Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
aproject.org/message/M6GKMK74POW3RU7F4HLUJE7XEFLQDO35/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFRQ76ZDPSWT7OH6FJDLSFWBXVBE6JDN/
CVE ID: CVE-2020-24293 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T18:42:35.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in psdThumbnail::Read in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary code via opening of crafted psd file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/freeimage/discussion/36111/thread/afb98701eb/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6GKMK74POW3RU7F4HLUJE7XEFLQDO35/ - https://lists.fedoraproject.org/archives/list/package-anno
fedoraproject.org/message/M6GKMK74POW3RU7F4HLUJE7XEFLQDO35/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFRQ76ZDPSWT7OH6FJDLSFWBXVBE6JDN/
CVE ID: CVE-2020-24294 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T18:41:34.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to cuase a denial of service via opening of crafted psd file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/freeimage/discussion/36111/thread/afb98701eb/
CVE ID: CVE-2020-24295 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T18:41:00.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in PSDParser.cpp::ReadImageLine() in FreeImage 3.19.0 [r1859] allows remote attackers to ru narbitrary code via use of crafted psd file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/freeimage/discussion/36111/thread/afb98701eb/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6GKMK74POW3RU7F4HLUJE7XEFLQDO35/ - https://lists.fedoraproject.org/archives/list/package-announce%40li
ject.org/message/M6GKMK74POW3RU7F4HLUJE7XEFLQDO35/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFRQ76ZDPSWT7OH6FJDLSFWBXVBE6JDN/
CVE ID: CVE-2020-24297 State: PUBLISHED Published: 2020-11-18T15:28:48 Last Updated: 2024-08-04T15:12:08.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: httpd on TP-Link TL-WPA4220 devices (versions 2 through 4) allows remote authenticated users to execute arbitrary OS commands by sending crafted POST requests to the endpoint /admin/powerline. Fixed version: TL-WPA4220(EU)_V4_201023 Additional Analyst Notes: - CVE Program Container: References: - https://www.tp-link.com/us/support/download/ - https://the-hyperbolic.com/posts/vulnerabilities-in-tlwpa4220/
CVE ID: CVE-2020-24301 State: PUBLISHED Published: 2020-10-08T13:20:58 Last Updated: 2024-08-04T15:12:08.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Users of the HAPI FHIR Testpage Overlay 5.0.0 and below can use a specially crafted URL to exploit an XSS vulnerability in this module, allowing arbitrary JavaScript to be executed in the user's browser. The impact of this vulnerability is believed to be low, as this module is intended for testing and not believed to be widely used for any production purposes. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jamesagnew/hapi-fhir/issues/2026
CVE ID: CVE-2020-24303 State: PUBLISHED Published: 2020-10-28T13:25:22 Last Updated: 2024-08-04T15:12:08.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/grafana/grafana/blob/master/CHANGELOG.md#710-beta-1-2020-07-01 - https://github.com/grafana/grafana/pull/25401 - https://security.netapp.com/advisory/ntap-20201123-0002/
CVE ID: CVE-2020-24307 State: PUBLISHED Published: 2023-02-02T00:00:00 Last Updated: 2024-08-04T15:12:08.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in mRemoteNG v1.76.20 allows attackers to escalate privileges via a crafted executable file. NOTE: third parties were unable to reproduce any scenario in which the claimed access of BUILTIN\Users:(M) is present. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NyaMeeEain/Infrastructure-Assessment/blob/master/Privilege%20Escalation/Common%20Windows%20Privilege%20Escalation.md - https://packetstormsecurity.com/files/170794/mRemoteNG-1.76.20-Privilege-Escalation.html - https://github.c
alation.md - https://packetstormsecurity.com/files/170794/mRemoteNG-1.76.20-Privilege-Escalation.html - https://github.com/mRemoteNG/mRemoteNG/issues/2338
CVE ID: CVE-2020-24312 State: PUBLISHED Published: 2020-08-26T12:47:53 Last Updated: 2024-08-04T15:12:08.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: mndpsingh287 WP File Manager v6.4 and lower fails to restrict external access to the fm_backups directory with a .htaccess file. This results in the ability for unauthenticated users to browse and download any site backups, which sometimes include full database backups, that the plugin has taken. Additional Analyst Notes: - CVE Program Container: References: - https://zeroaptitude.com/zerodetail/wordpress-plugin-bug-hunting-part-1/
CVE ID: CVE-2020-24313 State: PUBLISHED Published: 2020-08-26T12:54:33 Last Updated: 2024-08-04T15:12:08.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Etoile Web Design Ultimate Appointment Booking & Scheduling WordPress Plugin v1.1.9 and lower does not sanitize the value of the "Appointment_ID" GET parameter before echoing it back out inside an input tag. This results in a reflected XSS vulnerability that attackers can exploit with a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://zeroaptitude.com/zerodetail/wordpress-plugin-bug-hunting-part-1/ - https://wordpress.org/plugins/ultimate-appointment-scheduling/
CVE ID: CVE-2020-24314 State: PUBLISHED Published: 2020-08-26T12:59:49 Last Updated: 2024-08-04T15:12:08.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fahad Mahmood RSS Feed Widget Plugin v2.7.9 and lower does not sanitize the value of the "t" GET parameter before echoing it back out inside an input tag. This results in a reflected XSS vulnerability that attackers can exploit with a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://zeroaptitude.com/zerodetail/wordpress-plugin-bug-hunting-part-1/ - https://wordpress.org/plugins/rss-feed-widget/advanced/
CVE ID: CVE-2020-24315 State: PUBLISHED Published: 2020-08-26T13:04:48 Last Updated: 2024-08-04T15:12:08.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vinoj Cardoza WordPress Poll Plugin v36 and lower executes SQL statement passed in via the pollid POST parameter due to a lack of user input escaping. This allows users who craft specific SQL statements to dump the entire targets database. Additional Analyst Notes: - CVE Program Container: References: - https://zeroaptitude.com/zerodetail/wordpress-plugin-bug-hunting-part-1/ - https://wordpress.org/plugins/cardoza-wordpress-poll/
CVE ID: CVE-2020-24316 State: PUBLISHED Published: 2020-08-26T13:09:23 Last Updated: 2024-08-04T15:12:08.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: WP Plugin Rednumber Admin Menu v1.1 and lower does not sanitize the value of the "role" GET parameter before echoing it back out to the user. This results in a reflected XSS vulnerability that attackers can exploit with a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://zeroaptitude.com/zerodetail/wordpress-plugin-bug-hunting-part-1/ - https://wordpress.org/plugins/admin-menu/
CVE ID: CVE-2020-24327 State: PUBLISHED Published: 2021-09-23T17:48:51 Last Updated: 2024-08-04T15:12:08.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server Side Request Forgery (SSRF) vulnerability exists in Discourse 2.3.2 and 2.6 via the email function. When writing an email in an editor, you can upload pictures of remote websites. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/purple-WL/Discourse-sending-email-function-exist-Server-side-request-forgery-SSRF-/issues/1 - https://github.com/discourse/discourse/pull/10509
CVE ID: CVE-2020-24330 State: PUBLISHED Published: 2020-08-13T16:19:09 Last Updated: 2024-08-04T15:12:08.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the root gid privilege when no longer needed. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/trousers/mailman/message/37015817/ - https://bugzilla.suse.com/show_bug.cgi?id=1164472 - https://seclists.org/oss-sec/2020/q2/att-135/tcsd_fixes.patch - http://www.openwall.com/lists/oss-security/2020/08/14/1 - https://lists.fedoraproject.org/arc
att-135/tcsd_fixes.patch - http://www.openwall.com/lists/oss-security/2020/08/14/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SSDL7COIFCZQMUBNAASNMKMX7W5JUHRD/
CVE ID: CVE-2020-24331 State: PUBLISHED Published: 2020-08-13T16:19:02 Last Updated: 2024-08-04T15:12:08.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the /etc/tcsd.conf file (which contains various settings related to this daemon). Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/trousers/mailman/message/37015817/ - https://bugzilla.suse.com/show_bug.cgi?id=1164472 - https://seclists.org/oss-sec/2020/q2/att-135/tcsd_fixes.patch - http://www.openwall.com/lists/oss-security/2020/08/14
- https://seclists.org/oss-sec/2020/q2/att-135/tcsd_fixes.patch - http://www.openwall.com/lists/oss-security/2020/08/14/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SSDL7COIFCZQMUBNAASNMKMX7W5JUHRD/
CVE ID: CVE-2020-24332 State: PUBLISHED Published: 2020-08-13T16:18:52 Last Updated: 2024-08-04T15:12:08.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the creation of the system.data file is prone to symlink attacks. The tss user can be used to create or corrupt existing files, which could possibly lead to a DoS attack. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/trousers/mailman/message/37015817/ - https://bugzilla.suse.com/show_bug.cgi?id=1164472 - https://seclists.org/oss-sec/2020/q2/att-135/tcsd_fixes.patch - http://www.o
bugzilla.suse.com/show_bug.cgi?id=1164472 - https://seclists.org/oss-sec/2020/q2/att-135/tcsd_fixes.patch - http://www.openwall.com/lists/oss-security/2020/08/14/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SSDL7COIFCZQMUBNAASNMKMX7W5JUHRD/
CVE ID: CVE-2020-24333 State: PUBLISHED Published: 2020-09-22T14:50:02 Last Updated: 2024-08-04T15:12:09.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in Arista’s CloudVision Portal (CVP) prior to 2020.2 allows users with “read-only” or greater access rights to the Configlet Management module to download files not intended for access, located on the CVP server, by accessing a specific API. Additional Analyst Notes: - CVE Program Container: References: - https://www.arista.com/en/support/advisories-notices - https://www.arista.com/en/support/advisories-notices/security-advisories/11706-security-advisory-51
CVE ID: CVE-2020-24334 State: PUBLISHED Published: 2020-12-11T22:42:04 Last Updated: 2024-08-04T15:12:09.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: The code that processes DNS responses in uIP through 1.0, as used in Contiki and Contiki-NG, does not check whether the number of responses specified in the DNS packet header corresponds to the response data available in the DNS packet, leading to an out-of-bounds read and Denial-of-Service in resolv.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
CVE ID: CVE-2020-24335 State: PUBLISHED Published: 2021-02-02T06:13:37 Last Updated: 2024-08-04T15:12:08.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in uIP through 1.0, as used in Contiki and Contiki-NG. Domain name parsing lacks bounds checks, allowing an attacker to corrupt memory with crafted DNS packets. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/adamdunkels/uip - https://github.com/contiki-os/contiki - https://github.com/contiki-ng/contiki-ng - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
CVE ID: CVE-2020-24336 State: PUBLISHED Published: 2020-12-11T22:43:01 Last Updated: 2024-08-04T15:12:08.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing Type A domain name answers in ip64-dns64.c doesn't verify whether the address in the answer's length is sane. Therefore, when copying an address of an arbitrary length, a buffer overflow can occur. This bug can be exploited whenever NAT64 is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
CVE ID: CVE-2020-24337 State: PUBLISHED Published: 2020-12-11T22:44:00 Last Updated: 2024-08-04T15:12:08.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. When an unsupported TCP option with zero length is provided in an incoming TCP packet, it is possible to cause a Denial-of-Service by achieving an infinite loop in the code that parses TCP options, aka tcp_parse_options() in pico_tcp.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
CVE ID: CVE-2020-24338 State: PUBLISHED Published: 2020-12-11T22:45:04 Last Updated: 2024-08-04T15:12:08.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in picoTCP through 1.7.0. The DNS domain name record decompression functionality in pico_dns_decompress_name() in pico_dns_common.c does not validate the compression pointer offset values with respect to the actual data present in a DNS response packet, causing out-of-bounds writes that lead to Denial-of-Service and Remote Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
CVE ID: CVE-2020-24339 State: PUBLISHED Published: 2020-12-11T22:53:55 Last Updated: 2024-08-04T15:12:08.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The DNS domain name record decompression functionality in pico_dns_decompress_name() in pico_dns_common.c does not validate the compression pointer offset values with respect to the actual data present in a DNS response packet, causing out-of-bounds reads that lead to Denial-of-Service. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
CVE ID: CVE-2020-24340 State: PUBLISHED Published: 2020-12-11T22:54:39 Last Updated: 2024-08-04T15:12:08.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The code that processes DNS responses in pico_mdns_handle_data_as_answers_generic() in pico_mdns.c does not check whether the number of answers/responses specified in a DNS packet header corresponds to the response data available in the packet, leading to an out-of-bounds read, invalid pointer dereference, and Denial-of-Service. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/
yst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
CVE ID: CVE-2020-24341 State: PUBLISHED Published: 2020-12-11T22:55:33 Last Updated: 2024-08-04T15:12:08.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The TCP input data processing function in pico_tcp.c does not validate the length of incoming TCP packets, which leads to an out-of-bounds read when assembling received packets into a data segment, eventually causing Denial-of-Service or an information leak. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/815128 - https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
CVE ID: CVE-2020-24342 State: PUBLISHED Published: 2020-08-13T18:54:20 Last Updated: 2024-08-04T15:12:08.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lua through 5.4.0 allows a stack redzone cross in luaO_pushvfstring because a protection mechanism wrongly calls luaD_callnoyield twice in a row. Additional Analyst Notes: - CVE Program Container: References: - http://lua-users.org/lists/lua-l/2020-07/msg00052.html - https://github.com/lua/lua/commit/34affe7a63fc5d842580a9f23616d057e17dfe27 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QA5Q5MDQMTGXRQO3PAQ4EZFTYWJXZM5N/
CVE ID: CVE-2020-24343 State: PUBLISHED Published: 2020-08-13T18:54:08 Last Updated: 2024-08-04T15:12:08.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artifex MuJS through 1.0.7 has a use-after-free in jsrun.c because of unconditional marking in jsgc.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ccxvii/mujs/issues/136
CVE ID: CVE-2020-24344 State: PUBLISHED Published: 2020-08-13T18:53:53 Last Updated: 2024-08-04T15:12:08.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: JerryScript through 2.3.0 has a (function({a=arguments}){const arguments}) buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jerryscript-project/jerryscript/issues/3976
CVE ID: CVE-2020-24345 State: PUBLISHED Published: 2020-08-13T18:53:32 Last Updated: 2024-08-04T15:12:08.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the vendor states that the problem is the lack of the --stack-limit option Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jerryscript-project/jerryscript/issues/3977
CVE ID: CVE-2020-24346 State: PUBLISHED Published: 2020-08-13T18:52:15 Last Updated: 2024-08-04T15:12:08.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: njs through 0.4.3, used in NGINX, has a use-after-free in njs_json_parse_iterator_call in njs_json.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/325 - https://security.netapp.com/advisory/ntap-20200918-0001/
CVE ID: CVE-2020-24347 State: PUBLISHED Published: 2020-08-13T18:52:07 Last Updated: 2024-08-04T15:12:08.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in njs_lvlhsh.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/323 - https://security.netapp.com/advisory/ntap-20200918-0001/
CVE ID: CVE-2020-24348 State: PUBLISHED Published: 2020-08-13T18:52:00 Last Updated: 2024-08-04T15:12:08.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_json_stringify_iterator in njs_json.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/322 - https://security.netapp.com/advisory/ntap-20200918-0001/
CVE ID: CVE-2020-24349 State: PUBLISHED Published: 2020-08-13T18:51:50 Last Updated: 2024-08-04T15:12:08.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c. NOTE: the vendor considers the issue to be "fluff" in the NGINX use case because there is no remote attack surface. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/416.html - https://github.com/nginx/njs/issues/324 - https://security.netapp.com/advisory/ntap-20200918-0001/
CVE ID: CVE-2020-24352 State: PUBLISHED Published: 2020-10-16T05:05:13 Last Updated: 2024-08-04T15:12:08.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in QEMU through 5.1.0. An out-of-bounds memory access was found in the ATI VGA device implementation. This flaw occurs in the ati_2d_blt() routine in hw/display/ati_2d.c while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://git.qemu.org/?p=qemu.git - https://bugzilla.redhat.com/show_bug.cgi?id=1847584
Program Container: References: - https://git.qemu.org/?p=qemu.git - https://bugzilla.redhat.com/show_bug.cgi?id=1847584 - https://security.netapp.com/advisory/ntap-20201123-0003/
CVE ID: CVE-2020-24353 State: PUBLISHED Published: 2020-11-09T13:41:31 Last Updated: 2024-08-04T15:12:08.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pega Platform before 8.4.0 has a XSS issue via stream rule parameters used in the request header. Additional Analyst Notes: - CVE Program Container: References: - https://community.pega.com/knowledgebase/products/platform/release-notes - https://community.pega.com/knowledgebase/products/platform/resolved-issues?q=527502
CVE ID: CVE-2020-24354 State: PUBLISHED Published: 2020-08-31T17:38:42 Last Updated: 2024-08-04T15:12:08.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by shell injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.zyxel.com/support/security_advisories.shtml - https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B
CVE ID: CVE-2020-24355 State: PUBLISHED Published: 2020-09-02T11:15:09 Last Updated: 2024-08-04T15:12:08.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by insecure permissions which allows regular and other users to create new users with elevated privileges. This is done by changing "FirstIndex" field in JSON that is POST-ed during account creation. Similar may also be possible with account deletion. Additional Analyst Notes: - CVE Program Container: References: - https://www.zyxel.com/support/security_advisories.shtml - https://blog.somegeneric.ninja/Zyxel_VMG5153
er: References: - https://www.zyxel.com/support/security_advisories.shtml - https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B - https://blog.somegeneric.ninja/Zyxel_VMG5153_B30B_part2