Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-28013 State: PUBLISHED Published: 2021-05-06T03:39:35 Last Updated: 2024-08-04T16:25:43.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4 before 4.94.2 allows Heap-based Buffer Overflow because it mishandles "-F '.('" on the command line, and thus may allow privilege escalation from any user to root. This occurs because of the interpretation of negative sizes in strncpy. Additional Analyst Notes: - CVE Program Container: References: - https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28013-PFPSN.txt
CVE ID: CVE-2020-28014 State: PUBLISHED Published: 2021-05-06T03:43:03 Last Updated: 2024-08-04T16:25:44.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. The -oP option is available to the exim user, and allows a denial of service because root-owned files can be overwritten. Additional Analyst Notes: - CVE Program Container: References: - https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28014-PIDFP.txt
CVE ID: CVE-2020-28015 State: PUBLISHED Published: 2021-05-06T03:46:38 Last Updated: 2024-08-04T16:25:43.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. Local users can alter the behavior of root processes because a recipient address can have a newline character. Additional Analyst Notes: - CVE Program Container: References: - https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28015-NLEND.txt
CVE ID: CVE-2020-28016 State: PUBLISHED Published: 2021-05-06T03:51:01 Last Updated: 2024-08-04T16:25:44.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4 before 4.94.2 allows an off-by-two Out-of-bounds Write because "-F ''" is mishandled by parse_fix_phrase. Additional Analyst Notes: - CVE Program Container: References: - https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28016-PFPZA.txt
CVE ID: CVE-2020-28017 State: PUBLISHED Published: 2021-05-06T03:55:44 Last Updated: 2024-08-04T16:25:44.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow in receive_add_recipient via an e-mail message with fifty million recipients. NOTE: remote exploitation may be difficult because of resource consumption. Additional Analyst Notes: - CVE Program Container: References: - https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28017-RCPTL.txt
CVE ID: CVE-2020-28018 State: PUBLISHED Published: 2021-05-06T03:58:59 Last Updated: 2024-08-04T16:25:44.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSSL. Additional Analyst Notes: - CVE Program Container: References: - https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28018-OCORK.txt - http://www.openwall.com/lists/oss-security/2021/05/11/5 - http://www.openwall.com/lists/oss-security/2021/05/11/6 - http://www.openwall.com/lists/oss-security/2021/05/11/17 - http://www.openwall.com/lists/oss-security/2021/05/11/15 - http://www.openwall.com/l
/lists/oss-security/2021/05/11/17 - http://www.openwall.com/lists/oss-security/2021/05/11/15 - http://www.openwall.com/lists/oss-security/2021/05/11/14 - http://www.openwall.com/lists/oss-security/2021/05/12/2 - http://www.openwall.com/lists/oss-security/2021/05/12/3
CVE ID: CVE-2020-28019 State: PUBLISHED Published: 2021-05-06T04:03:48 Last Updated: 2024-08-04T16:25:44.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain getc functions is mishandled when a client uses BDAT instead of DATA. Additional Analyst Notes: - CVE Program Container: References: - https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28019-BDATA.txt
CVE ID: CVE-2020-28020 State: PUBLISHED Published: 2021-05-06T04:10:36 Last Updated: 2024-08-04T16:25:43.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote attacker can execute arbitrary code by leveraging the mishandling of continuation lines during header-length restriction. Additional Analyst Notes: - CVE Program Container: References: - https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28020-HSIZE.txt - http://www.openwall.com/lists/oss-security/2021/07/25/1 - http://www.openwall.com/lists/oss-security/2021/08/03/1
CVE ID: CVE-2020-28021 State: PUBLISHED Published: 2021-05-06T04:16:38 Last Updated: 2024-08-04T16:25:44.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. An authenticated remote SMTP client can insert newline characters into a spool file (which indirectly leads to remote code execution as root) via AUTH= in a MAIL FROM command. Additional Analyst Notes: - CVE Program Container: References: - https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28021-MAUTH.txt
CVE ID: CVE-2020-28022 State: PUBLISHED Published: 2021-05-06T04:20:58 Last Updated: 2024-08-04T16:25:44.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4 before 4.94.2 has Improper Restriction of Write Operations within the Bounds of a Memory Buffer. This occurs when processing name=value pairs within MAIL FROM and RCPT TO commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28022-EXOPT.txt
CVE ID: CVE-2020-28023 State: PUBLISHED Published: 2021-05-06T04:24:16 Last Updated: 2024-08-04T16:25:44.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4 before 4.94.2 allows Out-of-bounds Read. smtp_setup_msg may disclose sensitive information from process memory to an unauthenticated SMTP client. Additional Analyst Notes: - CVE Program Container: References: - https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28023-SCHAD.txt
CVE ID: CVE-2020-28024 State: PUBLISHED Published: 2021-05-06T04:31:25 Last Updated: 2024-08-04T16:25:44.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4 before 4.94.2 allows Buffer Underwrite that may result in unauthenticated remote attackers executing arbitrary commands, because smtp_ungetc was only intended to push back characters, but can actually push back non-character error codes such as EOF. Additional Analyst Notes: - CVE Program Container: References: - https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28024-UNGET.txt
CVE ID: CVE-2020-28025 State: PUBLISHED Published: 2021-05-06T04:36:18 Last Updated: 2024-08-04T16:25:43.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkim_finish_bodyhash does not validate the relationship between sig->bodyhash.len and b->bh.len; thus, a crafted DKIM-Signature header might lead to a leak of sensitive information from process memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28025-BHASH.txt
CVE ID: CVE-2020-28026 State: PUBLISHED Published: 2021-05-06T04:41:12 Last Updated: 2024-08-04T16:25:43.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable Delivery Status Notification (DSN). Certain uses of ORCPT= can place a newline into a spool header file, and indirectly allow unauthenticated remote attackers to execute arbitrary commands as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28026-FGETS.txt
CVE ID: CVE-2020-28030 State: PUBLISHED Published: 2020-10-30T20:02:40 Last Updated: 2024-08-04T16:25:43.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan/dissectors/packet-gquic.c by correcting the implementation of offset advancement. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/wireshark/wireshark/-/issues/16887 - https://www.wireshark.org/security/wnpa-sec-2020-15.html - https://gitlab.com/wireshark/wireshark/-/commit/b287e7165e8aa89cde6ae37e7c257c5d87d16b9b - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/
a89cde6ae37e7c257c5d87d16b9b - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHZSVK7PO2LTGFQXFHFXY6SOMSQ7UPRS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2667E6WKVE56G66BVBVD7LJPIDOJ7K3/ - https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html
CVE ID: CVE-2020-28031 State: PUBLISHED Published: 2020-10-30T21:29:23 Last Updated: 2024-08-04T16:25:44.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: eramba through c2.8.1 allows HTTP Host header injection with (for example) resultant wkhtml2pdf PDF printing by authenticated users. Additional Analyst Notes: - CVE Program Container: References: - https://discussions.eramba.org/t/bug-injectable-host-header-security-issue/1719 - https://www.eramba.org/releases
CVE ID: CVE-2020-28032 State: PUBLISHED Published: 2020-10-31T00:59:54 Last Updated: 2024-08-04T16:33:56.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 5.5.2 mishandles deserialization requests in wp-includes/Requests/Utility/FilteredIterator.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2020/10/wordpress-5-5-2-security-and-maintenance-release/ - https://github.com/WordPress/wordpress-develop/commit/add6bedf3a53b647d0ebda2970057912d3cd79d3 - https://wpscan.com/vulnerability/10446 - https://lists.debian.org/debian-lts-announce/2020/11/msg00004.html - https://www.debian.org/security/2020/dsa-4784 - https://lis
lists.debian.org/debian-lts-announce/2020/11/msg00004.html - https://www.debian.org/security/2020/dsa-4784 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VAVVYJKA2I6CRQUINECDPBGWMQDEG244/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUXVUAKL2HL4QYJEPHBNVQQWRMFMII2Y/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHVNK2WYAM3ZTCXTFSEIT56IKLVJHU3/
CVE ID: CVE-2020-28033 State: PUBLISHED Published: 2020-10-31T00:59:45 Last Updated: 2024-08-04T16:33:56.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 5.5.2 mishandles embeds from disabled sites on a multisite network, as demonstrated by allowing a spam embed. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2020/10/wordpress-5-5-2-security-and-maintenance-release/ - https://lists.debian.org/debian-lts-announce/2020/11/msg00004.html - https://www.debian.org/security/2020/dsa-4784 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VAVVYJKA2I6CRQUINECDPBGWMQDEG244/ - ht
edoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VAVVYJKA2I6CRQUINECDPBGWMQDEG244/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUXVUAKL2HL4QYJEPHBNVQQWRMFMII2Y/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHVNK2WYAM3ZTCXTFSEIT56IKLVJHU3/
CVE ID: CVE-2020-28034 State: PUBLISHED Published: 2020-10-31T00:59:35 Last Updated: 2024-08-04T16:33:56.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 5.5.2 allows XSS associated with global variables. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2020/10/wordpress-5-5-2-security-and-maintenance-release/ - https://lists.debian.org/debian-lts-announce/2020/11/msg00004.html - https://www.debian.org/security/2020/dsa-4784 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VAVVYJKA2I6CRQUINECDPBGWMQDEG244/ - https://lists.fedoraproject.org/archives/list/package-announc
oraproject.org/message/VAVVYJKA2I6CRQUINECDPBGWMQDEG244/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUXVUAKL2HL4QYJEPHBNVQQWRMFMII2Y/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHVNK2WYAM3ZTCXTFSEIT56IKLVJHU3/
CVE ID: CVE-2020-28035 State: PUBLISHED Published: 2020-10-31T00:58:32 Last Updated: 2024-08-04T16:33:56.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 5.5.2 allows attackers to gain privileges via XML-RPC. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2020/10/wordpress-5-5-2-security-and-maintenance-release/ - https://lists.debian.org/debian-lts-announce/2020/11/msg00004.html - https://www.debian.org/security/2020/dsa-4784 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VAVVYJKA2I6CRQUINECDPBGWMQDEG244/ - https://lists.fedoraproject.org/archives/list/package-ann
.fedoraproject.org/message/VAVVYJKA2I6CRQUINECDPBGWMQDEG244/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUXVUAKL2HL4QYJEPHBNVQQWRMFMII2Y/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHVNK2WYAM3ZTCXTFSEIT56IKLVJHU3/
CVE ID: CVE-2020-28036 State: PUBLISHED Published: 2020-10-31T00:59:28 Last Updated: 2024-08-04T16:33:56.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-includes/class-wp-xmlrpc-server.php in WordPress before 5.5.2 allows attackers to gain privileges by using XML-RPC to comment on a post. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2020/10/wordpress-5-5-2-security-and-maintenance-release/ - https://github.com/WordPress/wordpress-develop/commit/c9e6b98968025b1629015998d12c3102165a7d32 - https://wpscan.com/vulnerability/10449 - https://lists.debian.org/debian-lts-announce/2020/11/msg00004.html - https://www.debian.org/security/
nerability/10449 - https://lists.debian.org/debian-lts-announce/2020/11/msg00004.html - https://www.debian.org/security/2020/dsa-4784 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VAVVYJKA2I6CRQUINECDPBGWMQDEG244/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUXVUAKL2HL4QYJEPHBNVQQWRMFMII2Y/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHVNK2WYAM3ZTCXTFSEIT56IKLVJHU3/
CVE ID: CVE-2020-28037 State: PUBLISHED Published: 2020-10-31T00:59:19 Last Updated: 2024-08-04T16:33:56.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: is_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines whether WordPress is already installed, which might allow an attacker to perform a new installation, leading to remote code execution (as well as a denial of service for the old installation). Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2020/10/wordpress-5-5-2-security-and-maintenance-release/ - https://github.com/WordPress/wordpress-develop/commit/2ca15d1e5ce70493c5c0c096ca0c76503d6da
y-and-maintenance-release/ - https://github.com/WordPress/wordpress-develop/commit/2ca15d1e5ce70493c5c0c096ca0c76503d6da07c - https://wpscan.com/vulnerability/10450 - https://lists.debian.org/debian-lts-announce/2020/11/msg00004.html - https://www.debian.org/security/2020/dsa-4784 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VAVVYJKA2I6CRQUINECDPBGWMQDEG244/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUXVUAKL2HL4QYJEPHBNVQQWRMFMII2Y/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHVNK2WYAM3ZTCXTFSEIT56IKLVJHU3/
CVE ID: CVE-2020-28038 State: PUBLISHED Published: 2020-10-31T00:59:04 Last Updated: 2024-08-04T16:33:56.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 5.5.2 allows stored XSS via post slugs. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2020/10/wordpress-5-5-2-security-and-maintenance-release/ - https://blog.ripstech.com - https://lists.debian.org/debian-lts-announce/2020/11/msg00004.html - https://www.debian.org/security/2020/dsa-4784 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VAVVYJKA2I6CRQUINECDPBGWMQDEG244/ - https://lists.fedoraproject.org/archives/lis
ounce%40lists.fedoraproject.org/message/VAVVYJKA2I6CRQUINECDPBGWMQDEG244/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUXVUAKL2HL4QYJEPHBNVQQWRMFMII2Y/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHVNK2WYAM3ZTCXTFSEIT56IKLVJHU3/
CVE ID: CVE-2020-28039 State: PUBLISHED Published: 2020-10-31T00:58:46 Last Updated: 2024-08-04T16:33:56.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: is_protected_meta in wp-includes/meta.php in WordPress before 5.5.2 allows arbitrary file deletion because it does not properly determine whether a meta key is considered protected. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2020/10/wordpress-5-5-2-security-and-maintenance-release/ - https://wpscan.com/vulnerability/10452 - https://github.com/WordPress/wordpress-develop/commit/d5ddd6d4be1bc9fd16b7796842e6fb26315705ad - https://lists.debian.org/debian-lts-announce/2020/11/msg000
ss-develop/commit/d5ddd6d4be1bc9fd16b7796842e6fb26315705ad - https://lists.debian.org/debian-lts-announce/2020/11/msg00004.html - https://www.debian.org/security/2020/dsa-4784 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VAVVYJKA2I6CRQUINECDPBGWMQDEG244/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUXVUAKL2HL4QYJEPHBNVQQWRMFMII2Y/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHVNK2WYAM3ZTCXTFSEIT56IKLVJHU3/
CVE ID: CVE-2020-28040 State: PUBLISHED Published: 2020-10-31T00:58:56 Last Updated: 2024-08-04T16:33:56.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 5.5.2 allows CSRF attacks that change a theme's background image. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/news/2020/10/wordpress-5-5-2-security-and-maintenance-release/ - https://blog.wpscan.com/2020/10/30/wordpress-5.5.2-security-release.html - https://lists.debian.org/debian-lts-announce/2020/11/msg00004.html - https://www.debian.org/security/2020/dsa-4784 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VAVVYJK
2020/dsa-4784 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VAVVYJKA2I6CRQUINECDPBGWMQDEG244/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUXVUAKL2HL4QYJEPHBNVQQWRMFMII2Y/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHVNK2WYAM3ZTCXTFSEIT56IKLVJHU3/
CVE ID: CVE-2020-28041 State: PUBLISHED Published: 2020-11-01T03:29:13 Last Updated: 2024-08-04T16:33:56.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP ALG implementation on NETGEAR Nighthawk R7000 1.0.9.64_10.2.64 devices allows remote attackers to communicate with arbitrary TCP and UDP services on a victim's intranet machine, if the victim visits an attacker-controlled web site with a modern browser, aka NAT Slipstreaming. This occurs because the ALG takes action based on an IP packet with an initial REGISTER substring in the TCP data, and the correct intranet IP address in the subsequent Via header, without properly considering that connection progress and fragmen
rect intranet IP address in the subsequent Via header, without properly considering that connection progress and fragmentation affect the meaning of the packet data. Additional Analyst Notes: - CVE Program Container: References: - https://news.ycombinator.com/item?id=24956616 - https://samy.pl/slipstream/ - https://github.com/samyk/slipstream - https://news.ycombinator.com/item?id=24958281 - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0024
CVE ID: CVE-2020-28042 State: PUBLISHED Published: 2020-11-01T04:50:48 Last Updated: 2024-08-04T16:33:56.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: ServiceStack before 5.9.2 mishandles JWT signature verification unless an application has a custom ValidateToken function that establishes a valid minimum length for a signature. Additional Analyst Notes: - CVE Program Container: References: - https://forums.servicestack.net/t/servicestack-v5-9-2-released/8850 - https://github.com/ServiceStack/ServiceStack/commit/540d4060e877a03ae95343c1a8560a26768585ee - https://www.shielder.it/blog/2020/11/re-discovering-a-jwt-authentication-bypass-in-servicestack/ - https://www.shielder.it
tps://www.shielder.it/blog/2020/11/re-discovering-a-jwt-authentication-bypass-in-servicestack/ - https://www.shielder.it/advisories/servicestack-jwt-signature-verification-bypass/
CVE ID: CVE-2020-28043 State: PUBLISHED Published: 2020-11-01T17:07:46 Last Updated: 2024-08-04T16:33:56.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: MISP through 2.4.133 allows SSRF in the REST client via the use_full_path parameter with an arbitrary URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/6e81c8ee8ad19576c055b5c4773f914b918f32be
CVE ID: CVE-2020-28044 State: PUBLISHED Published: 2020-11-01T17:39:38 Last Updated: 2024-08-04T16:33:56.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: An attacker with physical access to a PAX Point Of Sale device with ProlinOS through 2.4.161.8859R can boot it in management mode, enable the XCB service, and then list, read, create, and overwrite files with MAINAPP permissions. Additional Analyst Notes: - CVE Program Container: References: - https://git.lsd.cat/g/pax-pwn
CVE ID: CVE-2020-28045 State: PUBLISHED Published: 2020-11-01T17:39:28 Last Updated: 2024-08-04T16:33:56.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unsigned-library issue was discovered in ProlinOS through 2.4.161.8859R. This OS requires installed applications and all system binaries to be signed either by the manufacturer or by the Point Of Sale application developer and distributor. The signature is a 2048-byte RSA signature verified in the kernel prior to ELF execution. Shared libraries, however, do not need to be signed, and they are not verified. An attacker may execute a custom binary by compiling it as a shared object and loading it via LD_PRELOAD. Additional A
. An attacker may execute a custom binary by compiling it as a shared object and loading it via LD_PRELOAD. Additional Analyst Notes: - CVE Program Container: References: - https://git.lsd.cat/g/pax-pwn
CVE ID: CVE-2020-28046 State: PUBLISHED Published: 2020-11-01T17:39:05 Last Updated: 2024-08-04T16:33:56.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ProlinOS through 2.4.161.8859R. An attacker with local code execution privileges as a normal user (MAINAPP) can escalate to root privileges by exploiting the setuid installation of the xtables-multi binary and leveraging the ip6tables --modprobe switch. Additional Analyst Notes: - CVE Program Container: References: - https://git.lsd.cat/g/pax-pwn