rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-13407 
Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the DB and can be later triggered again by the same victim, or also later by different users). Both stored, and reflected payloads are triggerable by admin, so malicious non-authenticated user could get admin level access. Even malicious low-privileged user can inject XSS, which can be executed by admin, potentially elevating privileges and obtaining admin access. (issue 1 of 3)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-09T04:28:47.000Z
CVE-2020-13408 
Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the DB and can be later triggered again by the same victim, or also later by different users). Both stored, and reflected payloads are triggerable by admin, so malicious non-authenticated user could get admin level access. Even malicious low-privileged user can inject XSS, which can be executed by admin, potentially elevating privileges and obtaining admin access. (issue 2 of 3)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-09T04:28:36.000Z
CVE-2020-13409 
Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the DB and can be later triggered again by the same victim, or also later by different users). Both stored, and reflected payloads are triggerable by admin, so malicious non-authenticated user could get admin level access. Even malicious low-privileged user can inject XSS, which can be executed by admin, potentially elevating privileges and obtaining admin access. (issue 3 of 3)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-09T04:28:41.000Z
CVE-2020-13410 
An issue was discovered in MoscaJS Aedes 0.42.0. lib/write.js does not properly consider exceptions during the writing of an invalid packet to a stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-26T14:35:52.000Z
CVE-2020-13412 
An issue was discovered in Aviatrix Controller before 5.4.1204. An API call on the web interface lacked a session token check to control access, leading to CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-22T20:48:50.000Z
CVE-2020-13413 
An issue was discovered in Aviatrix Controller before 5.4.1204. There is a Observable Response Discrepancy from the API, which makes it easier to perform user enumeration via brute force.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-22T20:48:39.000Z
CVE-2020-13414 
An issue was discovered in Aviatrix Controller before 5.4.1204. It contains credentials unused by the software.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-22T20:48:31.000Z
CVE-2020-13415 
An issue was discovered in Aviatrix Controller through 5.1. An attacker with any signed SAML assertion from the Identity Provider can establish a connection (even if that SAML assertion has expired or is from a user who is not authorized to access Aviatrix), aka XML Signature Wrapping.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-22T20:48:23.000Z
CVE-2020-13416 
An issue was discovered in Aviatrix Controller before 5.4.1066. A Controller Web Interface session token parameter is not required on an API call, which opens the application up to a Cross Site Request Forgery (CSRF) vulnerability for password resets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-22T20:48:09.000Z
CVE-2020-13417 
An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224. This affects Linux, macOS, and Windows installations for certain OpenSSL parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-22T20:47:37.000Z
CVE-2020-13418 
OpenIAM before 4.2.0.3 allows XSS in the Add New User feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T20:10:27.000Z
CVE-2020-13419 
OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T20:17:08.000Z
CVE-2020-13420 
OpenIAM before 4.2.0.3 allows remote attackers to execute arbitrary code via Groovy Script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T20:08:45.000Z
CVE-2020-13421 
OpenIAM before 4.2.0.3 has Incorrect Access Control for the Create User, Modify User Permissions, and Password Reset actions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T20:21:49.000Z
CVE-2020-13422 
OpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/* administrative actions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T20:24:39.000Z
CVE-2020-13423 
Form Builder 2.1.0 for Magento has multiple XSS issues that can be exploited against Magento 2 admin accounts via the Current_url or email field, or the User-Agent HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-29T13:15:48.000Z
CVE-2020-13424 
The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-23T18:27:30.000Z
CVE-2020-13425 
TrackR devices through 2020-05-06 allow attackers to trigger the Beep (aka alarm) feature, which will eventually cause a denial of service when battery capacity is exhausted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-23T19:07:31.000Z
CVE-2020-13426 
The Multi-Scheduler plugin 1.0.0 for WordPress has a Cross-Site Request Forgery (CSRF) vulnerability in the forms it presents, allowing the possibility of deleting records (users) when an ID is known.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T17:09:19.000Z
CVE-2020-13427 
Victor CMS 1.0 has Persistent XSS in admin/users.php?source=add_user via the user_name, user_firstname, or user_lastname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T17:34:56.000Z
CVE-2020-13428 
A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c in VideoLAN VLC media player before 3.0.11 for macOS/iOS allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted H.264 Annex-B video (.avi for example) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-08T18:13:04.000Z
CVE-2020-13429 
legend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS via the Values Header (aka legend header) option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-24T17:24:26.000Z
CVE-2020-13430 
Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-24T17:24:18.000Z
CVE-2020-13431 
I2P before 0.9.46 allows local users to gain privileges via a Trojan horse I2PSvc.exe file because of weak permissions on a certain %PROGRAMFILES% subdirectory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-16T12:26:26.000Z
CVE-2020-13432 
rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP requests with a long URI or long HTTP headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-08T17:25:10.000Z
CVE-2020-13433 
Jason2605 AdminPanel 4.0 allows SQL Injection via the editPlayer.php hidden parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-24T21:38:38.000Z
CVE-2020-13434 
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-24T21:55:27.000Z
CVE-2020-13435 
SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-24T21:55:17.000Z
CVE-2020-13438 
ffjpeg through 2020-02-24 has an invalid read in jfif_encode in jfif.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-24T22:29:36.000Z
CVE-2020-13439 
ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfif_decode in jfif.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-24T22:29:04.000Z
CVE-2020-13440 
ffjpeg through 2020-02-24 has an invalid write in bmp_load in bmp.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-24T22:29:24.000Z
CVE-2020-13442 
A Remote code execution vulnerability exists in DEXT5Upload in DEXT5 through 2.7.1402870. An attacker can upload a PHP file via dext5handler.jsp handler because the uploaded file is stored under dext5uploadeddata/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-25T14:25:00.000Z
CVE-2020-13443 
ExpressionEngine before 5.3.2 allows remote attackers to upload and execute arbitrary code in a .php%20 file via Compose Msg, Add attachment, and Save As Draft actions. A user with low privileges (member) is able to upload this. It is possible to bypass the MIME type check and file-extension check while uploading new files. Short aliases are not used for an attachment; instead, direct access is allowed to the uploaded files. It is possible to upload PHP only if one has member access, or registration/forum is enabled and one can create a member with the default group id of 5. To exploit this, one must to be able to send and compose messages (at least).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-24T14:34:44.000Z
CVE-2020-13444 
Liferay Portal 7.x before 7.3.2, and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack 5 does not sanitize the information returned by the DDMDataProvider API, which allows remote authenticated users to obtain the password to REST Data Providers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-10T18:17:13.000Z
CVE-2020-13445 
In Liferay Portal before 7.3.2 and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack 6, the template API does not restrict user access to sensitive objects, which allows remote authenticated users to execute arbitrary code via crafted FreeMarker and Velocity templates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-10T18:09:38.000Z
CVE-2020-13448 
QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8 allows an authenticated remote attacker to execute code on the server via command injection in the servicestart parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-01T15:19:42.000Z
CVE-2020-13449 
A directory traversal vulnerability in the Markdown engine of Gotenberg through 6.2.1 allows an attacker to read any container files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-07T21:17:06.000Z
CVE-2020-13450 
A directory traversal vulnerability in file upload function of Gotenberg through 6.2.1 allows an attacker to upload and overwrite any writable files outside the intended folder. This can lead to DoS, a change to program behavior, or code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-07T21:17:01.000Z
CVE-2020-13451 
An incomplete-cleanup vulnerability in the Office rendering engine of Gotenberg through 6.2.1 allows an attacker to overwrite LibreOffice configuration files and execute arbitrary code via macros.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-07T21:16:56.000Z
CVE-2020-13452 
In Gotenberg through 6.2.1, insecure permissions for tini (writable by user gotenberg) potentially allow an attacker to overwrite the file, which can lead to denial of service or code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-07T21:16:51.000Z
CVE-2020-13458 
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-25T16:34:01.000Z
CVE-2020-13459 
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-25T16:33:50.000Z
CVE-2020-13460 
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities were present in Tufin SecureTrack, affecting all versions prior to R20-2 GA.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-09T04:39:38.000Z
CVE-2020-13461 
Username enumeration in present in Tufin SecureTrack. It's affecting all versions of SecureTrack. The vendor has decided not to fix this vulnerability. Vendor's response: "This attack requires access to the internal network. If an attacker is part of the internal network, they do not require access to TOS to know the usernames".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-09T04:45:53.000Z
CVE-2020-13462 
Insecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions prior to R20-2 GA. Fixed in version R20-2 GA.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-09T05:36:01.000Z
CVE-2020-13463 
The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-31T15:21:01.000Z
CVE-2020-13464 
The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-31T15:22:24.000Z
CVE-2020-13465 
The security protection in Gigadevice GD32F103 devices allows physical attackers to redirect the control flow and execute arbitrary code via the debug interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-31T15:23:34.000Z
CVE-2020-13466 
STMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-31T15:25:01.000Z
CVE-2020-13467 
The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-31T15:26:29.000Z
CVE-2020-13468 
Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection into inter-IC bonding wires (which have insufficient physical protection).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-31T15:28:03.000Z
CVE-2020-13469 
The flash memory readout protection in Gigadevice GD32VF103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-31T15:29:58.000Z
CVE-2020-13470 
Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible bonding wires and de-obfuscation of the observed data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-31T15:33:32.000Z
CVE-2020-13471 
Apex Microelectronics APM32F103 devices allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-31T15:38:43.000Z
CVE-2020-13472 
The flash memory readout protection in Gigadevice GD32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the DMA module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-31T15:41:12.000Z
CVE-2020-13473 
NCH Express Accounts 8.24 and earlier allows local users to discover the cleartext password by reading the configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T21:16:55.000Z
CVE-2020-13474 
In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as Add/Edit users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T21:19:19.000Z
CVE-2020-13476 
NCH Express Invoice 8.06 to 8.24 is vulnerable to Reflected XSS in the Quotes List module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T21:21:31.000Z
CVE-2020-13480 
Verint Workforce Optimization (WFO) 15.2 allows HTML injection via the "send email" feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T17:31:17.000Z
CVE-2020-13481 
Certain Lexmark products through 2020-05-25 allow XSS which allows an attacker to obtain session credentials and other sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-02-19T00:00:00.000Z
CVE-2020-13482 
EM-HTTP-Request 1.1.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-middle attack against users of the library. The hostname in a TLS server certificate is not verified.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-25T21:49:30.000Z
CVE-2020-13483 
The Web Application Firewall in Bitrix24 through 20.0.0 allows XSS via the items[ITEMS][ID] parameter to the components/bitrix/mobileapp.list/ajax.php/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-24T14:33:28.000Z
CVE-2020-13484 
Bitrix24 through 20.0.975 allows SSRF via an intranet IP address in the services/main/ajax.php?action=attachUrlPreview url parameter, if the destination URL hosts an HTML document containing '<meta name="og:image" content="' followed by an intranet URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-24T14:28:01.000Z
CVE-2020-13485 
The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-25T22:38:53.000Z
CVE-2020-13486 
The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-25T22:38:42.000Z
CVE-2020-13487 
The bbPress plugin through 2.6.4 for WordPress has stored XSS in the Forum creation section, resulting in JavaScript execution at wp-admin/edit.php?post_type=forum (aka the Forum listing page) for all users. An administrator can exploit this at the wp-admin/post.php?action=edit URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-26T13:10:48.000Z
CVE-2020-13493 
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. A specially crafted USDC file format path jumps decompression heap overflow in a way path jumps are processed. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file.
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: n/a
product: Pixar
Published: 2020-12-02T17:25:18.000Z
CVE-2020-13494 
A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string tokens in binary USD files. A specially crafted malformed file can trigger a heap overflow which can result in out of bounds memory access which could lead to information disclosure. This vulnerability could be used to bypass mitigations and aid further exploitation. To trigger this vulnerability, victim needs to access an attacker-provided malformed file.
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: n/a
product: Pixar
Published: 2020-12-02T17:28:30.000Z
CVE-2020-13495 
An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed file can trigger an arbitrary out-of-bounds memory access that could lead to the disclosure of sensitive information. This vulnerability could be used to bypass mitigations and aid additional exploitation. To trigger this vulnerability, the victim needs to access an attacker-provided file.
Problem types: cwe_id: CWE-119
description: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: Apple
product: macOS
vendor: Pixar
product: OpenUSD
Published: 2022-04-18T16:15:20.877Z
CVE-2020-13496 
An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbitrary out of bounds memory access in TfToken Type Index. This vulnerability could be used to bypass mitigations and aid further exploitation. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file.
Problem types: cwe_id: CWE-119
description: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: n/a
product: Pixar
Published: 2020-12-02T17:30:18.000Z
CVE-2020-13497 
An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbitrary out of bounds memory access in String Type Index. This vulnerability could be used to bypass mitigations and aid further exploitation. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file.
Problem types: cwe_id: CWE-119
description: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: n/a
product: Pixar
Published: 2020-12-02T17:30:27.000Z