rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-25400 
Cross domain policies in Taskcafe Project Management tool before version 0.1.0 and 0.1.1 allows remote attackers to access sensitive data such as access token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-17T17:58:46.000Z
CVE-2020-25406 
app\admin\controller\sys\Uploads.php in lemocms 1.8.x allows users to upload files to upload executable files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-18T15:51:09.000Z
CVE-2020-25408 
A Cross-Site Request Forgery (CSRF) vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-24T12:45:57.000Z
CVE-2020-25409 
Projectsworlds College Management System Php 1.0 is vulnerable to SQL injection issues over multiple parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-24T12:39:12.000Z
CVE-2020-25411 
Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker to delete the existing user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-24T12:40:44.000Z
CVE-2020-25412 
com_line() in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy() that may lead to arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-16T13:53:04.000Z
CVE-2020-25414 
A local file inclusion vulnerability was discovered in the captcha function in Monstra 3.0.4 which allows remote attackers to execute arbitrary PHP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-17T14:21:36.000Z
CVE-2020-25422 
A cross site scripting (XSS) vulnerability in menuedit.php of Mara CMS 7.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-28T18:30:09.000Z
CVE-2020-25427 
A Null pointer dereference vulnerability exits in MP4Box - GPAC version 0.8.0-rev177-g51a8ef874-master via the gf_isom_get_track_id function, which causes a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-10T21:01:52.000Z
CVE-2020-25444 
Cross Site Scripting (XSS) vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 via the (1) "About Yourself” section under the “My Profile” page, " (2) “Hotel Policy” field under the “Hotel Details” page, (3) “Pricing code” and “name” fields under the “Manage Tour” page, and (4) all the labels under the “Menu” section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-14T14:35:24.000Z
CVE-2020-25445 
The “Subscribe” feature in Ultimate Booking System Booking Core 1.7.0 is vulnerable to CSV formula injection. The input containing the excel formula is not being sanitized by the application. As a result when admin in backend download and open the csv, content of the cells are executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-14T14:40:48.000Z
CVE-2020-25449 
Cross Site Scripting (XSS) vulnerability in Arachnys Cabot 0.11.12 can be exploited via the Address column.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-04T19:10:59.000Z
CVE-2020-25453 
An issue was discovered in BlackCat CMS before 1.4. There is a CSRF vulnerability (bypass csrf_token) that allows remote arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-15T21:37:52.000Z
CVE-2020-25454 
Cross-site Scripting (XSS) vulnerability in grocy 2.7.1 via the add recipe module, which gets executed when deleting the recipe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-18T20:52:25.000Z
CVE-2020-25459 
An issue was discovered in function sync_tree in hetero_decision_tree_guest.py in WeBank FATE (Federated AI Technology Enabler) 0.1 through 1.4.2 allows attackers to read sensitive information during the training process of machine learning joint modeling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-16T20:36:30.000Z
CVE-2020-25461 
Invalid Memory Access in the fxProxyGetter function in moddable/xs/sources/xsProxy.c in Moddable SDK before OS200908 causes a denial of service (SEGV).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-04T16:58:08.000Z
CVE-2020-25462 
Heap buffer overflow in the fxCheckArrowFunction function at moddable/xs/sources/xsSyntaxical.c:3562 in Moddable SDK before OS200903.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-04T16:58:08.000Z
CVE-2020-25463 
Invalid Memory Access in fxUTF8Decode at moddable/xs/sources/xsCommon.c:916 in Moddable SDK before OS200908 causes a denial of service (SEGV).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-04T16:58:08.000Z
CVE-2020-25464 
Heap buffer overflow at moddable/xs/sources/xsDebug.c in Moddable SDK before before 20200903. The top stack frame is only partially initialized because the stack overflowed while creating the frame. This leads to a crash in the code sending the stack frame to the debugger.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-04T16:58:09.000Z
CVE-2020-25465 
Null Pointer Dereference. in xObjectBindingFromExpression at moddable/xs/sources/xsSyntaxical.c:3419 in Moddable SDK before OS200908 causes a denial of service (SEGV).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-04T16:58:09.000Z
CVE-2020-25466 
A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-23T14:23:16.000Z
CVE-2020-25467 
A null pointer dereference was discovered lzo_decompress_buf in stream.c in Irzip 0.621 which allows an attacker to cause a denial of service (DOS) via a crafted compressed file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T15:41:29.000Z
CVE-2020-25470 
AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion. When viewing an added site, an XSS payload can be injected in cookies view which can lead to remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-26T13:37:10.000Z
CVE-2020-25472 
SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability, which allows attackers to add new users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-24T14:28:07.000Z
CVE-2020-25473 
SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-24T14:29:20.000Z
CVE-2020-25474 
SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting (XSS) vulnerability via the editor_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-24T14:48:30.000Z
CVE-2020-25475 
SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-24T14:49:16.000Z
CVE-2020-25476 
Liferay CMS Portal version 7.1.3 and 7.2.1 have a blind persistent cross-site scripting (XSS) vulnerability in the user name parameter to Calendar. An attacker can insert the malicious payload on the username, lastname or surname fields of its own profile, and the malicious payload will be injected and reflected in the calendar of the user who submitted the payload. An attacker could escalate its privileges in case an admin visits the calendar that injected the payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-07T16:04:39.000Z
CVE-2020-25483 
An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an attacker can gain access to the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-23T17:12:29.000Z
CVE-2020-25487 
PHPGURUKUL Zoo Management System Using PHP and MySQL version 1.0 is affected by: SQL Injection via zms/animal-detail.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-22T16:54:00.000Z
CVE-2020-25489 
A heap overflow in Sqreen PyMiniRacer (aka Python Mini Racer) before 0.3.0 allows remote attackers to potentially exploit heap corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-17T17:14:33.000Z
CVE-2020-25490 
Lack of cryptographic signature verification in the Sqreen PHP agent daemon before 1.16.0 makes it easier for remote attackers to inject rules for execution inside the virtual machine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-17T16:58:56.000Z
CVE-2020-25491 
6Kare Emakin 5.0.341.0 is affected by Cross Site Scripting (XSS) via the /rpc/membership/setProfile DisplayName field, which is mishandled when rendering the Activity Stream page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-16T19:37:31.000Z
CVE-2020-25493 
Oclean Mobile Application 2.1.2 communicates with an external website using HTTP so it is possible to eavesdrop the network traffic. The content of HTTP payload is encrypted using XOR with a hardcoded key, which allows for the possibility to decode the traffic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-11T16:33:50.000Z
CVE-2020-25494 
Xinuos (formerly SCO) Openserver v5 and v6 allows attackers to execute arbitrary commands via shell metacharacters in outputform or toclevels parameter to cgi-bin/printbook.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-18T14:27:09.000Z
CVE-2020-25495 
A reflected Cross-site scripting (XSS) vulnerability in Xinuo (formerly SCO) Openserver version 5 and 6 allows remote attackers to inject arbitrary web script or HTML tag via the parameter 'section'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-18T14:28:09.000Z
CVE-2020-25498 
Cross Site Scripting (XSS) vulnerability in Beetel router 777VR1 can be exploited via the NTP server name in System Time and "Keyword" in URL Filter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-06T21:19:21.000Z
CVE-2020-25499 
TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this functionality to execute arbitrary OS commands on the router.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-09T20:30:55.000Z
CVE-2020-25502 
Cybereason EDR version 19.1.282 and above, 19.2.182 and above, 20.1.343 and above, and 20.2.X and above has a DLL hijacking vulnerability, which could allow a local attacker to execute code with elevated privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-01-20T00:00:00.000Z
CVE-2020-25506 
D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-02T13:00:11.000Z
CVE-2020-25507 
An incorrect permission assignment during the installation script of TeamworkCloud 18.0 thru 19.0 allows a local unprivileged attacker to execute arbitrary code as root. During installation, the user is instructed to set the system enviroment file with world writable permissions (0777 /etc/environment). Any local unprivileged user can execute arbitrary code simply by writing to /etc/environment, which will force all users, including root, to execute arbitrary code during the next login or reboot. In addition, the entire home directory of the twcloud user at /home/twcloud is recursively given world writable permissions. This allows any local unprivileged attacker to execute arbitrary code, as twcloud. This product was previous named Cameo Enterprise Data Warehouse (CEDW).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T19:33:43.000Z
CVE-2020-25514 
Sourcecodester Simple Library Management System 1.0 is affected by Incorrect Access Control via the Login Panel, http://<site>/lms/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-22T17:54:18.000Z
CVE-2020-25515 
Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books > New Book , http://<site>/lms/index.php?page=books.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-22T17:55:22.000Z
CVE-2020-25516 
WSO2 Enterprise Integrator 6.6.0 or earlier contains a stored cross-site scripting (XSS) vulnerability in BPMN explorer tasks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-29T12:30:57.000Z
CVE-2020-25533 
An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged action within the Malwarebytes launch daemon. The privileged service improperly validated XPC connections by relying on the PID instead of the audit token. An attacker can construct a situation where the same PID is used for running two different programs at different times, by leveraging a race condition during crafted use of posix_spawn.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-15T21:55:22.000Z
CVE-2020-25537 
File upload vulnerability exists in UCMS 1.5.0, and the attacker can take advantage of this vulnerability to obtain server management permission.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-30T17:17:11.000Z
CVE-2020-25538 
An authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php file in CMSuno 1.6.2 and run this PHP code in the web page. In this way, attacker can takeover the control of the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-13T15:20:40.000Z
CVE-2020-25540 
ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via GET request encode parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T12:22:40.000Z
CVE-2020-25557 
In CMSuno 1.6.2, an attacker can inject malicious PHP code as a "username" while changing his/her username & password. After that, when attacker logs in to the application, attacker's code will be run. As a result of this vulnerability, authenticated user can run command on the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-13T15:25:13.000Z
CVE-2020-25559 
gnuplot 5.5 is affected by double free when executing print_set_output. This may result in context-dependent arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-16T12:38:57.000Z
CVE-2020-25560 
In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the portal. Once the access is available, the attacker can inject malicious OS commands on “ping”, “traceroute” and “snmp” functions and execute code on the server. We also observed the same is true if the JSESSIONID is completely removed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-11T20:12:43.000Z
CVE-2020-25561 
SapphireIMS 5 utilized default sapphire:ims credentials to connect the client to server. This credential is saved in ServerConf.config file in the client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-11T20:14:38.000Z
CVE-2020-25562 
In SapphireIMS 5.0, there is no CSRF token present in the entire application. This can lead to CSRF vulnerabilities in critical application forms like account resent.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-11T20:20:59.000Z
CVE-2020-25563 
In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing RemoteMgmtTaskSave (Automation Tasks) feature and not having a JSESSIONID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-11T20:21:57.000Z
CVE-2020-25564 
In SapphireIMS 5.0, it is possible to create local administrator on any client with credentials of a non-privileged user by directly accessing RemoteMgmtTaskSave (Automation Tasks) feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-11T20:22:55.000Z
CVE-2020-25565 
In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the portal. Once the access is available, the attacker can inject malicious OS commands on “ping”, “traceroute” and “snmp” functions and execute code on the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-11T20:23:49.000Z
CVE-2020-25566 
In SapphireIMS 5.0, it is possible to take over an account by sending a request to the Save_Password form as shown in POC. Notice that we do not require a JSESSIONID in this request and can reset any user’s password by changing the username to that user and password to base64(desired password).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-11T20:24:56.000Z
CVE-2020-25573 
An issue was discovered in the linked-hash-map crate before 0.5.3 for Rust. It creates an uninitialized NonNull pointer, which violates a non-null constraint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T18:16:30.000Z
CVE-2020-25574 
An issue was discovered in the http crate before 0.1.20 for Rust. An integer overflow in HeaderMap::reserve() could result in denial of service (e.g., an infinite loop).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T18:16:17.000Z
CVE-2020-25575 
An issue was discovered in the failure crate through 0.1.5 for Rust. It may introduce "compatibility hazards" in some applications, and has a type confusion flaw when downcasting. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: This may overlap CVE-2019-25010
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T18:15:48.000Z
CVE-2020-25576 
An issue was discovered in the rand_core crate before 0.4.2 for Rust. Casting of byte slices to integer slices mishandles alignment constraints.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T18:16:00.000Z
CVE-2020-25577 
In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 rtsold(8) does not verify that the RDNSS option does not extend past the end of the received packet before processing its contents. While the kernel currently ignores such malformed packets, it passes them to userspace programs. Any programs expecting the kernel to do validation may be vulnerable to an overflow.
Problem types: description: Improper validation
Affected products: vendor: n/a
product: FreeBSD
Published: 2021-03-29T19:53:50.000Z
CVE-2020-25578 
In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 several file systems were not properly initializing the d_off field of the dirent structures returned by VOP_READDIR. In particular, tmpfs(5), smbfs(5), autofs(5) and mqueuefs(5) were failing to do so. As a result, eight uninitialized kernel stack bytes may be leaked to userspace by these file systems.
Problem types: description: Improper initialization
Affected products: vendor: n/a
product: FreeBSD
Published: 2021-03-26T20:44:43.000Z
CVE-2020-25579 
In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 msdosfs(5) was failing to zero-fill a pair of padding fields in the dirent structure, resulting in a leak of three uninitialized bytes.
Problem types: description: Improper initialization
Affected products: vendor: n/a
product: FreeBSD
Published: 2021-03-26T20:44:53.000Z
CVE-2020-25580 
In FreeBSD 12.2-STABLE before r369346, 11.4-STABLE before r369345, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 a regression in the login.access(5) rule processor has the effect of causing rules to fail to match even when they should not. This means that rules denying access may be ignored.
Problem types: description: Missing authorization
Affected products: vendor: n/a
product: FreeBSD
Published: 2021-03-26T20:38:30.000Z
CVE-2020-25581 
In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the jail_remove(2) implementation, it may fail to kill some of the processes.
Problem types: description: Race Condition
Affected products: vendor: n/a
product: FreeBSD
Published: 2021-03-26T20:40:56.000Z
CVE-2020-25582 
In FreeBSD 12.2-STABLE before r369334, 11.4-STABLE before r369335, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 when a process, such as jexec(8) or killall(1), calls jail_attach(2) to enter a jail, the jailed root can attach to it using ptrace(2) before the current working directory is changed.
Problem types: description: Improper check for unusual conditions
Affected products: vendor: n/a
product: FreeBSD
Published: 2021-03-26T20:41:04.000Z
CVE-2020-25583 
In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 when processing a DNSSL option, rtsold(8) decodes domain name labels per an encoding specified in RFC 1035 in which the first octet of each label contains the label's length. rtsold(8) did not validate label lengths correctly and could overflow the destination buffer.
Problem types: description: Out-of-bounds write
Affected products: vendor: n/a
product: FreeBSD
Published: 2021-03-29T19:53:57.000Z
CVE-2020-25584 
In FreeBSD 13.0-STABLE before n245118, 12.2-STABLE before r369552, 11.4-STABLE before r369560, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-RELEASE before p9, a superuser inside a FreeBSD jail configured with the non-default allow.mount permission could cause a race condition between the lookup of ".." and remounting a filesystem, allowing access to filesystem hierarchy outside of the jail.
Problem types: description: Time-of-check Time-of-use Race Condition
Affected products: vendor: n/a
product: FreeBSD
Published: 2021-04-07T14:43:26.000Z
CVE-2020-25592 
In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-06T07:31:53.000Z