rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-27857 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NEF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-11488.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Foxit
product: Studio Photo
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2021-02-09T15:46:11.000Z
CVE-2020-27858 
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CA Arcserve D2D 16.5. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getNews method. Due to the improper restriction of XML External Entity (XXE) references, a specially-crafted document specifying a URI causes the XML parser to access the URI and embed the contents back into the XML document for further processing. An attacker can leverage this vulnerability to disclose information in the context of SYSTEM. Was ZDI-CAN-11103.
Problem types: cwe_id: CWE-611
description: CWE-611: Improper Restriction of XML External Entity Reference ('XXE')
Affected products: vendor: Arcserve
product: D2D
Credits: lang: en
value: rgod
Published: 2021-01-20T19:35:23.000Z
CVE-2020-27859 
This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ESMPRO Manager 6.42. Authentication is not required to exploit this vulnerability. The specific flaw exists within the GetEuaLogDownloadAction class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of SYSTEM. Was ZDI-CAN-9607.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: NEC
product: ESMPRO Manager
Credits: lang: en
value: rgod
Published: 2021-01-20T19:35:24.000Z
CVE-2020-27860 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of XFA templates. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-11727.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Foxit
product: Reader
Credits: lang: en
value: Anonymous
Published: 2021-02-11T23:35:35.000Z
CVE-2020-27861 
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UA_Parser utility. A crafted Host Name option in a DHCP request can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11076.
Problem types: cwe_id: CWE-78
description: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: NETGEAR
product: Orbi
Credits: lang: en
value: Shaunak Mirani
Published: 2021-02-11T23:35:36.000Z
CVE-2020-27862 
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DVA-2800 and DSL-2888A routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dhttpd service, which listens on TCP port 8008 by default. When parsing the path parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the web server. Was ZDI-CAN-10911.
Problem types: cwe_id: CWE-77
description: CWE-77: Command Injection
Affected products: vendor: D-Link
product: Multiple Routers
Credits: lang: en
value: chung96vn ft phieulang
Published: 2021-02-11T23:35:36.000Z
CVE-2020-27863 
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DVA-2800 and DSL-2888A routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dhttpd service, which listens on TCP port 8008 by default. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-10912.
Problem types: cwe_id: CWE-288
description: CWE-288: Authentication Bypass Using an Alternate Path or Channel
Affected products: vendor: D-Link
product: Multiple Routers
Credits: lang: en
value: chung96vn ft phieulang
Published: 2021-02-11T23:35:37.000Z
CVE-2020-27864 
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware version 1.04B03 WiFi extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HNAP service, which listens on TCP port 80 by default. When parsing the Authorization request header, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-10880.
Problem types: cwe_id: CWE-77
description: CWE-77: Command Injection
Affected products: vendor: D-Link
product: DAP-1860
Credits: lang: en
value: chung96vn of Vietnam Cyber Security Center
Published: 2021-02-11T23:35:38.000Z
CVE-2020-27865 
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware version 1.04B03 WiFi extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the uhttpd service, which listens on TCP port 80 by default. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the device. Was ZDI-CAN-10894.
Problem types: cwe_id: CWE-288
description: CWE-288: Authentication Bypass Using an Alternate Path or Channel
Affected products: vendor: D-Link
product: DAP-1860
Credits: lang: en
value: chung96vn of Vietnam Cyber Security Center
Published: 2021-02-11T23:35:39.000Z
CVE-2020-27866 
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mini_httpd service, which listens on TCP port 80 by default. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-11355.
Problem types: cwe_id: CWE-288
description: CWE-288: Authentication Bypass Using an Alternate Path or Channel
Affected products: vendor: NETGEAR
product: Multiple Routers
Credits: lang: en
value: 1sd3d of Viettel Cyber Security
Published: 2021-02-11T23:35:39.000Z
CVE-2020-27867 
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the mini_httpd service, which listens on TCP port 80 by default. When parsing the funjsq_access_token parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11653.
Problem types: cwe_id: CWE-77
description: CWE-77: Command Injection
Affected products: vendor: NETGEAR
product: Multiple Routers
Credits: lang: en
value: 1sd3d
Published: 2021-02-11T23:35:40.000Z
CVE-2020-27868 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Qognify Ocularis 5.9.0.395. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of serialized objects provided to the EventCoordinator endpoint. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-11257.
Problem types: cwe_id: CWE-502
description: CWE-502: Deserialization of Untrusted Data
Affected products: vendor: Qognify
product: Ocularis
Credits: lang: en
value: Joachim Kerschbaumer (@joachimk)
Published: 2021-02-11T23:35:41.000Z
CVE-2020-27869 
This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor 2020 HF1, NPM: 2020.2. Authentication is required to exploit this vulnerability. The specific flaw exists within the WriteToFile method. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to escalate privileges and reset the password for the Admin user. Was ZDI-CAN-11804.
Problem types: cwe_id: CWE-89
description: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: SolarWinds
product: Network Performance Monitor
Credits: lang: en
value: Anonymous
Published: 2021-02-11T23:35:42.000Z
CVE-2020-27870 
This vulnerability allows remote attackers to disclose sensitive information on affected installations of SolarWinds Orion Platform 2020.2.1. Authentication is required to exploit this vulnerability. The specific flaw exists within ExportToPDF.aspx. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of SYSTEM. Was ZDI-CAN-11917.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: SolarWinds
product: Orion Platform
Credits: lang: en
value: Anonymous
Published: 2021-02-10T22:15:15.000Z
CVE-2020-27871 
This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Platform 2020.2.1. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within VulnerabilitySettings.aspx. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-11902.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: SolarWinds
product: Orion Platform
Credits: lang: en
value: Anonymous
Published: 2021-02-10T22:15:16.000Z
CVE-2020-27872 
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mini_httpd service, which listens on TCP port 80 by default. The issue results from improper state tracking in the password recovery process. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-11365.
Problem types: cwe_id: CWE-642
description: CWE-642: External Control of Critical State Data
Affected products: vendor: NETGEAR
product: R7450
Credits: lang: en
value: 1sd3d of Viettel Cyber Security
Published: 2021-02-04T16:45:17.000Z
CVE-2020-27873 
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOAP API endpoint, which listens on TCP port 80 by default. The issue results from the lack of proper access control. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-11559.
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: NETGEAR
product: R7450
Credits: lang: en
value: 1sd3d of Viettel Cyber Security
Published: 2021-02-04T16:45:18.000Z
CVE-2020-27874 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM Decoder. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-11580.
Problem types: cwe_id: CWE-119
description: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: Tencent
product: WeChat
Credits: lang: en
value: Wen guang Jiao
Published: 2021-02-10T22:15:17.000Z
CVE-2020-27885 
Cross-Site Scripting (XSS) vulnerability on WSO2 API Manager 3.1.0. By exploiting a Cross-site scripting vulnerability the attacker can hijack a logged-in user’s session by stealing cookies which means that a malicious hacker can change the logged-in user’s password and invalidate the session of the victim while the hacker maintains access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-29T20:14:42.000Z
CVE-2020-27886 
An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to exploit the username_available function of the includes/functions.php file (which is called by login.php).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-29T18:24:54.000Z
CVE-2020-27887 
An issue was discovered in EyesOfNetwork 5.3 through 5.3-8. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the nmap_binary parameter to lilac/autodiscovery.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-29T18:26:48.000Z
CVE-2020-27888 
An issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0.28 devices. Cached credentials are not erased from an access point returning wirelessly from a disconnected state. This may provide unintended network access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-27T19:25:31.000Z
CVE-2020-27890 
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message. It crashes in zclParseInWriteCmd() and does not update the specific attribute's value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-27T20:26:11.000Z
CVE-2020-27891 
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Read Reporting Configuration Response message. It crashes in zclHandleExternal().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-27T20:26:01.000Z
CVE-2020-27892 
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Discover Commands Received Response message or a ZCL Discover Commands Generated Response message. It crashes in zclParseInDiscCmdsRspCmd().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-27T20:25:48.000Z
CVE-2020-27893 
An issue existed in screen sharing. This issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A user with screen sharing access may be able to view another user's screen.
Problem types: description: A user with screen sharing access may be able to view another user's screen
Affected products: vendor: Apple
product: macOS
Published: 2021-04-02T17:27:37.000Z
CVE-2020-27894 
The issue was addressed with additional user controls. This issue is fixed in macOS Big Sur 11.0.1. Users may be unable to remove metadata indicating where files were downloaded from.
Problem types: description: Users may be unable to remove metadata indicating where files were downloaded from
Affected products: vendor: Apple
product: macOS
Published: 2020-12-08T20:04:17.000Z
CVE-2020-27895 
An information disclosure issue existed in the transition of program state. This issue was addressed with improved state handling. This issue is fixed in iTunes 12.11 for Windows. A malicious application may be able to access local users Apple IDs.
Problem types: description: A malicious application may be able to access local users Apple IDs
Affected products: vendor: Apple
product: iTunes for Windows
Published: 2020-12-08T20:06:07.000Z
CVE-2020-27896 
A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1. A remote attacker may be able to modify the file system.
Problem types: description: A remote attacker may be able to modify the file system
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2020-12-08T21:11:29.000Z
CVE-2020-27897 
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-04-02T17:26:02.000Z
CVE-2020-27898 
A denial of service issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1. An attacker may be able to bypass Managed Frame Protection.
Problem types: description: An attacker may be able to bypass Managed Frame Protection
Affected products: vendor: Apple
product: macOS
Published: 2020-12-08T20:07:45.000Z
CVE-2020-27899 
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Big Sur 11.0.1, watchOS 7.1, tvOS 14.2. A local attacker may be able to elevate their privileges.
Problem types: description: A local attacker may be able to elevate their privileges
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: tvOS
vendor: Apple
product: macOS
Published: 2021-04-02T17:27:58.000Z
CVE-2020-27900 
An issue existed in the handling of snapshots. The issue was resolved with improved permissions logic. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to preview files it does not have access to.
Problem types: description: A malicious application may be able to preview files it does not have access to
Affected products: vendor: Apple
product: macOS
Published: 2020-12-08T20:06:59.000Z
CVE-2020-27901 
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. A sandboxed process may be able to circumvent sandbox restrictions.
Problem types: description: A sandboxed process may be able to circumvent sandbox restrictions
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-04-02T17:29:46.000Z
CVE-2020-27902 
An authentication issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2. A person with physical access to an iOS device may be able to access stored passwords without authentication.
Problem types: description: A person with physical access to an iOS device may be able to access stored passwords without authentication
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2020-12-08T20:08:33.000Z
CVE-2020-27903 
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.0.1. An application may be able to gain elevated privileges.
Problem types: description: An application may be able to gain elevated privileges
Affected products: vendor: Apple
product: macOS
Published: 2020-12-08T20:07:17.000Z
CVE-2020-27904 
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2020-12-08T20:07:35.000Z
CVE-2020-27905 
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A malicious application may be able to execute arbitrary code with system privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with system privileges
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: tvOS
Published: 2020-12-08T20:09:08.000Z
CVE-2020-27906 
Multiple integer overflows were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A remote attacker may be able to cause unexpected application termination or heap corruption.
Problem types: description: A remote attacker may be able to cause unexpected application termination or heap corruption
Affected products: vendor: Apple
product: macOS
Published: 2020-12-08T20:08:45.000Z
CVE-2020-27907 
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-04-02T17:28:33.000Z