Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-24583 State: PUBLISHED Published: 2020-09-01T12:33:13 Last Updated: 2024-08-04T15:19:08.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). FILE_UPLOAD_DIRECTORY_PERMISSIONS mode was not applied to intermediate-level directories created in the process of uploading files. It was also not applied to intermediate-level collected static directories when using the collectstatic management command. Additional Analyst Notes: - CVE Program Container: References: - https://docs.djangoproject.com/en/dev/releases/security/ - https://usn.ubuntu.com/4479-1/
ogram Container: References: - https://docs.djangoproject.com/en/dev/releases/security/ - https://usn.ubuntu.com/4479-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F2ZHO3GZCJMP3DDTXCNVFV6ED3W64NAU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZCRPQCBTV3RZHKVZ6K6QOAANPRZQD3GI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OLGFFLMF3X6USMJD7V5F5P4K2WVUTO3T/ - https://www.oracle.com/security-alerts/cpujan2021.html - https://groups.google.com/forum/#%21topic/django-announce/zFCMdgUnutU - https://groups.google.com/forum/#%21topic/django-
ttps://groups.google.com/forum/#%21topic/django-announce/zFCMdgUnutU - https://groups.google.com/forum/#%21topic/django-announce/Gdqn58RqIDM - https://www.openwall.com/lists/oss-security/2020/09/01/2 - https://www.djangoproject.com/weblog/2020/sep/01/security-releases/ - https://security.netapp.com/advisory/ntap-20200918-0004/
CVE ID: CVE-2020-24584 State: PUBLISHED Published: 2020-09-01T12:36:06 Last Updated: 2024-08-04T15:19:08.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). The intermediate-level directories of the filesystem cache had the system's standard umask rather than 0o077. Additional Analyst Notes: - CVE Program Container: References: - https://docs.djangoproject.com/en/dev/releases/security/ - https://usn.ubuntu.com/4479-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F2ZHO3GZCJMP3DDTXCNVFV6ED3W64NAU/ - https://li
ject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F2ZHO3GZCJMP3DDTXCNVFV6ED3W64NAU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZCRPQCBTV3RZHKVZ6K6QOAANPRZQD3GI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OLGFFLMF3X6USMJD7V5F5P4K2WVUTO3T/ - https://www.oracle.com/security-alerts/cpujan2021.html - https://groups.google.com/forum/#%21topic/django-announce/zFCMdgUnutU - https://groups.google.com/forum/#%21topic/django-announce/Gdqn58RqIDM - https://www.openwall.com/lists/oss-security/2020/09/01/2 - https://www.djangoproject.com/weblog/2020/sep/01/security-releas
ps://www.openwall.com/lists/oss-security/2020/09/01/2 - https://www.djangoproject.com/weblog/2020/sep/01/security-releases/ - https://security.netapp.com/advisory/ntap-20200918-0004/
CVE ID: CVE-2020-24585 State: PUBLISHED Published: 2020-08-21T13:04:34 Last Updated: 2024-08-04T15:19:09.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS application_data messages in epoch 0 do not produce an out-of-order error. Instead, these messages are returned to the application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfssl/pull/3219 - https://github.com/wolfSSL/wolfssl/releases/tag/v4.5.0-stable
CVE ID: CVE-2020-24586 State: PUBLISHED Published: 2021-05-11T00:00:00 Last Updated: 2024-08-04T15:19:08.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/ad
itional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu - https://www.fragattacks.com - https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md - http://www.openwall.com/lists/oss-security/2021/05/11/12 - https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html - https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 - https://lists.debian.org/debian-lts-announce/2023/04/msg00
ries-notices/security-advisories/12602-security-advisory-63 - https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
CVE ID: CVE-2020-24587 State: PUBLISHED Published: 2021-05-11T00:00:00 Last Updated: 2024-08-04T15:19:08.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html - https://tools.c
er: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu - https://www.fragattacks.com - https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md - http://www.openwall.com/lists/oss-security/2021/05/11/12 - https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html - https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 - https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
CVE ID: CVE-2020-24588 State: PUBLISHED Published: 2021-05-11T00:00:00 Last Updated: 2024-08-04T15:19:08.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html - https://
Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu - https://www.fragattacks.com - https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md - http://www.openwall.com/lists/oss-security/2021/05/11/12 - https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html - https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf - https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 - https://lists.debian.org/debia
arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 - https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
CVE ID: CVE-2020-24589 State: PUBLISHED Published: 2020-08-21T19:06:07 Last Updated: 2024-08-04T15:19:07.881Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML External Entity injection (XXE) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0742
CVE ID: CVE-2020-24590 State: PUBLISHED Published: 2020-08-21T19:05:31 Last Updated: 2024-08-04T15:19:07.873Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML Entity Expansion attacks. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0742
CVE ID: CVE-2020-24591 State: PUBLISHED Published: 2020-08-21T19:05:53 Last Updated: 2024-08-04T15:19:08.739Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:N/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: The Management Console in certain WSO2 products allows XXE attacks during EventReceiver updates. This affects API Manager through 3.0.0, API Manager Analytics 2.2.0 and 2.5.0, API Microgateway 2.2.0, Enterprise Integrator 6.2.0 and 6.3.0, and Identity Server Analytics through 5.6.0. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0728
CVE ID: CVE-2020-24592 State: PUBLISHED Published: 2020-09-25T03:44:33 Last Updated: 2024-08-04T15:19:08.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to view system information due to insufficient output sanitization. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0010
CVE ID: CVE-2020-24593 State: PUBLISHED Published: 2020-09-25T03:46:46 Last Updated: 2024-08-04T15:19:08.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mitel MiCloud Management Portal before 6.1 SP5 could allow a remote attacker to conduct a SQL Injection attack and access user credentials due to improper input validation. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0010
CVE ID: CVE-2020-24594 State: PUBLISHED Published: 2020-09-25T03:47:16 Last Updated: 2024-08-04T15:19:08.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mitel MiCloud Management Portal before 6.1 SP5 could allow an unauthenticated attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allow an attacker to gain access to a user session. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0010
CVE ID: CVE-2020-24595 State: PUBLISHED Published: 2020-09-25T03:47:42 Last Updated: 2024-08-04T15:19:09.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to retrieve sensitive information due to insufficient access control. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0010
CVE ID: CVE-2020-24598 State: PUBLISHED Published: 2020-08-26T21:27:02 Last Updated: 2024-08-04T15:19:09.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.21. Lack of input validation in the vote feature of com_content leads to an open redirect. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/825-20200802-core-open-redirect-in-com-content-vote-feature
CVE ID: CVE-2020-24599 State: PUBLISHED Published: 2020-08-26T21:25:09 Last Updated: 2024-08-04T15:19:08.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.21. Lack of escaping in mod_latestactions allows XSS attacks. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/824-20200801-core-xss-in-mod-latestactions
CVE ID: CVE-2020-24600 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T16:50:11.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shilpi CAPExWeb 1.1 allows SQL injection via a servlet/capexweb.cap_sendMail GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cybersecurityworks.com/zerodays/cve-2020-24600-sql-injection-in-capexweb.html
CVE ID: CVE-2020-24601 State: PUBLISHED Published: 2020-09-02T14:41:40 Last Updated: 2024-08-04T15:19:07.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ignite Realtime Openfire 4.5.1 a Stored Cross-site Vulnerability allows an attacker to execute an arbitrary malicious URL via the vulnerable POST parameter searchName", "alias" in the import certificate trusted page Additional Analyst Notes: - CVE Program Container: References: - https://issues.igniterealtime.org/browse/OF-1963 - https://cybersecurityworks.com/zerodays/cve-2020-24601-ignite-realtime-openfire.html
CVE ID: CVE-2020-24602 State: PUBLISHED Published: 2020-09-02T14:37:26 Last Updated: 2024-08-04T15:19:08.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ignite Realtime Openfire 4.5.1 has a reflected Cross-site scripting vulnerability which allows an attacker to execute arbitrary malicious URL via the vulnerable GET parameter searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescription" and "searchDynamic" in the Server Properties and Security Audit Viewer JSP page Additional Analyst Notes: - CVE Program Container: References: - https://issues.igniterealtime.org/browse/OF-1963 - https://cybersecurityworks.com/zerodays/cve-2020-24602
References: - https://issues.igniterealtime.org/browse/OF-1963 - https://cybersecurityworks.com/zerodays/cve-2020-24602-ignite-realtime-openfire.html
CVE ID: CVE-2020-24604 State: PUBLISHED Published: 2020-09-02T14:40:05 Last Updated: 2024-08-04T15:19:09.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected XSS vulnerability was discovered in Ignite Realtime Openfire version 4.5.1. The XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the GET request "searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescription" and "searchDynamic" in server-properties.jsp and security-audit-viewer.jsp Additional Analyst Notes: - CVE Program Container: References: - https://issues.igniterealtime.org/browse/OF-1963 - https://cybersecurityworks.com/zerodays/
ram Container: References: - https://issues.igniterealtime.org/browse/OF-1963 - https://cybersecurityworks.com/zerodays/cve-2020-24604-ignite-realtime-openfire.html
CVE ID: CVE-2020-24606 State: PUBLISHED Published: 2020-08-24T17:06:24 Last Updated: 2024-08-04T15:19:08.544Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during handling of a crafted Cache Digest response message. This only occurs when cache_peer is used with the cache digests feature. The problem exists because peerDigestHandleReply() livelocking in peer_digest.cc mishandles EOF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/squid-cache/squid/
c mishandles EOF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/squid-cache/squid/security/advisories/GHSA-vvj7-xjgq-g2jg - http://www.squid-cache.org/Versions/v4/changesets/SQUID-2020_9.patch - https://www.debian.org/security/2020/dsa-4751 - https://usn.ubuntu.com/4477-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HJJDI7JQFGQLVNCKMVY64LAFMKERAOK7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BMTFLVB7GLRF2CKGFPZ4G4R5DIIPHWI3/ - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00012.html - http://lists.opensuse.org/opensuse-security
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00017.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BE6FKUN7IGTIR2MEEMWYDT7N5EJJLZI2/ - https://usn.ubuntu.com/4551-1/ - https://lists.debian.org/debian-lts-announce/2020/10/msg00005.html - https://security.netapp.com/advisory/ntap-20210219-0007/ - https://security.netapp.com/advisory/ntap-20210226-0007/ - https://security.netapp.com/advisory/ntap-20210226-0006/
CVE ID: CVE-2020-24609 State: PUBLISHED Published: 2020-08-25T14:35:33 Last Updated: 2024-08-04T15:19:08.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: TechKshetra Info Solutions Pvt. Ltd Savsoft Quiz 5.5 and earlier has XSS which can result in an attacker injecting the XSS payload in the User Registration section and each time the admin visits the manage user section from the admin panel, the XSS triggers and the attacker can steal the cookie via crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/48753 - https://www.exploit-db.com/exploits/48785
CVE ID: CVE-2020-24612 State: PUBLISHED Published: 2020-08-24T20:46:16 Last Updated: 2024-08-04T15:19:08.684Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AC:H/AV:L/A:N/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the selinux-policy (aka Reference Policy) package 3.14 through 2020-08-24 because the .config/Yubico directory is mishandled. Consequently, when SELinux is in enforced mode, pam-u2f is not allowed to read the user's U2F configuration file. If configured with the nouserok option (the default when configured by the authselect tool), and that file cannot be read, the second factor is disabled. An attacker with only the knowledge o
the authselect tool), and that file cannot be read, the second factor is disabled. An attacker with only the knowledge of the password can then log in, bypassing 2FA. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1860888 - https://github.com/fedora-selinux/selinux-policy/commit/71e1989028802c7875d3436fd3966c587fa383fb
CVE ID: CVE-2020-24613 State: PUBLISHED Published: 2020-08-24T21:06:22 Last Updated: 2024-08-04T15:19:09.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: wolfSSL before 4.5.0 mishandles TLS 1.3 server data in the WAIT_CERT_CR state, within SanityCheckTls13MsgReceived() in tls13.c. This is an incorrect implementation of the TLS 1.3 client state machine. This allows attackers in a privileged network position to completely impersonate any TLS 1.3 servers, and read or modify potentially sensitive information between clients using the wolfSSL library and these TLS servers. Additional Analyst Notes: - CVE Program Container: References: - https://research.nccgroup.com/2020/08/24/tech
servers. Additional Analyst Notes: - CVE Program Container: References: - https://research.nccgroup.com/2020/08/24/technical-advisory-wolfssl-tls-1-3-client-man-in-the-middle-attack/
CVE ID: CVE-2020-24614 State: PUBLISHED Published: 2020-08-25T13:36:43 Last Updated: 2024-08-04T15:19:08.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated users to execute arbitrary code. An attacker must have check-in privileges on the repository. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2020/08/20/1 - https://fossil-scm.org/forum/info/a05ae3ce7760daf6 - http://www.openwall.com/lists/oss-security/2020/08/25/1 - https://fossil-scm.org/fossil/vdiff?branch=sec2020-2.12-patch&diff=1&w - http://lists.opensuse.org/opensu
2020/08/25/1 - https://fossil-scm.org/fossil/vdiff?branch=sec2020-2.12-patch&diff=1&w - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00065.html - https://security.gentoo.org/glsa/202011-04 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ARYF4YMYXCANXUDS3B3CA4JGUZNUJOJA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GVZK4K7SFBQRCGCHS76HW2LTSEH2KSUM/
CVE ID: CVE-2020-24615 State: PUBLISHED Published: 2020-09-25T03:38:02 Last Updated: 2024-08-04T15:19:09.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service via SIP. Additional Analyst Notes: - CVE Program Container: References: - https://www.pexip.com - https://docs.pexip.com/admin/security_bulletins.htm
CVE ID: CVE-2020-24616 State: PUBLISHED Published: 2020-08-25T17:04:08 Last Updated: 2024-08-04T15:19:08.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP). Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 - https://github.com/FasterXML/jackson-databind/issues/2814 - https://security.netapp.com/advisory/ntap-20200904-0006/ - https://www.oracle.com/security-alerts/cpujan2021.h
es/2814 - https://security.netapp.com/advisory/ntap-20200904-0006/ - https://www.oracle.com/security-alerts/cpujan2021.html - https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html - https://www.oracle.com/security-alerts/cpuApr2021.html - https://www.oracle.com//security-alerts/cpujul2021.html - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2020-24617 State: PUBLISHED Published: 2021-02-19T22:48:01 Last Updated: 2024-08-04T15:19:08.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mailtrain through 1.24.1 allows SQL Injection in statsClickedSubscribersByColumn in lib/models/campaigns.js via /campaigns/clicked/ajax because variable column names are not properly escaped. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Mailtrain-org/mailtrain/pull/909 - https://securitylab.github.com/advisories/GHSL-2020-132-Mailtrain
CVE ID: CVE-2020-24618 State: PUBLISHED Published: 2020-08-27T19:48:08 Last Updated: 2024-08-04T15:19:09.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains YouTrack versions before 2020.3.4313, 2020.2.11008, 2020.1.11011, 2019.1.65514, 2019.2.65515, and 2019.3.65516, an attacker can retrieve an issue description without appropriate access. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://youtrack.jetbrains.com/issue/JT-59265 - https://blog.jetbrains.com/2020/11/16/jetbrains-security-bulletin-q3-2020/