alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2020-24489 (published 2021-06-09)
Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-459
Affected vendors: debian, intel
Affected products: atom_x5-e3930, atom_x5-e3940, atom_x7-e3950, celeron_j1750, celeron_j1800, celeron_j1850, celeron_j1900, celeron_j3060, celeron_j3160, celeron_j3355, celeron_j3355e, celeron_j3455, celeron_j3455e, celeron_j4005, celeron_j4025, celeron_j4105, celeron_j4115, celeron_j4125, celeron_j6412, celeron_j6413, celeron_n2805, celeron_n2806, celeron_n2807, celeron_n2808, celeron_n2810
CVE-2020-24490 (published 2021-02-02)
Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access. This affects all Linux kernel versions that support BlueZ.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: bluez, linux
Affected products: bluez, linux_kernel
CVE-2020-24491 (published 2021-02-17)
Debug message containing addresses of memory transactions in some Intel(R) 10th Generation Core Processors supporting SGX may allow a privileged user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-20
Affected vendors: intel
Affected products: core_i3, core_i5, core_i7
CVE-2020-24492 (published 2021-02-17)
Insufficient access control in the firmware for the Intel(R) 722 Ethernet Controllers before version 1.5 may allow a privileged user to potentially enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: intel
Affected products: ethernet_network_adapter_x722-da2, ethernet_network_adapter_x722-da2_firmware, ethernet_network_adapter_x722-da4, ethernet_network_adapter_x722-da4_firmware
CVE-2020-24493 (published 2021-02-17)
Insufficient access control in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 8.0 may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: intel
Affected products: ethernet_network_adapter_700_firmware, ethernet_network_adapter_v710-at2, ethernet_network_adapter_x710-am2, ethernet_network_adapter_x710-at2, ethernet_network_adapter_x710-bm2, ethernet_network_adapter_x710-da2, ethernet_network_adapter_x710-da2_for_ocp, ethernet_network_adapter_x710-da2_for_ocp_3.0, ethernet_network_adapter_x710-da4, ethernet_network_adapter_x710-da4_for_ocp_3.0, ethernet_network_adapter_x710-t2l, ethernet_network_adapter_x710-t2l_for_ocp_3.0, ethernet_network_adapter_x710-t4, ethernet_network_adapter_x710-t4l, ethernet_network_adapter_x710-t4l_for_ocp_3.0, ethernet_network_adapter_x710-tm4, ethernet_network_adapter_x722-da2, ethernet_network_adapter_x722-da4, ethernet_network_adapter_xl710-am1, ethernet_network_adapter_xl710-am2, ethernet_network_adapter_xl710-bm1, ethernet_network_adapter_xl710-bm2, ethernet_network_adapter_xl710-qda1, ethernet_network_adapter_xl710-qda1_for_open_compute_project, ethernet_network_adapter_xl710-qda2_for_open_compute_project
CVE-2020-24494 (published 2021-02-17)
Insufficient access control in the firmware for the Intel(R) 722 Ethernet Controllers before version 1.4.3 may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: intel
Affected products: ethernet_network_adapter_x722-da2, ethernet_network_adapter_x722-da2_firmware, ethernet_network_adapter_x722-da4, ethernet_network_adapter_x722-da4_firmware
CVE-2020-24495 (published 2021-02-17)
Insufficient access control in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: intel
Affected products: ethernet_network_adapter_700_firmware, ethernet_network_adapter_v710-at2, ethernet_network_adapter_x710-am2, ethernet_network_adapter_x710-at2, ethernet_network_adapter_x710-bm2, ethernet_network_adapter_x710-da2, ethernet_network_adapter_x710-da2_for_ocp, ethernet_network_adapter_x710-da2_for_ocp_3.0, ethernet_network_adapter_x710-da4, ethernet_network_adapter_x710-da4_for_ocp_3.0, ethernet_network_adapter_x710-t2l, ethernet_network_adapter_x710-t2l_for_ocp_3.0, ethernet_network_adapter_x710-t4, ethernet_network_adapter_x710-t4l, ethernet_network_adapter_x710-t4l_for_ocp_3.0, ethernet_network_adapter_x710-tm4, ethernet_network_adapter_x722-da2, ethernet_network_adapter_x722-da4, ethernet_network_adapter_xl710-am1, ethernet_network_adapter_xl710-am2, ethernet_network_adapter_xl710-bm1, ethernet_network_adapter_xl710-bm2, ethernet_network_adapter_xl710-qda1, ethernet_network_adapter_xl710-qda1_for_open_compute_project, ethernet_network_adapter_xl710-qda2_for_open_compute_project
CVE-2020-24496 (published 2021-02-17)
Insufficient input validation in the firmware for Intel(R) 722 Ethernet Controllers before version 1.4.3 may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: ethernet_network_adapter_x722-da2, ethernet_network_adapter_x722-da2_firmware, ethernet_network_adapter_x722-da4, ethernet_network_adapter_x722-da4_firmware
CVE-2020-24497 (published 2021-02-17)
Insufficient Access Control in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: intel
Affected products: ethernet_network_adapter_e810-cqda1, ethernet_network_adapter_e810-cqda1_for_ocp, ethernet_network_adapter_e810-cqda1_for_ocp_3.0, ethernet_network_adapter_e810-cqda2, ethernet_network_adapter_e810-cqda2_for_ocp_3.0, ethernet_network_adapter_e810-xxvda2, ethernet_network_adapter_e810-xxvda2_for_ocp, ethernet_network_adapter_e810-xxvda2_for_ocp_3.0, ethernet_network_adapter_e810-xxvda4, ethernet_network_adapter_e810_firmware
CVE-2020-24498 (published 2021-02-17)
Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: intel
Affected products: ethernet_network_adapter_e810-cqda1, ethernet_network_adapter_e810-cqda1_for_ocp, ethernet_network_adapter_e810-cqda1_for_ocp_3.0, ethernet_network_adapter_e810-cqda2, ethernet_network_adapter_e810-cqda2_for_ocp_3.0, ethernet_network_adapter_e810-xxvda2, ethernet_network_adapter_e810-xxvda2_for_ocp, ethernet_network_adapter_e810-xxvda2_for_ocp_3.0, ethernet_network_adapter_e810-xxvda4, ethernet_network_adapter_e810_firmware
CVE-2020-24500 (published 2021-02-17)
Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: intel
Affected products: ethernet_network_adapter_e810-cqda1, ethernet_network_adapter_e810-cqda1_for_ocp, ethernet_network_adapter_e810-cqda1_for_ocp_3.0, ethernet_network_adapter_e810-cqda2, ethernet_network_adapter_e810-cqda2_for_ocp_3.0, ethernet_network_adapter_e810-xxvda2, ethernet_network_adapter_e810-xxvda2_for_ocp, ethernet_network_adapter_e810-xxvda2_for_ocp_3.0, ethernet_network_adapter_e810-xxvda4, ethernet_network_adapter_e810_firmware
CVE-2020-24501 (published 2021-02-17)
Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-120
Affected vendors: intel
Affected products: ethernet_network_adapter_e810-cqda1, ethernet_network_adapter_e810-cqda1_for_ocp, ethernet_network_adapter_e810-cqda1_for_ocp_3.0, ethernet_network_adapter_e810-cqda2, ethernet_network_adapter_e810-cqda2_for_ocp_3.0, ethernet_network_adapter_e810-xxvda2, ethernet_network_adapter_e810-xxvda2_for_ocp, ethernet_network_adapter_e810-xxvda2_for_ocp_3.0, ethernet_network_adapter_e810-xxvda4, ethernet_network_adapter_e810_firmware
CVE-2020-24502 (published 2021-02-17)
Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before version 1.4.29.0 for Windows*, may allow an authenticated user to potentially enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: ethernet_network_adapter_e810-cqda1, ethernet_network_adapter_e810-cqda1_for_ocp, ethernet_network_adapter_e810-cqda1_for_ocp_3.0, ethernet_network_adapter_e810-cqda2, ethernet_network_adapter_e810-cqda2_for_ocp_3.0, ethernet_network_adapter_e810-xxvda2, ethernet_network_adapter_e810-xxvda2_for_ocp, ethernet_network_adapter_e810-xxvda2_for_ocp_3.0, ethernet_network_adapter_e810-xxvda4, ethernet_network_adapter_e810_firmware
CVE-2020-24503 (published 2021-02-17)
Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: intel
Affected products: ethernet_network_adapter_e810-cqda1, ethernet_network_adapter_e810-cqda1_for_ocp, ethernet_network_adapter_e810-cqda1_for_ocp_3.0, ethernet_network_adapter_e810-cqda2, ethernet_network_adapter_e810-cqda2_for_ocp_3.0, ethernet_network_adapter_e810-xxvda2, ethernet_network_adapter_e810-xxvda2_for_ocp, ethernet_network_adapter_e810-xxvda2_for_ocp_3.0, ethernet_network_adapter_e810-xxvda4, ethernet_network_adapter_e810_firmware
CVE-2020-24504 (published 2021-02-17)
Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: intel
Affected products: ethernet_network_adapter_e810-cqda1, ethernet_network_adapter_e810-cqda1_for_ocp, ethernet_network_adapter_e810-cqda1_for_ocp_3.0, ethernet_network_adapter_e810-cqda2, ethernet_network_adapter_e810-cqda2_for_ocp_3.0, ethernet_network_adapter_e810-xxvda2, ethernet_network_adapter_e810-xxvda2_for_ocp, ethernet_network_adapter_e810-xxvda2_for_ocp_3.0, ethernet_network_adapter_e810-xxvda4, ethernet_network_adapter_e810_firmware
CVE-2020-24505 (published 2021-02-17)
Insufficient input validation in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: ethernet_network_adapter_700_firmware, ethernet_network_adapter_v710-at2, ethernet_network_adapter_x710-am2, ethernet_network_adapter_x710-at2, ethernet_network_adapter_x710-bm2, ethernet_network_adapter_x710-da2, ethernet_network_adapter_x710-da2_for_ocp, ethernet_network_adapter_x710-da2_for_ocp_3.0, ethernet_network_adapter_x710-da4, ethernet_network_adapter_x710-da4_for_ocp_3.0, ethernet_network_adapter_x710-t2l, ethernet_network_adapter_x710-t2l_for_ocp_3.0, ethernet_network_adapter_x710-t4, ethernet_network_adapter_x710-t4l, ethernet_network_adapter_x710-t4l_for_ocp_3.0, ethernet_network_adapter_x710-tm4, ethernet_network_adapter_x722-da2, ethernet_network_adapter_x722-da4, ethernet_network_adapter_xl710-am1, ethernet_network_adapter_xl710-am2, ethernet_network_adapter_xl710-bm1, ethernet_network_adapter_xl710-bm2, ethernet_network_adapter_xl710-qda1, ethernet_network_adapter_xl710-qda1_for_open_compute_project, ethernet_network_adapter_xl710-qda2_for_open_compute_project
CVE-2020-24506 (published 2021-06-09)
Out of bound read in a subsystem in the Intel(R) CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32 may allow a privileged user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: intel, siemens
Affected products: b360, b365, b460, c242, c246, celeron_4205u, celeron_4305u, celeron_4305ue, converged_security_and_manageability_engine, core_i3-1000g1, core_i3-1000g4, core_i3-1000ng4, core_i3-1005g1, core_i3-10100, core_i3-10100e, core_i3-10100f, core_i3-10100t, core_i3-10100te, core_i3-10100y, core_i3-10105, core_i3-10105f, core_i3-10105t, core_i3-10110u, core_i3-10110y, core_i3-10300
CVE-2020-24507 (published 2021-06-09)
Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may allow a privileged user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-665
Affected vendors: intel, siemens
Affected products: b150, b250, b360, b365, b460, c242, c246, c420, c621, c621a, c622, c624, c625, c626, c627, c627a, c628, c629, c629a, celeron_4205u, celeron_4305u, celeron_4305ue, celeron_6305, celeron_6305e, celeron_n2805
CVE-2020-24509 (published 2021-06-09)
Insufficient control flow management in subsystem in Intel(R) SPS versions before SPS_E3_05.01.04.300.0, SPS_SoC-A_05.00.03.091.0, SPS_E5_04.04.04.023.0, or SPS_E5_04.04.03.263.0 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: server_platform_services
CVE-2020-24511 (published 2021-06-09)
Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Weakness: CWE-668
Affected vendors: debian, intel, netapp
Affected products: debian_linux, fas\/aff_bios, hci_compute_node_bios, microcode, solidfire_bios
CVE-2020-24512 (published 2021-06-09)
Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-203
Affected vendors: debian, intel, netapp
Affected products: debian_linux, fas\/aff_bios, hci_compute_node_bios, microcode, solidfire_bios
CVE-2020-24513 (published 2021-06-09)
Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Affected vendors: debian, intel, siemens
Affected products: atom_c3308, atom_c3336, atom_c3338, atom_c3338r, atom_c3436l, atom_c3508, atom_c3538, atom_c3558, atom_c3558r, atom_c3558rc, atom_c3708, atom_c3750, atom_c3758, atom_c3758r, atom_c3808, atom_c3830, atom_c3850, atom_c3858, atom_c3950, atom_c3955, atom_c3958, atom_p5942b, atom_x5-a3930, atom_x5-a3940, atom_x5-a3950
CVE-2020-24514 (published 2021-06-09)
Improper authentication in some Intel(R) RealSense(TM) IDs may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: intel
Affected products: realsense_id_f450, realsense_id_f450_firmware, realsense_id_f455, realsense_id_f455_firmware
CVE-2020-24515 (published 2021-06-09)
Protection mechanism failure in some Intel(R) RealSense(TM) IDs may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: realsense_id_f450, realsense_id_f450_firmware, realsense_id_f455, realsense_id_f455_firmware
CVE-2020-24516 (published 2021-06-09)
Modification of assumed-immutable data in subsystem in Intel(R) CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: b460, celeron_6305, celeron_6305e, converged_security_and_manageability_engine, core_i3-1000g1, core_i3-1000g4, core_i3-1000ng4, core_i3-1005g1, core_i3-10100, core_i3-10100e, core_i3-10100f, core_i3-10100t, core_i3-10100te, core_i3-10100y, core_i3-10105, core_i3-10105f, core_i3-10105t, core_i3-10110u, core_i3-10110y, core_i3-10300, core_i3-10300t, core_i3-10305, core_i3-10305t, core_i3-10320, core_i3-10325
CVE-2020-24525 (published 2020-11-12)
Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: intel
Affected products: nuc_8_mainstream-g_kit_nuc8i5inh, nuc_8_mainstream-g_kit_nuc8i5inh_firmware, nuc_8_mainstream-g_kit_nuc8i7inh, nuc_8_mainstream-g_kit_nuc8i7inh_firmware, nuc_8_mainstream-g_mini_pc_nuc8i5inh, nuc_8_mainstream-g_mini_pc_nuc8i5inh_firmware, nuc_8_mainstream-g_mini_pc_nuc8i7inh, nuc_8_mainstream-g_mini_pc_nuc8i7inh_firmware, nuc_8_pro_board_nuc8i3pnb, nuc_8_pro_board_nuc8i3pnb_firmware, nuc_8_pro_kit_nuc8i3pnh, nuc_8_pro_kit_nuc8i3pnh_firmware, nuc_8_pro_kit_nuc8i3pnk, nuc_8_pro_kit_nuc8i3pnk_firmware, nuc_8_pro_mini_pc_nuc8i3pnk, nuc_8_pro_mini_pc_nuc8i3pnk_firmware, nuc_8_rugged_kit_nuc8cchkr, nuc_8_rugged_kit_nuc8cchkr_firmware, nuc_9_pro_kit_nuc9v7qnx, nuc_9_pro_kit_nuc9v7qnx_firmware, nuc_9_pro_kit_nuc9vxqnx, nuc_9_pro_kit_nuc9vxqnx_firmware, nuc_board_h27002-400, nuc_board_h27002-400_firmware, nuc_board_h27002-401
CVE-2020-24548 (published 2020-08-26)
Ericom Access Server 9.2.0 (for AccessNow and Ericom Blaze) allows SSRF to make outbound WebSocket connection requests on arbitrary TCP ports, and provides "Cannot connect to" error messages to inform the attacker about closed ports.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-918
Affected vendors: ericom
Affected products: access_server
CVE-2020-24549 (published 2021-01-26)
openMAINT before 1.1-2.4.2 allows remote authenticated users to run arbitrary JSP code on the underlying web server.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: openmaint
Affected products: openmaint
CVE-2020-24550 (published 2021-03-31)
An Open Redirect vulnerability in EpiServer Find before 13.2.7 allows an attacker to redirect users to untrusted websites via the _t_redirect parameter in a crafted URL, such as a /find_v2/_click URL.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-601
Affected vendors: episerver
Affected products: find
CVE-2020-24551 (published 2020-10-14)
IProom MMC+ Server login page does not validate specific parameters properly. Attackers can use the vulnerability to redirect to any malicious site and steal the victim's login credentials.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-601
Affected vendors: iproom
Affected products: mmc\+
CVE-2020-24552 (published 2020-09-10)
Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation, the device's web management interface allows attackers to inject specific code and execute system commands without privilege.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: atoptechnology
Affected products: se5901, se5901_firmware, se5901b, se5901b_firmware, se5904d, se5904d_firmware, se5908, se5908_firmware, se5908a, se5908a_firmware, se5916, se5916_firmware, se5916a, se5916a_firmware
CVE-2020-24553 (published 2020-09-02)
Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: fedoraproject, golang, opensuse, oracle
Affected products: communications_cloud_native_core_policy, fedora, go, leap
CVE-2020-24554 (published 2020-09-01)
The redirect module in Liferay Portal before 7.3.3 does not limit the number of URLs resulting in a 404 error that is recorded, which allows remote attackers to perform a denial of service attack by making repeated requests for pages that do not exist.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-601
Affected vendors: liferay
Affected products: liferay_portal
CVE-2020-24556 (published 2020-09-01)
A vulnerability in Trend Micro Apex One, OfficeScan XG SP1, Worry-Free Business Security 10 SP1 and Worry-Free Business Security Services on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note that version 1909 (OS Build 18363.719) of Microsoft Windows 10 mitigates hard links, but previous versions are affected.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-59
Affected vendors: apple, microsoft, trendmicro
Affected products: apex_one, macos, windows, worry-free_business_security, worry-free_business_security_services
CVE-2020-24557 (published 2020-09-01)
A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note that version 1909 (OS Build 18363.719) of Microsoft Windows 10 mitigates hard links, but previous versions are affected.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: microsoft, trendmicro
Affected products: apex_one, windows, worry-free_business_security
Added to CISA KEV catalog: 2021-11-03
KEV required action: Apply updates per vendor instructions.
CVE-2020-24558 (published 2020-09-01)
A vulnerability in an Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services dll may allow an attacker to manipulate it to cause an out-of-bounds read that crashes multiple processes in the product. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: apple, microsoft, trendmicro
Affected products: apex_one, macos, windows, worry-free_business_security, worry-free_business_security_services
CVE-2020-24559 (published 2020-09-01)
A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain binary to load and run a script from a user-writable folder, which then would allow them to execute arbitrary code as root. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-59
Affected vendors: apple, microsoft, trendmicro
Affected products: apex_one, macos, officescan, windows, worry-free_business_security, worry-free_business_security_services
CVE-2020-24560 (published 2020-09-24)
An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another attack to trick an affected client into downloading a malicious update instead of the expected one. CWE-295: Improper server certificate verification in the communication with the update server.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-295
Affected vendors: microsoft, trendmicro
Affected products: antivirus\+_2019, internet_security_2019, maximum_security_2019, officescan_cloud, premium_security_2019, windows
CVE-2020-24561 (published 2020-09-15)
A command injection vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow an attacker to execute arbitrary code on an affected system. An attacker must first obtain admin/root privileges on the SPLX console to exploit this vulnerability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-77
Affected vendors: trendmicro
Affected products: serverprotect
CVE-2020-24562 (published 2020-09-29)
A vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This CVE is similar, but not identical to CVE-2020-24556.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-59
Affected vendors: microsoft, trendmicro
Affected products: officescan, windows
CVE-2020-24563 (published 2020-09-29)
A vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of the security agent unload option (if configured), which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged code on the target in order to exploit this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: microsoft, trendmicro
Affected products: apex_one, windows
CVE-2020-24564 (published 2020-09-29)
An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the target in order to exploit these vulnerabilities. The subs affected in this vulnerability makes it unique compared to similar CVEs such as CVE-2020-24565 and CVE-2020-25770.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: microsoft, trendmicro
Affected products: apex_one, windows
CVE-2020-24565 (published 2020-09-29)
An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the target in order to exploit these vulnerabilities. The subs affected in this vulnerability makes it unique compared to similar CVEs such as CVE-2020-24564 and CVE-2020-25770.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: microsoft, trendmicro
Affected products: apex_one, windows
CVE-2020-24566 (published 2020-09-09)
In Octopus Deploy 2020.3.x before 2020.3.4 and 2020.4.x before 2020.4.1, if an authenticated user creates a deployment or runbook process using Azure steps and sets the step's execution location to run on the server/worker, then (under certain circumstances) the account password is exposed in cleartext in the verbose task logs output.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-532
Affected vendors: octopus
Affected products: octopus_deploy
CVE-2020-24567 (published 2020-08-21)
voidtools Everything before 1.4.1 Beta Nightly 2020-08-18 allows privilege escalation via a Trojan horse urlmon.dll file in the installation directory. NOTE: this is only relevant if low-privileged users can write to the installation directory, which may be considered a site-specific configuration error
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: voidtools
Affected products: everything
CVE-2020-24568 (published 2020-10-02)
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the lancompenent component, allowing logged-in attackers to discover arbitrary information.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-89
Affected vendors: mbconnectline
Affected products: mbconnect24, mymbconnect24
CVE-2020-24569 (published 2020-09-30)
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the knximport component via an advanced attack vector, allowing logged in attackers to discover arbitrary information.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-89
Affected vendors: mbconnectline
Affected products: mbconnect24, mymbconnect24
CVE-2020-24570 (published 2020-09-30)
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a CSRF issue (with resultant SSRF) in the com_mb24proxy module, allowing attackers to steal session information from logged-in users with a crafted link.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-352
Affected vendors: mbconnectline
Affected products: mbconnect24, mymbconnect24
CVE-2020-24571 (published 2020-08-21)
NexusQA NexusDB before 4.50.23 allows the reading of files via ../ directory traversal.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: nexusdb
Affected products: nexusdb
CVE-2020-24572 (published 2020-08-24)
An issue was discovered in includes/webconsole.php in RaspAP 2.5. With authenticated access, an attacker can use a misconfigured (and virtually unrestricted) web console to attack the underlying OS (Raspberry Pi) running this software, and execute commands on the system (including ones for uploading of files and execution of code).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: raspap
Affected products: raspap
CVE-2020-24573 (published 2020-11-12)
BAB TECHNOLOGIE GmbH eibPort V3 prior to 3.8.3 devices allow denial of service (Uncontrolled Resource Consumption) via requests to the lighttpd component.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: bab-technologie
Affected products: eibport, eibport_firmware
CVE-2020-24574 (published 2020-08-21)
The client (aka GalaxyClientService.exe) in GOG GALAXY through 2.0.41 (as of 12:58 AM Eastern, 9/26/21) allows local privilege escalation from any authenticated user to SYSTEM by instructing the Windows service to execute arbitrary commands. This occurs because the attacker can inject a DLL into GalaxyClient.exe, defeating the TCP-based "trusted client" protection mechanism.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: gog
Affected products: galaxy
CVE-2020-24576 (published 2021-08-12)
Netskope Client through 77 allows low-privileged users to elevate their privileges to NT AUTHORITY\SYSTEM.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: netskope
Affected products: netskope
CVE-2020-24577 (published 2021-01-08)
An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. The One Touch application discloses sensitive information, such as the hashed admin login password and the Internet provider connection username and cleartext password, in the application's response body for a /tmp/var/passwd or /tmp/home/wan_stat URI.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-312
Affected vendors: dlink
Affected products: dsl-2888a, dsl-2888a_firmware
CVE-2020-24578 (published 2020-12-22)
An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It has a misconfigured FTP service that allows a malicious network user to access system folders and download sensitive files (such as the password hash file).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-427
Affected vendors: dlink
Affected products: dsl2888a, dsl2888a_firmware
CVE-2020-24579 (published 2020-12-22)
An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. An unauthenticated attacker could bypass authentication to access authenticated pages and functionality.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: dlink
Affected products: dsl2888a, dsl2888a_firmware
CVE-2020-24580 (published 2020-12-22)
An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. Lack of authentication functionality allows an attacker to assign a static IP address that was once used by a valid user.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-306
Affected vendors: dlink
Affected products: dsl2888a, dsl2888a_firmware
CVE-2020-24581 (published 2020-12-22)
An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It contains an execute_cmd.cgi feature (that is not reachable via the web user interface) that lets an authenticated user execute Operating System commands.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: dlink
Affected products: dsl2888a, dsl2888a_firmware
CVE-2020-24582 (published 2020-09-10)
Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: zulipchat
Affected products: zulip_desktop
CVE-2020-24583 (published 2020-09-01)
An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). FILE_UPLOAD_DIRECTORY_PERMISSIONS mode was not applied to intermediate-level directories created in the process of uploading files. It was also not applied to intermediate-level collected static directories when using the collectstatic management command.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-276
Affected vendors: canonical, djangoproject, fedoraproject, oracle
Affected products: django, fedora, ubuntu_linux, zfs_storage_appliance_kit
CVE-2020-24584 (published 2020-09-01)
An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). The intermediate-level directories of the filesystem cache had the system's standard umask rather than 0o077.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-276
Affected vendors: canonical, djangoproject, fedoraproject, oracle
Affected products: django, fedora, ubuntu_linux, zfs_storage_appliance_kit
CVE-2020-24585 (published 2020-08-21)
An issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS application_data messages in epoch 0 do not produce an out-of-order error. Instead, these messages are returned to the application.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Affected vendors: wolfssl
Affected products: wolfssl
CVE-2020-24586 (published 2021-05-11)
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
Affected vendors: arista, debian, ieee, intel, linux
Affected products: ac_1550, ac_1550_firmware, ac_3165, ac_3165_firmware, ac_3168, ac_3168_firmware, ac_7265, ac_7265_firmware, ac_8260, ac_8260_firmware, ac_8265, ac_8265_firmware, ac_9260, ac_9260_firmware, ac_9461, ac_9461_firmware, ac_9462, ac_9462_firmware, ac_9560, ac_9560_firmware, ax1650, ax1650_firmware, ax1675, ax1675_firmware, ax200
CVE-2020-24587 (published 2021-05-11)
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)
Weakness: CWE-327
Affected vendors: arista, cisco, debian, ieee, intel, linux
Affected products: 1100, 1100-4p, 1100-4p_firmware, 1100-8p, 1100-8p_firmware, 1100_firmware, 1101-4p, 1101-4p_firmware, 1109-2p, 1109-2p_firmware, 1109-4p, 1109-4p_firmware, ac_8260, ac_8260_firmware, ac_8265, ac_8265_firmware, ac_9260, ac_9260_firmware, ac_9560, ac_9560_firmware, aironet_1532, aironet_1532_firmware, aironet_1542d, aironet_1542d_firmware, aironet_1542i
CVE-2020-24588 (published 2021-05-11)
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)
Weakness: CWE-327
Affected vendors: arista, cisco, debian, ieee, intel, linux, microsoft, siemens
Affected products: 1100, 1100-4p, 1100-4p_firmware, 1100-8p, 1100-8p_firmware, 1100_firmware, 1101-4p, 1101-4p_firmware, 1109-2p, 1109-2p_firmware, 1109-4p, 1109-4p_firmware, ac_8260, ac_8260_firmware, ac_8265, ac_8265_firmware, ac_9260, ac_9260_firmware, ac_9560, ac_9560_firmware, aironet_1532, aironet_1532_firmware, aironet_1542d, aironet_1542d_firmware, aironet_1542i
CVE-2020-24589 (published 2020-08-21)
The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML External Entity injection (XXE) attacks.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-611
Affected vendors: wso2
Affected products: api_manager, api_microgateway
CVE-2020-24590 (published 2020-08-21)
The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML Entity Expansion attacks.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-776
Affected vendors: wso2
Affected products: api_manager, api_microgateway
CVE-2020-24591 (published 2020-08-21)
The Management Console in certain WSO2 products allows XXE attacks during EventReceiver updates. This affects API Manager through 3.0.0, API Manager Analytics 2.2.0 and 2.5.0, API Microgateway 2.2.0, Enterprise Integrator 6.2.0 and 6.3.0, and Identity Server Analytics through 5.6.0.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-611
Affected vendors: wso2
Affected products: api_manager, api_manager_analytics, api_microgateway, enterprise_integrator, identity_server_analytics
CVE-2020-24592 (published 2020-09-25)
Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to view system information due to insufficient output sanitization.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-116
Affected vendors: mitel
Affected products: micloud_management_portal
CVE-2020-24593 (published 2020-09-25)
Mitel MiCloud Management Portal before 6.1 SP5 could allow a remote attacker to conduct a SQL Injection attack and access user credentials due to improper input validation.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: mitel
Affected products: micloud_management_portal
CVE-2020-24594 (published 2020-09-25)
Mitel MiCloud Management Portal before 6.1 SP5 could allow an unauthenticated attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allow an attacker to gain access to a user session.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
Weakness: CWE-79
Affected vendors: mitel
Affected products: micloud_management_portal
CVE-2020-24595 (published 2020-09-25)
Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to retrieve sensitive information due to insufficient access control.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: mitel
Affected products: micloud_management_portal
CVE-2020-24598 (published 2020-08-26)
An issue was discovered in Joomla! before 3.9.21. Lack of input validation in the vote feature of com_content leads to an open redirect.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-601
Affected vendors: joomla
Affected products: joomla\!
CVE-2020-24599 (published 2020-08-26)
An issue was discovered in Joomla! before 3.9.21. Lack of escaping in mod_latestactions allows XSS attacks.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: joomla
Affected products: joomla\!
CVE-2020-24600 (published 2022-12-26)
Shilpi CAPExWeb 1.1 allows SQL injection via a servlet/capexweb.cap_sendMail GET request.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: capexweb_project
Affected products: capexweb
CVE-2020-24601 (published 2020-09-02)
In Ignite Realtime Openfire 4.5.1 a Stored Cross-site Vulnerability allows an attacker to execute an arbitrary malicious URL via the vulnerable POST parameter searchName", "alias" in the import certificate trusted page
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: igniterealtime
Affected products: openfire
CVE-2020-24602 (published 2020-09-02)
Ignite Realtime Openfire 4.5.1 has a reflected Cross-site scripting vulnerability which allows an attacker to execute arbitrary malicious URL via the vulnerable GET parameter searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescription" and "searchDynamic" in the Server Properties and Security Audit Viewer JSP page
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: igniterealtime
Affected products: openfire
CVE-2020-24604 (published 2020-09-02)
A Reflected XSS vulnerability was discovered in Ignite Realtime Openfire version 4.5.1. The XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the GET request "searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescription" and "searchDynamic" in server-properties.jsp and security-audit-viewer.jsp
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: igniterealtime
Affected products: openfire
CVE-2020-24606 (published 2020-08-24)
Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during handling of a crafted Cache Digest response message. This only occurs when cache_peer is used with the cache digests feature. The problem exists because peerDigestHandleReply() livelocking in peer_digest.cc mishandles EOF.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-667
Affected vendors: canonical, debian, fedoraproject, opensuse, squid-cache
Affected products: debian_linux, fedora, leap, squid, ubuntu_linux
CVE-2020-24609 (published 2020-08-25)
TechKshetra Info Solutions Pvt. Ltd Savsoft Quiz 5.5 and earlier has XSS which can result in an attacker injecting the XSS payload in the User Registration section and each time the admin visits the manage user section from the admin panel, the XSS triggers and the attacker can steal the cookie via crafted payload.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: techkshetrainfo
Affected products: savsoft_quiz
CVE-2020-24612 (published 2020-08-24)
An issue was discovered in the selinux-policy (aka Reference Policy) package 3.14 through 2020-08-24 because the .config/Yubico directory is mishandled. Consequently, when SELinux is in enforced mode, pam-u2f is not allowed to read the user's U2F configuration file. If configured with the nouserok option (the default when configured by the authselect tool), and that file cannot be read, the second factor is disabled. An attacker with only the knowledge of the password can then log in, bypassing 2FA.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-287
Affected vendors: fedoraproject
Affected products: selinux-policy
CVE-2020-24613 (published 2020-08-24)
wolfSSL before 4.5.0 mishandles TLS 1.3 server data in the WAIT_CERT_CR state, within SanityCheckTls13MsgReceived() in tls13.c. This is an incorrect implementation of the TLS 1.3 client state machine. This allows attackers in a privileged network position to completely impersonate any TLS 1.3 servers, and read or modify potentially sensitive information between clients using the wolfSSL library and these TLS servers.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-295
Affected vendors: wolfssl
Affected products: wolfssl
CVE-2020-24614 (published 2020-08-25)
Fossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated users to execute arbitrary code. An attacker must have check-in privileges on the repository.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-862
Affected vendors: fedoraproject, fossil-scm, opensuse
Affected products: backports_sle, fedora, fossil, leap
CVE-2020-24615 (published 2020-09-25)
Pexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service via SIP.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Weakness: CWE-20
Affected vendors: pexip
Affected products: pexip_infinity