Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-14206 State: PUBLISHED Published: 2020-12-08T19:48:27 Last Updated: 2024-08-04T12:39:36.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DiveBook plugin 1.1.4 for WordPress is prone to unauthenticated XSS within the filter function (via an arbitrary parameter). Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/divebook/#developers - https://www.hooperlabs.xyz/disclosures/divebook.php
CVE ID: CVE-2020-14207 State: PUBLISHED Published: 2020-12-08T19:50:21 Last Updated: 2024-08-04T12:39:36.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DiveBook plugin 1.1.4 for WordPress was prone to a SQL injection within divelog.php, allowing unauthenticated users to retrieve data from the database via the divelog.php filter_diver parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/divebook/#developers - https://www.hooperlabs.xyz/disclosures/divebook.php
CVE ID: CVE-2020-14208 State: PUBLISHED Published: 2020-11-18T21:08:23 Last Updated: 2024-08-04T12:39:36.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: SuiteCRM 7.11.13 is affected by stored Cross-Site Scripting (XSS) in the Documents preview functionality. This vulnerability could allow remote authenticated attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-008
CVE ID: CVE-2020-14209 State: PUBLISHED Published: 2020-09-02T16:32:50 Last Updated: 2024-08-04T12:39:36.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code execution. This occurs because .pht and .phar files can be uploaded. Also, a .htaccess file can be uploaded to reconfigure access control (e.g., to let .noexe files be executed as PHP code to defeat the .noexe protection mechanism). Additional Analyst Notes: - CVE Program Container: References: - https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-012 - https://github.com/Dolibarr/dolibarr/releas
ttps://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-012 - https://github.com/Dolibarr/dolibarr/releases/tag/11.0.5 - http://packetstormsecurity.com/files/161955/Dolibarr-ERP-CRM-11.0.4-Bypass-Code-Execution.html
CVE ID: CVE-2020-14210 State: PUBLISHED Published: 2020-06-16T21:10:49 Last Updated: 2024-08-04T12:39:36.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross-Site Scripting (XSS) vulnerability in MONITORAPP WAF in which script can be executed when responding to Request URL information. It provides a function to response to Request URL information when blocking. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kbgsft/vuln-AIWAF/wiki/Cross-site-scripting%28XSS%29-vulnerability-in-AIWAF-in-MONITORAPP-by-xcuter - https://github.com/monitorapp-aicc/report/wiki/CVE-2020-14210
CVE ID: CVE-2020-14212 State: PUBLISHED Published: 2020-06-16T21:57:50 Last Updated: 2024-08-04T12:39:36.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg through 4.3 has a heap-based buffer overflow in avio_get_str in libavformat/aviobuf.c because dnn_backend_native.c calls ff_dnn_load_model_native and a certain index check is omitted. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8716 - https://patchwork.ffmpeg.org/project/ffmpeg/list/?series=1463 - https://security.gentoo.org/glsa/202007-58
CVE ID: CVE-2020-14213 State: PUBLISHED Published: 2020-06-16T22:22:14 Last Updated: 2024-08-04T12:39:36.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zammad before 3.3.1, a Customer has ticket access that should only be available to an Agent (e.g., read internal data, split, or merge). Additional Analyst Notes: - CVE Program Container: References: - https://zammad.com/news/security-advisory-zaa-2020-13 - https://github.com/zammad/zammad/commit/6e56aee25439b7a3211a6704a9d60453ad623ae4
CVE ID: CVE-2020-14214 State: PUBLISHED Published: 2020-06-16T22:22:34 Last Updated: 2024-08-04T12:39:36.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zammad before 3.3.1, when Domain Based Assignment is enabled, relies on a claimed e-mail address for authorization decisions. An attacker can register a new account that will have access to all tickets of an arbitrary Organization. Additional Analyst Notes: - CVE Program Container: References: - https://zammad.com/news/security-advisory-zaa-2020-12 - https://github.com/zammad/zammad/commit/40148392426f626cb779c76d6bdda0f67bd6069d
CVE ID: CVE-2020-14215 State: PUBLISHED Published: 2020-08-21T04:34:38 Last Updated: 2024-08-04T12:39:36.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zulip Server before 2.1.5 has Incorrect Access Control because 0198_preregistrationuser_invited_as adds the administrator role to invitations. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zulip.com/2020/06/17/zulip-server-2-1-5-security-release/
CVE ID: CVE-2020-14221 State: PUBLISHED Published: 2021-02-02T19:31:57 Last Updated: 2024-08-04T12:39:36.167Z Vendors: n/a Products: HCL Digital Experience Problem Types: "Security misconfiguration" Description: HCL Digital Experience 8.5, 9.0, and 9.5 exposes information about the server to unauthorized users. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085225
CVE ID: CVE-2020-14222 State: PUBLISHED Published: 2020-11-05T16:52:20 Last Updated: 2024-08-04T12:39:36.188Z Vendors: n/a Products: HCL Digital Experience Problem Types: Cross-site scripting Description: HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism (email, other web site). Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084769
CVE ID: CVE-2020-14223 State: PUBLISHED Published: 2020-10-01T19:31:53 Last Updated: 2024-08-04T12:39:36.216Z Vendors: n/a Products: HCL Digital Experience Problem Types: cross-site scripting Description: HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting (XSS). The vulnerability could be employed in a reflected or non-persistent XSS attack. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0082645
CVE ID: CVE-2020-14224 State: PUBLISHED Published: 2020-12-18T22:11:54 Last Updated: 2024-08-04T12:39:36.204Z Vendors: n/a Products: HCL Notes Problem Types: Buffer overflow Description: A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the Notes application or inject code into the system which would execute with the privileges of the currently logged-in user. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085913
CVE ID: CVE-2020-14225 State: PUBLISHED Published: 2020-12-21T17:09:24 Last Updated: 2024-08-04T12:39:36.190Z Vendors: n/a Products: HCL iNotes Problem Types: "Tabnabbing vulnerability" Description: HCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of message content. A remote unauthenticated attacker could use this vulnerability to trick the end user into entering sensitive information such as credentials, e.g. as part of a phishing attack. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085915
CVE ID: CVE-2020-14230 State: PUBLISHED Published: 2020-11-21T17:27:03 Last Updated: 2024-08-04T12:39:36.209Z Vendors: HCL Products: HCL Domino Problem Types: "Denial of Service" Description: HCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could exploit this vulnerability using a specially-crafted email message to hang the server. Versions previous to releases 9.0.1 FP10 IF6, 10.0.1 FP5 and 11.0.1 are affected. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085303
CVE ID: CVE-2020-14231 State: PUBLISHED Published: 2020-12-22T20:01:39 Last Updated: 2024-08-04T12:39:36.265Z Vendors: n/a Products: HCL Client Application Access Problem Types: Buffer overflow Description: A vulnerability in the input parameter handling of HCL Client Application Access v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow the attacker to crash the program or inject code into the system which would execute with the privileges of the currently logged in user. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085882
CVE ID: CVE-2020-14232 State: PUBLISHED Published: 2020-12-17T23:59:59 Last Updated: 2024-08-04T12:39:36.216Z Vendors: n/a Products: HCL Notes Problem Types: Buffer overflow Description: A vulnerability in the input parameter handling of HCL Notes v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow the attacker to crash the program or inject code into the system which would execute with the privileges of the currently logged in user. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085883
CVE ID: CVE-2020-14234 State: PUBLISHED Published: 2020-11-21T17:05:15 Last Updated: 2024-08-04T12:39:36.217Z Vendors: HCL Products: HCL Domino Problem Types: "Denial of Service " Description: HCL Domino is susceptible to a Denial of Service vulnerability due to improper validation of user-supplied input, potentially giving an attacker the ability to crash the server. Versions previous to release 9.0.1 FP10 IF6 and release 10.0.1 are affected. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085302
CVE ID: CVE-2020-14240 State: PUBLISHED Published: 2020-11-05T16:20:20 Last Updated: 2024-08-04T12:39:36.225Z Vendors: n/a Products: HCL Notes Problem Types: Cross-site scripting Description: HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084789
CVE ID: CVE-2020-14244 State: PUBLISHED Published: 2020-12-14T15:39:08 Last Updated: 2024-08-04T12:39:36.214Z Vendors: n/a Products: HCL Domino Problem Types: Buffer overflow Description: A vulnerability in the MIME message handling of the Domino server (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the server or inject code into the system which would execute with the privileges of the server. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085761
CVE ID: CVE-2020-14245 State: PUBLISHED Published: 2021-02-04T06:38:25 Last Updated: 2024-08-04T12:39:36.253Z Vendors: n/a Products: HCL OneTest UI Problem Types: "Missing authentication" Description: HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable user identity or consumes a significant amount of resources. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086622
CVE ID: CVE-2020-14246 State: PUBLISHED Published: 2021-02-04T06:45:56 Last Updated: 2024-08-04T12:39:36.222Z Vendors: n/a Products: HCL OneTest Performance Problem Types: "Weak authentication" Description: HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086470
CVE ID: CVE-2020-14247 State: PUBLISHED Published: 2021-02-04T06:43:38 Last Updated: 2024-08-04T12:39:36.174Z Vendors: n/a Products: HCL OneTest Performance Problem Types: "Inadequate session timeout" Description: HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to guess and use a valid session ID. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086469
CVE ID: CVE-2020-14248 State: PUBLISHED Published: 2020-12-16T14:11:34 Last Updated: 2024-08-04T12:39:36.278Z Vendors: n/a Products: HCL BigFix Inventory Problem Types: Security misconfiguration Description: BigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085735
CVE ID: CVE-2020-14254 State: PUBLISHED Published: 2020-12-16T14:07:42 Last Updated: 2024-08-04T12:39:36.218Z Vendors: n/a Products: HCL BigFix Inventory Problem Types: Security Misconfiguration Description: TLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085733
CVE ID: CVE-2020-14255 State: PUBLISHED Published: 2021-02-02T19:40:31 Last Updated: 2024-08-04T12:39:36.221Z Vendors: n/a Products: HCL Digital Experience Problem Types: "Sensitive data exposure" Description: HCL Digital Experience 9.5 containers include vulnerabilities that could expose sensitive data to unauthorized parties via crafted requests. These affect containers only. These do not affect traditional on-premise installations. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085234
CVE ID: CVE-2020-14258 State: PUBLISHED Published: 2020-11-21T17:24:31 Last Updated: 2024-08-04T12:39:36.207Z Vendors: HCL Products: HCL Notes Problem Types: "Denial of Service" Description: HCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could exploit this vulnerability using a specially-crafted email message to hang the client. Versions 9, 10 and 11 are affected. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085304
CVE ID: CVE-2020-14260 State: PUBLISHED Published: 2020-12-02T00:58:57 Last Updated: 2024-08-04T12:39:36.217Z Vendors: n/a Products: HCL Domino Problem Types: "Buffer Overflow" Description: HCL Domino is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successful exploit could enable an attacker to crash Domino or execute attacker-controlled code on the server system. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085500
CVE ID: CVE-2020-14263 State: PUBLISHED Published: 2021-10-21T16:34:50 Last Updated: 2024-08-04T12:39:36.528Z Vendors: n/a Products: "HCL Traveler Companion" Problem Types: "Sensitive Data Exposure" Description: "HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK" Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0091691
CVE ID: CVE-2020-14264 State: PUBLISHED Published: 2021-10-25T13:02:30 Last Updated: 2024-08-04T12:39:36.359Z Vendors: n/a Products: "HCL Traveler Companion" Problem Types: "Sensitive Data Exposure" Description: "HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK" Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0092787
CVE ID: CVE-2020-14268 State: PUBLISHED Published: 2020-12-14T15:49:29 Last Updated: 2024-08-04T12:39:36.270Z Vendors: n/a Products: HCL Notes Problem Types: Buffer overflow Description: A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the client or inject code into the system which would execute with the privileges of the client. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085762
CVE ID: CVE-2020-14270 State: PUBLISHED Published: 2020-12-22T20:06:31 Last Updated: 2024-08-04T12:39:36.259Z Vendors: n/a Products: HCL Domino Problem Types: Information Disclosure Description: HCL Domino v9, v10, v11 is susceptible to an Information Disclosure vulnerability in XPages due to improper error handling of user input. An unauthenticated attacker could exploit this vulnerability to obtain information about the XPages software running on the Domino server. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085881
CVE ID: CVE-2020-14271 State: PUBLISHED Published: 2020-12-18T22:08:33 Last Updated: 2024-08-04T12:39:36.362Z Vendors: n/a Products: HCL iNotes Problem Types: Cross-site scripting Description: HCL iNotes v9, v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to improper handling of message content. An unauthenticated remote attacker could exploit this vulnerability using specially-crafted markup to execute script in a victim's web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_
n credentials. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085892
CVE ID: CVE-2020-14273 State: PUBLISHED Published: 2020-12-28T19:06:36 Last Updated: 2024-08-04T12:39:36.260Z Vendors: n/a Products: HCL Domino Problem Types: Denial of Service Description: HCL Domino is susceptible to a Denial of Service (DoS) vulnerability due to insufficient validation of input to its public API. An unauthenticated attacker could could exploit this vulnerability to crash the Domino server. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085947
CVE ID: CVE-2020-14274 State: PUBLISHED Published: 2021-01-12T14:29:53 Last Updated: 2024-08-04T12:39:36.227Z Vendors: n/a Products: HCL Commerce Problem Types: "Information Disclosure vulnerability" Description: Information disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1 through 9.1.4 could allow a remote attacker to obtain user personal data via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086183
CVE ID: CVE-2020-14275 State: PUBLISHED Published: 2021-01-12T14:26:58 Last Updated: 2024-08-04T12:39:36.248Z Vendors: n/a Products: HCL Commerce Problem Types: "Denial of Service and Information Disclosure" Description: Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086271
CVE ID: CVE-2020-14292 State: PUBLISHED Published: 2020-09-09T16:11:54 Last Updated: 2024-08-04T12:39:36.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone without authorisation, bypassing the Bluetooth address randomisation protection in the user's phone. Additional Analyst Notes: - CVE Program Container: References: - https://www.health.gov.au/resources/apps-and-tools/covidsafe-app - ht
lyst Notes: - CVE Program Container: References: - https://www.health.gov.au/resources/apps-and-tools/covidsafe-app - https://covidsafe.watch/issue-register/ - https://github.com/AU-COVIDSafe/mobile-android/blob/b827cf3ccef72a3d38c6fc37466a99868823540f/app/src/main/java/au/gov/health/covidsafe/streetpass/Work.kt#L35-L41 - https://github.com/alwentiu/CVE-2020-14292
CVE ID: CVE-2020-14293 State: PUBLISHED Published: 2020-10-02T08:14:49 Last Updated: 2024-08-04T12:39:36.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: conf_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacters in the zone field (obtained from the web interface). Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-025.txt - https://www.secudos.de/en/news-en/domos-release-5-9 - https://www.syss.de/pentest-blog/syss-2020-024-und-syss-2020-025-zwei-schwachstellen-in-file-transfer-loesung-von-qiata - https://github.com/patrickhene
/syss-2020-024-und-syss-2020-025-zwei-schwachstellen-in-file-transfer-loesung-von-qiata - https://github.com/patrickhener/CVE-2020-14293 - http://seclists.org/fulldisclosure/2020/Sep/51
CVE ID: CVE-2020-14294 State: PUBLISHED Published: 2020-10-02T08:15:34 Last Updated: 2024-08-04T12:39:36.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Secudos Qiata FTA 1.70.19. The comment feature allows persistent XSS that is executed when reading transfer comments or the global notice board. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-024.txt - https://www.qiata.com - https://www.syss.de/pentest-blog/syss-2020-024-und-syss-2020-025-zwei-schwachstellen-in-file-transfer-loesung-von-qiata - https://github.com/patrickhener/CVE-2020-14294 - http://seclist
zwei-schwachstellen-in-file-transfer-loesung-von-qiata - https://github.com/patrickhener/CVE-2020-14294 - http://seclists.org/fulldisclosure/2020/Sep/50