Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-12255 State: PUBLISHED Published: 2020-05-18T14:05:12 Last Updated: 2024-08-04T11:48:58.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: rConfig 3.9.4 is vulnerable to remote code execution due to improper validation in the file upload functionality. vendor.crud.php accepts a file upload by checking content-type without considering the file extension and header. Thus, an attacker can exploit this by uploading a .php file to vendor.php that contains arbitrary PHP code and changing the content-type to image/gif. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/farid007/9f6ad063645d5b1550298c8b9ae953ff
CVE ID: CVE-2020-12256 State: PUBLISHED Published: 2020-05-18T14:03:51 Last Updated: 2024-08-04T11:48:58.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: rConfig 3.9.4 is vulnerable to reflected XSS. The devicemgmnt.php file improperly validates user input. An attacker can exploit this by crafting arbitrary JavaScript in the deviceId GET parameter to devicemgmnt.php. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/farid007/8855031bad0e497264e4879efb5bc9f8
CVE ID: CVE-2020-12257 State: PUBLISHED Published: 2020-05-18T13:51:57 Last Updated: 2024-08-04T11:48:58.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: rConfig 3.9.4 is vulnerable to cross-site request forgery (CSRF) because it lacks implementation of CSRF protection such as a CSRF token. An attacker can leverage this vulnerability by creating a form (add a user, delete a user, or edit a user). Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/farid007/eb7310749520fb8cdf5942573c9954ef
CVE ID: CVE-2020-12258 State: PUBLISHED Published: 2020-05-18T13:01:57 Last Updated: 2024-08-04T11:48:58.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: rConfig 3.9.4 is vulnerable to session fixation because session expiry and randomization are mishandled. The application can reuse a session via PHPSESSID. Also, an attacker can exploit this vulnerability in conjunction with CVE-2020-12256 or CVE-2020-12259. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/farid007/8855031bad0e497264e4879efb5bc9f8
CVE ID: CVE-2020-12259 State: PUBLISHED Published: 2020-05-18T13:00:17 Last Updated: 2024-08-04T11:48:58.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: rConfig 3.9.4 is vulnerable to reflected XSS. The configDevice.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in the rid GET parameter of devicemgmnt.php. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/farid007/8855031bad0e497264e4879efb5bc9f8
CVE ID: CVE-2020-12261 State: PUBLISHED Published: 2020-04-28T21:12:05 Last Updated: 2024-08-04T11:48:58.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open-AudIT 3.3.0 allows an XSS attack after login. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/157401/Open-AudIT-3.3.0-Cross-Site-Scripting.html - https://community.opmantek.com/display/OA/Release+Notes+for+Open-AudIT+v3.3.1 - https://www.exploit-db.com/exploits/48516 - https://community.opmantek.com/display/OA/Errata+-+3.3.0+XSS+in+error+templates
CVE ID: CVE-2020-12262 State: PUBLISHED Published: 2020-11-26T23:41:04 Last Updated: 2024-08-04T11:48:58.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intelbras TIP200 60.61.75.15, TIP200LITE 60.61.75.15, and TIP300 65.61.75.15 devices allow /cgi-bin/cgiServer.exx?page= XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=rihboOgiJRs - https://blog.skullsec.com.br/CVE-2020-12262/ - https://lucxs.medium.com/cve-2020-12262-xss-voip-intelbras-d5697e31fbf6
CVE ID: CVE-2020-12265 State: PUBLISHED Published: 2020-04-26T16:46:21 Last Updated: 2024-08-04T11:48:58.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decompress package before 4.2.1 for Node.js is vulnerable to Arbitrary File Write via ../ in an archive member, when a symlink is used, because of Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://www.npmjs.com/advisories/1217 - https://github.com/kevva/decompress/issues/71 - https://github.com/kevva/decompress/pull/73
CVE ID: CVE-2020-12266 State: PUBLISHED Published: 2020-04-27T14:33:49 Last Updated: 2024-08-04T11:48:58.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and store system information for internal usage. The devices automatically query these pages to update dashboards and other statistics, but the pages can be accessed externally without any authentication. All the pages follow the naming convention live_(string).shtml. Among the information disclosed is: interface status logs, IP address of the device, MAC address of the device, model and current firmwar
tion disclosed is: interface status logs, IP address of the device, MAC address of the device, model and current firmware version, location, all running processes, all interfaces and their statuses, all current DHCP leases and the associated hostnames, all other wireless networks in range of the router, memory statistics, and components of the configuration of the device such as enabled features. Affected devices: Affected devices are: Wavlink WN530HG4, Wavlink WN575A3, Wavlink WN579G3,Wavlink WN531G3, Wavlink WN533A8, Wavlink WN531A6, Wavlink WN551K1, Wavlink WN535G3, Wavlink WN530H4, Wavlink WN57X93, WN572HG3, Wavlink WN578A2, Wavlink WN579G3, Wavlink WN579X3, and Jetstream AC3000/ERAC3000
ink WN530H4, Wavlink WN57X93, WN572HG3, Wavlink WN578A2, Wavlink WN579G3, Wavlink WN579X3, and Jetstream AC3000/ERAC3000 Additional Analyst Notes: - CVE Program Container: References: - https://www.wavlink.com - https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-12266 - https://github.com/sudo-jtcsec/Nyra - https://github.com/Roni-Carta/nyra - https://github.com/sudo-jtcsec/CVE/blob/master/CVE-2020-12266-affected_devices
CVE ID: CVE-2020-12267 State: PUBLISHED Published: 2020-04-27T01:31:42 Last Updated: 2024-08-04T11:48:58.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20450 - https://codereview.qt-project.org/c/qt/qtbase/+/291706 - https://security.gentoo.org/glsa/202007-38
CVE ID: CVE-2020-12268 State: PUBLISHED Published: 2020-04-27T01:44:05 Last Updated: 2024-08-04T11:48:58.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: jbig2_image_compose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ArtifexSoftware/jbig2dec/compare/0.17...0.18 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20332 - https://github.com/ArtifexSoftware/jbig2dec/commit/0726320a4b55078e9d8deb590e477d598b3da66e - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00034.html - https://lists.debian.org/debian-lts-announce/2021/10/msg00023.ht
.org/opensuse-security-announce/2020-05/msg00034.html - https://lists.debian.org/debian-lts-announce/2021/10/msg00023.html
CVE ID: CVE-2020-12270 State: PUBLISHED Published: 2020-04-27T03:26:40 Last Updated: 2024-08-04T11:48:58.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: React Native Bluetooth Scan in Bluezone 1.0.0 uses six-character alphanumeric IDs, which might make it easier for remote attackers to interfere with COVID-19 contact tracing by using many IDs. NOTE: the vendor disputes the relevance of this report because the recipient of an F1 alert will know it was a false alert if contact-history comparison fails (i.e., an F0 is not actually part of the contact history obtained from the device of this recipient, or this recipient is not actually part of the contact history obtained from th
tained from the device of this recipient, or this recipient is not actually part of the contact history obtained from the device of an F0) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BluezoneGlobal/bluezone-app/blob/afa15fcec391f0edc51d0486a4ca84dd2520bbb3/CHANGELOG.md - https://github.com/BluezoneGlobal/bluezone-app/blob/afa15fcec391f0edc51d0486a4ca84dd2520bbb3/package.json#L27 - https://github.com/BluezoneGlobal/react-native-bluetooth-scan/blob/d9ee70fd594093a30e50b6e62a7593a8397c2dab/lib/android/src/main/java/com/scan/TraceCovidModule.java#L98 - https://github.com/BluezoneGlobal/react-native-bluetooth-scan/blob/d9ee70fd594093a30e50b6e62a7593a8397c2d
ule.java#L98 - https://github.com/BluezoneGlobal/react-native-bluetooth-scan/blob/d9ee70fd594093a30e50b6e62a7593a8397c2dab/lib/android/src/main/AndroidManifest.xml#L11-L12 - https://vnhacker.blogspot.com/2020/04/vietnams-contact-tracing-app_26.html - https://github.com/BluezoneGlobal/react-native-bluetooth-scan/blob/d9ee70fd594093a30e50b6e62a7593a8397c2dab/lib/android/src/main/java/com/scan/BluezonerIdGenerator.java#L18-L28 - https://bluezone.ai/CVE
CVE ID: CVE-2020-12271 State: PUBLISHED Published: 2020-04-27T04:00:01.000Z Last Updated: 2025-10-21T23:35:45.408Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as exploited in the wild in April 2020. This affected devices configured with either the administration (HTTPS) service or the User Portal exposed on the WAN zone. A successful attack may have caused remote code execution that exfiltrated usernames and hashed passwords for the local device admin(s), portal admins, and user accounts us
ution that exfiltrated usernames and hashed passwords for the local device admin(s), portal admins, and user accounts used for remote access (but not external Active Directory or LDAP passwords) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cwe.mitre.org/data/definitions/89.html - https://community.sophos.com/kb/en-us/135412 - https://news.sophos.com/en-us/2020/04/26/asnarok/
CVE ID: CVE-2020-12272 State: PUBLISHED Published: 2020-04-27T00:00:00 Last Updated: 2024-08-04T11:48:58.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message. This is caused by incorrect parsing and interpretation of SPF/DKIM authentication results, as demonstrated by the example.net(.example.com substring. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/opendmarc/tickets/237/ - https://www.usenix.org/system/files/sec20fall_chen-jianjun_prepub_0.pdf - https://lists.fedoraprojec
marc/tickets/237/ - https://www.usenix.org/system/files/sec20fall_chen-jianjun_prepub_0.pdf - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2D4JGHMALEJEWWG56DKR5OZB22TK7W5B/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KBOGOQOK3TIWWJV66MW5YWNRJAFFYGR5/ - https://lists.debian.org/debian-lts-announce/2023/08/msg00035.html
CVE ID: CVE-2020-12273 State: PUBLISHED Published: 2020-04-27T12:35:07 Last Updated: 2024-08-04T11:48:58.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials. Additional Analyst Notes: - CVE Program Container: References: - http://mantis.testlink.org/view.php?id=8895 - https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/72271ef057e6e4a95c6128973902ea646f7b5462
CVE ID: CVE-2020-12274 State: PUBLISHED Published: 2020-04-27T12:34:54 Last Updated: 2024-08-04T11:48:58.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TestLink 1.9.20, the lib/cfields/cfieldsExport.php goback_url parameter causes a security risk because it depends on client input and is not constrained to lib/cfields/cfieldsView.php at the web site associated with the session. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/2d17cd00f981f8e8c97de34a12e368ba2a55e3d0 - http://mantis.testlink.org/view.php?id=8894
CVE ID: CVE-2020-12275 State: PUBLISHED Published: 2020-04-29T16:28:23 Last Updated: 2024-08-04T11:48:58.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab 12.6 through 12.9 is vulnerable to a privilege escalation that allows an external user to create a personal snippet through the API. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/releases/2020/03/26/security-release-12-dot-9-dot-1-released/
CVE ID: CVE-2020-12276 State: PUBLISHED Published: 2020-04-29T16:28:21 Last Updated: 2024-08-04T11:48:58.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab 9.5.9 through 12.9 is vulnerable to stored XSS in an admin notification feature. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/releases/2020/03/26/security-release-12-dot-9-dot-1-released/
CVE ID: CVE-2020-12277 State: PUBLISHED Published: 2020-04-29T16:28:18 Last Updated: 2024-08-04T11:48:58.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab 10.8 through 12.9 has a vulnerability that allows someone to mirror a repository even if the feature is not activated. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/releases/2020/03/26/security-release-12-dot-9-dot-1-released/
CVE ID: CVE-2020-12278 State: PUBLISHED Published: 2020-04-27T00:00:00 Last Updated: 2024-08-04T11:48:58.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. path.c mishandles equivalent filenames that exist because of NTFS Alternate Data Streams. This may allow remote code execution when cloning a repository. This issue is similar to CVE-2019-1352. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/git/git/security/advisories/GHSA-5wph-8frv-58vj - https://github.com/libgit2/libgit2/releases/tag/v0.99.0 - https://github.com/libgit2/libgit2/releases/tag/v0.28.4 - https://github
thub.com/libgit2/libgit2/releases/tag/v0.99.0 - https://github.com/libgit2/libgit2/releases/tag/v0.28.4 - https://github.com/libgit2/libgit2/commit/3f7851eadca36a99627ad78cbe56a40d3776ed01 - https://github.com/libgit2/libgit2/commit/e1832eb20a7089f6383cfce474f213157f5300cb - https://lists.debian.org/debian-lts-announce/2022/03/msg00031.html - https://lists.debian.org/debian-lts-announce/2023/02/msg00034.html
CVE ID: CVE-2020-12279 State: PUBLISHED Published: 2020-04-27T00:00:00 Last Updated: 2024-08-04T11:48:58.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. checkout.c mishandles equivalent filenames that exist because of NTFS short names. This may allow remote code execution when cloning a repository. This issue is similar to CVE-2019-1353. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libgit2/libgit2/releases/tag/v0.99.0 - https://github.com/libgit2/libgit2/releases/tag/v0.28.4 - https://github.com/git/git/security/advisories/GHSA-589j-mmg9-733v - https://github.com/li
ibgit2/releases/tag/v0.28.4 - https://github.com/git/git/security/advisories/GHSA-589j-mmg9-733v - https://github.com/libgit2/libgit2/commit/64c612cc3e25eff5fb02c59ef5a66ba7a14751e4 - https://lists.debian.org/debian-lts-announce/2022/03/msg00031.html - https://lists.debian.org/debian-lts-announce/2023/02/msg00034.html
CVE ID: CVE-2020-12280 State: PUBLISHED Published: 2020-09-24T15:01:38 Last Updated: 2024-08-04T11:48:58.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php. Additional Analyst Notes: - CVE Program Container: References: - https://ismartgate.com/secure-garage-door/ - https://kth.diva-portal.org/smash/get/diva2:1464458/FULLTEXT01.pdf
CVE ID: CVE-2020-12281 State: PUBLISHED Published: 2020-09-24T15:06:42 Last Updated: 2024-08-04T11:48:58.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php. Additional Analyst Notes: - CVE Program Container: References: - https://ismartgate.com/secure-garage-door/ - https://kth.diva-portal.org/smash/get/diva2:1464458/FULLTEXT01.pdf
CVE ID: CVE-2020-12282 State: PUBLISHED Published: 2020-09-24T15:10:45 Last Updated: 2024-08-04T11:48:58.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. (This can be combined with reflected XSS.) Additional Analyst Notes: - CVE Program Container: References: - https://ismartgate.com/secure-garage-door/ - https://kth.diva-portal.org/smash/get/diva2:1464458/FULLTEXT01.pdf
CVE ID: CVE-2020-12283 State: PUBLISHED Published: 2020-04-30T04:07:29 Last Updated: 2024-08-04T11:48:58.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcegraph before 3.15.1 has a vulnerable authentication workflow because of improper validation in the SafeRedirectURL method in cmd/frontend/auth/redirect.go, such as for the //foo//example.com substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sourcegraph/sourcegraph/pull/10167 - https://github.com/sourcegraph/sourcegraph/compare/v3.15.0...v3.15.1 - https://github.com/sourcegraph/sourcegraph/commit/c0f48172e815c7f66471a38f0a06d1fc32a77a64 - https://github.com/sourcegraph/sourceg
hub.com/sourcegraph/sourcegraph/commit/c0f48172e815c7f66471a38f0a06d1fc32a77a64 - https://github.com/sourcegraph/sourcegraph/blob/master/CHANGELOG.md - https://securitylab.github.com/advisories/GHSL-2020-085-sourcegraph
CVE ID: CVE-2020-12284 State: PUBLISHED Published: 2020-04-28T05:16:43 Last Updated: 2024-08-04T11:48:58.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/1812352d767ccf5431aa440123e2e260a4db2726 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19734 - https://www.debian.org/security/2020/dsa-4722 - https://usn.ubuntu.com/4431-1/ - https://security.gentoo.org/glsa/202007-58 - https://github.com/FFm
ity/2020/dsa-4722 - https://usn.ubuntu.com/4431-1/ - https://security.gentoo.org/glsa/202007-58 - https://github.com/FFmpeg/FFmpeg/commit/a3a3730b5456ca00587455004d40c047f7b20a99
CVE ID: CVE-2020-12286 State: PUBLISHED Published: 2020-04-28T06:06:24 Last Updated: 2024-08-04T11:48:58.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Octopus Deploy before 2019.12.9 and 2020 before 2020.1.12, the TaskView permission is not scoped to any dimension. For example, a scoped user who is scoped to only one tenant can view server tasks scoped to any other tenant. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OctopusDeploy/Issues/issues/6333 - https://github.com/OctopusDeploy/Issues/issues/6332 - https://github.com/OctopusDeploy/Issues/issues/6331
CVE ID: CVE-2020-12287 State: PUBLISHED Published: 2020-08-13T02:11:15 Last Updated: 2024-08-04T11:48:58.567Z Vendors: n/a Products: Intel(R) Distribution of OpenVINO(TM) Toolkit Advisory Problem Types: Escalation of Privilege Description: Incorrect permissions in the Intel(R) Distribution of OpenVINO(TM) Toolkit before version 2020.2 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00399.html
CVE ID: CVE-2020-12288 State: PUBLISHED Published: 2021-06-09T18:42:44 Last Updated: 2024-08-04T11:48:58.557Z Vendors: n/a Products: Intel(R) Thunderbolt(TM) controllers Problem Types: denial of service Description: Protection mechanism failure in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00401.html
CVE ID: CVE-2020-12289 State: PUBLISHED Published: 2021-06-09T18:42:50 Last Updated: 2024-08-04T11:48:58.553Z Vendors: n/a Products: Intel(R) Thunderbolt(TM) controllers Problem Types: denial of service Description: Out-of-bounds write in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00401.html
CVE ID: CVE-2020-12290 State: PUBLISHED Published: 2021-06-09T18:42:38 Last Updated: 2024-08-04T11:56:50.450Z Vendors: n/a Products: Intel(R) Thunderbolt(TM) controllers Problem Types: denial of service Description: Improper access control in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00401.html
CVE ID: CVE-2020-12291 State: PUBLISHED Published: 2021-06-09T18:37:54 Last Updated: 2024-08-04T11:56:50.442Z Vendors: n/a Products: Intel(R) Thunderbolt(TM) controllers Problem Types: denial of service Description: Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00401.html
CVE ID: CVE-2020-12292 State: PUBLISHED Published: 2021-06-09T18:42:29 Last Updated: 2024-08-04T11:56:50.597Z Vendors: n/a Products: Intel(R) Thunderbolt(TM) controllers Problem Types: denial of service Description: Improper conditions check in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00401.html
CVE ID: CVE-2020-12293 State: PUBLISHED Published: 2021-06-09T18:37:28 Last Updated: 2024-08-04T11:56:50.598Z Vendors: n/a Products: Intel(R) Thunderbolt(TM) controllers Problem Types: denial of service Description: Improper control of a resource through its lifetime in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00401.html