Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-9342 State: PUBLISHED Published: 2020-02-22T22:41:28 Last Updated: 2024-08-04T10:26:16.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This affects versions before 17.0.605.474 (on Linux) of Cloud Protection For Salesforce, Email and Server Security, and Internet GateKeeper. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zoller.lu/p/tzo-16-2020-f-secure-generic-malformed.html - https://seclists.org/bugtraq/2020/Feb/33 - http://packetstormsecurity.com/files/156506/F-SECURE-Generic-Malformed-Contain
ttps://seclists.org/bugtraq/2020/Feb/33 - http://packetstormsecurity.com/files/156506/F-SECURE-Generic-Malformed-Container-Bypass.html - http://seclists.org/fulldisclosure/2020/Feb/33
CVE ID: CVE-2020-9343 State: PUBLISHED Published: 2020-03-20T02:18:40 Last Updated: 2024-08-04T10:26:16.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1 on Windows. It is possible to perform a Denial of Service attack because the implementation doesn't limit the parsing of nested JSON structures. If a victim visits an attacker-controlled website, this vulnerability can be exploited via WebSocket data with a deeply nested JSON array. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-053.txt
CVE ID: CVE-2020-9344 State: PUBLISHED Published: 2020-03-20T02:18:43 Last Updated: 2024-08-04T10:26:16.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Subversion ALM for the enterprise before 8.8.2 allows reflected XSS at multiple locations. Additional Analyst Notes: - CVE Program Container: References: - https://kintosoft.atlassian.net/wiki/spaces/SVNALM/pages/753565697/Security+Bulletin - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-007.txt
CVE ID: CVE-2020-9345 State: PUBLISHED Published: 2020-03-20T02:18:46 Last Updated: 2024-08-04T10:26:16.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1 on Windows. It is possible to perform a Denial of Service attack because the application doesn't limit the number of opened WebSocket sockets. If a victim visits an attacker-controlled website, this vulnerability can be exploited. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-052.txt
CVE ID: CVE-2020-9346 State: PUBLISHED Published: 2020-03-16T21:42:06 Last Updated: 2024-08-04T10:26:16.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Password Manager Pro 10.4 and prior has no protection against Cross-site Request Forgery (CSRF) attacks, as demonstrated by changing a user's role. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/passwordmanagerpro/issues-fixed.html - https://www.infigo.hr/upload/web_struktura/Zoho_ManageEngine_Password_Manager_Pro_10.4_CSRF.txt
CVE ID: CVE-2020-9347 State: PUBLISHED Published: 2020-03-16T21:44:31 Last Updated: 2024-08-04T10:26:16.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Password Manager Pro through 10.x has a CSV Excel Macro Injection vulnerability via a crafted name that is mishandled by the Export Passwords feature. NOTE: the vendor disputes the significance of this report because they expect CSV risk mitigation to be provided by an external application, and do not plan to add CSV constraints to their own products Additional Analyst Notes: - CVE Program Container: References: - https://www.infigo.hr/upload/web_struktura/Zoho_ManageEngine_Password_Manager_Pro_10.x_CSV_Excel
ontainer: References: - https://www.infigo.hr/upload/web_struktura/Zoho_ManageEngine_Password_Manager_Pro_10.x_CSV_Excel_Macro_Injection.txt
CVE ID: CVE-2020-9349 State: PUBLISHED Published: 2020-04-02T14:50:37 Last Updated: 2024-08-04T10:26:16.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 allows access to the RTSP service without a password. Additional Analyst Notes: - CVE Program Container: References: - https://www.cacagoo.com - https://insights.oem.avira.com/serious-security-flaws-uncovered-in-cacagoo-ip-cameras/
CVE ID: CVE-2020-9350 State: PUBLISHED Published: 2020-02-23T00:53:00 Last Updated: 2024-08-04T10:26:16.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Graph Builder in SAS Visual Analytics 8.5 allows XSS via a graph template that is accessed directly. Additional Analyst Notes: - CVE Program Container: References: - http://support.sas.com/kb/65/358.html
CVE ID: CVE-2020-9351 State: PUBLISHED Published: 2020-02-23T00:00:00 Last Updated: 2024-08-04T10:26:16.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SmartClient 12.0. If an unauthenticated attacker makes a POST request to /tools/developerConsoleOperations.jsp or /isomorphic/IDACall with malformed XML data in the _transaction parameter, the server replies with a verbose error showing where the application resides (the absolute path). NOTE: the documentation states "These tools are, by default, available to anyone ... so they should only be deployed into a trusted environment. Alternately, the tools can easily be restricted to administrators or end
ld only be deployed into a trusted environment. Alternately, the tools can easily be restricted to administrators or end users by protecting the tools path with normal authentication and authorization mechanisms on the web server." Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2020/Feb/18 - https://www-demos.smartclient.com/smartclient-12.0/isomorphic/system/reference/?id=group..toolsDeployment
CVE ID: CVE-2020-9352 State: PUBLISHED Published: 2020-02-23T00:00:00 Last Updated: 2024-08-04T10:26:16.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SmartClient 12.0. Unauthenticated exploitation of blind XXE can occur in the downloadWSDL feature by sending a POST request to /tools/developerConsoleOperations.jsp with a valid payload in the _transaction parameter. NOTE: the documentation states "These tools are, by default, available to anyone ... so they should only be deployed into a trusted environment. Alternately, the tools can easily be restricted to administrators or end users by protecting the tools path with normal authentication and auth
can easily be restricted to administrators or end users by protecting the tools path with normal authentication and authorization mechanisms on the web server." Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2020/Feb/18 - https://blog.certimetergroup.com/it/articolo/security/smartclient-v12-xml-external-entity--cve-2020-9352 - https://www-demos.smartclient.com/smartclient-12.0/isomorphic/system/reference/?id=group..toolsDeployment
CVE ID: CVE-2020-9353 State: PUBLISHED Published: 2020-02-23T00:00:00 Last Updated: 2024-08-04T10:26:16.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) loadFile provided by the console functionality on the /tools/developerConsoleOperations.jsp (or /isomorphic/IDACall) URL is affected by unauthenticated Local File Inclusion via directory-traversal sequences in the elem XML element in the _transaction parameter. NOTE: the documentation states "These tools are, by default, available to anyone ... so they should only be deployed into a trusted environment. Alternately, the tools can easily be restricted
anyone ... so they should only be deployed into a trusted environment. Alternately, the tools can easily be restricted to administrators or end users by protecting the tools path with normal authentication and authorization mechanisms on the web server." Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2020/Feb/18 - https://www-demos.smartclient.com/smartclient-12.0/isomorphic/system/reference/?id=group..toolsDeployment
CVE ID: CVE-2020-9354 State: PUBLISHED Published: 2020-02-23T01:32:02 Last Updated: 2024-08-04T10:26:16.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) saveFile provided by the console functionality on the /tools/developerConsoleOperations.jsp (or /isomorphic/IDACall) URL allows an unauthenticated attacker to overwrite files via vectors involving an XML comment and /.. path traversal. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2020/Feb/18
CVE ID: CVE-2020-9355 State: PUBLISHED Published: 2020-02-23T01:55:46 Last Updated: 2024-08-04T10:26:16.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/danfruehauf/NetworkManager-ssh/pull/98 - https://bugzilla.redhat.com/show_bug.cgi?id=1803499 - https://github.com/danfruehauf/NetworkManager-ssh/releases/tag/1.2.11 - https://www.debian.org/security/2020/dsa-4637
CVE ID: CVE-2020-9359 State: PUBLISHED Published: 2020-03-24T13:29:03 Last Updated: 2024-08-04T10:26:16.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDE Okular before 1.10.0 allows code execution via an action link in a PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2TY3O6UWX2XTP7PISPTZ6FYRDFU4UF66/ - https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244 - https://kde.org/info/security/advisory-20200312-1.txt - https://lists.debian.org/debian-lts-announce/2020/03/msg00033.html - https://lists.fedoraproject.org/archiv
0312-1.txt - https://lists.debian.org/debian-lts-announce/2020/03/msg00033.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AW6GJ3AKGXOMTDHNZBMSXDTWNJJRFBDH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G3HL3F6JLCSRLPFZ47735F5STPJWDVR4/ - https://security.gentoo.org/glsa/202007-47 - https://lists.debian.org/debian-lts-announce/2021/12/msg00019.html
CVE ID: CVE-2020-9361 State: PUBLISHED Published: 2020-10-23T04:48:06 Last Updated: 2024-08-04T10:26:16.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: CryptoPro CSP through 5.0.0.10004 on 64-bit platforms allows local users with the SeChangeNotifyPrivilege right to cause denial of service because user-mode input is mishandled during process creation. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=b5vPDmMtzwQ
CVE ID: CVE-2020-9362 State: PUBLISHED Published: 2020-02-24T15:07:46 Last Updated: 2024-08-04T10:26:16.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Quick Heal AV parsing engine (November 2019) allows virus-detection bypass via a crafted GPFLAG in a ZIP archive. This affects Total Security, Home Security, Total Security Multi-Device, Internet Security, Total Security for Mac, AntiVirus Pro, AntiVirus for Server, and Total Security for Android. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zoller.lu/p/from-low-hanging-fruit-department_24.html - http://packetstormsecurity.com/files/156580/QuickHeal-Generic-Malformed-Archive-Bypass.html - h
uit-department_24.html - http://packetstormsecurity.com/files/156580/QuickHeal-Generic-Malformed-Archive-Bypass.html - https://blog.zoller.lu/p/tzo-20-2020-quickheal-malformed-archive.html - http://seclists.org/fulldisclosure/2020/Mar/14
CVE ID: CVE-2020-9363 State: PUBLISHED Published: 2020-02-24T15:07:39 Last Updated: 2024-08-04T10:26:16.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass via a crafted ZIP archive. This affects Endpoint Protection, Cloud Optix, Mobile, Intercept X Endpoint, Intercept X for Server, and Secure Web Gateway. NOTE: the vendor feels that this does not apply to endpoint-protection products because the virus would be detected upon extraction. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zoller.lu/p/release-mode-coordinated-disclosure-ref.html - https://community.sophos.com/b/se
References: - https://blog.zoller.lu/p/release-mode-coordinated-disclosure-ref.html - https://community.sophos.com/b/security-blog/posts/sophos-comments-to-cve-2020-9363
CVE ID: CVE-2020-9364 State: PUBLISHED Published: 2020-03-04T15:58:23 Last Updated: 2024-08-04T10:26:16.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in helpers/mailer.php in the Creative Contact Form extension 4.6.2 before 2019-12-03 for Joomla!. A directory traversal vulnerability resides in the filename field for uploaded attachments via the creativecontactform_upload parameter. An attacker could exploit this vulnerability with the "Send me a copy" option to receive any files of the filesystem via email. Additional Analyst Notes: - CVE Program Container: References: - https://extensions.joomla.org/extension/creative-contact-form/ - https://www.ait
- CVE Program Container: References: - https://extensions.joomla.org/extension/creative-contact-form/ - https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories/ait-sa-20200301-01/ - http://seclists.org/fulldisclosure/2020/Mar/13 - http://packetstormsecurity.com/files/156655/Creative-Contact-Form-4.6.2-Directory-Traversal.html
CVE ID: CVE-2020-9365 State: PUBLISHED Published: 2020-02-24T15:58:51 Last Updated: 2024-08-04T10:26:16.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Pure-FTPd 1.0.49. An out-of-bounds (OOB) read has been detected in the pure_strcmp function in utils.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jedisct1/pure-ftpd/commit/36c6d268cb190282a2c17106acfd31863121b58e - https://security.gentoo.org/glsa/202003-54 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22P44PECZWNDP7CMBL7NRBMNFS73C5Z2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists
t.org/message/22P44PECZWNDP7CMBL7NRBMNFS73C5Z2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U5DBVHJCXWRSJPNJQCJQCKZF6ZDPZCKA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B5NSUDWXZVWUCL6R2PTX3KBB42Z62CA5/ - https://github.com/jedisct1/pure-ftpd/commit/bf6fcd4935e95128cf22af5924cdc8fe5c0579da
CVE ID: CVE-2020-9366 State: PUBLISHED Published: 2020-02-24T16:20:15 Last Updated: 2024-08-04T10:26:16.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special program, could corrupt memory and crash Screen or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2020/02/06/3 - https://lists.gnu.org/archive/html/screen-devel/2020-02/msg00007.html - http://www.openwall.com/lists/oss-security/2020/02/25/1 - https://security.gentoo.org/glsa/202003-62
CVE ID: CVE-2020-9367 State: PUBLISHED Published: 2021-03-18T19:35:29 Last Updated: 2024-08-04T10:26:16.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MPS Agent in Zoho ManageEngine Desktop Central MSP build MSP build 10.0.486 is vulnerable to DLL Hijacking: dcinventory.exe and dcconfig.exe try to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because this DLL is missing from the installation, thus making it possible to hijack the DLL and subsequently inject code, leading to an escalation of privilege to NT AUTHORITY\SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/desktop-management-msp
EM. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/desktop-management-msp/dll-hijacking-vulnerability.html
CVE ID: CVE-2020-9368 State: PUBLISHED Published: 2020-11-02T17:12:27 Last Updated: 2024-08-04T10:26:16.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Module Olea Gift On Order module through 5.0.8 for PrestaShop enables an unauthenticated user to read arbitrary files on the server via getfile.php?file=/.. directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://www.intrinsec.com/publications/ - https://github.com/Intrinsec/CERT/blob/master/Advisories/CVE-2020-9368.md
CVE ID: CVE-2020-9369 State: PUBLISHED Published: 2020-02-24T17:25:39 Last Updated: 2024-08-04T10:26:16.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk consumption from temporary files, and a flood of notifications to listmasters) via a series of requests with malformed parameters. Additional Analyst Notes: - CVE Program Container: References: - https://sympa-community.github.io/security/2020-001.html - https://github.com/sympa-community/sympa/issues/886 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XO4WJYNNHWM7DUKCN4EWYYYPXZSOI7BQ/ - htt
doraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XO4WJYNNHWM7DUKCN4EWYYYPXZSOI7BQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6TMVZ5LVYCCIHGEC7RQUMGUE7DJWUXN7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A3FUYYLV6URRLAJVWXNJYK2CNOKKNHXC/ - https://www.debian.org/security/2020/dsa-4818
CVE ID: CVE-2020-9370 State: PUBLISHED Published: 2020-03-05T12:27:54 Last Updated: 2024-08-04T10:26:16.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking. Additional Analyst Notes: - CVE Program Container: References: - https://uk.humaxdigital.com/network/hga12r-02/ - https://medium.com/%40rsantos_14778/hijacked-session-cve-2020-9370-255bbd02975a
CVE ID: CVE-2020-9371 State: PUBLISHED Published: 2020-03-04T18:11:35 Last Updated: 2024-08-04T10:26:16.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress. In the cpabc_appointments.php file, the Calendar Name input could allow attackers to inject arbitrary JavaScript or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/appointment-booking-calendar/#developers - https://drive.google.com/open?id=1NNcYPaJir9SleyVr4cSPqpI2LNM7rtx9 - https://www.hotdreamweaver.com/support/view.php?id=815925 - https://wpvulndb.com/vulnerabilities/10110 - http://p
rtx9 - https://www.hotdreamweaver.com/support/view.php?id=815925 - https://wpvulndb.com/vulnerabilities/10110 - http://packetstormsecurity.com/files/156694/WordPress-Appointment-Booking-Calendar-1.3.34-CSV-Injection.html
CVE ID: CVE-2020-9372 State: PUBLISHED Published: 2020-03-04T18:12:31 Last Updated: 2024-08-04T10:26:16.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields such as Description or Name) in any booking form to be any formula, which then could be exported via the Bookings list tab in /wp-admin/admin.php?page=cpabc_appointments.php. The attacker could achieve remote code execution via CSV injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/appointment-booking-calendar/#developers - https://drive.google.com/open?id=1NNcYPaJir9SleyVr4cSP
/wordpress.org/plugins/appointment-booking-calendar/#developers - https://drive.google.com/open?id=1NNcYPaJir9SleyVr4cSPqpI2LNM7rtx9 - https://www.hotdreamweaver.com/support/view.php?id=815925 - http://packetstormsecurity.com/files/156694/WordPress-Appointment-Booking-Calendar-1.3.34-CSV-Injection.html
CVE ID: CVE-2020-9374 State: PUBLISHED Published: 2020-02-24T18:57:52 Last Updated: 2024-08-04T10:26:16.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature. Additional Analyst Notes: - CVE Program Container: References: - https://fireshellsecurity.team/hack-n-routers/ - https://github.com/ElberTavares/routers-exploit/tree/master/tp-link - http://packetstormsecurity.com/files/156584/TP-Link-TL-WR849N-Remote-Code-Execution.html
CVE ID: CVE-2020-9375 State: PUBLISHED Published: 2020-03-25T14:17:59 Last Updated: 2024-08-04T10:26:16.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field. Additional Analyst Notes: - CVE Program Container: References: - https://thewhiteh4t.github.io/2020/02/27/CVE-2020-9375-TP-Link-Archer-C50-v3-Denial-of-Service.html - https://www.tp-link.com/in/support/download/archer-c50/v3/#Firmware - http://packetstormsecurity.com/files/156928/TP-Link-Archer-C50-V3-Denial-of-Service.html
CVE ID: CVE-2020-9376 State: PUBLISHED Published: 2020-07-09T12:08:01 Last Updated: 2024-08-04T10:26:16.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-610 devices allow Information Disclosure via SERVICES=DEVICE.ACCOUNT%0AAUTHORIZED_GROUP=1 to getcfg.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com.br/produto/dir-610/ - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10182 - https://gist.github.com/GouveaHeitor/dcbb67b301cc45adc00f8a6a2a0a590f
CVE ID: CVE-2020-9377 State: PUBLISHED Published: 2020-07-09T12:06:48.000Z Last Updated: 2025-10-21T23:35:41.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com.br/produto/dir-610/ - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10182 - https://gist.github.com/GouveaHeitor/131557f9de7d571f118f59805df852dc
CVE ID: CVE-2020-9379 State: PUBLISHED Published: 2020-02-25T18:45:45 Last Updated: 2024-08-04T10:26:16.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Software Development Kit of the MiContact Center Business with Site Based Security 8.0 through 9.0.1.0 before KB496276 allows an authenticated user to access sensitive information. A successful exploit could allow unauthorized access to user conversations. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0003