deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-5985
Published: 2020-10-02
Description: NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data length is not validated, which may lead to tampering or denial of service. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5075; https://nvidia.custhelp.com/app/answers/detail/a_id/5075
CVE: CVE-2020-5986
Published: 2020-10-02
Description: NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data size is not validated, which may lead to tampering or denial of service. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5075; https://nvidia.custhelp.com/app/answers/detail/a_id/5075
CVE: CVE-2020-5987
Published: 2020-10-02
Description: NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which guest-supplied parameters remain writable by the guest after the plugin has validated them, which may lead to the guest being able to pass invalid parameters to plugin handlers, which may lead to denial of service or escalation of privileges. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-459
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5075; https://nvidia.custhelp.com/app/answers/detail/a_id/5075
CVE: CVE-2020-5988
Published: 2020-10-02
Description: NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which allocated memory can be freed twice, which may lead to information disclosure or denial of service. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-415
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5075; https://nvidia.custhelp.com/app/answers/detail/a_id/5075
CVE: CVE-2020-5989
Published: 2020-10-02
Description: NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which it can dereference a NULL pointer, which may lead to denial of service. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5075; https://nvidia.custhelp.com/app/answers/detail/a_id/5075
CVE: CVE-2020-25776
Published: 2020-10-02
Description: Trend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a symbolic link privilege escalation attack where an attacker could exploit a critical file on the system to escalate their privileges. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://helpcenter.trendmicro.com/en-us/article/TMKA-09924; https://www.zerodayinitiative.com/advisories/ZDI-20-1236/; https://helpcenter.trendmicro.com/en-us/article/TMKA-09924
CVE: CVE-2017-18924
Published: 2020-10-04
Description: oauth2-server (aka node-oauth2-server) through 3.1.1 implements OAuth 2.0 without PKCE. It does not prevent authorization code injection. This is similar to CVE-2020-7692. NOTE: the vendor states 'As RFC7636 is an extension, I think the claim in the Readme of "RFC 6749 compliant" is valid and not misleading and I also therefore wouldn't describe this as a "vulnerability" with the library per se.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://codeburst.io/missing-the-point-in-securing-oauth-2-0-83968708b467; https://github.com/oauthjs/node-oauth2-server/issues/637; https://github.com/oauthjs/node-oauth2-server/pull/452
CVE: CVE-2020-7709
Published: 2020-10-05
Description: This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-1321
References: https://github.com/manuelstofer/json-pointer/pull/34/files; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-598862; https://snyk.io/vuln/SNYK-JS-JSONPOINTER-596925
CVE: CVE-2020-26166
Published: 2020-10-05
Description: The file upload functionality in qdPM 9.1 doesn't check the file description, which allows remote authenticated attackers to inject web script or HTML via the attachments info parameter, aka XSS. This can occur during creation of a ticket, project, or task.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://qdpm.net/qdpm-release-notes-free-project-management; https://github.com/Kajmer/CVEs/blob/main/CVE-2020-26166.md; https://sourceforge.net/projects/qdpm/
CVE: CVE-2020-25636
Published: 2020-10-05
Description: A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service availability.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-377, CWE-552, CWE-552
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25636; https://github.com/ansible-collections/community.aws/issues/221; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25636
CVE: CVE-2019-14556
Published: 2020-10-05
Description: Improper initialization in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-665
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html
CVE: CVE-2019-14557
Published: 2020-10-05
Description: Buffer overflow in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable elevation of privilege or denial of service via adjacent access.
CVSS Score: 8.0 (HIGH)
CWE: CWE-120
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html
CVE: CVE-2019-14558
Published: 2020-10-05
Description: Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 5.7 (MEDIUM)
References: https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html; https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html
CVE: CVE-2020-0571
Published: 2020-10-05
Description: Improper conditions check in BIOS firmware for 8th Generation Intel(R) Core(TM) Processors and Intel(R) Pentium(R) Silver Processor Series may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00347.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00347.html
CVE: CVE-2020-12302
Published: 2020-10-05
Description: Improper permissions in the Intel(R) Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00405.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00405.html
CVE: CVE-2020-25635
Published: 2020-10-05
Description: A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. This issue affects directly data confidentiality.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-212, CWE-212
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25635; https://github.com/ansible-collections/community.aws/issues/222; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25635
CVE: CVE-2020-26061
Published: 2020-10-05
Description: ClickStudios Passwordstate Password Reset Portal prior to build 8501 is affected by an authentication bypass vulnerability. The ResetPassword function does not validate whether the user has successfully authenticated using security questions. An unauthenticated, remote attacker can send a crafted HTTP request to the /account/ResetPassword page to set a new password for any registered user.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://github.com/missing0x00/CVE-2020-26061; https://www.clickstudios.com.au/passwordstate-changelog.aspx; https://github.com/missing0x00/CVE-2020-26061
CVE: CVE-2020-4493
Published: 2020-10-05
Description: IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow an attacker to bypass authentication and issue commands using a specially crafted HTTP command. IBM X-Force ID: 181995.
CVSS Score: 9.8 (CRITICAL)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/181995; https://www.ibm.com/support/pages/node/6340281; https://exchange.xforce.ibmcloud.com/vulnerabilities/181995
CVE: CVE-2020-8182
Published: 2020-10-05
Description: Improper access control in Nextcloud Deck 0.8.0 allowed an attacker to reshare boards shared with them with more permissions than they had themselves.
CVSS Score: 8.0 (HIGH)
CWE: CWE-284, CWE-281
References: https://hackerone.com/reports/827816; https://nextcloud.com/security/advisory/?id=NC-SA-2020-025; https://hackerone.com/reports/827816
CVE: CVE-2020-8223
Published: 2020-10-05
Description: A logic error in Nextcloud Server 19.0.0 caused a privilege escalation allowing malicious users to reshare with higher permissions than they got assigned themselves.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269, CWE-269
References: https://hackerone.com/reports/889243; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KC6HLX5SG4PZO6Y54D2LFJ4ATG76BKOP/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7FX3O6SJE2S52I2HAA4DSTUIISP5BNA/
CVE: CVE-2020-8228
Published: 2020-10-05
Description: A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-840, CWE-307
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00019.html; https://hackerone.com/reports/922470; https://nextcloud.com/security/advisory/?id=NC-SA-2020-033
CVE: CVE-2020-8235
Published: 2020-10-05
Description: Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://hackerone.com/reports/916704; https://nextcloud.com/security/advisory/?id=NC-SA-2020-036; https://hackerone.com/reports/916704
CVE: CVE-2020-8671
Published: 2020-10-05
Description: Insufficient control flow management in BIOS firmware 8th, 9th Generation Intel(R) Core(TM) Processors and Intel(R) Celeron(R) Processor 4000 Series may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html
CVE: CVE-2020-15236
Published: 2020-10-05
Description: In Wiki.js before version 2.5.151, directory traversal outside of Wiki.js context is possible when a storage module with local asset cache fetching is enabled. A malicious user can potentially read any file on the file system by crafting a special URL that allows for directory traversal. This is only possible when a storage module implementing local asset cache (e.g Local File System or Git) is enabled and that no web application firewall solution (e.g. cloudflare) strips potentially malicious URLs. Commit 084dcd69d1591586ee4752101e675d5f0ac6dcdc fixes this vulnerability by sanitizing the path before it is passed on to the storage module. The sanitization step removes any directory traversal (e.g. `..` and `.`) sequences as well as invalid filesystem characters from the path. As a workaround, disable any storage module with local asset caching capabilities such as Local File System and Git.
CVSS Score: 8.6 (HIGH)
CWE: CWE-22
References: https://github.com/Requarks/wiki/commit/084dcd69d1591586ee4752101e675d5f0ac6dcdc; https://github.com/Requarks/wiki/security/advisories/GHSA-whpv-5xg2-w527; https://github.com/Requarks/wiki/commit/084dcd69d1591586ee4752101e675d5f0ac6dcdc
CVE: CVE-2020-26048
Published: 2020-10-05
Description: The file manager option in CuppaCMS before 2019-11-12 allows an authenticated attacker to upload a malicious file within an image extension and through a custom request using the rename function provided by the file manager is able to modify the image extension into PHP resulting in remote arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/CuppaCMS/CuppaCMS/issues/7; https://github.com/CuppaCMS/CuppaCMS/issues/7
CVE: CVE-2020-6875
Published: 2020-10-05
Description: A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program, attackers could use this vulnerability to gain access right through brute-force attacks. This affects: <ZXONE 19700 SNPE><ZXONE8700V1.40R2B13_SNPE>
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013643; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013643
CVE: CVE-2020-15235
Published: 2020-10-05
Description: In RACTF before commit f3dc89b, unauthenticated users are able to get the value of sensitive config keys that would normally be hidden to everyone except admins. All versions after commit f3dc89b9f6ab1544a289b3efc06699b13d63e0bd(3/10/20) are patched.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://github.com/ractf/core/commit/f3dc89b9f6ab1544a289b3efc06699b13d63e0bd; https://github.com/ractf/core/security/advisories/GHSA-ph67-c355-52vm; https://github.com/ractf/core/commit/f3dc89b9f6ab1544a289b3efc06699b13d63e0bd
CVE: CVE-2020-24231
Published: 2020-10-05
Description: Symmetric DS <3.12.0 uses mx4j to provide access to JMX over HTTP. mx4j, by default, has no auth and is available on all interfaces. An attacker can interact with JMX: get system info, and invoke MBean methods. It is possible to install additional MBeans from a remote host using MLet that leads to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://www.symmetricds.org/issues/view.php?id=4263; https://www.symmetricds.org/issues/view.php?id=4263
CVE: CVE-2020-16226
Published: 2020-10-05
Description: Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-342
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01; https://us-cert.cisa.gov/ics/advisories/icsa-20-245-01
CVE: CVE-2020-15237
Published: 2020-10-05
Description: In Shrine before version 3.3.0, when using the `derivation_endpoint` plugin, it's possible for the attacker to use a timing attack to guess the signature of the derivation URL. The problem has been fixed by comparing sent and calculated signature in constant time, using `Rack::Utils.secure_compare`. Users using the `derivation_endpoint` plugin are urged to upgrade to Shrine 3.3.0 or greater. A possible workaround is provided in the linked advisory.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-203, CWE-208
References: https://github.com/shrinerb/shrine/commit/1b27090ce31543bf39f186c20ea47c8250fca2f0; https://github.com/shrinerb/shrine/security/advisories/GHSA-5jjv-x4fq-qjwp; https://github.com/shrinerb/shrine/commit/1b27090ce31543bf39f186c20ea47c8250fca2f0
CVE: CVE-2020-26570
Published: 2020-10-06
Description: The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_read_file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2020/11/24/4; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24316; https://github.com/OpenSC/OpenSC/commit/6903aebfddc466d966c7b865fae34572bf3ed23e
CVE: CVE-2020-26571
Published: 2020-10-06
Description: The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2020/11/24/4; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20612; https://lists.debian.org/debian-lts-announce/2021/11/msg00027.html
CVE: CVE-2020-26572
Published: 2020-10-06
Description: The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2020/11/24/4; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22967; https://github.com/OpenSC/OpenSC/commit/9d294de90d1cc[PII_REDACTED]6e60b6944b27b4817
CVE: CVE-2020-5631
Published: 2020-10-06
Description: Stored cross-site scripting vulnerability in CMONOS.JP ver2.0.20191009 and earlier allows remote attackers to inject arbitrary script via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cmonos.jp/download/history.html; https://cmonos.jp/download/index.shtml; https://jvn.jp/en/vu/JVNVU93741515/index.html
CVE: CVE-2020-5632
Published: 2020-10-06
Description: InfoCage SiteShell series (Host type SiteShell for IIS V1.4, V1.5, and V1.6, Host type SiteShell for IIS prior to revision V2.0.0.6, V2.1.0.7, V2.1.1.6, V3.0.0.11, V4.0.0.6, V4.1.0.5, and V4.2.0.1, Host type SiteShell for Apache Windows V1.4, V1.5, and V1.6, and Host type SiteShell for Apache Windows prior to revision V2.0.0.6, V2.1.0.7, V2.1.1.6, V3.0.0.11, V4.0.0.6, V4.1.0.5, and V4.2.0.1) allow authenticated attackers to bypass access restriction and to execute arbitrary code with an elevated privilege via a specially crafted executable files.
CVSS Score: 7.8 (HIGH)
References: https://jpn.nec.com/infocage/siteshell/everyone_20200918.html; https://jvn.jp/en/jp/JVN07426151/index.html; https://jpn.nec.com/infocage/siteshell/everyone_20200918.html
CVE: CVE-2020-5634
Published: 2020-10-06
Description: ELECOM LAN routers (WRC-2533GST2 firmware versions prior to v1.14, WRC-1900GST2 firmware versions prior to v1.14, WRC-1750GST2 firmware versions prior to v1.14, and WRC-1167GST2 firmware versions prior to v1.10) allow an attacker on the same network segment to execute arbitrary OS commands with a root privilege via unspecified vectors.
CVSS Score: 8.8 (HIGH)
References: https://jvn.jp/en/jp/JVN82892096/index.html; https://www.elecom.co.jp/news/security/20201005-01/; https://jvn.jp/en/jp/JVN82892096/index.html
CVE: CVE-1999-0199
Published: 2020-10-06
Description: manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attackers to access a dangling pointer in an application whose developer was unaware of a documentation update from 1999.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-252
References: https://ftp.gnu.org/gnu/glibc/glibc-2.2.tar.gz; https://github.com/bminor/glibc/commit/2864e[PII_REDACTED]38feafa815046fff89e5a16be#diff-94e8c502f255fdfc346df0e29fd4ef40; https://www.cee.studio/tdelete.html
CVE: CVE-2020-23832
Published: 2020-10-06
Description: A Persistent Cross-Site Scripting (XSS) vulnerability in message_admin.php in Projectworlds Car Rental Management System v1.0 allows unauthenticated remote attackers to harvest an admin login session cookie and steal an admin session upon an admin login.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/projectworlds32/Car-Rental-Syatem-PHP-MYSQL/archive/master.zip; https://packetstormsecurity.com/files/158795/Car-Rental-Management-System-1.0-Cross-Site-Scripting.html; https://projectworlds.in
CVE: CVE-2020-24214
Published: 2020-10-06
Description: An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. Attackers can send a crafted unauthenticated RTSP request to cause a buffer overflow and application crash. The device will not be able to perform its main purpose of video encoding and streaming for up to a minute, until it automatically reboots. Attackers can send malicious requests once a minute, effectively disabling the device.
CVSS Score: 9.8 (CRITICAL)
References: http://packetstormsecurity.com/files/159605/HiSilicon-Video-Encoder-Buffer-Overflow-Denial-Of-Service.html; https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/; https://www.kb.cert.org/vuls/id/896979
CVE: CVE-2020-24215
Published: 2020-10-06
Description: An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. Attackers can use hard-coded credentials in HTTP requests to perform any administrative task on the device including retrieving the device's configuration (with the cleartext admin password), and uploading a custom firmware update, to ultimately achieve arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://packetstormsecurity.com/files/159601/HiSilicon-Video-Encoder-Backdoor-Password.html; https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/; https://www.kb.cert.org/vuls/id/896979
CVE: CVE-2020-25613
Published: 2020-10-06
Description: An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, had not checked the transfer-encoding header value rigorously. An attacker may potentially exploit this issue to bypass a reverse proxy (which also has a poor header check), which may lead to an HTTP Request Smuggling attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444
References: https://github.com/ruby/webrick/commit/8946bb38b4d87549f0d99ed73c62c41933f97cc7; https://hackerone.com/reports/965267; https://lists.debian.org/debian-lts-announce/2023/04/msg00033.html
CVE: CVE-2020-25986
Published: 2020-10-06
Description: A Cross Site Request Forgery (CSRF) vulnerability in MonoCMS Blog 1.0 allows attackers to change the password of a user.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/159430/MonoCMS-Blog-1.0-File-Deletion-CSRF-Hardcoded-Credentials.html; https://monocms.com/download; http://packetstormsecurity.com/files/159430/MonoCMS-Blog-1.0-File-Deletion-CSRF-Hardcoded-Credentials.html
CVE: CVE-2020-25987
Published: 2020-10-06
Description: MonoCMS Blog 1.0 stores hard-coded admin hashes in the log.xml file in the source files for MonoCMS Blog. Hash type is bcrypt and hashcat mode 3200 can be used to crack the hash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: http://packetstormsecurity.com/files/159430/MonoCMS-Blog-1.0-File-Deletion-CSRF-Hardcoded-Credentials.html; https://monocms.com/download; http://packetstormsecurity.com/files/159430/MonoCMS-Blog-1.0-File-Deletion-CSRF-Hardcoded-Credentials.html