rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-35579 
tindy2013 subconverter 0.6.4 has a /sub?target=%TARGET%&url=%URL%&config=%CONFIG% API endpoint that accepts an arbitrary %URL% value and launches a GET request for it, but does not consider that the external request target may indirectly redirect back to this original /sub endpoint. Thus, a request loop and a denial of service may occur.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-20T06:31:46.000Z
CVE-2020-35580 
A local file inclusion vulnerability in the FileServlet in all SearchBlox before 9.2.2 allows remote, unauthenticated users to read arbitrary files from the operating system via a /searchblox/servlet/FileServlet?col=url= request. Additionally, this may be used to read the contents of the SearchBlox configuration file (e.g., searchblox/WEB-INF/config.xml), which contains both the Super Admin's API key and the base64 encoded SHA1 password hashes of other SearchBlox users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-20T15:25:59.000Z
CVE-2020-35581 
A stored cross-site scripting (XSS) issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/admin-ajax.php request with the meta[title] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-15T06:23:42.000Z
CVE-2020-35582 
A stored cross-site scripting (XSS) issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/post.php request with the post_title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-15T06:24:49.000Z
CVE-2020-35584 
In Solstice Pod before 3.0.3, the web services allow users to connect to them over unencrypted channels via the Browser Look-in feature. An attacker suitably positioned to view a legitimate user's network traffic could record and monitor their interactions with the web services and obtain any information the user supplies, including Administrator passwords and screen keys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-23T14:53:19.000Z
CVE-2020-35585 
In Solstice Pod before 3.3.0 (or Open4.3), the screen key can be enumerated using brute-force attacks via the /lookin/info Solstice Open Control API because there are only 1.7 million possibilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-23T14:56:11.000Z
CVE-2020-35586 
In Solstice Pod before 3.3.0 (or Open4.3), the Administrator password can be enumerated using brute-force attacks via the /Config/service/initModel?password= Solstice Open Control API because there is no complexity requirement (e.g., it might be all digits or all lowercase letters).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-23T14:58:20.000Z
CVE-2020-35587 
In Solstice Pod before 3.0.3, the firmware can easily be decompiled/disassembled. The decompiled/disassembled files contain non-obfuscated code. NOTE: it is unclear whether lack of obfuscation is directly associated with a negative impact, or instead only facilitates an attack technique
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-23T15:19:28.000Z
CVE-2020-35589 
The limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows wp-admin/options-general.php?page=limit-login-attempts&tab= XSS. A malicious user can cause an administrator user to supply dangerous content to the vulnerable page, which is then reflected back to the user and executed by the web browser. The most common mechanism for delivering malicious content is to include it as a parameter in a URL that is posted publicly or e-mailed directly to victims.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-21T06:03:41.000Z
CVE-2020-35590 
LimitLoginAttempts.php in the limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows a bypass of (per IP address) rate limits because the X-Forwarded-For header can be forged. When the plugin is configured to accept an arbitrary header for the client source IP address, a malicious user is not limited to perform a brute force attack, because the client IP header accepts any arbitrary string. When randomizing the header input, the login count does not ever reach the maximum allowed retries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-21T06:03:52.000Z
CVE-2020-35591 
Pi-hole 5.0, 5.1, and 5.1.1 allows Session Fixation. The application does not generate a new session cookie after the user is logged in. A malicious user is able to create a new session cookie value and inject it to a victim. After the victim logs in, the injected cookie becomes valid, giving the attacker access to the user's account through the active session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-18T19:26:56.000Z
CVE-2020-35592 
Pi-hole 5.0, 5.1, and 5.1.1 allows XSS via the Options header to the admin/ URI. A remote user is able to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Reflected Cross-Site Scripting attack against other users and steal the session cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-18T19:29:40.000Z
CVE-2020-35593 
BMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig +RESTART -host.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-09-05T00:00:00.000Z
CVE-2020-35594 
Zoho ManageEngine ADManager Plus before 7066 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T16:29:12.000Z
CVE-2020-35597 
Victor CMS 1.0 is vulnerable to SQL injection via c_id parameter of admin_edit_comment.php, p_id parameter of admin_edit_post.php, u_id parameter of admin_edit_user.php, and edit parameter of admin_update_categories.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-16T18:26:22.000Z
CVE-2020-35598 
ACS Advanced Comment System 1.0 is affected by Directory Traversal via an advanced_component_system/index.php?ACS_path=..%2f URI. NOTE: this might be the same as CVE-2009-4623
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-23T18:52:07.000Z
CVE-2020-35604 
An XXE attack can occur in Kronos WebTA 5.0.4 when SAML is used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-21T18:57:13.000Z
CVE-2020-35605 
The Graphics Protocol feature in graphics.c in kitty before 0.19.3 allows remote attackers to execute arbitrary code because a filename containing special characters can be included in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-21T19:07:36.000Z
CVE-2020-35606 
Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary commands with root privileges via vectors involving %0A and %0C. NOTE: this issue exists because of an incomplete fix for CVE-2019-12840.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-21T19:19:17.000Z
CVE-2020-35608 
A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AF_PACKET socket can cause a process to create an executable memory mapping with controllable content. An attacker can execute a shellcode that uses the PACKET_MMAP functionality to trigger this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-22T19:23:15.000Z
CVE-2020-35609 
A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. A sequence of specially crafted ioctl calls can cause a denial of service. An attacker can write shellcode to trigger this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-22T19:24:55.000Z
CVE-2020-35610 [20201101] - Core - com_finder ignores access levels on autosuggest
An issue was discovered in Joomla! 2.5.0 through 3.9.22. The autosuggestion feature of com_finder did not respect the access level of the corresponding terms.
Problem types: description: Information Disclosure
Affected products: vendor: Joomla! Project
product: Joomla! CMS
Published: 2020-12-28T19:39:18.000Z
CVE-2020-35611 [20201102] - Core - Disclosure of secrets in Global Configuration page
An issue was discovered in Joomla! 2.5.0 through 3.9.22. The globlal configuration page does not remove secrets from the HTML output, disclosing the current values.
Problem types: description: Information Disclosure
Affected products: vendor: Joomla! Project
product: Joomla! CMS
Published: 2020-12-28T19:39:18.132Z
CVE-2020-35612 [20201103] - Core - Path traversal in mod_random_image
An issue was discovered in Joomla! 2.5.0 through 3.9.22. The folder parameter of mod_random_image lacked input validation, leading to a path traversal vulnerability.
Problem types: description: Path traversal
Affected products: vendor: Joomla! Project
product: Joomla! CMS
Published: 2020-12-28T19:39:18.241Z
CVE-2020-35613 [20201104] - Core - SQL injection in com_users list view
An issue was discovered in Joomla! 3.0.0 through 3.9.22. Improper filter blacklist configuration leads to a SQL injection vulnerability in the backend user list.
Problem types: description: SQL Injection
Affected products: vendor: Joomla! Project
product: Joomla! CMS
Published: 2020-12-28T19:39:18.351Z
CVE-2020-35614 [20201105] - Core - User Enumeration in backend login
An issue was discovered in Joomla! 3.9.0 through 3.9.22. Improper handling of the username leads to a user enumeration attack vector in the backend login page.
Problem types: description: User Enumeration
Affected products: vendor: Joomla! Project
product: Joomla! CMS
Published: 2020-12-28T19:39:18.455Z
CVE-2020-35615 [20201106] - Core - CSRF in com_privacy emailexport feature
An issue was discovered in Joomla! 2.5.0 through 3.9.22. A missing token check in the emailexport feature of com_privacy causes a CSRF vulnerability.
Problem types: description: CSRF
Affected products: vendor: Joomla! Project
product: Joomla! CMS
Published: 2020-12-28T19:39:18.556Z
CVE-2020-35616 [20201107] - Core - Write ACL violation in multiple core views
An issue was discovered in Joomla! 1.7.0 through 3.9.22. Lack of input validation while handling ACL rulesets can cause write ACL violations.
Problem types: description: ACL Violation
Affected products: vendor: Joomla! Project
product: Joomla! CMS
Published: 2020-12-28T19:39:18.657Z
CVE-2020-35622 
An issue was discovered in the GlobalUsage extension for MediaWiki through 1.35.1. SpecialGlobalUsage.php calls WikiMap::makeForeignLink unsafely. The $page variable within the formatItem function was not being properly escaped, allowing for XSS under certain conditions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-21T22:37:29.000Z
CVE-2020-35623 
An issue was discovered in the CasAuth extension for MediaWiki through 1.35.1. Due to improper username validation, it allowed user impersonation with trivial manipulations of certain characters within a given username. An ordinary user may be able to login as a "bureaucrat user" who has a similar username, as demonstrated by usernames that differ only in (1) bidirectional override symbols or (2) blank space.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-21T22:37:15.000Z
CVE-2020-35624 
An issue was discovered in the SecurePoll extension for MediaWiki through 1.35.1. The non-admin vote list contains a full vote timestamp, which may provide unintended clues about how a voting process unfolded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-21T22:36:51.000Z
CVE-2020-35625 
An issue was discovered in the Widgets extension for MediaWiki through 1.35.1. Any user with the ability to edit pages within the Widgets namespace could call any static function within any class (defined within PHP or MediaWiki) via a crafted HTML comment, related to a Smarty template. For example, a person in the Widget Editors group could use \MediaWiki\Shell\Shell::command within a comment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-21T22:36:26.000Z
CVE-2020-35626 
An issue was discovered in the PushToWatch extension for MediaWiki through 1.35.1. The primary form did not implement an anti-CSRF token and therefore was completely vulnerable to CSRF attacks against onSkinAddFooterLinks in PushToWatch.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-21T22:34:06.000Z
CVE-2020-35627 
Ultimate WooCommerce Gift Cards 3.0.2 is affected by a file upload vulnerability in the Custom GiftCard Template that can remotely execute arbitrary code. Once it contains the function "Custom Gift Card Template", the function of uploading a custom image is used, changing the name of the image extension to PHP and executing PHP code on the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T14:36:30.000Z
CVE-2020-35628 
A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sloop() slh->incident_sface. An attacker can provide malicious input to trigger this vulnerability.
Problem types: cwe_id: CWE-129
description: CWE-129: Improper Validation of Array Index
Affected products: vendor: n/a
product: CGAL
Published: 2021-03-04T00:00:00.000Z
CVE-2020-35629 
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sloop() slh->facet().
Problem types: cwe_id: CWE-129
description: CWE-129: Improper Validation of Array Index
Affected products: vendor: CGAL Project
product: libcgal
Published: 2022-04-18T16:56:39.561Z
CVE-2020-35630 
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() sfh->center_vertex().
Problem types: cwe_id: CWE-129
description: CWE-129: Improper Validation of Array Index
Affected products: vendor: CGAL Project
product: libcgal
Published: 2022-04-18T16:56:41.182Z
CVE-2020-35631 
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() SD.link_as_face_cycle().
Problem types: cwe_id: CWE-129
description: CWE-129: Improper Validation of Array Index
Affected products: vendor: CGAL Project
product: libcgal
Published: 2022-04-18T16:56:42.551Z
CVE-2020-35632 
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() sfh->boundary_entry_objects Edge_of.
Problem types: cwe_id: CWE-129
description: CWE-129: Improper Validation of Array Index
Affected products: vendor: CGAL Project
product: libcgal
Published: 2022-04-18T16:56:44.039Z
CVE-2020-35633 
A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() store_sm_boundary_item() Edge_of.A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger this vulnerability.
Problem types: cwe_id: CWE-129
description: CWE-129: Improper Validation of Array Index
Affected products: vendor: n/a
product: CGAL Project
Published: 2021-08-30T00:00:00.000Z
CVE-2020-35634 
A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() sfh->boundary_entry_objects Sloop_of. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger this vulnerability.
Problem types: cwe_id: CWE-129
description: CWE-129: Improper Validation of Array Index
Affected products: vendor: n/a
product: CGAL Project
Published: 2021-08-30T00:00:00.000Z
CVE-2020-35635 
A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sface() store_sm_boundary_item() Sloop_of OOB read. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger this vulnerability.
Problem types: cwe_id: CWE-129
description: CWE-129: Improper Validation of Array Index
Affected products: vendor: n/a
product: CGAL Project
Published: 2021-08-30T00:00:00.000Z
CVE-2020-35636 
A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sface() sfh->volume() OOB read. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger this vulnerability.
Problem types: cwe_id: CWE-129
description: CWE-129: Improper Validation of Array Index
Affected products: vendor: n/a
product: CGAL Project
Published: 2021-03-04T00:00:00.000Z
CVE-2020-35650 
Multiple cross-site scripting (XSS) vulnerabilities in Uncanny Groups for LearnDash before v3.7 allow authenticated remote attackers to inject arbitrary JavaScript or HTML via the ulgm_code_redeem POST Parameter in user-code-redemption.php, the ulgm_user_first POST Parameter in user-registration-form.php, the ulgm_user_last POST Parameter in user-registration-form.php, the ulgm_user_email POST Parameter in user-registration-form.php, the ulgm_code_registration POST Parameter in user-registration-form.php, the ulgm_terms_conditions POST Parameter in user-registration-form.php, the _ulgm_total_seats POST Parameter in frontend-uo_groups_buy_courses.php, the uncanny_group_signup_user_first POST Parameter in group-registration-form.php, the uncanny_group_signup_user_last POST Parameter in group-registration-form.php, the uncanny_group_signup_user_login POST Parameter in group-registration-form.php, the uncanny_group_signup_user_email POST Parameter in group-registration-form.php, the success-invited GET Parameter in frontend-uo_groups.php, the bulk-errors GET Parameter in frontend-uo_groups.php, or the message GET Parameter in frontend-uo_groups.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-23T15:25:24.000Z
CVE-2020-35652 
An issue was discovered in res_pjsip_diversion.c in Sangoma Asterisk before 13.38.0, 14.x through 16.x before 16.15.0, 17.x before 17.9.0, and 18.x before 18.1.0. A crash can occur when a SIP message is received with a History-Info header that contains a tel-uri, or when a SIP 181 response is received that contains a tel-uri in the Diversion header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-29T07:22:40.000Z
CVE-2020-35653 
In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-12T08:02:35.000Z
CVE-2020-35654 
In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-12T08:06:55.000Z
CVE-2020-35655 
In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-12T08:08:47.000Z
CVE-2020-35656 
Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via crafted use of admin.php?reqGadget=Components&reqAction=InstallGadget&comp=FileBrowser and admin.php?reqGadget=FileBrowser&reqAction=Files to upload a .php file. NOTE: this is unrelated to the JAWS (aka Job Access With Speech) product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-23T02:02:19.000Z
CVE-2020-35657 
Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via crafted use of UploadTheme to upload a theme ZIP archive containing a .php file that is able to execute OS commands. NOTE: this is unrelated to the JAWS (aka Job Access With Speech) product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-23T02:03:03.000Z
CVE-2020-35658 
SpamTitan before 7.09 allows attackers to tamper with backups, because backups are not encrypted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-23T02:10:33.000Z
CVE-2020-35659 
The DNS query log in Pi-hole before 5.2.2 is vulnerable to stored XSS. An attacker with the ability to directly or indirectly query DNS with a malicious hostname can cause arbitrary JavaScript to execute when the Pi-hole administrator visits the Query Log or Long-term data Query Log page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-24T15:59:04.000Z
CVE-2020-35660 
Cross Site Scripting (XSS) in Monica before 2.19.1 via the journal page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-14T17:05:19.000Z
CVE-2020-35662 
In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-27T00:00:00.000Z
CVE-2020-35664 
An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. There is cross-site scripting (XSS) in the console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-22T02:13:33.000Z
CVE-2020-35665 
An unauthenticated command-execution vulnerability exists in TerraMaster TOS through 4.2.06 via shell metacharacters in the Event parameter in include/makecvs.php during CSV creation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-23T00:00:00.000Z