Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ro.com/directories-pro-1-3-46/ - http://seclists.org/fulldisclosure/2020/Dec/15 - http://packetstormsecurity.com/files/160452/WordPress-DirectoriesPro-1.3.45-Cross-Site-Scripting.html - https://www.themissinglink.com.au/security-advisories-cve-2020-29304
CVE ID: CVE-2020-29311 State: PUBLISHED Published: 2020-12-10T21:38:37 Last Updated: 2024-08-04T16:48:01.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by another part of the software. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/mhaskar/bfa9c2c799fca6697bcc6a213d08cb3e - https://drive.google.com/file/d/1smOjvenPB-nE0PyIxnfujCT4KcxxkeWV/view?usp=sharing - https://drive.google.com/file/d/1iLMFSbY8x1CXIf0uFntovY6yZ7N24dQA/view?usp=sharing
CVE ID: CVE-2020-29312 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-18T17:08:59.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Zend Framework v.3.1.3 and before allow a remote attacker to execute arbitrary code via the unserialize function. Note: This has been disputed by third parties as incomplete and incorrect. The framework does not have a version that surpasses 2.x.x and was deprecated in early 2020. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://zend.com - https://cowtransfer.com/s/f9684f004d7149 - https://github.com/zendframework/zendframework
CVE ID: CVE-2020-29315 State: PUBLISHED Published: 2020-12-01T16:55:08 Last Updated: 2024-08-04T16:48:01.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: ThinkAdmin version v1 v6 has a stored XSS vulnerability which allows remote attackers to inject an arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zoujingli/ThinkAdmin/issues/255
CVE ID: CVE-2020-29321 State: PUBLISHED Published: 2021-06-04T19:40:19 Last Updated: 2024-08-04T16:48:01.785Z Vendors: n/a Products: D-Link Router DIR-868L Problem Types: Hardcoded Credentials Description: The D-Link router DIR-868L 3.01 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://cybersecurityworks.com/zerodays/cve-2020-29321-telnet-hardcoded-credentials.html
CVE ID: CVE-2020-29322 State: PUBLISHED Published: 2021-06-04T19:39:00 Last Updated: 2024-08-04T16:48:01.702Z Vendors: n/a Products: D-Link Router DIR-880L Problem Types: Hardcoded Credentials Description: The D-Link router DIR-880L 1.07 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://cybersecurityworks.com/zerodays/cve-2020-29322-telnet-hardcoded-credentials.html
CVE ID: CVE-2020-29323 State: PUBLISHED Published: 2021-06-04T19:39:29 Last Updated: 2024-08-04T16:48:01.628Z Vendors: n/a Products: D-Link Router DIR-885L-MFC Problem Types: Hardcoded Credentials Description: The D-link router DIR-885L-MFC 1.15b02, v1.21b05 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://cybersecurityworks.com/zerodays/cve-2020-29323-telnet-hardcoded-credentials.html
CVE ID: CVE-2020-29324 State: PUBLISHED Published: 2021-06-04T19:39:57 Last Updated: 2024-08-04T16:48:01.633Z Vendors: n/a Products: D-Link Router DIR-895L Problem Types: Hardcoded Credentials Description: The DLink Router DIR-895L MFC v1.21b05 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://cybersecurityworks.com/zerodays/cve-2020-29324-d-link-router-dir-895l-mfc-telnet-hardcoded-credentials.html
CVE ID: CVE-2020-29361 State: PUBLISHED Published: 2020-12-16T13:35:04 Last Updated: 2024-08-04T16:48:01.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/p11-glue/p11-kit/releases - https://github.com/p11-glue/p11-kit/security/advisories/GHSA-q4r3-hm6m-mvc2 - https://www.debian.org/security/2021/dsa-4822 - https://lists.debian.org/debian-lts-anno
dvisories/GHSA-q4r3-hm6m-mvc2 - https://www.debian.org/security/2021/dsa-4822 - https://lists.debian.org/debian-lts-announce/2021/01/msg00002.html - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2020-29362 State: PUBLISHED Published: 2020-12-16T13:32:57 Last Updated: 2024-08-04T16:48:01.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote commands and the client library. When the remote entity supplies a byte array through a serialized PKCS#11 function call, the receiving entity may allow the reading of up to 4 bytes of memory past the heap allocation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/p11-glue/p11-kit/releases - https://github.com/p11-glue/p11-kit/sec
Program Container: References: - https://github.com/p11-glue/p11-kit/releases - https://github.com/p11-glue/p11-kit/security/advisories/GHSA-5wpq-43j2-6qwc - https://www.debian.org/security/2021/dsa-4822 - https://lists.debian.org/debian-lts-announce/2021/01/msg00002.html
CVE ID: CVE-2020-29363 State: PUBLISHED Published: 2020-12-16T13:29:34 Last Updated: 2024-08-04T16:48:01.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in a CK_ATTRIBUTE, the receiving entity may not allocate sufficient length for the buffer to store the deserialized value. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/p11-glue/p11-kit/releases - https://www.debian.org/security/2021/dsa-4822 - h
ontainer: References: - https://github.com/p11-glue/p11-kit/releases - https://www.debian.org/security/2021/dsa-4822 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://github.com/p11-glue/p11-kit/security/advisories/GHSA-5j67-fw89-fp6x
CVE ID: CVE-2020-29364 State: PUBLISHED Published: 2020-11-30T17:48:02 Last Updated: 2024-08-04T16:48:01.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: In NetArt News Lister 1.0.0, the news headlines vulnerable to stored xss attacks. Attackers can inject codes in news titles. Additional Analyst Notes: - CVE Program Container: References: - https://www.netartmedia.net/newslister - https://github.com/aslanemre/CVE-2020-29364/blob/main/CVE-2020-29364
CVE ID: CVE-2020-29367 State: PUBLISHED Published: 2020-11-27T19:07:27 Last Updated: 2024-08-04T16:48:01.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when there is a lack of space to write compressed data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Blosc/c-blosc2/commit/c4c6470e88210afc95262c8b9fcc27e30ca043ee - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26442
CVE ID: CVE-2020-29368 State: PUBLISHED Published: 2020-11-28T06:20:26 Last Updated: 2024-08-04T16:48:01.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.5 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c444eb564fb16645c172d550359cb3d75fe8a040 - https://bugs.chromium.org/p/project-zero/i
/git/torvalds/linux.git/commit/?id=c444eb564fb16645c172d550359cb3d75fe8a040 - https://bugs.chromium.org/p/project-zero/issues/detail?id=2045 - https://security.netapp.com/advisory/ntap-20210108-0002/
CVE ID: CVE-2020-29369 State: PUBLISHED Published: 2020-11-28T06:20:14 Last Updated: 2024-08-04T16:48:01.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call, aka CID-246c320a8cfe. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.11 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=246c320a8cfe0b11d81a4af38fa9985ef0cc9a4c - https://bugs.chromium.org/p/project-ze
rnel/git/torvalds/linux.git/commit/?id=246c320a8cfe0b11d81a4af38fa9985ef0cc9a4c - https://bugs.chromium.org/p/project-zero/issues/detail?id=2056 - https://security.netapp.com/advisory/ntap-20210115-0001/ - http://www.openwall.com/lists/oss-security/2021/02/10/6 - http://www.openwall.com/lists/oss-security/2021/02/19/8
CVE ID: CVE-2020-29370 State: PUBLISHED Published: 2020-11-28T06:20:02 Last Updated: 2024-08-04T16:48:01.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in kmem_cache_alloc_bulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the required TID increment, aka CID-fd4d9c7d0c71. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.11 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fd4d9c7d0c71866ec0c2825189ebd2ce35bd95b8 - https://bugs.chromium.org/p/project-zero/issues/detail?id=2022 - https://security.netapp.com/advisory/ntap-20201218
b8 - https://bugs.chromium.org/p/project-zero/issues/detail?id=2022 - https://security.netapp.com/advisory/ntap-20201218-0001/
CVE ID: CVE-2020-29371 State: PUBLISHED Published: 2020-11-28T06:19:50 Last Updated: 2024-08-04T16:48:01.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in romfs_dev_read in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory leaks to userspace, aka CID-bcf85fcedfdd. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.4 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2935e0a3cec1ffa558eea90db6279cff83aa3592 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bcf85fcedfdd17911982a3e3564fcfec7b01eebd -
ttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bcf85fcedfdd17911982a3e3564fcfec7b01eebd - https://bugs.chromium.org/p/project-zero/issues/detail?id=2077
CVE ID: CVE-2020-29372 State: PUBLISHED Published: 2020-11-28T06:19:36 Last Updated: 2024-08-04T16:48:01.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in do_madvise in mm/madvise.c in the Linux kernel before 5.6.8. There is a race condition between coredump operations and the IORING_OP_MADVISE implementation, aka CID-bc0c4d1e176e. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.8 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bc0c4d1e176eeb614dc8734fc3ace34292771f11 - https://bugs.chromium.org/p/project-zero/issues/detail?id=2029 - http://pack
=bc0c4d1e176eeb614dc8734fc3ace34292771f11 - https://bugs.chromium.org/p/project-zero/issues/detail?id=2029 - http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.html
CVE ID: CVE-2020-29373 State: PUBLISHED Published: 2020-11-28T06:19:08 Last Updated: 2024-08-04T16:48:01.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations, aka CID-ff002b30181d. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ff002b30181d30cdfbca316dadd099c3ca0d739c - https://bugs.chromium.org/p/project-ze
rnel/git/torvalds/linux.git/commit/?id=ff002b30181d30cdfbca316dadd099c3ca0d739c - https://bugs.chromium.org/p/project-zero/issues/detail?id=2011
CVE ID: CVE-2020-29374 State: PUBLISHED Published: 2020-11-28T06:18:56 Last Updated: 2024-08-04T16:48:01.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c. The get_user_pages (aka gup) implementation, when used for a copy-on-write page, does not properly consider the semantics of read operations and therefore can grant unintended write access, aka CID-17839856fd58. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=2045 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.3 - https://git.kernel.org/pub
t-zero/issues/detail?id=2045 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.3 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=17839856fd588f4ab6b789f482ed3ffd7c403e1f - https://security.netapp.com/advisory/ntap-20210115-0002/ - http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html - https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html - https://www.debian.org/security/2022/dsa-5096
CVE ID: CVE-2020-29375 State: PUBLISHED Published: 2020-11-29T00:47:49 Last Updated: 2024-08-04T16:48:01.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. An low-privileged (non-admin) attacker can use a hardcoded password (4ef9cea10b2362f15ba4558b1d5c081f) to create an admin user. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2020/Jul/14
CVE ID: CVE-2020-29376 State: PUBLISHED Published: 2020-11-29T00:47:39 Last Updated: 2024-08-04T16:48:01.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. There is an !j@l#y$z%x6x7q8c9z) password for the admin account to authenticate to the TELNET service. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2020/Jul/14
CVE ID: CVE-2020-29377 State: PUBLISHED Published: 2020-11-29T00:47:30 Last Updated: 2024-08-04T16:48:01.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on V-SOL V1600D V2.03.69 OLT devices. The string K0LTdi@gnos312$ is compared to the password provided by the the remote attacker. If it matches, access is provided. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2020/Jul/14
CVE ID: CVE-2020-29378 State: PUBLISHED Published: 2020-11-29T00:47:21 Last Updated: 2024-08-04T16:48:01.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. It is possible to elevate the privilege of a CLI user (to full administrative access) by using the password !j@l#y$z%x6x7q8c9z) for the enable command. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2020/Jul/14
CVE ID: CVE-2020-29379 State: PUBLISHED Published: 2020-11-29T00:47:12 Last Updated: 2024-08-04T16:55:09.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on V-SOL V1600D4L V1.01.49 and V1600D-MINI V1.01.48 OLT devices. During the process of updating the firmware, the update script starts a telnetd -l /bin/sh process that does not require authentication for TELNET access. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2020/Jul/14
CVE ID: CVE-2020-29380 State: PUBLISHED Published: 2020-11-29T00:46:34 Last Updated: 2024-08-04T16:55:10.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. TELNET is offered by default but SSH is not always available. An attacker can intercept passwords sent in cleartext and conduct a man-in-the-middle attack on the management of the appliance. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2020/Jul/14
CVE ID: CVE-2020-29381 State: PUBLISHED Published: 2020-11-29T00:46:24 Last Updated: 2024-08-04T16:55:09.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. Command injection can occur in "upload tftp syslog" and "upload tftp configuration" in the CLI via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2020/Jul/14
CVE ID: CVE-2020-29382 State: PUBLISHED Published: 2020-11-29T00:46:06 Last Updated: 2024-08-04T16:55:09.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. A hardcoded RSA private key (specific to V1600D, V1600G1, and V1600G2) is contained in the firmware images. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2020/Jul/14
CVE ID: CVE-2020-29383 State: PUBLISHED Published: 2020-11-29T00:45:55 Last Updated: 2024-08-04T16:55:10.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on V-SOL V1600D4L V1.01.49 and V1600D-MINI V1.01.48 OLT devices. A hardcoded RSA private key (specific to V1600D4L and V1600D-MINI) is contained in the firmware images. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2020/Jul/14
CVE ID: CVE-2020-29384 State: PUBLISHED Published: 2020-11-30T15:49:37 Last Updated: 2024-08-04T16:55:09.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PNGOUT 2020-01-15. When compressing a crafted PNG file, it encounters an integer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/mmmdzz/03df5177afd04b32ac190eb7907f3834 - http://www.jonof.id.au/kenutils.html - http://advsys.net/ken/utils.htm
CVE ID: CVE-2020-29385 State: PUBLISHED Published: 2020-12-26T02:01:49 Last Updated: 2024-08-04T16:55:09.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw.c in the function write_indexes. if c->self_code equals 10, self->code_table[10].extends will assign the value 11 to c. The next execution in the loop will assign self->code_table[11].extends to c, which will give the value of 10. This will make the loop run infinitely. This bug can, for example, be triggered by calling this function with a GIF image with LZW compression that is crafted in a special way. Additional Analyst Notes:
calling this function with a GIF image with LZW compression that is crafted in a special way. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/blob/master/NEWS - https://security.gentoo.org/glsa/202012-15 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=977166 - https://ubuntu.com/security/CVE-2020-29385 - https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/164 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EANWYODLOJDFLMBH6WEKJJMQ5PKLEWML/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B5H3GNVWMZTYZR3JBYCK57PF7PFMQBNP/ - https:
aproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B5H3GNVWMZTYZR3JBYCK57PF7PFMQBNP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BGZVCTH5O7WBJLYXZ2UOKLYNIFPVR55D/
CVE ID: CVE-2020-29389 State: PUBLISHED Published: 2020-12-02T16:55:25 Last Updated: 2024-08-04T16:55:09.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official Crux Linux Docker images 3.0 through 3.4 contain a blank password for a root user. System using the Crux Linux Docker container deployed by affected versions of the Docker image may allow an attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-29389
CVE ID: CVE-2020-29390 State: PUBLISHED Published: 2020-11-30T17:24:17 Last Updated: 2024-08-04T16:55:09.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that could allow an unauthenticated attacker to execute a system command by using shell metacharacters and the %0a character. Additional Analyst Notes: - CVE Program Container: References: - https://blog.quake.so/post/zeroshell_linux_router_rce/
CVE ID: CVE-2020-29392 State: PUBLISHED Published: 2020-11-30T17:58:24 Last Updated: 2024-08-04T16:55:10.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Estil Hill Lock Password Manager Safe app 2.3 for iOS has a *#06#* backdoor password. An attacker with physical access can unlock the password manager without knowing the master password set by the user. Additional Analyst Notes: - CVE Program Container: References: - https://i.blackhat.com/asia-20/Friday/asia-20-Loke-Patching-Loopholes-Finding-Backdoors-In-Applications.pdf