alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2020-8718 (published 2020-08-13)
Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: intel
Affected products: compute_module_hns2600bp_firmware, compute_module_hns2600bpb, compute_module_hns2600bpb24, compute_module_hns2600bpb24r, compute_module_hns2600bpblc, compute_module_hns2600bpblc24, compute_module_hns2600bpblc24r, compute_module_hns2600bpblcr, compute_module_hns2600bpbr, compute_module_hns2600bpq, compute_module_hns2600bpq24, compute_module_hns2600bpq24r, compute_module_hns2600bpqr, compute_module_hns2600bps, compute_module_hns2600bps24, compute_module_hns2600bps24r, compute_module_hns2600bpsr, compute_module_hns2600kp, compute_module_hns2600kp_firmware, compute_module_hns2600kpf, compute_module_hns2600kpfr, compute_module_hns2600kpr, compute_module_hns2600tp, compute_module_hns2600tp24r, compute_module_hns2600tp24sr
CVE-2020-8719 (published 2020-08-13)
Buffer overflow in subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: intel
Affected products: compute_module_hns2600bp_firmware, compute_module_hns2600bpb, compute_module_hns2600bpb24, compute_module_hns2600bpb24r, compute_module_hns2600bpblc, compute_module_hns2600bpblc24, compute_module_hns2600bpblc24r, compute_module_hns2600bpblcr, compute_module_hns2600bpbr, compute_module_hns2600bpq, compute_module_hns2600bpq24, compute_module_hns2600bpq24r, compute_module_hns2600bpqr, compute_module_hns2600bps, compute_module_hns2600bps24, compute_module_hns2600bps24r, compute_module_hns2600bpsr, compute_module_hns2600kp, compute_module_hns2600kp_firmware, compute_module_hns2600kpf, compute_module_hns2600kpfr, compute_module_hns2600kpr, compute_module_hns2600tp, compute_module_hns2600tp24r, compute_module_hns2600tp24sr
CVE-2020-8720 (published 2020-08-13)
Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: intel
Affected products: compute_module_hns2600bp_firmware, compute_module_hns2600bpb, compute_module_hns2600bpb24, compute_module_hns2600bpb24r, compute_module_hns2600bpblc, compute_module_hns2600bpblc24, compute_module_hns2600bpblc24r, compute_module_hns2600bpblcr, compute_module_hns2600bpbr, compute_module_hns2600bpq, compute_module_hns2600bpq24, compute_module_hns2600bpq24r, compute_module_hns2600bpqr, compute_module_hns2600bps, compute_module_hns2600bps24, compute_module_hns2600bps24r, compute_module_hns2600bpsr, compute_module_hns2600kp, compute_module_hns2600kp_firmware, compute_module_hns2600kpf, compute_module_hns2600kpfr, compute_module_hns2600kpr, compute_module_hns2600tp, compute_module_hns2600tp24r, compute_module_hns2600tp24sr
CVE-2020-8721 (published 2020-08-13)
Improper input validation for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: compute_module_hns2600bp_firmware, compute_module_hns2600bpb, compute_module_hns2600bpb24, compute_module_hns2600bpb24r, compute_module_hns2600bpblc, compute_module_hns2600bpblc24, compute_module_hns2600bpblc24r, compute_module_hns2600bpblcr, compute_module_hns2600bpbr, compute_module_hns2600bpq, compute_module_hns2600bpq24, compute_module_hns2600bpq24r, compute_module_hns2600bpqr, compute_module_hns2600bps, compute_module_hns2600bps24, compute_module_hns2600bps24r, compute_module_hns2600bpsr, compute_module_hns2600kp, compute_module_hns2600kp_firmware, compute_module_hns2600kpf, compute_module_hns2600kpfr, compute_module_hns2600kpr, compute_module_hns2600tp, compute_module_hns2600tp24r, compute_module_hns2600tp24sr
CVE-2020-8722 (published 2020-08-13)
Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: intel
Affected products: compute_module_hns2600bp_firmware, compute_module_hns2600bpb, compute_module_hns2600bpb24, compute_module_hns2600bpb24r, compute_module_hns2600bpblc, compute_module_hns2600bpblc24, compute_module_hns2600bpblc24r, compute_module_hns2600bpblcr, compute_module_hns2600bpbr, compute_module_hns2600bpq, compute_module_hns2600bpq24, compute_module_hns2600bpq24r, compute_module_hns2600bpqr, compute_module_hns2600bps, compute_module_hns2600bps24, compute_module_hns2600bps24r, compute_module_hns2600bpsr, compute_module_hns2600kp, compute_module_hns2600kp_firmware, compute_module_hns2600kpf, compute_module_hns2600kpfr, compute_module_hns2600kpr, compute_module_hns2600tp, compute_module_hns2600tp24r, compute_module_hns2600tp24sr
CVE-2020-8723 (published 2020-08-13)
Cross-site scripting for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)
Weakness: CWE-79
Affected vendors: intel
Affected products: compute_module_hns2600bp_firmware, compute_module_hns2600bpb, compute_module_hns2600bpb24, compute_module_hns2600bpb24r, compute_module_hns2600bpblc, compute_module_hns2600bpblc24, compute_module_hns2600bpblc24r, compute_module_hns2600bpblcr, compute_module_hns2600bpbr, compute_module_hns2600bpq, compute_module_hns2600bpq24, compute_module_hns2600bpq24r, compute_module_hns2600bpqr, compute_module_hns2600bps, compute_module_hns2600bps24, compute_module_hns2600bps24r, compute_module_hns2600bpsr, compute_module_hns2600kp, compute_module_hns2600kp_firmware, compute_module_hns2600kpf, compute_module_hns2600kpfr, compute_module_hns2600kpr, compute_module_hns2600tp, compute_module_hns2600tp24r, compute_module_hns2600tp24sr
CVE-2020-8729 (published 2020-08-13)
Buffer copy without checking size of input for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: intel
Affected products: compute_module_hns2600bp_firmware, compute_module_hns2600bpb, compute_module_hns2600bpb24, compute_module_hns2600bpb24r, compute_module_hns2600bpblc, compute_module_hns2600bpblc24, compute_module_hns2600bpblc24r, compute_module_hns2600bpblcr, compute_module_hns2600bpbr, compute_module_hns2600bpq, compute_module_hns2600bpq24, compute_module_hns2600bpq24r, compute_module_hns2600bpqr, compute_module_hns2600bps, compute_module_hns2600bps24, compute_module_hns2600bps24r, compute_module_hns2600bpsr, compute_module_hns2600kp, compute_module_hns2600kp_firmware, compute_module_hns2600kpf, compute_module_hns2600kpfr, compute_module_hns2600kpr, compute_module_hns2600tp, compute_module_hns2600tp24r, compute_module_hns2600tp24sr
CVE-2020-8730 (published 2020-08-13)
Heap-based overflow for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: intel
Affected products: compute_module_hns2600bp_firmware, compute_module_hns2600bpb, compute_module_hns2600bpb24, compute_module_hns2600bpb24r, compute_module_hns2600bpblc, compute_module_hns2600bpblc24, compute_module_hns2600bpblc24r, compute_module_hns2600bpblcr, compute_module_hns2600bpbr, compute_module_hns2600bpq, compute_module_hns2600bpq24, compute_module_hns2600bpq24r, compute_module_hns2600bpqr, compute_module_hns2600bps, compute_module_hns2600bps24, compute_module_hns2600bps24r, compute_module_hns2600bpsr, compute_module_hns2600kp, compute_module_hns2600kp_firmware, compute_module_hns2600kpf, compute_module_hns2600kpfr, compute_module_hns2600kpr, compute_module_hns2600tp, compute_module_hns2600tp24r, compute_module_hns2600tp24sr
CVE-2020-8731 (published 2020-08-13)
Incorrect execution-assigned permissions in the file system for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: intel
Affected products: compute_module_hns2600bp_firmware, compute_module_hns2600bpb, compute_module_hns2600bpb24, compute_module_hns2600bpb24r, compute_module_hns2600bpblc, compute_module_hns2600bpblc24, compute_module_hns2600bpblc24r, compute_module_hns2600bpblcr, compute_module_hns2600bpbr, compute_module_hns2600bpq, compute_module_hns2600bpq24, compute_module_hns2600bpq24r, compute_module_hns2600bpqr, compute_module_hns2600bps, compute_module_hns2600bps24, compute_module_hns2600bps24r, compute_module_hns2600bpsr, compute_module_hns2600kp, compute_module_hns2600kp_firmware, compute_module_hns2600kpf, compute_module_hns2600kpfr, compute_module_hns2600kpr, compute_module_hns2600tp, compute_module_hns2600tp24r, compute_module_hns2600tp24sr
CVE-2020-8732 (published 2020-08-13)
Heap-based buffer overflow in the firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: intel
Affected products: compute_module_hns2600bp_firmware, compute_module_hns2600bpb, compute_module_hns2600bpb24, compute_module_hns2600bpb24r, compute_module_hns2600bpblc, compute_module_hns2600bpblc24, compute_module_hns2600bpblc24r, compute_module_hns2600bpblcr, compute_module_hns2600bpbr, compute_module_hns2600bpq, compute_module_hns2600bpq24, compute_module_hns2600bpq24r, compute_module_hns2600bpqr, compute_module_hns2600bps, compute_module_hns2600bps24, compute_module_hns2600bps24r, compute_module_hns2600bpsr, compute_module_hns2600kp, compute_module_hns2600kp_firmware, compute_module_hns2600kpf, compute_module_hns2600kpfr, compute_module_hns2600kpr, compute_module_hns2600tp, compute_module_hns2600tp24r, compute_module_hns2600tp24sr
CVE-2020-8733 (published 2020-08-13)
Improper buffer restrictions in the firmware for Intel(R) Server Board M10JNP2SB before version 7.210 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: m10jnp2sb, m10jnp2sb_firmware
CVE-2020-8734 (published 2021-02-02)
Improper input validation in the firmware for Intel(R) Server Board M10JNP2SB before version 7.210 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: m10jnp2sb, m10jnp2sb_firmware
CVE-2020-8736 (published 2020-08-13)
Improper access control in subsystem for the Intel(R) Computing Improvement Program before version 2.4.5718 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: computing_improvement_program
CVE-2020-8737 (published 2020-11-12)
Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: quartus_prime, stratix_10_fpga, stratix_10_fpga_firmware
CVE-2020-8738 (published 2020-11-12)
Improper conditions check in Intel BIOS platform sample code for some Intel(R) Processors before may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-754
Affected vendors: intel, netapp
Affected products: atom_c3308, atom_c3336, atom_c3338, atom_c3338r, atom_c3436l, atom_c3508, atom_c3538, atom_c3558, atom_c3558r, atom_c3708, atom_c3750, atom_c3758, atom_c3758r, atom_c3808, atom_c3830, atom_c3850, atom_c3858, atom_c3950, atom_c3955, atom_c3958, bios, cloud_backup, core_i5-7640x, core_i7-3820, core_i7-3920xm
CVE-2020-8739 (published 2020-11-12)
Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel, netapp
Affected products: aff_bios, bios, core_i5-7640x, core_i7-3820, core_i7-3920xm, core_i7-3930k, core_i7-3940xm, core_i7-3960x, core_i7-3970x, core_i7-4820k, core_i7-4930k, core_i7-4930mx, core_i7-4940mx, core_i7-4960x, core_i7-5820k, core_i7-5930k, core_i7-5960x, core_i7-6800k, core_i7-6850k, core_i7-6900k, core_i7-6950x, core_i7-7740x, core_i7-7800x, core_i7-7820x, core_i7-9800x
CVE-2020-8740 (published 2020-11-12)
Out of bounds write in Intel BIOS platform sample code for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: intel, netapp
Affected products: aff_bios, bios, core_i5-7640x, core_i7-3820, core_i7-3920xm, core_i7-3930k, core_i7-3940xm, core_i7-3960x, core_i7-3970x, core_i7-4820k, core_i7-4930k, core_i7-4930mx, core_i7-4940mx, core_i7-4960x, core_i7-5820k, core_i7-5930k, core_i7-5960x, core_i7-6800k, core_i7-6850k, core_i7-6900k, core_i7-6950x, core_i7-7740x, core_i7-7800x, core_i7-7820x, core_i7-9800x
CVE-2020-8741 (published 2021-11-17)
Improper permissions in the installer for the Intel(R) Thunderbolt(TM) non-DCH driver, all versions, for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: intel
Affected products: thunderbolt_non-dch_driver
CVE-2020-8742 (published 2020-08-13)
Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: cd1c32gk, cd1c32gk_firmware, cd1c64gk, cd1c64gk_firmware, cd1p64gk, cd1p64gk_firmware, de3815tybe, de3815tybe_firmware, de3815tykhe, de3815tykhe_firmware, nuc5cpyh, nuc5cpyh_firmware, nuc5i3mybe, nuc5i3mybe_firmware, nuc5i3myhe, nuc5i3myhe_firmware, nuc5i3ryh, nuc5i3ryh_firmware, nuc5i3ryhs, nuc5i3ryhs_firmware, nuc5i3ryhsn, nuc5i3ryhsn_firmware, nuc5i3ryk, nuc5i3ryk_firmware, nuc5i5mybe
CVE-2020-8743 (published 2020-08-13)
Improper permissions in the installer for the Intel(R) Mailbox Interface driver, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: intel
Affected products: mailbox_interface_driver
CVE-2020-8744 (published 2020-11-12)
Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions before E3_05.01.04.200 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-665
Affected vendors: intel, siemens
Affected products: converged_security_and_management_engine, server_platform_services, simatic_s7-1500, simatic_s7-1500_firmware, simatic_s7-1518-4_pn\/dp_mfp, simatic_s7-1518-4_pn\/dp_mfp_firmware, simatic_s7-1518f-4_pn\/dp_mfp, simatic_s7-1518f-4_pn\/dp_mfp_firmware, trusted_execution_engine
CVE-2020-8745 (published 2020-11-12)
Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel, siemens
Affected products: converged_security_and_manageability_engine, simatic_drive_controller, simatic_drive_controller_firmware, simatic_et200sp_1515sp_pc2, simatic_et200sp_1515sp_pc2_firmware, simatic_field_pg_m5, simatic_field_pg_m5_firmware, simatic_field_pg_m6, simatic_field_pg_m6_firmware, simatic_ipc127e, simatic_ipc127e_firmware, simatic_ipc427e, simatic_ipc427e_firmware, simatic_ipc477e, simatic_ipc477e_firmware, simatic_ipc477e_pro, simatic_ipc527g, simatic_ipc527g_firmware, simatic_ipc547g, simatic_ipc547g_firmware, simatic_ipc627e, simatic_ipc627e_firmware, simatic_ipc647e, simatic_ipc647e_firmware, simatic_ipc667e
CVE-2020-8746 (published 2020-11-12)
Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-190
Affected vendors: intel, netapp
Affected products: active_management_technology_firmware, cloud_backup
CVE-2020-8747 (published 2020-11-12)
Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network access.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: intel, netapp
Affected products: active_management_technology_firmware, cloud_backup
CVE-2020-8749 (published 2020-11-12)
Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: intel, netapp
Affected products: active_management_technology_firmware, cloud_backup
CVE-2020-8750 (published 2020-11-12)
Use after free in Kernel Mode Driver for Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: intel
Affected products: trusted_execution_engine
CVE-2020-8751 (published 2020-11-12)
Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, Intel(R) TXE versions before 3.1.80 may allow an unauthenticated user to potentially enable information disclosure via physical access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: intel
Affected products: converged_security_and_manageability_engine, trusted_execution_technology
CVE-2020-8752 (published 2020-11-12)
Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow an unauthenticated user to potentially enable escalation of privileges via network access.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: intel, netapp
Affected products: active_management_technology_firmware, cloud_backup, standard_manageability
CVE-2020-8753 (published 2020-11-12)
Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: intel
Affected products: active_management_technology_firmware, standard_manageability
CVE-2020-8754 (published 2020-11-12)
Out-of-bounds read in subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: intel, netapp
Affected products: active_management_technology_firmware, cloud_backup, standard_manageability
CVE-2020-8755 (published 2020-11-12)
Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and E3_05.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-362
Affected vendors: intel
Affected products: converged_security_and_management_engine, server_platform_services
CVE-2020-8756 (published 2020-11-12)
Improper input validation in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: converged_security_and_manageability_engine
CVE-2020-8757 (published 2020-11-12)
Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: intel, netapp
Affected products: active_management_technology_firmware, cloud_backup
CVE-2020-8758 (published 2020-09-10)
Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an unauthenticated user to potentially enable escalation of privilege via network access. On un-provisioned systems, an authenticated user may potentially enable escalation of privilege via local access.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel, netapp
Affected products: active_management_technology_firmware, standard_manageability, steelstore_cloud_integrated_storage
CVE-2020-8759 (published 2020-08-13)
Improper access control in the installer for Intel(R) SSD DCT versions before 3.0.23 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: ssd_data_center_tool
CVE-2020-8760 (published 2020-11-12)
Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: intel, netapp
Affected products: active_management_technology_firmware, cloud_backup
CVE-2020-8761 (published 2020-11-12)
Inadequate encryption strength in subsystem for Intel(R) CSME versions before 13.0.40 and 13.30.10 may allow an unauthenticated user to potentially enable information disclosure via physical access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-326
Affected vendors: intel
Affected products: converged_security_and_manageability_engine
CVE-2020-8763 (published 2020-08-13)
Improper permissions in the installer for the Intel(R) RealSense(TM) D400 Series UWP driver for Windows* 10 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: intel, microsoft
Affected products: realsense_d415_firmware, realsense_d435_firmware, realsense_d435i_firmware, windows_10
CVE-2020-8764 (published 2020-11-12)
Improper access control in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel, netapp
Affected products: aff_bios, bios, core_i5-7640x, core_i7-3820, core_i7-3920xm, core_i7-3930k, core_i7-3940xm, core_i7-3960x, core_i7-3970x, core_i7-4820k, core_i7-4930k, core_i7-4930mx, core_i7-4940mx, core_i7-4960x, core_i7-5820k, core_i7-5930k, core_i7-5960x, core_i7-6800k, core_i7-6850k, core_i7-6900k, core_i7-6950x, core_i7-7740x, core_i7-7800x, core_i7-7820x, core_i7-9800x
CVE-2020-8765 (published 2021-02-17)
Incorrect default permissions in the installer for the Intel(R) RealSense(TM) DCM may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: intel
Affected products: realsense_camera_f200, realsense_camera_r200, realsense_camera_sr300, realsense_depth_camera_manager
CVE-2020-8766 (published 2020-11-12)
Improper conditions check in the Intel(R) SGX DCAP software before version 1.6 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-754
Affected vendors: intel
Affected products: software_guard_extensions_data_center_attestation_primitives
CVE-2020-8767 (published 2020-11-12)
Uncaught exception in the Intel(R) 50GbE IP Core for Intel(R) Quartus Prime before version 20.2 may allow an authenticated user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-755
Affected vendors: intel
Affected products: quartus_prime
CVE-2020-8768 (published 2020-02-17)
An issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L before 1.2.3 devices. There is an insecure mechanism for read and write access to the configuration of the device. The mechanism can be discovered by examining a link on the website of the device.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H)
Weakness: CWE-732
Affected vendors: phoenixcontact
Affected products: ilc_2050_bi, ilc_2050_bi-l, ilc_2050_bi-l_firmware, ilc_2050_bi_firmware
CVE-2020-8771 (published 2020-02-06)
The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWP_JSON_PREFIX causes the client to be logged in as the first account on the list of administrator accounts.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: wptimecapsule
Affected products: wp_time_capsule
CVE-2020-8772 (published 2020-02-06)
The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in init.php. Any attacker who knows the username of an administrator can log in.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-862
Affected vendors: revmakx
Affected products: infinitewp_client
CVE-2020-8773 (published 2020-04-29)
The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L)
Weakness: CWE-79
Affected vendors: pega
Affected products: platform
CVE-2020-8774 (published 2020-04-29)
Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L)
Weakness: CWE-79
Affected vendors: pega
Affected products: pega_platform
CVE-2020-8775 (published 2020-04-29)
Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L)
Weakness: CWE-79
Affected vendors: pega
Affected products: platform
CVE-2020-8776 (published 2020-03-02)
Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via the URL property of a file.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: alfresco
Affected products: alfresco
CVE-2020-8777 (published 2020-03-02)
Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via a user profile photo, as demonstrated by a SCRIPT element in an SVG document.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: alfresco
Affected products: alfresco
CVE-2020-8778 (published 2020-03-02)
Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via an uploaded document, when the attacker has write access to a project.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: alfresco
Affected products: alfresco
CVE-2020-8781 (published 2020-10-06)
Lack of input sanitization in UpdateRebootMgr service of ALEOS 4.11 and later allow an escalation to root from a low-privilege process.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: sierrawireless
Affected products: airlink_es440, airlink_es450, airlink_gx400, airlink_gx440, airlink_gx450, airlink_ls300, airlink_lx40, airlink_lx60, airlink_mp70, airlink_mp70e, airlink_rv50, airlink_rv50x, airlink_rv55, aleos
CVE-2020-8782 (published 2020-10-06)
Unauthenticated RPC server on ALEOS before 4.4.9, 4.9.5, and 4.14.0 allows remote code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: sierrawireless
Affected products: airlink_es440, airlink_es450, airlink_gx400, airlink_gx440, airlink_gx450, airlink_ls300, airlink_lx40, airlink_lx60, airlink_mp70, airlink_mp70e, airlink_rv50, airlink_rv50x, airlink_rv55, aleos
CVE-2020-8783 (published 2020-03-16)
SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 1 of 4).
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: salesagility
Affected products: suitecrm
CVE-2020-8784 (published 2020-03-16)
SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 2 of 4).
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: salesagility
Affected products: suitecrm
CVE-2020-8785 (published 2020-03-16)
SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 3 of 4).
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: salesagility
Affected products: suitecrm
CVE-2020-8786 (published 2020-03-16)
SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 4 of 4).
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: salesagility
Affected products: suitecrm
CVE-2020-8787 (published 2020-03-16)
SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow for an invalid Bean ID to be submitted.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-20
Affected vendors: salesagility
Affected products: suitecrm
CVE-2020-8788 (published 2020-02-07)
Synaptive Medical ClearCanvas ImageServer 3.0 Alpha allows XSS (and HTML injection) via the Default.aspx UserName parameter. NOTE: the issues/227 reference does not imply that the affected product can be downloaded from GitHub. It was simply a convenient location for a public bug report.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: synaptivemedical
Affected products: clearcanvas
CVE-2020-8789 (published 2020-05-22)
Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: composr_project
Affected products: composr
CVE-2020-8790 (published 2020-05-04)
The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has weak password requirements combined with improper restriction of excessive authentication attempts, which could allow a remote attacker to discover user credentials and obtain access via a brute force attack.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-307
Affected vendors: oklok_project
Affected products: oklok
CVE-2020-8791 (published 2020-05-04)
The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) allows remote attackers to submit API requests using authenticated but unauthorized tokens, resulting in IDOR issues. A remote attacker can use their own token to make unauthorized API requests on behalf of arbitrary user IDs. Valid and current user IDs are trivial to guess because of the user ID assignment convention used by the app. A remote attacker could harvest email addresses, unsalted MD5 password hashes, owner-assigned lock names, and owner-assigned fingerprint names for any range of arbitrary user IDs.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-639
Affected vendors: oklok_project
Affected products: oklok
CVE-2020-8792 (published 2020-05-04)
The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has an information-exposure issue. In the mobile app, an attempt to add an already-bound lock by its barcode reveals the email address of the account to which the lock is bound, as well as the name of the lock. Valid barcode inputs can be easily guessed because barcode strings follow a predictable pattern. Correctly guessed valid barcode inputs entered through the app interface disclose arbitrary users' email addresses and lock names.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-330
Affected vendors: oklok_project
Affected products: oklok
CVE-2020-8793 (published 2020-02-25)
OpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux distributions) because of a combination of an untrusted search path in makemap.c and race conditions in the offline functionality in smtpd.c.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-367
Affected vendors: canonical, fedoraproject, opensmtpd
Affected products: fedora, opensmtpd, ubuntu_linux
CVE-2020-8794 (published 2020-02-25)
OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. Although this vulnerability affects the client side of OpenSMTPD, it is possible to attack a server because the server code launches the client code during bounce handling.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: canonical, debian, fedoraproject, opensmtpd
Affected products: debian_linux, fedora, opensmtpd, ubuntu_linux
CVE-2020-8795 (published 2020-02-17)
In GitLab Enterprise Edition (EE) 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: gitlab
Affected products: gitlab
CVE-2020-8796 (published 2020-02-07)
Biscom Secure File Transfer (SFT) before 5.1.1071 and 6.0.1xxx before 6.0.1005 allows Remote Code Execution on the server.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: biscom
Affected products: secure_file_transfer
CVE-2020-8797 (published 2020-04-23)
Juplink RX4-1500 v1.0.3 allows remote attackers to gain root access to the Linux subsystem via an unsanitized exec call (aka Command Line Injection), if the undocumented telnetd service is enabled and the attacker can authenticate as admin from the local network.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: juplink
Affected products: rx4-1500, rx4-1500_firmware
CVE-2020-8798 (published 2020-04-23)
httpd in Juplink RX4-1500 v1.0.3-v1.0.5 allows remote attackers to change or access router settings by connecting to the unauthenticated setup3.htm endpoint from the local network.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-276
Affected vendors: juplink
Affected products: rx4-1500, rx4-1500_firmware
CVE-2020-8799 (published 2020-05-05)
A Stored XSS vulnerability has been found in the administration page of the WTI Like Post plugin through 1.4.5 for WordPress. Once the administrator has submitted the data, the script stored is executed for all the users visiting the website.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: webtechideas
Affected products: wti_like_post
CVE-2020-8800 (published 2020-02-13)
SuiteCRM through 7.11.11 allows EmailsControllerActionGetFromFields PHP Object Injection.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-74
Affected vendors: salesagility
Affected products: suitecrm
CVE-2020-8801 (published 2020-02-13)
SuiteCRM through 7.11.11 allows PHAR Deserialization.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: salesagility
Affected products: suitecrm
CVE-2020-8802 (published 2020-02-13)
SuiteCRM through 7.11.11 has Incorrect Access Control via action_saveHTMLField Bean Manipulation.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: salesagility
Affected products: suitecrm
CVE-2020-8803 (published 2020-02-13)
SuiteCRM through 7.11.11 allows Directory Traversal to include arbitrary .php files within the webroot via add_to_prospect_list.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: salesagility
Affected products: suitecrm
CVE-2020-8804 (published 2020-02-13)
SuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the MailMerge module.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-89
Affected vendors: salesagility
Affected products: suitecrm
CVE-2020-8806 (published 2021-02-05)
Electric Coin Company Zcashd before 2.1.1-1 allows attackers to trigger consensus failure and double spending. A valid chain could be incorrectly rejected because timestamp requirements on block headers were not properly enforced.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-863
Affected vendors: electriccoin
Affected products: zcashd
CVE-2020-8807 (published 2021-02-05)
In Electric Coin Company Zcashd before 2.1.1-1, the time offset between messages could be leveraged to obtain sensitive information about the relationship between a suspected victim's address and an IP address, aka a timing side channel.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: electriccoin
Affected products: zcashd
CVE-2020-8808 (published 2020-02-07)
The CorsairLLAccess64.sys and CorsairLLAccess32.sys drivers in CORSAIR iCUE before 3.25.60 allow local non-privileged users (including low-integrity level processes) to read and write to arbitrary physical memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, via a function call such as MmMapIoSpace.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: corsair
Affected products: icue
CVE-2020-8809 (published 2020-02-25)
Gurux GXDLMS Director prior to 8.5.1905.1301 downloads updates to add-ins and OBIS code over an unencrypted HTTP connection. A man-in-the-middle attacker can prompt the user to download updates by modifying the contents of gurux.fi/obis/files.xml and gurux.fi/updates/updates.xml. Then, the attacker can modify the contents of downloaded files. In the case of add-ins (if the user is using those), this will lead to code execution. In case of OBIS codes (which the user is always using as they are needed to communicate with the energy meters), this can lead to code execution when combined with CVE-2020-8810.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-494
Affected vendors: gurux
Affected products: device_language_message_specification_director
CVE-2020-8810 (published 2020-02-25)
An issue was discovered in Gurux GXDLMS Director through 8.5.1905.1301. When downloading OBIS codes, it does not verify that the downloaded files are actual OBIS codes and doesn't check for path traversal. This allows the attacker exploiting CVE-2020-8809 to send executable files and place them in an autorun directory, or to place DLLs inside the existing GXDLMS Director installation (run on next execution of GXDLMS Director). This can be used to achieve code execution even if the user doesn't have any add-ins installed.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: gurux
Affected products: device_language_message_specification_director
CVE-2020-8811 (published 2020-02-07)
ajax/profile-picture-upload.php in Bludit 3.10.0 allows authenticated users to change other users' profile pictures.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-862
Affected vendors: bludit
Affected products: bludit
CVE-2020-8812 (published 2020-02-07)
Bludit 3.10.0 allows Editor or Author roles to insert malicious JavaScript on the WYSIWYG editor. NOTE: the vendor's perspective is that this is "not a bug.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: bludit
Affected products: bludit
CVE-2020-8813 (published 2020-02-22)
graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: cacti, debian, fedoraproject, opensuse, opmantek
Affected products: cacti, debian_linux, fedora, open-audit, suse_linux_enterprise_server, suse_package_hub
CVE-2020-8815 (published 2020-02-12)
Improper connection handling in the base connection handler in IKTeam BearFTP before v0.3.1 allows a remote attacker to achieve denial of service via a Slowloris approach by sending a large volume of small packets.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: iktm
Affected products: bearftp
CVE-2020-8816 (published 2020-05-29)
Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: pi-hole
Affected products: pi-hole
Added to CISA KEV catalog: 2021-12-10
KEV required action: Apply updates per vendor instructions.
CVE-2020-8817 (published 2020-09-14)
Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Affected vendors: dataiku
Affected products: data_science_studio
CVE-2020-8818 (published 2020-02-25)
An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2. Lack of origin authentication in the IPN callback processing function in Controller/Payment/Callback.php allows an attacker to remotely replace critical plugin settings (merchant ID, secret key, etc.) and therefore bypass the payment process (e.g., spoof an order status by manually sending an IPN callback request with a valid signature but without real payment) and/or receive all of the subsequent payments.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-346
Affected vendors: adobe, cardgate
Affected products: cardgate_payments, magento
CVE-2020-8819 (published 2020-02-25)
An issue was discovered in the CardGate Payments plugin through 3.1.15 for WooCommerce. Lack of origin authentication in the IPN callback processing function in cardgate/cardgate.php allows an attacker to remotely replace critical plugin settings (merchant ID, secret key, etc.) and therefore bypass the payment process (e.g., spoof an order status by manually sending an IPN callback request with a valid signature but without real payment) and/or receive all of the subsequent payments.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-346
Affected vendors: cardgate
Affected products: cardgate_payments
CVE-2020-8820 (published 2020-10-12)
An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the Command field and execute it. Then, after revisiting the Cluster Shell Commands Menu, the XSS Payload will be rendered and executed.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: webmin
Affected products: webmin
CVE-2020-8821 (published 2020-10-12)
An Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the Command Shell Endpoint. A user may enter HTML code into the Command field and submit it. Then, after visiting the Action Logs Menu and displaying logs, the HTML code will be rendered (however, JavaScript is not executed). Changes are kept across users.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: webmin
Affected products: webmin
CVE-2020-8822 (published 2020-02-10)
Digi TransPort WR21 5.2.2.3, WR44 5.1.6.4, and WR44v2 5.1.6.9 devices allow stored XSS in the web application.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: digi
Affected products: transport_wr21, transport_wr21_firmware, transport_wr44, transport_wr44_firmware
CVE-2020-8823 (published 2020-02-10)
htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c (aka callback) parameter.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: sockjs_project
Affected products: sockjs