Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-26572 State: PUBLISHED Published: 2020-10-06T01:03:56 Last Updated: 2024-08-04T15:56:04.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22967 - https://github.com/OpenSC/OpenSC/commit/9d294de90d1cc66956389856e60b6944b27b4817 - http://www.openwall.com/lists/oss-security/2020/11/24/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXOHFDMNMO6IDECAGUTB3SJGAGXVRT6S/ - https://lists.
.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXOHFDMNMO6IDECAGUTB3SJGAGXVRT6S/ - https://lists.debian.org/debian-lts-announce/2021/11/msg00027.html
CVE ID: CVE-2020-26574 State: PUBLISHED Published: 2020-10-06T14:32:24 Last Updated: 2024-08-04T15:56:04.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Leostream Connection Broker 8.2.x is affected by stored XSS. An unauthenticated attacker can inject arbitrary JavaScript code via the webquery.pl User-Agent HTTP header. It is rendered by the admins the next time they log in. The JavaScript injected can be used to force the admin to upload a malicious Perl script that will be executed as root via libMisc::browser_client. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: References:
products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://adepts.of0x.cc/leostream-xss-to-rce/ - https://www.leostream.com/resources/product-lifecycle/
CVE ID: CVE-2020-26575 State: PUBLISHED Published: 2020-10-06T14:57:03 Last Updated: 2024-08-04T15:56:04.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/wireshark/wireshark/-/issues/16887 - https://gitlab.com/wireshark/wireshark/-/merge_requests/467 - https://gitlab.com/wireshark/wireshark/-/merge_requests/471 - https://gitlab.com/wireshark/wireshark/-/merge_requests/472 - https:
tlab.com/wireshark/wireshark/-/merge_requests/471 - https://gitlab.com/wireshark/wireshark/-/merge_requests/472 - https://gitlab.com/wireshark/wireshark/-/merge_requests/473 - https://gitlab.com/wireshark/wireshark/-/commit/3ff940652962c099b73ae3233322b8697b0d10ab - https://security.gentoo.org/glsa/202011-08 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHZSVK7PO2LTGFQXFHFXY6SOMSQ7UPRS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2667E6WKVE56G66BVBVD7LJPIDOJ7K3/ - https://www.oracle.com/security-alerts/cpujan2021.html - https://www.wireshark.org/security/wnpa-sec-2020-14.html - https:
tps://www.oracle.com/security-alerts/cpujan2021.html - https://www.wireshark.org/security/wnpa-sec-2020-14.html - https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html
CVE ID: CVE-2020-26582 State: PUBLISHED Published: 2020-10-06T15:27:00 Last Updated: 2024-08-04T15:56:04.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DAP-1360U before 3.0.1 devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the IP JSON value for ping (aka res_config_action=3&res_config_id=18). Additional Analyst Notes: - CVE Program Container: References: - https://wilomousky.blogspot.com/2020/10/dap-1360u-cmdi.html - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10191
CVE ID: CVE-2020-26583 State: PUBLISHED Published: 2020-10-16T05:09:54 Last Updated: 2024-08-04T15:56:04.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Sage DPW 2020_06_x before 2020_06_002. It allows unauthenticated users to upload JavaScript (in a file) via the expenses claiming functionality. However, to view the file, authentication is required. By exploiting this vulnerability, an attacker can persistently include arbitrary HTML or JavaScript code into the affected web page. The vulnerability can be used to change the contents of the displayed site, redirect to other sites, or steal user credentials. Additionally, users are potential victims o
s of the displayed site, redirect to other sites, or steal user credentials. Additionally, users are potential victims of browser exploits and JavaScript malware. Additional Analyst Notes: - CVE Program Container: References: - https://www.sagedpw.at - https://sec-consult.com/en/vulnerability-lab/advisories/ - https://seclists.org/fulldisclosure/2020/Oct/17
CVE ID: CVE-2020-26584 State: PUBLISHED Published: 2020-10-16T05:10:41 Last Updated: 2024-08-04T15:56:04.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Sage DPW 2020_06_x before 2020_06_002. The search field "Kurs suchen" on the page Kurskatalog is vulnerable to Reflected XSS. If the attacker can lure a user into clicking a crafted link, he can execute arbitrary JavaScript code in the user's browser. The vulnerability can be used to change the contents of the displayed site, redirect to other sites, or steal user credentials. Additionally, users are potential victims of browser exploits and JavaScript malware. Additional Analyst Notes: - CVE Progra
tionally, users are potential victims of browser exploits and JavaScript malware. Additional Analyst Notes: - CVE Program Container: References: - https://www.sagedpw.at - https://sec-consult.com/en/vulnerability-lab/advisories/ - https://seclists.org/fulldisclosure/2020/Oct/17
CVE ID: CVE-2020-26596 State: PUBLISHED Published: 2020-10-07T15:32:27 Last Updated: 2024-08-04T15:56:04.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Dynamic OOO widget for the Elementor Pro plugin through 3.0.5 for WordPress allows remote authenticated users to execute arbitrary code because only the Editor role is needed to upload executable PHP code via the PHP Raw snippet. NOTE: this issue can be mitigated by removing the Dynamic OOO widget or by restricting availability of the Editor role. Additional Analyst Notes: - CVE Program Container: References: - https://ww2.compunet.cl/dia-cero-en-plugin-de-wordpres-detectada-compunet-redteam/ - https://elementor.com/pro/c
nces: - https://ww2.compunet.cl/dia-cero-en-plugin-de-wordpres-detectada-compunet-redteam/ - https://elementor.com/pro/changelog/
CVE ID: CVE-2020-26597 State: PUBLISHED Published: 2020-10-06T18:15:09 Last Updated: 2024-08-04T15:56:04.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS 9.0 and 10 software. The Wi-Fi subsystem has incorrect input validation, leading to a crash. The LG ID is LVE-SMP-200022 (October 2020). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/
CVE ID: CVE-2020-26598 State: PUBLISHED Published: 2020-10-06T18:14:47 Last Updated: 2024-08-04T15:56:04.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, and 9.0 software. The Network Management component could allow an unauthorized actor to kill a TCP connection. The LG ID is LVE-SMP-200023 (October 2020). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/
CVE ID: CVE-2020-26599 State: PUBLISHED Published: 2020-10-06T18:32:04 Last Updated: 2024-08-04T15:56:04.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with Q(10.0) software. The DynamicLockscreen Terms and Conditions can be accepted without authentication. The Samsung ID is SVE-2020-17079 (October 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-26600 State: PUBLISHED Published: 2020-10-06T18:36:43 Last Updated: 2024-08-04T15:56:04.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with Q(10.0) software. Auto Hotspot allows attackers to obtain sensitive information. The Samsung ID is SVE-2020-17288 (October 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-26601 State: PUBLISHED Published: 2020-10-06T18:36:30 Last Updated: 2024-08-04T15:56:04.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DirEncryptService on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. PendingIntent with an empty intent is mishandled, allowing an attacker to perform a privileged action via a modified intent. The Samsung ID is SVE-2020-18034 (October 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-26602 State: PUBLISHED Published: 2020-10-06T18:36:13 Last Updated: 2024-08-04T15:56:04.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EthernetNetwork on Samsung mobile devices with O(8.1), P(9.0), Q(10.0), and R(11.0) software. PendingIntent allows sdcard access by an unprivileged process. The Samsung ID is SVE-2020-18392 (October 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-26603 State: PUBLISHED Published: 2020-10-06T18:32:16 Last Updated: 2024-08-04T15:56:04.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Sticker Center allows directory traversal for an unprivileged process to read arbitrary files. The Samsung ID is SVE-2020-18433 (October 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-26604 State: PUBLISHED Published: 2020-10-06T18:36:00 Last Updated: 2024-08-04T15:56:04.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SystemUI on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. PendingIntent allows an unprivileged process to access contact numbers. The Samsung ID is SVE-2020-18467 (October 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-26605 State: PUBLISHED Published: 2020-10-06T18:35:44 Last Updated: 2024-08-04T15:56:04.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Exynos chipsets) software. They allow attackers to obtain sensitive information by reading a log. The Samsung ID is SVE-2020-18596 (October 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-26606 State: PUBLISHED Published: 2020-10-06T18:32:42 Last Updated: 2024-08-04T15:56:04.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. An attacker can access certain Secure Folder content via a debugging command. The Samsung ID is SVE-2020-18673 (October 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-26607 State: PUBLISHED Published: 2020-10-06T18:32:28 Last Updated: 2024-08-04T15:56:04.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TimaService on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. PendingIntent with an empty intent is mishandled, allowing an attacker to perform a privileged action via a modified intent. The Samsung ID is SVE-2020-18418 (October 2020). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2020-26609 State: PUBLISHED Published: 2021-02-23T16:38:04 Last Updated: 2024-08-04T15:56:04.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: fastadmin V1.0.0.20200506_beta contains a cross-site scripting (XSS) vulnerability which may allow an attacker to obtain administrator credentials to log in to the background. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/karsonzhang/fastadmin - https://github.com/BigTiger2020/Fastadmin-V1.0.0.20200506_beta - https://github.com/BigTiger2020/Fastadmin-V1.0.0.20200506_beta/blob/main/README.md
CVE ID: CVE-2020-26623 State: PUBLISHED Published: 2024-01-02T00:00:00.000Z Last Updated: 2025-06-03T14:53:35.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability discovered in Gila CMS 1.15.4 and earlier allows a remote attacker to execute arbitrary web scripts via the Area parameter under the Administration>Widget tab after the login portal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GilaCMS/gila - http://gilacms.com - https://github.com/GilaCMS/gila/security/policy - https://packetstormsecurity.com/files/176301/GilaCMS-1.15.4-SQL-Injection.html
CVE ID: CVE-2020-26624 State: PUBLISHED Published: 2024-01-02T00:00:00.000Z Last Updated: 2025-06-17T14:50:32.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts via the ID parameter after the login portal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GilaCMS/gila - http://gilacms.com - https://github.com/GilaCMS/gila/security/policy - https://packetstormsecurity.com/files/176301/GilaCMS-1.15.4-SQL-Injection.html
CVE ID: CVE-2020-26625 State: PUBLISHED Published: 2024-01-02T00:00:00.000Z Last Updated: 2025-05-16T17:18:39.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts via the 'user_id' parameter after the login portal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GilaCMS/gila - http://gilacms.com - https://github.com/GilaCMS/gila/security/policy - https://packetstormsecurity.com/files/176301/GilaCMS-1.15.4-SQL-Injection.html
CVE ID: CVE-2020-26627 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-03T14:29:22.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a crafted payload entered into the 'Admin Remark' parameter under the 'Contact Us Queries -> Unread Query' tab. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/176302/Hospital-Management-System-4.0-XSS-Shell-Upload-SQL-Injection.html
CVE ID: CVE-2020-26628 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-20T15:29:04.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting (XSS) vulnerability was discovered in Hospital Management System V4.0 which allows an attacker to execute arbitrary web scripts or HTML code via a malicious payload appended to a username on the 'Edit Profile" page and triggered by another user visiting the profile. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/176302/Hospital-Management-System-4.0-XSS-Shell-Upload-SQL-Injection.html
CVE ID: CVE-2020-26629 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-05-09T18:40:44.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows an unauthenticated attacker to upload any file to the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/176302/Hospital-Management-System-4.0-XSS-Shell-Upload-SQL-Injection.html
CVE ID: CVE-2020-26630 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-05-22T17:27:09.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a special payload in the 'Doctor Specialization' field under the 'Go to Doctors' tab after logging in as an admin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/176302/Hospital-Management-System-4.0-XSS-Shell-Upload-SQL-Injection.html
CVE ID: CVE-2020-26641 State: PUBLISHED Published: 2021-05-28T19:58:26 Last Updated: 2024-08-04T15:56:04.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Request Forgery (CSRF) vulnerability was discovered in iCMS 7.0.16 which can allow an attacker to execute arbitrary web scripts. Additional Analyst Notes: - CVE Program Container: References: - https://bbs.pediy.com/thread-262308.htm
CVE ID: CVE-2020-26642 State: PUBLISHED Published: 2021-05-28T19:58:25 Last Updated: 2024-08-04T15:56:04.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability has been discovered in the login page of SeaCMS version 11 which allows an attacker to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://www.chinapyg.com/thread-137805-1-1.html
CVE ID: CVE-2020-26649 State: PUBLISHED Published: 2020-10-22T14:12:01 Last Updated: 2024-08-04T15:56:04.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: AtomXCMS 2.0 is affected by Incorrect Access Control via admin/dump.php Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Drunyacoder/AtomXCMS-2/issues/19
CVE ID: CVE-2020-26650 State: PUBLISHED Published: 2020-10-22T14:13:34 Last Updated: 2024-08-04T15:56:04.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: AtomXCMS 2.0 is affected by Arbitrary File Read via admin/dump.php Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Drunyacoder/AtomXCMS-2/issues/20
CVE ID: CVE-2020-26652 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T19:27:53.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in function nl80211_send_chandef in rtl8812au v5.6.4.2 allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aircrack-ng/rtl8812au/issues/730
CVE ID: CVE-2020-26664 State: PUBLISHED Published: 2021-01-08T17:40:41 Last Updated: 2024-08-04T15:56:05.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file. Additional Analyst Notes: - CVE Program Container: References: - http://vlc.com - http://videolan.com - https://gist.githubusercontent.com/henices/db11664dd45b9f322f8514d182aef5ea/raw/d56940c8bf211992bf4f3309a85bb2b69383e511/CVE-2020-26664.txt - https://www.debian.org/security/2021/dsa-4834 - https://security.gentoo.org/glsa/202101-37 - https://lists.debian.org/debia
ps://www.debian.org/security/2021/dsa-4834 - https://security.gentoo.org/glsa/202101-37 - https://lists.debian.org/debian-lts-announce/2022/06/msg00012.html
CVE ID: CVE-2020-26668 State: PUBLISHED Published: 2021-06-01T14:13:23 Last Updated: 2024-08-04T15:56:05.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability was discovered in /core/feeds/custom.php in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to inject a malicious SQL query to the applications via the 'Create New Feed' function. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/48831
CVE ID: CVE-2020-26669 State: PUBLISHED Published: 2021-06-01T14:13:24 Last Updated: 2024-08-04T15:56:04.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability was discovered in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to execute arbitrary web scripts or HTML via the page content to site/index.php/admin/pages/update. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/48831
CVE ID: CVE-2020-26670 State: PUBLISHED Published: 2021-06-01T14:13:25 Last Updated: 2024-08-04T15:56:04.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been discovered in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to execute arbitrary commands through a crafted request sent to the server via the 'Create a New Setting' function. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/48831
CVE ID: CVE-2020-26672 State: PUBLISHED Published: 2020-10-16T14:36:19 Last Updated: 2024-08-04T15:56:04.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Testimonial Rotator Wordpress Plugin 3.0.2 is affected by Cross Site Scripting (XSS) in /wp-admin/post.php. If a user intercepts a request and inserts a payload in "cite" parameter, the payload will be stored in the database. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/10272
CVE ID: CVE-2020-26677 State: PUBLISHED Published: 2021-05-26T11:58:21 Last Updated: 2024-08-04T15:56:04.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Any user logged in to a vFairs 3.3 virtual conference or event can perform SQL injection with a malicious query to the API. Additional Analyst Notes: - CVE Program Container: References: - http://vfairs.com - https://api.vfairs.com/v1/users/ - https://www.huntress.com/blog/zero-day-vulnerabilities-in-popular-event-management-platforms-could-leave-msps-open-to-attack
CVE ID: CVE-2020-26678 State: PUBLISHED Published: 2021-05-26T11:50:40 Last Updated: 2024-08-04T15:56:05.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: vFairs 3.3 is affected by Remote Code Execution. Any user logged in to a vFairs virtual conference or event can abuse the functionality to upload a profile picture in order to place a malicious PHP file on the server and gain code execution. Additional Analyst Notes: - CVE Program Container: References: - http://vfairs.com - https://api.vfairs.com/v1/profiles - https://www.huntress.com/blog/zero-day-vulnerabilities-in-popular-event-management-platforms-could-leave-msps-open-to-attack
CVE ID: CVE-2020-26679 State: PUBLISHED Published: 2021-05-26T11:53:14 Last Updated: 2024-08-04T15:56:05.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: vFairs 3.3 is affected by Insecure Permissions. Any user logged in to a vFairs virtual conference or event can modify any other users profile information or profile picture. After receiving any user's unique identification number and their own, an HTTP POST request can be made update their profile description or supply a new profile image. This can lead to potential cross-site scripting attacks on any user, or upload malicious PHP webshells as "profile pictures." The user IDs can be easily determined by other responses from t