rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-28717 
Cross Site Scripting (XSS) vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-11T00:00:00.000Z
CVE-2020-28722 
Deskpro Cloud Platform and on-premise 2020.2.3.48207 from 2020-07-30 contains a cross-site scripting (XSS) vulnerability that can lead to an account takeover via custom email templates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-12T19:20:40.000Z
CVE-2020-28723 
Memory leak in IPv6Param::setAddress in CloudAvid PParam 1.3.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-16T16:49:09.000Z
CVE-2020-28724 
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-18T14:26:01.000Z
CVE-2020-28726 
Open redirect in SeedDMS 6.0.13 via the dropfolderfileform1 parameter to out/out.AddDocument.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-24T16:45:06.000Z
CVE-2020-28727 
Cross-site scripting (XSS) exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap/class.DropFolderChooser.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-07T07:53:26.000Z
CVE-2020-28734 
Plone before 5.2.3 allows XXE attacks via a feature that is explicitly only available to the Manager role.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-30T18:35:17.000Z
CVE-2020-28735 
Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the Manager role).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-30T18:38:01.000Z
CVE-2020-28736 
Plone before 5.2.3 allows XXE attacks via a feature that is protected by an unapplied permission of plone.schemaeditor.ManageSchemata (therefore, only available to the Manager role).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-30T18:40:52.000Z
CVE-2020-28759 
The serializer module in OAID Tengine lite-v1.0 has a Buffer Overflow and crash. NOTE: another person has stated "I don't think there is an proof of overflow so far.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-26T19:06:44.000Z
CVE-2020-28838 
Cross Site Request Forgery (CSRF) in CART option in OpenCart Ltd. Opencart CMS 3.0.3.6 allows attacker to add cart items via Add to cart.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-11T14:19:41.000Z
CVE-2020-28840 
Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arbitrary code and cause a denial of service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-11T00:00:00.000Z
CVE-2020-28841 
MyDrivers64.sys in DriverGenius 9.61.3708.3054 allows attackers to cause a system crash via the ioctl command 0x9c402000 to \\.\MyDrivers0_0_1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-03T04:41:01.000Z
CVE-2020-28845 
A CSV injection vulnerability in the Admin portal for Netskope 75.0 allows an unauthenticated user to inject malicious payload in admin's portal thus leads to compromise admin's system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-20T19:03:49.000Z
CVE-2020-28846 
Cross Site Request Forgery (CSRF) vulnerability exists in SeaCMS 10.7 in admin_manager.php, which could let a malicious user add an admin account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-17T15:49:02.000Z
CVE-2020-28847 
Cross Site Scripting (XSS) vulnerability in xCss Valine v1.4.14 via the nick parameter to /classes/Comment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-05T15:37:26.000Z
CVE-2020-28848 
CSV Injection vulnerability in ChurchCRM version 4.2.0, allows remote attackers to execute arbitrary code via crafted CSV file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-11T00:00:00.000Z
CVE-2020-28849 
Cross Site Scripting (XSS) vulnerability in ChurchCRM version 4.2.1, allows remote attckers to execute arbitrary code and gain sensitive information via crafted payload in Add New Deposit field in View All Deposit module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-11T00:00:00.000Z
CVE-2020-28851 
In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-02T05:42:40.000Z
CVE-2020-28852 
In x/text in Go before v0.3.5, a "slice bounds out of range" panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-02T05:45:53.000Z
CVE-2020-28856 
OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly determine the HTTP request's originating IP address, allowing attackers to spoof it using X-Forwarded-For in the header, by supplying localhost address such as 127.0.0.1, effectively bypassing all IP address based access controls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-14T17:59:04.000Z
CVE-2020-28857 
OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for stored cross-site scripting attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-14T18:53:18.000Z
CVE-2020-28858 
OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly verify whether a request made to the application was intentionally made by the user, allowing for cross-site request forgery attacks on all user functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-14T18:58:03.000Z
CVE-2020-28859 
OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for reflected cross-site scripting attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-14T19:01:59.000Z
CVE-2020-28860 
OpenAssetDigital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input, incorporating it into its SQL queries, allowing for authenticated blind SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-14T19:33:22.000Z
CVE-2020-28861 
OpenAsset Digital Asset Management (DAM) 12.0.19 and earlier failed to implement access controls on /Stream/ProjectsCSV endpoint, allowing unauthenticated attackers to gain access to potentially sensitive project information stored by the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-14T19:37:02.000Z
CVE-2020-28864 
Buffer overflow in WinSCP 5.17.8 allows a malicious FTP server to cause a denial of service or possibly have other unspecified impact via a long file name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-23T18:12:08.000Z
CVE-2020-28865 
An issue was discovered in PowerJob through 3.2.2, allows attackers to change arbitrary user passwords via the id parameter to /appinfo/save.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-16T20:36:18.000Z
CVE-2020-28870 
In InoERP 0.7.2, an unauthorized attacker can execute arbitrary code on the server side due to lack of validations in /modules/sys/form_personalization/json_fp.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-10T00:19:43.000Z
CVE-2020-28871 
Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the server-side via an insecure file upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-10T00:00:00.000Z
CVE-2020-28872 
An authorization bypass vulnerability in Monitorr v1.7.6m in Monitorr/assets/config/_installation/_register.php allows an unauthorized person to create valid credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-12T13:35:58.000Z
CVE-2020-28873 
Fluxbb 1.5.11 is affected by a denial of service (DoS) vulnerability by sending an extremely long password via the user login form. When a long password is sent, the password hashing process will result in CPU and memory exhaustion on the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-17T12:31:52.000Z
CVE-2020-28874 
reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business logic. Errors are not properly considered (an invalid token parameter).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-21T15:01:48.000Z
CVE-2020-28877 
Buffer overflow in in the copy_msg_element function for the devDiscoverHandle server in the TP-Link WR and WDR series, including WDR7400, WDR7500, WDR7660, WDR7800, WDR8400, WDR8500, WDR8600, WDR8620, WDR8640, WDR8660, WR880N, WR886N, WR890N, WR890N, WR882N, and WR708N.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-20T15:48:04.000Z
CVE-2020-28884 
Liferay Portal Server tested on 7.3.5 GA6, 7.2.0 GA1 is affected by OS Command Injection. An administrator user can inject Groovy script to execute any OS command on the Liferay Portal Sever. NOTE: The developer disputes this as a vulnerability since it is a feature for administrators to run groovy scripts and therefore not a design flaw.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-28T00:00:00.000Z
CVE-2020-28885 
Liferay Portal Server tested on 7.3.5 GA6, 7.2.0 GA1 is affected by OS Command Injection. An administrator user can inject commands through the Gogo Shell module to execute any OS command on the Liferay Portal Sever. NOTE: The developer disputes this as a vulnerability since it is a feature for administrators to access and execute commands in Gogo Shell and therefore not a design fla
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-28T11:17:38.000Z
CVE-2020-28895 integer overflow in calloc
In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.3
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Reported by Omri Ben Bassat <v-obenbassat@microsoft.com>
Published: 2021-02-03T15:16:34.000Z
CVE-2020-28896 
Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's initial server response was invalid. The connection was not properly closed, and the code could continue attempting to authenticate. This could result in authentication credentials being exposed on an unencrypted connection, or to a machine-in-the-middle.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-23T18:52:13.000Z
CVE-2020-28898 
In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a server error in script execution due to insufficient input validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-15T18:03:16.000Z
CVE-2020-28899 
The Web CGI Script on ZyXEL LTE4506-M606 V1.00(ABDO.2)C0 devices does not require authentication, which allows remote unauthenticated attackers (via crafted JSON action data to /cgi-bin/gui.cgi) to use all features provided by the router. Examples: change the router password, retrieve the Wi-Fi passphrase, send an SMS message, or modify the IP forwarding to access the internal network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-16T16:17:06.000Z
CVE-2020-28900 
Insufficient Verification of Data Authenticity in Nagios Fusion 4.1.8 and earlier and Nagios XI 5.7.5 and earlier allows for Escalation of Privileges or Code Execution as root via vectors related to an untrusted update package to upgrade_to_latest.sh.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-24T12:43:22.000Z
CVE-2020-28901 
Command Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation or Code Execution as root via vectors related to corrupt component installation in cmd_subsys.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-24T12:43:27.000Z
CVE-2020-28902 
Command Injection in Nagios Fusion 4.1.8 and earlier allows Privilege Escalation from apache to root in cmd_subsys.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-24T12:43:33.000Z
CVE-2020-28903 
Improper input validation in Nagios Fusion 4.1.8 and earlier allows a remote attacker with control over a fused server to inject arbitrary HTML, aka XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-24T12:43:39.000Z
CVE-2020-28904 
Execution with Unnecessary Privileges in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation as nagios via installation of a malicious component containing PHP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-24T12:43:44.000Z
CVE-2020-28905 
Improper Input Validation in Nagios Fusion 4.1.8 and earlier allows an authenticated attacker to execute remote code via table pagination.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-24T12:43:48.000Z
CVE-2020-28906 
Incorrect File Permissions in Nagios XI 5.7.5 and earlier and Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root. Low-privileged users are able to modify files that are included (aka sourced) by scripts executed by root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-24T12:43:53.000Z
CVE-2020-28907 
Incorrect SSL certificate validation in Nagios Fusion 4.1.8 and earlier allows for Escalation of Privileges or Code Execution as root via vectors related to download of an untrusted update package in upgrade_to_latest.sh.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-24T12:43:59.000Z
CVE-2020-28908 
Command Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to nagios.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-24T12:44:04.000Z
CVE-2020-28909 
Incorrect File Permissions in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root via modification of scripts. Low-privileges users are able to modify files that can be executed by sudo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-24T12:44:10.000Z
CVE-2020-28910 
Creation of a Temporary Directory with Insecure Permissions in Nagios XI 5.7.5 and earlier allows for Privilege Escalation via creation of symlinks, which are mishandled in getprofile.sh.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-24T12:44:15.000Z
CVE-2020-28911 
Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwords used to manage fused servers via the test_server command in ajaxhelper.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-24T12:44:30.000Z
CVE-2020-28912 
With MariaDB running on Windows, when local clients connect to the server over named pipes, it's possible for an unprivileged user with an ability to run code on the server machine to intercept the named pipe connection and act as a man-in-the-middle, gaining access to all the data passed between the client and the server, and getting the ability to run SQL commands on behalf of the connected user. This occurs because of an incorrect security descriptor. This affects MariaDB Server before 10.1.48, 10.2.x before 10.2.35, 10.3.x before 10.3.26, 10.4.x before 10.4.16, and 10.5.x before 10.5.7. NOTE: this issue exists because certain details of the MariaDB CVE-2019-2503 fix did not comprehensively address attack variants against MariaDB. This situation is specific to MariaDB, and thus CVE-2020-28912 does NOT apply to other vendors that were originally affected by CVE-2019-2503.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-24T19:49:20.000Z
CVE-2020-28914 
An improper file permissions vulnerability affects Kata Containers prior to 1.11.5. When using a Kubernetes hostPath volume and mounting either a file or directory into a container as readonly, the file/directory is mounted as readOnly inside the container, but is still writable inside the guest. For a container breakout situation, a malicious guest can potentially modify or delete files/directories expected to be read-only.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-17T21:23:33.000Z
CVE-2020-28915 
A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka CID-6735b4632def.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-18T07:59:42.000Z
CVE-2020-28916 
hw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-04T06:22:37.000Z
CVE-2020-28917 
An issue was discovered in the view_statistics (aka View frontend statistics) extension before 2.0.1 for TYPO3. It saves all GET and POST data of TYPO3 frontend requests to the database. Depending on the extensions used on a TYPO3 website, sensitive data (e.g., cleartext passwords if ext:felogin is installed) may be saved.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-18T08:16:34.000Z
CVE-2020-28918 
DualShield 5.9.8.0821 allows username enumeration on its login form. A valid username results in prompting for the password, whereas an invalid one will produce an "unknown username" error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N
version: 3.1
Published: 2021-02-16T19:57:39.000Z
CVE-2020-28919 
A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-15T16:34:59.000Z
CVE-2020-28921 
An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL functionality that allows low-privilege users to read and write to arbitrary Model Specific Registers (MSRs). This could lead to arbitrary Ring-0 code execution and escalation of privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-27T17:52:15.000Z
CVE-2020-28922 
An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL functionality that allows low-privilege users to read and write arbitrary physical memory. This could lead to arbitrary Ring-0 code execution and escalation of privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-27T17:51:00.000Z
CVE-2020-28923 
An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes with protected or private fields to JSON.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-03T16:21:31.000Z
CVE-2020-28924 
An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The suggested passwords depend deterministically on the time the second rclone was started. This limits the entropy of the passwords enormously. These passwords are often used in the crypt backend for encryption of data. It would be possible to make a dictionary of all possible passwords with about 38 million entries per password length. This would make decryption of secret material possible with a plausible amount of effort. NOTE: all passwords generated by affected versions should be changed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-19T19:32:41.000Z
CVE-2020-28925 
Bolt before 3.7.2 does not restrict filter options in a Request in the Twig context, and is therefore inconsistent with the "How to Harden Your PHP for Better Security" guidance.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-30T18:47:18.000Z
CVE-2020-28926 
ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-30T17:09:40.000Z
CVE-2020-28927 
There is a Stored XSS in Magicpin v2.1 in the User Registration section. Each time an admin visits the manage user section from the admin panel, the XSS triggers and the attacker can able to steal the cookie according to the crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-23T19:36:04.000Z
CVE-2020-28928 
In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-24T18:01:05.000Z
CVE-2020-28929 
Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to remotely retrieve administrative hashed credentials via the maintenance/troubleshoot.php?download=1 URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-16T20:22:56.000Z