Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
nt/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.netapp.com/advisory/ntap-20200625-0006/ - https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04012en_us - https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities
CVE ID: CVE-2020-11908 State: PUBLISHED Published: 2020-06-17T10:49:17 Last Updated: 2024-08-04T11:42:00.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/257161/ - https://www.treck.com - https://jsof-tech.com/vulnerability-disclosure-policy/ - https://www.kb.cert.org/vuls/id/257161 - https://www.jsof-tech.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security
y/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.netapp.com/advisory/ntap-20200625-0006/ - https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities
CVE ID: CVE-2020-11909 State: PUBLISHED Published: 2020-06-17T10:51:09.000Z Last Updated: 2025-09-30T15:52:16.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.kb.cert.org/vuls/id/257161/ - https://www.treck.com - https://jsof-tech.com/vulnerability-disclosure-policy/ - https://www.kb.cert.org/vuls/id/257161 - https://www.jsof-tech.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-00
ent/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.netapp.com/advisory/ntap-20200625-0006/ - https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities
CVE ID: CVE-2020-11910 State: PUBLISHED Published: 2020-06-17T10:52:48.000Z Last Updated: 2025-09-30T15:49:44.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.kb.cert.org/vuls/id/257161/ - https://www.treck.com - https://jsof-tech.com/vulnerability-disclosure-policy/ - https://www.kb.cert.org/vuls/id/257161 - https://www.jsof-tech.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020
ontent/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.netapp.com/advisory/ntap-20200625-0006/ - https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities
CVE ID: CVE-2020-11911 State: PUBLISHED Published: 2020-06-17T10:55:05 Last Updated: 2024-08-04T11:42:00.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/257161/ - https://www.treck.com - https://jsof-tech.com/vulnerability-disclosure-policy/ - https://www.kb.cert.org/vuls/id/257161 - https://www.jsof-tech.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.
/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.netapp.com/advisory/ntap-20200625-0006/ - https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04012en_us - https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities
CVE ID: CVE-2020-11912 State: PUBLISHED Published: 2020-06-17T10:56:38 Last Updated: 2024-08-04T11:42:00.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/257161/ - https://www.treck.com - https://jsof-tech.com/vulnerability-disclosure-policy/ - https://www.kb.cert.org/vuls/id/257161 - https://www.jsof-tech.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.netapp
-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.netapp.com/advisory/ntap-20200625-0006/ - https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04012en_us - https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities
CVE ID: CVE-2020-11913 State: PUBLISHED Published: 2020-06-17T10:58:24 Last Updated: 2024-08-04T11:42:00.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/257161/ - https://www.treck.com - https://jsof-tech.com/vulnerability-disclosure-policy/ - https://www.kb.cert.org/vuls/id/257161 - https://www.jsof-tech.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.neta
co-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.netapp.com/advisory/ntap-20200625-0006/ - https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities
CVE ID: CVE-2020-11914 State: PUBLISHED Published: 2020-06-17T10:59:51 Last Updated: 2024-08-04T11:42:00.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/257161/ - https://www.treck.com - https://jsof-tech.com/vulnerability-disclosure-policy/ - https://www.kb.cert.org/vuls/id/257161 - https://www.jsof-tech.com/ripple20/ - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.netap
o-sa-treck-ip-stack-JyBQ5GyC - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt - https://security.netapp.com/advisory/ntap-20200625-0006/ - https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04012en_us - https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities
CVE ID: CVE-2020-11915 State: PUBLISHED Published: 2021-02-08T01:40:45 Last Updated: 2024-08-04T11:42:00.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. By sending a set_params.cgi?telnetd=1&save=1&reboot=1 request to the webserver, it is possible to enable the telnet interface on the device. The telnet interface can then be used to obtain access to the device with root privileges via a reecam4debug default password. This default telnet password is the same across all Siime Eye devices. In order for the attack to be exploited, an attacker must be physically close in order to connect to the device's Wi-F
. In order for the attack to be exploited, an attacker must be physically close in order to connect to the device's Wi-Fi access point. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.pentestpartners.com/security-blog/vulnerable-wi-fi-dildo-camera-endoscope-yes-really/ - http://seclists.org/fulldisclosure/2024/Jul/14
CVE ID: CVE-2020-11916 State: PUBLISHED Published: 2024-11-07T00:00:00.000Z Last Updated: 2025-11-04T17:12:09.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. The password for the root user is hashed using an old and deprecated hashing technique. Because of this deprecated hashing, the success probability of an attacker in an offline cracking attack is greatly increased. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2024/Jul/14
CVE ID: CVE-2020-11917 State: PUBLISHED Published: 2024-11-07T00:00:00.000Z Last Updated: 2025-11-04T17:12:10.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. It uses a default SSID value, which makes it easier for remote attackers to discover the physical locations of many Siime Eye devices, violating the privacy of users who do not wish to disclose their ownership of this type of device. (Various resources such as wigle.net can be use for mapping of SSIDs to physical locations.) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2024/J
nalyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2024/Jul/14
CVE ID: CVE-2020-11918 State: PUBLISHED Published: 2024-11-07T00:00:00.000Z Last Updated: 2025-11-04T17:12:11.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. When a backup file is created through the web interface, information on all users, including passwords, can be found in cleartext in the backup file. An attacker capable of accessing the web interface can create the backup file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2024/Jul/14
CVE ID: CVE-2020-11919 State: PUBLISHED Published: 2024-11-07T00:00:00.000Z Last Updated: 2025-11-04T17:12:13.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. There is no CSRF protection. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2024/Jul/14
CVE ID: CVE-2020-11920 State: PUBLISHED Published: 2021-02-08T01:43:04 Last Updated: 2024-08-04T11:42:00.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. A command injection vulnerability resides in the HOST/IP section of the NFS settings menu in the webserver running on the device. By injecting Bash commands via shell metacharacters here, the device executes arbitrary code with root privileges (all of the device's services are running as root). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.pentestpartners.com/security-blog/vulnerable-wi-fi-dildo-ca
richment: - CVE Program Container: References: - https://www.pentestpartners.com/security-blog/vulnerable-wi-fi-dildo-camera-endoscope-yes-really/ - http://seclists.org/fulldisclosure/2024/Jul/14
CVE ID: CVE-2020-11921 State: PUBLISHED Published: 2024-11-07T00:00:00.000Z Last Updated: 2025-11-04T17:12:14.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic encryption, it is possible to hijack an ongoing Bluetooth connection between the Lush 2 and a mobile phone. This allows an attacker to gain full control over the device. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2024/Jul/14
CVE ID: CVE-2020-11922 State: PUBLISHED Published: 2021-04-02T15:47:01 Last Updated: 2024-08-04T11:42:00.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WiZ Colors A60 1.14.0. The device sends unnecessary information to the cloud controller server. Although this information is sent encrypted and has low risk in isolation, it decreases the privacy of the end user. The information sent includes the local IP address being used and the SSID of the Wi-Fi network the device is connected to. (Various resources such as wigle.net can be use for mapping of SSIDs to physical locations.) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container
for mapping of SSIDs to physical locations.) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.eurofins-cybersecurity.com/news/connected-devices-wiz-smart-lightbulbs/ - https://cwe.mitre.org/data/definitions/201.html - http://seclists.org/fulldisclosure/2024/Jul/14
CVE ID: CVE-2020-11923 State: PUBLISHED Published: 2021-04-02T18:08:57 Last Updated: 2024-08-04T11:42:00.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WiZ Colors A60 1.14.0. API credentials are locally logged. Additional Analyst Notes: - CVE Program Container: References: - https://www.eurofins-cybersecurity.com/news/connected-devices-wiz-smart-lightbulbs/ - http://seclists.org/fulldisclosure/2024/Jul/14
CVE ID: CVE-2020-11924 State: PUBLISHED Published: 2021-04-02T18:11:07 Last Updated: 2024-08-04T11:42:00.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WiZ Colors A60 1.14.0. Wi-Fi credentials are stored in cleartext in flash memory, which presents an information-disclosure risk for a discarded or resold device. Additional Analyst Notes: - CVE Program Container: References: - https://www.eurofins-cybersecurity.com/news/connected-devices-wiz-smart-lightbulbs/ - http://seclists.org/fulldisclosure/2024/Jul/14
CVE ID: CVE-2020-11925 State: PUBLISHED Published: 2021-04-02T15:41:46 Last Updated: 2024-08-04T11:42:00.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Authentication to the device is based on a username and password. The root credentials are the same across all devices of this model. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.eurofins-cybersecurity.com/news/connected-devices-baby-monitor/ - http://seclists.org/fulldisclosure/2024/Jul/14
CVE ID: CVE-2020-11926 State: PUBLISHED Published: 2024-11-07T00:00:00.000Z Last Updated: 2025-11-04T17:12:15.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Clients can authenticate themselves to the device using a username and password. These credentials can be obtained through an unauthenticated web request, e.g., for a JavaScript file. Also, the disclosed information includes the SSID and WPA2 key for the Wi-Fi network the device is connected to. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2024/Jul/14
CVE ID: CVE-2020-11928 State: PUBLISHED Published: 2020-04-19T23:16:50 Last Updated: 2024-08-04T11:42:00.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur via the tax_query, meta_query, or date_query parameter in mla_gallery via an admin. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/media-library-assistant/#developers
CVE ID: CVE-2020-11930 State: PUBLISHED Published: 2020-04-20T00:07:28 Last Updated: 2024-08-04T11:42:00.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link. This requires use of the hreflang tags feature within a sub-domain or sub-directory paid option. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/gtranslate/#developers - https://plugins.trac.wordpress.org/changeset/2245581/gtranslate - https://plugins.trac.wordpress.org/changeset/2245591/gtranslate - https://wpvulndb.com/vulnerabilities/10181
CVE ID: CVE-2020-11931 State: PUBLISHED Published: 2020-05-15T03:25:11.587553Z Last Updated: 2024-09-17T00:41:25.129Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Canonical Products: pulseaudio Problem Types: CWE-284 Description: An Ubuntu-specific modification to Pulseaudio to provide security mediation for Snap-packaged applications was found to have a bypass of intended access restriction for snaps which plugs any of pulseaudio, audio-playback or audio-record via unloading the pulseaudio snap policy module. This issue affects: pulseaudio 1:8.0 versions prior to 1:8.0-0ubuntu3.12; 1:11.1 versions prior to 1:11.1-1ubuntu7.7; 1:13.0 versions prior to 1:13.0-
1:8.0 versions prior to 1:8.0-0ubuntu3.12; 1:11.1 versions prior to 1:11.1-1ubuntu7.7; 1:13.0 versions prior to 1:13.0-1ubuntu1.2; 1:13.99.1 versions prior to 1:13.99.1-1ubuntu3.2; Additional Analyst Notes: - CVE Program Container: References: - https://forum.snapcraft.io/t/audio-switcher-pulseaudio-interface-auto-connect-request/16648/3 - https://usn.ubuntu.com/4355-1/
CVE ID: CVE-2020-11932 State: PUBLISHED Published: 2020-05-13T00:20:13.011745Z Last Updated: 2024-09-16T23:05:48.869Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Canonical Products: Subiquity Problem Types: CWE-532 Description: It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CanonicalLtd/subiquity/commit/7db70650feaf513d7fb6f1ca07f2d670a0890613 - https://aliceandbob.company/the-human-factor-in-an-economy-of-scale/
CVE ID: CVE-2020-11933 State: PUBLISHED Published: 2020-07-29T16:25:25.690070Z Last Updated: 2024-09-17T00:40:28.129Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: Canonical Products: snapd, core Problem Types: CWE-264 Description: cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices was run without restrictions on every boot, which a physical attacker could exploit by crafting cloud-init user-data/meta-data via external media to perform arbitrary changes on the device to bypass intended security mechanisms such as full disk encryption. This issue did not affect traditional Ubuntu systems. Fixed in snapd version 2.45.2, revision 8539 a
ll disk encryption. This issue did not affect traditional Ubuntu systems. Fixed in snapd version 2.45.2, revision 8539 and core version 2.45.2, revision 9659. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/1879530 - https://ubuntu.com/USN-4424-1
CVE ID: CVE-2020-11934 State: PUBLISHED Published: 2020-07-29T16:25:26.118479Z Last Updated: 2024-09-17T04:04:04.329Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N) Vendors: Canonical Products: snapd Problem Types: Sandbox escape vulnerability Description: It was discovered that snapctl user-open allowed altering the $XDG_DATA_DIRS environment variable when calling the system xdg-open. OpenURL() in usersession/userd/launcher.go would alter $XDG_DATA_DIRS to append a path to a directory controlled by the calling snap. A malicious snap could exploit this to bypass intended access restrictions to control how the host system xdg-open script opens the URL and, for exampl
this to bypass intended access restrictions to control how the host system xdg-open script opens the URL and, for example, execute a script shipped with the snap without confinement. This issue did not affect Ubuntu Core systems. Fixed in snapd versions 2.45.1ubuntu0.2, 2.45.1+18.04.2 and 2.45.1+20.04.2. Additional Analyst Notes: - CVE Program Container: References: - https://ubuntu.com/USN-4424-1 - https://launchpad.net/bugs/1880085
CVE ID: CVE-2020-11935 State: PUBLISHED Published: 2023-04-07T00:00:00 Last Updated: 2024-08-04T11:42:00.593Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Ubuntu Products: Linux kernel (aufs filesystem module) Problem Types: CWE-911 Description: It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vulnerability to cause a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://ubuntu.com/security/CVE-2020-11935 - https://bugs.launchpad.net/bugs/1873074
CVE ID: CVE-2020-11936 State: PUBLISHED Published: 2025-01-31T01:18:21.509Z Last Updated: 2025-02-07T16:08:28.466Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Canonical Ltd. Products: Apport Description: gdbus setgid privilege escalation Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1885633 - https://www.cve.org/CVERecord?id=CVE-2020-11936
CVE ID: CVE-2020-11937 State: PUBLISHED Published: 2020-08-06T22:50:21.967529Z Last Updated: 2024-09-17T04:15:20.926Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Canonical Products: whoopsie Problem Types: CWE-400 Description: In whoopsie, parse_report() from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The DoS is caused by resource exhaustion due to a memory leak. Fixed in 0.2.52.5ubuntu0.5, 0.2.62ubuntu0.5 and 0.2.69ubuntu0.1. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/1881982 - https://usn.ubuntu.com/4450-1 - https://github.com/sungjungk/whoopsie_killer - https://u
://launchpad.net/bugs/1881982 - https://usn.ubuntu.com/4450-1 - https://github.com/sungjungk/whoopsie_killer - https://usn.ubuntu.com/4450-1/
CVE ID: CVE-2020-11938 State: PUBLISHED Published: 2020-04-22T13:52:52 Last Updated: 2024-08-04T11:42:00.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity 2018.2 through 2019.2.1, a project administrator was able to see scrambled password parameters used in a project. The issue was resolved in 2019.2.2. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2020/04/22/jetbrains-security-bulletin-q1-2020/
CVE ID: CVE-2020-11939 State: PUBLISHED Published: 2020-04-23T14:18:36 Last Updated: 2024-08-04T11:42:00.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: In nDPI through 3.2 Stable, the SSH protocol dissector has multiple KEXINIT integer overflows that result in a controlled remote heap overflow in concat_hash_string in ssh.c. Due to the granular nature of the overflow primitive and the ability to control both the contents and layout of the nDPI library's heap memory through remote input, this vulnerability may be abused to achieve full Remote Code Execution against any network inspection stack that is linked against nDPI and uses it to perform network traffic analysis. Additi
against any network inspection stack that is linked against nDPI and uses it to perform network traffic analysis. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ntop/nDPI/commit/7ce478a58b4dd29a8d1e6f4e9df2f778613d9202 - https://securitylab.github.com/advisories/GHSL-2020-051_052-ntop-ndpi