auren-research/cyber-sec huggingface dataset:
cveID: CVE-2017-6327
vendorProject: Symantec
product: Symantec Messaging Gateway
vulnerabilityName: Symantec Messaging Gateway Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Symantec Messaging Gateway contains an unspecified vulnerability which can allow for remote code execution. With the ability to perform remote code execution, an attacker may also desire to perform privilege escalating actions.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-6327
cwes: CWE-20
cveID: CVE-2019-18988
vendorProject: TeamViewer
product: Desktop
vulnerabilityName: TeamViewer Desktop Bypass Remote Login Vulnerability
dateAdded: 2021-11-03
shortDescription: TeamViewer Desktop allows for bypass of remote-login access control because the same AES key is used for different customers' installations. If an attacker were to know this key, they could decrypt protected information stored in registry or configuration files or decryption of the Unattended Access password to the system (which allows for remote login to the system).
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-18988
cwes: CWE-521
cveID: CVE-2017-9248
vendorProject: Progress
product: ASP.NET AJAX and Sitefinity
vulnerabilityName: Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability
dateAdded: 2021-11-03
shortDescription: Progress Telerik UI for ASP.NET AJAX and Sitefinity have a cryptographic weakness in Telerik.Web.UI.dll that can be exploited to disclose encryption keys (Telerik.Web.UI.DialogParametersEncryptionKey and/or the MachineKey), perform cross-site-scripting (XSS) attacks, compromise the ASP.NET ViewState, and/or upload and download files.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2017-9248
cwes: CWE-522
cveID: CVE-2021-31755
vendorProject: Tenda
product: AC11 Router
vulnerabilityName: Tenda AC11 Router Stack Buffer Overflow Vulnerability
dateAdded: 2021-11-03
shortDescription: Tenda AC11 devices contain a stack buffer overflow vulnerability in /goform/setmac which allows attackers to execute code via a crafted post request.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-31755
cwes: CWE-787
cveID: CVE-2020-10987
vendorProject: Tenda
product: AC1900 Router AC15 Model
vulnerabilityName: Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Tenda AC1900 Router AC15 Model contains an unspecified vulnerability that allows remote attackers to execute system commands via the deviceName POST parameter.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-10987
cwes: CWE-78
cveID: CVE-2018-14558
vendorProject: Tenda
product: AC7, AC9, and AC10 Routers
vulnerabilityName: Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability
dateAdded: 2021-11-03
shortDescription: Tenda AC7, AC9, and AC10 devices contain a command injection vulnerability due to the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input. Successful exploitation allows an attacker to execute OS commands via a crafted goform/setUsbUnload request.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-14558
cwes: CWE-78
cveID: CVE-2018-20062
vendorProject: ThinkPHP
product: noneCms
vulnerabilityName: ThinkPHP "noneCms" Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: ThinkPHP "noneCms" contains an unspecified vulnerability that allows for remote code execution through crafted use of the filter parameter.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2018-20062
cwes: CWE-20
cveID: CVE-2019-9082
vendorProject: ThinkPHP
product: ThinkPHP
vulnerabilityName: ThinkPHP Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: ThinkPHP contains an unspecified vulnerability that allows for remote code execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-9082
cwes: CWE-306
CWE-94
cveID: CVE-2019-18187
vendorProject: Trend Micro
product: OfficeScan
vulnerabilityName: Trend Micro OfficeScan Directory Traversal Vulnerability
dateAdded: 2021-11-03
shortDescription: Trend Micro OfficeScan contains a directory traversal vulnerability by extracting files from a zip file to a specific folder on the OfficeScan server, leading to remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-18187
cwes: CWE-22
cveID: CVE-2020-8467
vendorProject: Trend Micro
product: Apex One and OfficeScan
vulnerabilityName: Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Trend Micro Apex One and OfficeScan contain an unspecified vulnerability within a migration tool component that allows for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-8467
cveID: CVE-2020-8468
vendorProject: Trend Micro
product: Apex One, OfficeScan and Worry-Free Business Security Agents
vulnerabilityName: Trend Micro Multiple Products Content Validation Escape Vulnerability
dateAdded: 2021-11-03
shortDescription: Trend Micro Apex One, OfficeScan, and Worry-Free Business Security agents contain a content validation escape vulnerability that could allow an attacker to manipulate certain agent client components.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-8468
cwes: CWE-74
cveID: CVE-2020-24557
vendorProject: Trend Micro
product: Apex One, OfficeScan, and Worry-Free Business Security
vulnerabilityName: Trend Micro Multiple Products Improper Access Control Vulnerability
dateAdded: 2021-11-03
shortDescription: Trend Micro Apex One, OfficeScan, and Worry-Free Business Security on Microsoft Windows contain an improper access control vulnerability that may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function, and attain privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-24557
cveID: CVE-2020-8599
vendorProject: Trend Micro
product: Apex One and OfficeScan
vulnerabilityName: Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
dateAdded: 2021-11-03
shortDescription: Trend Micro Apex One and OfficeScan server contain a vulnerable EXE file that could allow a remote attacker to write data to a path on affected installations and bypass root login.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-8599
cveID: CVE-2021-36742
vendorProject: Trend Micro
product: Apex One, Apex One as a Service, and Worry-Free Business Security
vulnerabilityName: Trend Micro Multiple Products Improper Input Validation Vulnerability
dateAdded: 2021-11-03
shortDescription: Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows for privilege escalation.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://success.trendmicro.com/dcx/s/solution/000287819?language=en_US, https://success.trendmicro.com/dcx/s/solution/000287820?language=en_US; https://nvd.nist.gov/vuln/detail/CVE-2021-36742
cwes: CWE-20
cveID: CVE-2021-36741
vendorProject: Trend Micro
product: Apex One, Apex One as a Service, and Worry-Free Business Security
vulnerabilityName: Trend Micro Multiple Products Improper Input Validation Vulnerability
dateAdded: 2021-11-03
shortDescription: Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows a remote attacker to upload files.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://success.trendmicro.com/dcx/s/solution/000287819?language=en_US, https://success.trendmicro.com/dcx/s/solution/000287820?language=en_US; https://nvd.nist.gov/vuln/detail/CVE-2021-36741
cwes: CWE-22
cveID: CVE-2019-20085
vendorProject: TVT
product: NVMS-1000
vulnerabilityName: TVT NVMS-1000 Directory Traversal Vulnerability
dateAdded: 2021-11-03
shortDescription: TVT devices utilizing NVMS-1000 software contain a directory traversal vulnerability via GET /.. requests.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-20085
cwes: CWE-22
cveID: CVE-2020-5849
vendorProject: Unraid
product: Unraid
vulnerabilityName: Unraid Authentication Bypass Vulnerability
dateAdded: 2021-11-03
shortDescription: Unraid contains an authentication bypass vulnerability that allows attackers to gain access to the administrative interface. This CVE is chainable with CVE-2020-5847 for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-5849
cwes: CWE-287
CWE-697
cveID: CVE-2020-5847
vendorProject: Unraid
product: Unraid
vulnerabilityName: Unraid Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: Unraid contains a vulnerability due to the insecure use of the extract PHP function that can be abused to execute remote code as root. This CVE is chainable with CVE-2020-5849 for initial access.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-5847
cveID: CVE-2019-16759
vendorProject: vBulletin
product: vBulletin
vulnerabilityName: vBulletin PHP Module Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: The PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-16759
cwes: CWE-94
cveID: CVE-2020-17496
vendorProject: vBulletin
product: vBulletin
vulnerabilityName: vBulletin PHP Module Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: The PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request. This CVE ID resolves an incomplete patch for CVE-2019-16759.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-17496
cwes: CWE-74
cveID: CVE-2019-5544
vendorProject: VMware
product: VMware ESXi and Horizon DaaS
vulnerabilityName: VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
dateAdded: 2021-11-03
shortDescription: VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-5544
cwes: CWE-787
cveID: CVE-2020-3992
vendorProject: VMware
product: ESXi
vulnerabilityName: VMware ESXi OpenSLP Use-After-Free Vulnerability
dateAdded: 2021-11-03
shortDescription: VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attacker residing in the management network with access to port 427 to perform remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-3992
cwes: CWE-416
cveID: CVE-2020-3950
vendorProject: VMware
product: Multiple Products
vulnerabilityName: VMware Multiple Products Privilege Escalation Vulnerability
dateAdded: 2021-11-03
shortDescription: VMware Fusion, Remote Console (VMRC) for Mac, and Horizon Client for Mac contain a privilege escalation vulnerability due to improper use of setuid binaries that allows attackers to escalate privileges to root.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-3950
cwes: CWE-269
cveID: CVE-2021-22005
vendorProject: VMware
product: vCenter Server
vulnerabilityName: VMware vCenter Server File Upload Vulnerability
dateAdded: 2021-11-03
shortDescription: VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-22005
cwes: CWE-23
cveID: CVE-2020-3952
vendorProject: VMware
product: vCenter Server
vulnerabilityName: VMware vCenter Server Information Disclosure Vulnerability
dateAdded: 2021-11-03
shortDescription: VMware vCenter Server contains an information disclosure vulnerability in the VMware Directory Service (vmdir) when the Platform Services Controller (PSC) does not correctly implement access controls. Successful exploitation allows an attacker with network access to port 389 to extract sensitive information.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-3952
cwes: CWE-306
cveID: CVE-2021-21972
vendorProject: VMware
product: vCenter Server
vulnerabilityName: VMware vCenter Server Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: VMware vCenter Server vSphere Client contains a remote code execution vulnerability in a vCenter Server plugin which allows an attacker with network access to port 443 to execute commands with unrestricted privileges on the underlying operating system.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-21972
cwes: CWE-23
cveID: CVE-2021-21985
vendorProject: VMware
product: vCenter Server
vulnerabilityName: VMware vCenter Server Improper Input Validation Vulnerability
dateAdded: 2021-11-03
shortDescription: VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server, which allows for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-21985
cwes: CWE-20
CWE-470
CWE-918
cveID: CVE-2020-4006
vendorProject: VMware
product: Multiple Products
vulnerabilityName: Multiple VMware Products Command Injection Vulnerability
dateAdded: 2021-11-03
shortDescription: VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector contain a command injection vulnerability. An attacker with network access to the administrative configurator on port 8443 and a valid password for the configurator administrator account can execute commands with unrestricted privileges on the underlying operating system.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-4006
cwes: CWE-78
cveID: CVE-2020-25213
vendorProject: WordPress
product: File Manager Plugin
vulnerabilityName: WordPress File Manager Plugin Remote Code Execution Vulnerability
dateAdded: 2021-11-03
shortDescription: WordPress File Manager plugin contains a remote code execution vulnerability that allows unauthenticated users to execute PHP code and upload malicious files on a target site.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-25213
cwes: CWE-434
cveID: CVE-2020-11738
vendorProject: WordPress
product: Snap Creek Duplicator Plugin
vulnerabilityName: WordPress Snap Creek Duplicator Plugin File Download Vulnerability
dateAdded: 2021-11-03
shortDescription: WordPress Snap Creek Duplicator plugin contains a file download vulnerability when an administrator creates a new copy of their site that allows an attacker to download the generated files from their Wordpress dashboard. This vulnerability affects Duplicator and Dulplicator Pro.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-11738
cwes: CWE-22
cveID: CVE-2019-9978
vendorProject: WordPress
product: Social Warfare Plugin
vulnerabilityName: WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability
dateAdded: 2021-11-03
shortDescription: WordPress Social Warfare plugin contains a cross-site scripting (XSS) vulnerability that allows for remote code execution. This vulnerability affects Social Warfare and Social Warfare Pro.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-9978
cwes: CWE-79
cveID: CVE-2021-27561
vendorProject: Yealink
product: Device Management
vulnerabilityName: Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability
dateAdded: 2021-11-03
shortDescription: Yealink Device Management contains a server-side request forgery (SSRF) vulnerability that allows for unauthenticated remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-27561
cwes: CWE-78
cveID: CVE-2021-40539
vendorProject: Zoho
product: ManageEngine
vulnerabilityName: Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability
dateAdded: 2021-11-03
shortDescription: Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2021-11-17
knownRansomwareCampaignUse: Known
notes: https://nvd.nist.gov/vuln/detail/CVE-2021-40539
cwes: CWE-55
cveID: CVE-2020-10189
vendorProject: Zoho
product: ManageEngine
vulnerabilityName: Zoho ManageEngine Desktop Central File Upload Vulnerability
dateAdded: 2021-11-03
shortDescription: Zoho ManageEngine Desktop Central contains a file upload vulnerability that allows for unauthenticated remote code execution.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-10189
cwes: CWE-502
cveID: CVE-2019-8394
vendorProject: Zoho
product: ManageEngine
vulnerabilityName: Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability
dateAdded: 2021-11-03
shortDescription: Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload files via login page customization.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2019-8394
cwes: CWE-434
cveID: CVE-2020-29583
vendorProject: Zyxel
product: Multiple Products
vulnerabilityName: Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability
dateAdded: 2021-11-03
shortDescription: Zyxel firewalls (ATP, USG, VM) and AP Controllers (NXC2500 and NXC5500) contain a use of hard-coded credentials vulnerability in an undocumented account ("zyfwp") with an unchangeable password.
requiredAction: Apply updates per vendor instructions.
dueDate: 2022-05-03
knownRansomwareCampaignUse: Unknown
notes: https://nvd.nist.gov/vuln/detail/CVE-2020-29583
cwes: CWE-522