID: CVE-2020-6745 State: REJECTED Published: 2021-01-12T20:02:47 Last Updated: 2021-01-12T20:02:47 Description: No description available.
CVE ID: CVE-2020-6746 State: REJECTED Published: 2021-01-12T20:02:48 Last Updated: 2021-01-12T20:02:48 Description: No description available.
CVE ID: CVE-2020-6747 State: REJECTED Published: 2021-01-12T20:02:48 Last Updated: 2021-01-12T20:02:48 Description: No description available.
CVE ID: CVE-2020-6748 State: REJECTED Published: 2021-01-12T20:02:48 Last Updated: 2021-01-12T20:02:48 Description: No description available.
CVE ID: CVE-2020-6749 State: REJECTED Published: 2021-01-12T20:02:48 Last Updated: 2021-01-12T20:02:48 Description: No description available.
CVE ID: CVE-2020-6750 State: PUBLISHED Published: 2020-01-09T19:23:03 Last Updated: 2024-08-04T09:11:04.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxy_addr field is mishandled. This bug is timing-dependent and may occur only sporadically depending on network delays. The greatest security relevance is in use cases where a proxy is used to help with privacy/anonymity, even though there is no technical barrier to a direct connection. NOTE: versions before 2.60 are unaffected. Additional Analyst Note
there is no technical barrier to a direct connection. NOTE: versions before 2.60 are unaffected. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/glib/issues/1989 - https://bugzilla.suse.com/show_bug.cgi?id=1160668 - https://security.netapp.com/advisory/ntap-20200127-0001/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5RIFEDSRJ4P3WFCMDUOFQ2LEILZLMDW7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MEM7MMAXMWCDPUH4MTUZ763MBB64RRLJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJMLGW55HOQXHM
4RRLJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJMLGW55HOQXHMTIPH2PWXFRBNBWVO4W/
CVE ID: CVE-2020-6752 State: PUBLISHED Published: 2020-06-17T16:26:44 Last Updated: 2024-08-04T09:11:04.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OMERO before 5.6.1, group owners can access members' data in other groups. Additional Analyst Notes: - CVE Program Container: References: - https://www.openmicroscopy.org/security/advisories/2019-SV6/
CVE ID: CVE-2020-6753 State: PUBLISHED Published: 2020-04-01T12:49:25 Last Updated: 2024-08-04T09:11:04.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Login by Auth0 plugin before 4.0.0 for WordPress allows stored XSS on multiple pages, a different issue than CVE-2020-5392. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/auth0/wp-auth0/releases - https://auth0.com/docs/security/bulletins/2020-03-31_wpauth0 - https://github.com/auth0/wp-auth0/security/advisories/GHSA-59vf-cgfw-6h6v
CVE ID: CVE-2020-6754 State: PUBLISHED Published: 2020-02-05T16:08:28 Last Updated: 2024-08-04T09:11:04.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: dotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control. It allows an attacker to read or execute files under $TOMCAT_HOME/webapps/ROOT/assets (which should be a protected directory). Additionally, attackers can upload temporary files (e.g., .jsp files) into /webapps/ROOT/assets/tmp_upload, which can lead to remote command execution (with the permissions of the user running the dotCMS application). Additional Analyst Notes: - CVE Program Container: References: - https://dotcms.com/security
ng the dotCMS application). Additional Analyst Notes: - CVE Program Container: References: - https://dotcms.com/security/SI-54 - https://github.com/dotCMS/core/issues/17796
CVE ID: CVE-2020-6756 State: PUBLISHED Published: 2020-01-09T22:10:46 Last Updated: 2024-08-04T09:11:04.681Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: languageOptions.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows unauthenticated attackers to remotely execute code via the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - https://pwnedchile.com/2020/01/08/pixelstor-5000-rce-exploit/ - http://packetstormsecurity.com/files/155898/PixelStor-5000-K-4.0.1580-20150629-Remote-Code-Execution.html
CVE ID: CVE-2020-6757 State: PUBLISHED Published: 2020-01-09T22:10:23 Last Updated: 2024-08-04T09:11:04.685Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AC:L/AV:N/A:L/C:L/I:L/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: contentHostProperties.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows authenticated attackers to remotely execute code via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://pwnedchile.com/2020/01/08/pixelstor-5000-rce-exploit/
CVE ID: CVE-2020-6758 State: PUBLISHED Published: 2020-01-09T22:10:32 Last Updated: 2024-08-04T09:11:04.868Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Option/optionsAll.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows remote attackers to inject arbitrary web script or HTML via the ContentFrame parameter. Additional Analyst Notes: - CVE Program Container: References: - https://pwnedchile.com/2020/01/08/pixelstor-5000-rce-exploit/
CVE ID: CVE-2020-6760 State: PUBLISHED Published: 2020-02-06T20:02:59 Last Updated: 2024-08-04T09:11:04.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Schmid ZI 620 V400 VPN 090 routers allow an attacker to execute OS commands as root via shell metacharacters to an entry on the SSH subcommand menu, as demonstrated by ping. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/0xedh/someshit/blob/master/CVE-2020-6760.md
CVE ID: CVE-2020-6764 State: REJECTED Published: 2020-03-02T15:35:46 Last Updated: 2020-03-02T15:35:46 Description: No description available.
CVE ID: CVE-2020-6765 State: PUBLISHED Published: 2020-04-10T18:26:24 Last Updated: 2024-08-04T09:11:04.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSL-GS225 J1 AU_1.0.4 devices allow an admin to execute OS commands by placing shell metacharacters after a supported CLI command, as demonstrated by ping -c1 127.0.0.1; cat/etc/passwd. The CLI is reachable by TELNET. Additional Analyst Notes: - CVE Program Container: References: - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10165
CVE ID: CVE-2020-6767 State: PUBLISHED Published: 2020-02-06T16:19:52.006333Z Last Updated: 2024-09-16T18:14:14.940Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Bosch Products: DIVAR IP 3000, DIVAR IP 7000, DIVAR IP all-in-one 5000, Bosch Video Management System, BVMS Viewer Problem Types: CWE-22 Description: A path traversal vulnerability in the Bosch Video Management System (BVMS) FileTransferService allows an authenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch BVMS Viewer versions 10.0 <= 10.0.0.1225, 9.
225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch BVMS Viewer versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000, DIVAR IP 7000 and DIVAR IP all-in-one 5000 if a vulnerable BVMS version is installed. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-381489-BT.html
CVE ID: CVE-2020-6768 State: PUBLISHED Published: 2020-02-07T20:01:21.945283Z Last Updated: 2024-09-17T00:16:27.620Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Bosch Products: DIVAR IP 3000, DIVAR IP 7000, DIVAR IP all-in-one 5000, Bosch Video Management System, BVMS Viewer Problem Types: CWE-22 Description: A path traversal vulnerability in the Bosch Video Management System (BVMS) NoTouch deployment allows an unauthenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch BVMS Viewer versions 10.0 <= 10.0.0.1225, 9
1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch BVMS Viewer versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000, DIVAR IP 7000 and DIVAR IP all-in-one 5000 if a vulnerable BVMS version is installed. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/bosch-sa-815013-bt.html
CVE ID: CVE-2020-6769 State: PUBLISHED Published: 2020-02-07T19:57:12.914579Z Last Updated: 2024-09-16T21:03:26.539Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Bosch Products: DIVAR IP 2000, DIVAR IP 5000, Video Streaming Gateway, DIVAR IP 3000, DIVAR IP 7000, DIVAR IP all-in-one 5000 Problem Types: CWE-306 Description: Missing Authentication for Critical Function in the Bosch Video Streaming Gateway (VSG) allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video Streaming Gateway. A successful attack can impact the confidentiality and availability of live and recorded video data of all cameras configured t
ssful attack can impact the confidentiality and availability of live and recorded video data of all cameras configured to be controlled by the VSG as well as the recording storage associated with the VSG. This affects Bosch Video Streaming Gateway versions 6.45 <= 6.45.08, 6.44 <= 6.44.022, 6.43 <= 6.43.0023 and 6.42.10 and older. This affects Bosch DIVAR IP 3000, DIVAR IP 7000 and DIVAR IP all-in-one 5000 if a vulnerable VSG version is installed with BVMS. This affects Bosch DIVAR IP 2000 <= 3.62.0019 and DIVAR IP 5000 <= 3.80.0039 if the corresponding port 8023 has been opened in the device's firewall. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com
pened in the device's firewall. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-260625-BT.html
CVE ID: CVE-2020-6770 State: PUBLISHED Published: 2020-02-07T20:08:31.437569Z Last Updated: 2024-09-17T04:09:12.828Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Bosch Products: DIVAR IP 3000, DIVAR IP 7000, BVMS Mobile Video Service Problem Types: CWE-502 Description: Deserialization of Untrusted Data in the BVMS Mobile Video Service (BVMS MVS) allows an unauthenticated remote attacker to execute arbitrary code on the system. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000 and DIVAR IP 7000 if a vulnerable BVMS version is installed. Additional Analyst Notes: - C
s affects Bosch DIVAR IP 3000 and DIVAR IP 7000 if a vulnerable BVMS version is installed. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-885551-BT.html
CVE ID: CVE-2020-6771 State: PUBLISHED Published: 2021-03-25T15:48:28.648159Z Last Updated: 2024-09-16T20:27:14.255Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bosch Products: IP Helper Problem Types: CWE-427 Description: Loading a DLL through an Uncontrolled Search Path Element in Bosch IP Helper up to and including version 1.00.0008 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same application directory as the portable IP Helper application. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-ad
Helper application. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/bosch-sa-835563-bt.html
CVE ID: CVE-2020-6774 State: PUBLISHED Published: 2020-05-27T16:38:02.719482Z Last Updated: 2024-09-16T22:56:04.383Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Bosch Products: Bosch Recording Station Problem Types: CWE-284 Description: Improper Access Control in the Kiosk Mode functionality of Bosch Recording Station allows a local unauthenticated attacker to escape from the Kiosk Mode and access the underlying operating system. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-363824-BT.html
CVE ID: CVE-2020-6776 State: PUBLISHED Published: 2021-01-14T15:51:33.191539Z Last Updated: 2024-09-17T02:31:35.743Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bosch Products: PRAESIDEO, PRAESENSA Problem Types: CWE-352 Description: A vulnerability in the web-based management interface of Bosch PRAESIDEO until and including version 4.41 and Bosch PRAESENSA until and including version 1.10 allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (Cross-Site Request Forgery). This requires the victim to be tricked into clicking a malicious link or submitting a malicious form. A successful exploit allows th
s the victim to be tricked into clicking a malicious link or submitting a malicious form. A successful exploit allows the attacker to perform arbitrary actions with the privileges of the victim, e.g. creating and modifying user accounts, changing system configuration settings and cause DoS conditions. Note: For Bosch PRAESIDEO 4.31 and newer and Bosch PRAESENSA in all versions, the confidentiality impact is considered low because user credentials are not shown in the web interface. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/bosch-sa-538331-bt.html
CVE ID: CVE-2020-6777 State: PUBLISHED Published: 2021-01-14T15:51:35.993295Z Last Updated: 2024-09-17T01:51:38.379Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Bosch Products: PRAESIDEO, PRAESENSA Problem Types: CWE-79 Description: A vulnerability in the web-based management interface of Bosch PRAESIDEO until and including version 4.41 and Bosch PRAESENSA until and including version 1.10 allows an authenticated remote attacker with admin privileges to mount a stored Cross-Site-Scripting (XSS) attack against another user. When the victim logs into the management interface, the stored script code is executed in the context of his browser. A successful exp
m logs into the management interface, the stored script code is executed in the context of his browser. A successful exploit would allow an attacker to interact with the management interface with the privileges of the victim. However, as the attacker already needs admin privileges, there is no additional impact on the management interface itself. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/bosch-sa-538331-bt.html
CVE ID: CVE-2020-6779 State: PUBLISHED Published: 2021-01-25T18:41:24.858611Z Last Updated: 2024-09-16T22:30:56.636Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Bosch Products: FSM-2500, FSM-5000 Problem Types: CWE-798 Description: Use of Hard-coded Credentials in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows an unauthenticated remote attacker to log into the database with admin-privileges. This may result in complete compromise of the confidentiality and integrity of the stored data as well as a high availability impact on the database itself. In addition, an attacker may execute arbitrary comman
data as well as a high availability impact on the database itself. In addition, an attacker may execute arbitrary commands on the underlying operating system. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-332072-BT.html
CVE ID: CVE-2020-6780 State: PUBLISHED Published: 2021-01-25T18:41:41.783722Z Last Updated: 2024-09-17T01:11:14.207Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Bosch Products: FSM-2500, FSM-5000 Problem Types: CWE-916 Description: Use of Password Hash With Insufficient Computational Effort in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows a remote attacker with admin privileges to dump the credentials of other users and possibly recover their plain-text passwords by brute-forcing the MD5 hash. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisori
the MD5 hash. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-332072-BT.html
CVE ID: CVE-2020-6781 State: PUBLISHED Published: 2020-09-16T18:10:43.568646Z Last Updated: 2024-09-16T17:14:05.717Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Bosch Products: Smart Home Problem Types: CWE-295 Description: Improper certificate validation for certain connections in the Bosch Smart Home System App for iOS prior to version 9.17.1 potentially allows to intercept video contents by performing a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-347336.html
CVE ID: CVE-2020-6785 State: PUBLISHED Published: 2021-03-25T15:49:54.005154Z Last Updated: 2024-09-17T00:35:36.081Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bosch Products: BVMS, BVMS Viewer, DIVAR IP 7000 R2, DIVAR IP all-in-one 5000, DIVAR IP all-in-one 7000 Problem Types: CWE-427 Description: Loading a DLL through an Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer in versions 10.1.0, 10.0.1, 10.0.0 and 9.0.0 and older potentially allows an attacker to execute arbitrary code on a victim's system. This affects both the installer as well as the installed application. This also affects Bosch DIVAR IP 7000 R2, Bosch DIVAR IP all-in-one 500
installer as well as the installed application. This also affects Bosch DIVAR IP 7000 R2, Bosch DIVAR IP all-in-one 5000 and Bosch DIVAR IP all-in-one 7000 with installers and installed BVMS versions prior to BVMS 10.1.1. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/bosch-sa-835563-bt.html
CVE ID: CVE-2020-6786 State: PUBLISHED Published: 2021-03-25T15:51:06.153501Z Last Updated: 2024-09-16T17:38:51.758Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bosch Products: Video Recording Manager Problem Types: CWE-427 Description: Loading a DLL through an Uncontrolled Search Path Element in the Bosch Video Recording Manager installer up to and including version 3.82.0055 for 3.82, up to and including version 3.81.0064 for 3.81 and 3.71 and older potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same directory where the installer is started fr
isite is that the victim is tricked into placing a malicious DLL in the same directory where the installer is started from. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/bosch-sa-835563-bt.html
CVE ID: CVE-2020-6787 State: PUBLISHED Published: 2021-03-25T15:51:52.201429Z Last Updated: 2024-09-16T16:17:43.323Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bosch Products: Video Client Problem Types: CWE-427 Description: Loading a DLL through an Uncontrolled Search Path Element in the Bosch Video Client installer up to and including version 1.7.6.079 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same directory where the installer is started from. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/secur
nstaller is started from. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/bosch-sa-835563-bt.html
CVE ID: CVE-2020-6788 State: PUBLISHED Published: 2021-03-25T15:52:28.633005Z Last Updated: 2024-09-16T23:56:16.560Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bosch Products: Configuration Manager Problem Types: CWE-427 Description: Loading a DLL through an Uncontrolled Search Path Element in the Bosch Configuration Manager installer up to and including version 7.21.0078 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same directory where the installer is started from. Additional Analyst Notes: - CVE Program Container: References: - https://psi
ectory where the installer is started from. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/bosch-sa-835563-bt.html