Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-15476 State: PUBLISHED Published: 2020-07-01T10:53:46 Last Updated: 2024-08-04T13:15:20.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protocols/oracle.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ntop/nDPI/commit/b69177be2fbe01c2442239a61832c44e40136c05 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21780 - https://lists.debian.org/debian-lts-announce/2020/08/msg00052.html - https://lists.debian.org/debian-lts-announce/2022/08/msg00016.html
CVE ID: CVE-2020-15477 State: PUBLISHED Published: 2020-07-23T19:46:41 Last Updated: 2024-08-04T13:15:20.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebControl in RaspberryTortoise through 2012-10-28 is vulnerable to remote code execution via shell metacharacters in a URI. The file nodejs/raspberryTortoise.js has no validation on the parameter incomingString before passing it to the child_process.exec function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/raspberrytorte/tortoise/tree/master/nodejs - https://gist.github.com/PreethamBomma/e7b6d220790f95555dc2c5ac1d7d2f85
CVE ID: CVE-2020-15478 State: PUBLISHED Published: 2020-07-01T12:04:11 Last Updated: 2024-08-04T13:15:20.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors. Additional Analyst Notes: - CVE Program Container: References: - https://docs.journal-theme.com/changelog - https://www.getastra.com/blog/911/plugin-exploit/sql-errors-data-exposure-in-journal-opencart-theme/ - https://www.jinsonvarghese.com/sensitive-data-exposure-in-journal-theme/
CVE ID: CVE-2020-15479 State: PUBLISHED Published: 2020-08-07T20:04:23 Last Updated: 2024-08-04T13:15:20.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and PerformanceTest through 10. The driver's IOCTL request handler attempts to copy the input buffer onto the stack without checking its size and can cause a buffer overflow. This could lead to arbitrary Ring-0 code execution and escalation of privileges. This affects DirectIo32.sys and DirectIo64.sys. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eset/vulnerability-disclosures - https://www.passmark.com/
es: - CVE Program Container: References: - https://github.com/eset/vulnerability-disclosures - https://www.passmark.com/forum/index.php - https://www.passmark.com/support/index.php - https://github.com/eset/vulnerability-disclosures/blob/master/CVE-2020-15479/CVE-2020-15479.md
CVE ID: CVE-2020-15480 State: PUBLISHED Published: 2020-08-07T20:06:45 Last Updated: 2024-08-04T13:15:20.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and PerformanceTest through 10. The kernel driver exposes IOCTL functionality that allows low-privilege users to read and write to arbitrary Model Specific Registers (MSRs). This could lead to arbitrary Ring-0 code execution and escalation of privileges. This affects DirectIo32.sys and DirectIo64.sys. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eset/vulnerability-disclosures - https://www.passmark.com/f
s: - CVE Program Container: References: - https://github.com/eset/vulnerability-disclosures - https://www.passmark.com/forum/index.php - https://www.passmark.com/support/index.php - https://github.com/eset/vulnerability-disclosures/blob/master/CVE-2020-15480/CVE-2020-15480.md
CVE ID: CVE-2020-15481 State: PUBLISHED Published: 2020-11-13T20:59:15 Last Updated: 2024-08-04T13:15:20.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PassMark BurnInTest v9.1 Build 1008, OSForensics v7.1 Build 1012, and PerformanceTest v10.0 Build 1008. The kernel driver exposes IOCTL functionality that allows low-privilege users to map arbitrary physical memory into the address space of the calling process. This could lead to arbitrary Ring-0 code execution and escalation of privileges. This affects DirectIo32.sys and DirectIo64.sys drivers. This issue is fixed in BurnInTest v9.2, PerformanceTest v10.0 Build 1009, OSForensics v8.0. Additional An
4.sys drivers. This issue is fixed in BurnInTest v9.2, PerformanceTest v10.0 Build 1009, OSForensics v8.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eset/vulnerability-disclosures/blob/master/CVE-2020-15481/CVE-2020-15481.md - https://www.passmark.com/products/performancetest/history.php
CVE ID: CVE-2020-15482 State: PUBLISHED Published: 2020-08-26T15:44:14 Last Updated: 2024-08-04T13:15:20.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Nescomed Multipara Monitor M1000 devices. The device enables an unencrypted TELNET service by default, with a blank password for the admin account. This allows an attacker to gain root access to the device over the local network. Additional Analyst Notes: - CVE Program Container: References: - https://www.niscomed.com/multipara-monitor.html - https://payatu.com/advisory/unauthenticated-telnet-service-in-niscomed-patient-monitor
CVE ID: CVE-2020-15483 State: PUBLISHED Published: 2020-08-26T15:37:56 Last Updated: 2024-08-04T13:15:20.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Nescomed Multipara Monitor M1000 devices. The physical UART debug port provides a shell, without requiring a password, with complete access. Additional Analyst Notes: - CVE Program Container: References: - https://www.niscomed.com/multipara-monitor.html - https://payatu.com/advisory/unauthenticated-uart-root-shell--in-niscomed-patient-monitor
CVE ID: CVE-2020-15484 State: PUBLISHED Published: 2020-08-26T14:41:06 Last Updated: 2024-08-04T13:15:20.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Nescomed Multipara Monitor M1000 devices. The internal storage of the underlying Linux system stores data in cleartext, without integrity protection against tampering. Additional Analyst Notes: - CVE Program Container: References: - https://www.niscomed.com/multipara-monitor.html - https://payatu.com/advisory/lack-of-medical-data-encryption-in-niscomed-patient-monitor
CVE ID: CVE-2020-15485 State: PUBLISHED Published: 2020-08-26T19:12:38 Last Updated: 2024-08-04T13:15:20.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Nescomed Multipara Monitor M1000 devices. The onboard Flash memory stores data in cleartext, without integrity protection against tampering. Additional Analyst Notes: - CVE Program Container: References: - https://www.niscomed.com/multipara-monitor.html - https://payatu.com/advisory/lack-of-medical-data-encryption-in-dr-trust-ecg-or-ekg-pen
CVE ID: CVE-2020-15486 State: PUBLISHED Published: 2020-08-26T15:14:59 Last Updated: 2024-08-04T13:15:20.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Dr Trust ECG Pen 2.00.08 devices. Because the Bluetooth LE support is implemented without a requirement for pairing or security, any attacker can access the GATT server of the device and can sniff the data being broadcasted while a measurement is being done. Also, saved data can also be extracted over a Bluetooth connection. In addition, an attacker can launch a man-in-the-middle attack against data integrity. Additional Analyst Notes: - CVE Program Container: References: - https://payatu.com/adviso
ttack against data integrity. Additional Analyst Notes: - CVE Program Container: References: - https://payatu.com/advisory/lack-of-bluetooth-le-encryption-and-access-control-in-dr-trust-ecg-or-ekg-pen
CVE ID: CVE-2020-15487 State: PUBLISHED Published: 2020-09-30T18:00:44 Last Updated: 2024-08-04T13:15:20.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Re:Desk 2.3 contains a blind unauthenticated SQL injection vulnerability in the getBaseCriteria() function in the protected/models/Ticket.php file. By modifying the folder GET parameter, it is possible to execute arbitrary SQL statements via a crafted URL. Unauthenticated remote command execution is possible by using this SQL injection to update certain database values, which are then executed by a bizRule eval() function in the yii/framework/web/auth/CAuthManager.php file. Resultant authorization bypass is also possible, by
val() function in the yii/framework/web/auth/CAuthManager.php file. Resultant authorization bypass is also possible, by recovering or modifying password hashes and password reset tokens, allowing for administrative privileges to be obtained. Additional Analyst Notes: - CVE Program Container: References: - https://www.re-desk.com/download-help-desk-software.html - https://labs.f-secure.com/advisories/redesk-v2-3-multiple-issues/
CVE ID: CVE-2020-15488 State: PUBLISHED Published: 2020-09-30T18:26:20 Last Updated: 2024-08-04T13:15:20.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Re:Desk 2.3 allows insecure file upload. Additional Analyst Notes: - CVE Program Container: References: - https://www.re-desk.com/download-help-desk-software.html - https://labs.f-secure.com/advisories/redesk-v2-3-multiple-issues/
CVE ID: CVE-2020-15489 State: PUBLISHED Published: 2020-07-01T20:53:01 Last Updated: 2024-08-04T13:15:20.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple shell metacharacter injection vulnerabilities exist in CGI scripts, leading to remote code execution with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/drakylar1/drakylar-cve-list/-/blob/master/Wavlink/CVE-2020-15489_multiple_rce.txt
CVE ID: CVE-2020-15490 State: PUBLISHED Published: 2020-07-01T20:51:36 Last Updated: 2024-08-04T13:15:20.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple buffer overflow vulnerabilities exist in CGI scripts, leading to remote code execution with root privileges. (The set of affected scripts is similar to CVE-2020-12266.) Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/drakylar1/drakylar-cve-list/-/blob/master/Wavlink/CVE-2020-15490_multiple_BoF.txt
CVE ID: CVE-2020-15492 State: PUBLISHED Published: 2020-07-23T19:53:08 Last Updated: 2024-08-04T13:15:20.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in INNEO Startup TOOLS 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804. The sut_srv.exe web application (served on TCP port 85) includes user input into a filesystem access without any further validation. This might allow an unauthenticated attacker to read files on the server via Directory Traversal, or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://www.inneo.co.uk/en/product-development/inneo-in-house-products/startup-tools.html
gram Container: References: - https://www.inneo.co.uk/en/product-development/inneo-in-house-products/startup-tools.html - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-028.txt - https://www.syss.de/pentest-blog/2020/syss-2020-028-sicherheitsschwachstelle-in-inneo-startup-tools-2017-und-2018/ - https://www.inneo.de/files/content/Produktentwicklung/Tools-und-Erweiterungen/Startup-TOOLS/INNEO-SA-SUT-2020-01.pdf - http://packetstormsecurity.com/files/158556/INNEO-Startup-TOOLS-2018-M040-13.0.70.3804-Remote-Code-Execution.html
CVE ID: CVE-2020-15495 State: PUBLISHED Published: 2021-07-15T14:19:18 Last Updated: 2024-08-04T13:15:20.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service configuration. Additional Analyst Notes: - CVE Program Container: References: - https://www.acronis.com/en-us/support/updates/index.html - https://kb.acronis.com/content/68061
CVE ID: CVE-2020-15496 State: PUBLISHED Published: 2021-07-15T13:57:08 Last Updated: 2024-08-04T13:15:20.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.acronis.com/en-us/support/updates/index.html - https://kb.acronis.com/content/68396
CVE ID: CVE-2020-15497 State: PUBLISHED Published: 2020-07-17T17:35:05 Last Updated: 2024-11-18T17:27:42.715Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: jcore/portal/ajaxPortal.jsp in Jalios JCMS 10.0.2 build-20200224104759 allows XSS via the types parameter. Note: It is asserted that this vulnerability is not present in the standard installation of Jalios JCMS Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jalios.com/jcms/j_6/en/home - https://twitter.com/joker2a1 - https://github.com/Da2Duo - https://pastebin.com/KSJJu5Nx
CVE ID: CVE-2020-15498 State: PUBLISHED Published: 2020-08-26T12:05:26 Last Updated: 2024-08-04T13:15:20.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.385_20253. The router accepts an arbitrary server certificate for a firmware update. The culprit is the --no-check-certificate option passed to wget tool used to download firmware update files. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=27440
CVE ID: CVE-2020-15499 State: PUBLISHED Published: 2020-08-26T12:03:54 Last Updated: 2024-08-04T13:15:20.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.385_20253. They allow XSS via spoofed Release Notes on the Firmware Upgrade page. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=27440
CVE ID: CVE-2020-15500 State: PUBLISHED Published: 2020-07-01T22:14:44 Last Updated: 2024-08-04T13:15:20.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page, causing reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/maptiler/tileserver-gl/issues/461 - http://packetstormsecurity.com/files/162193/Tileserver-gl-3.0.0-Cross-Site-Scripting.html
CVE ID: CVE-2020-15501 State: PUBLISHED Published: 2020-10-07T21:16:37 Last Updated: 2024-08-04T13:15:20.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Smarter Coffee Maker before 2nd generation allows firmware replacement without authentication or authorization. User interaction is required to press a button. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://decoded.avast.io/martinhron/the-fresh-smell-of-ransomed-coffee/
CVE ID: CVE-2020-15502 State: PUBLISHED Published: 2020-07-02T10:59:20 Last Updated: 2024-08-04T13:15:20.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DuckDuckGo application through 5.58.0 for Android, and through 7.47.1.0 for iOS, sends hostnames of visited web sites within HTTPS .ico requests to servers in the duckduckgo.com domain, which might make visit data available temporarily at a Potentially Unwanted Endpoint. NOTE: the vendor has stated "the favicon service adheres to our strict privacy policy. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/duckduckgo/Android/blob/e2f2d54a6b4452277467db403a354651240
t: - CVE Program Container: References: - https://github.com/duckduckgo/Android/blob/e2f2d54a6b4452277467db403a3546512401b493/app/src/main/java/com/duckduckgo/app/global/UriExtension.kt#L83-L88 - https://github.com/duckduckgo/iOS/blob/1ae03d7221180bd6791cf6f7f06922a96335cf75/Core/AppUrls.swift#L98-L100 - https://news.ycombinator.com/item?id=23708166 - https://github.com/duckduckgo/Android/issues/527 - https://news.ycombinator.com/item?id=23711597
CVE ID: CVE-2020-15503 State: PUBLISHED Published: 2020-07-02T00:00:00 Last Updated: 2024-08-04T13:15:20.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_image.cpp, and utils/thumb_utils.cpp. For example, malloc(sizeof(libraw_processed_image_t)+T.tlength) occurs without validating T.tlength. Additional Analyst Notes: - CVE Program Container: References: - https://www.libraw.org/news/libraw-0-20-rc1 - https://github.com/LibRaw/LibRaw/compare/0.20-Beta3...0.20-RC1 - https://github.com/LibRaw/LibRaw/commit/20ad21c0d87ca80217aee47533d91e633ce1864d - https://lists.f
20-Beta3...0.20-RC1 - https://github.com/LibRaw/LibRaw/commit/20ad21c0d87ca80217aee47533d91e633ce1864d - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DNGDWTO45TU4KGND75EUUEGUMNSOYC7H/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CSXAJKZ4VNDYVQULJNY4XDPWHIJDTB4P/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QCVKD7PTO7UQAVUTBHJAKBKYLPQQGAMZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7HM2DS6HA4YZREI3BYGS75M6D76WMW62/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/ms
aproject.org/message/7HM2DS6HA4YZREI3BYGS75M6D76WMW62/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00075.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00001.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y34ALB34P3NGQXLF7BG7R6DGRX6XL2JN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZETDVPZQWZWVGIG6JTIEKP5KPVMUE7Y/ - https://lists.debian.org/debian-lts-announce/2022/11/msg00042.html
CVE ID: CVE-2020-15504 State: PUBLISHED Published: 2020-07-10T16:55:15 Last Updated: 2024-08-04T13:15:20.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in the user and admin web interfaces of Sophos XG Firewall v18.0 MR1 and older potentially allows an attacker to run arbitrary code remotely. The fix is built into the re-release of XG Firewall v18 MR-1 (named MR-1-Build396) and the v17.5 MR13 release. All other versions >= 17.0 have received a hotfix. Additional Analyst Notes: - CVE Program Container: References: - https://community.sophos.com/b/security-blog/posts/advisory-resolved-rce-via-sqli-cve-2020-15504
CVE ID: CVE-2020-15505 State: PUBLISHED Published: 2020-07-07T01:43:52.000Z Last Updated: 2025-10-21T23:35:41.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database (RDB) version 2.0.0.1 and earlier that allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mobileiron.com/en/blog/mobileiron-security-updates-a
ogram Container: - CISA ADP Vulnrichment: References: - https://www.mobileiron.com/en/blog/mobileiron-security-updates-available - https://www.mobileiron.com/en/blog/mobileiron-security-updates-available - https://perchsecurity.com/perch-news/cve-spotlight-mobileiron-rce-cve-2020-15505/ - http://packetstormsecurity.com/files/161097/MobileIron-MDM-Hessian-Based-Java-Deserialization-Remote-Code-Execution.html - https://cwe.mitre.org/data/definitions/41.html
CVE ID: CVE-2020-15506 State: PUBLISHED Published: 2020-07-07T01:43:13 Last Updated: 2024-08-04T13:15:20.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication bypass vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to bypass authentication mechanisms via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.mobileiron.com/en/blog/mobileiron-security-updates-available - https://www.mobileiron.com/en/blog/mobileiron-security-updates-available
CVE ID: CVE-2020-15507 State: PUBLISHED Published: 2020-07-07T01:42:44 Last Updated: 2024-08-04T13:15:20.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to read files on the system via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.mobileiron.com/en/blog/mobileiron-security-updates-available - https://www.mobileiron.com/en/blog/mobileiron-security-updates-available
CVE ID: CVE-2020-15509 State: PUBLISHED Published: 2020-07-07T13:56:47 Last Updated: 2024-08-04T13:15:20.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android (as used by nRF Connect and other applications) can engage in unencrypted communication while showing the user that the communication is purportedly encrypted. The problem is in bond creation (e.g., internalCreateBond in BleManagerHandler). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NordicSemiconductor/Android-BLE-Library/commits/master - https://github.com/NordicSemiconductor/Android-DFU-
/github.com/NordicSemiconductor/Android-BLE-Library/commits/master - https://github.com/NordicSemiconductor/Android-DFU-Library/commits/release - https://secretdiary.ninja/index.php/2020/07/03/norec-attack-stripping-ble-encryption-from-nordicsemis-android-library-cve-2020-15509/
CVE ID: CVE-2020-15511 State: PUBLISHED Published: 2020-07-30T13:15:50 Last Updated: 2024-08-04T13:15:20.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: HashiCorp Terraform Enterprise up to v202006-1 contained a default signup page that allowed user registration even when disabled, bypassing SAML enforcement. Fixed in v202007-1. Additional Analyst Notes: - CVE Program Container: References: - https://www.hashicorp.com/blog/category/terraform/ - https://github.com/hashicorp/terraform-enterprise-release-notes/blob/master/v202007-1.md
CVE ID: CVE-2020-15513 State: PUBLISHED Published: 2020-07-07T13:50:17 Last Updated: 2024-08-04T13:15:20.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: The typo3_forum extension before 1.2.1 for TYPO3 has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://typo3.org/help/security-advisories - https://typo3.org/security/advisory/typo3-ext-sa-2020-010
CVE ID: CVE-2020-15514 State: PUBLISHED Published: 2020-07-07T13:48:05 Last Updated: 2024-08-04T13:15:20.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jh_captcha extension through 2.1.3, and 3.x through 3.0.2, for TYPO3 allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://typo3.org/help/security-advisories - https://typo3.org/security/advisory/typo3-ext-sa-2020-012