rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-7189 
A faultflasheventselectfact expression language injectionremote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: faultflasheventselectfact expression language injectionremote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:46:17.000Z
CVE-2020-7190 
A deviceselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: deviceselect expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:46:23.000Z
CVE-2020-7191 
A devsoftsel expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: devsoftsel expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:46:29.000Z
CVE-2020-7192 
A devicethresholdconfig expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: devicethresholdconfig expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:46:35.000Z
CVE-2020-7193 
A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: ictexpertcsvdownload expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:46:48.000Z
CVE-2020-7194 
A perfaddormoddevicemonitor expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: perfaddormoddevicemonitor expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:47:03.000Z
CVE-2020-7195 
A iccselectrules expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Problem types: description: iccselectrules expression language injection remote code execution
Affected products: vendor: n/a
product: HPE Intelligent Management Center (iMC)
Published: 2020-10-19T17:47:09.000Z
CVE-2020-7196 
The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdc_admin_password in the source file of the url "/bdswebui/assignusers/".
Problem types: description: remote disclosure of privileged information
Affected products: vendor: n/a
product: BlueData EPIC Software; HPE Ezmeral Container Platform
Published: 2020-10-26T15:05:48.000Z
CVE-2020-7197 
SSMC3.7.0.0 is vulnerable to remote authentication bypass. HPE StoreServ Management Console (SSMC) 3.7.0.0 is an off node multiarray manager web application and remains isolated from data on the managed arrays. HPE has provided an update to HPE StoreServ Management Console (SSMC) software 3.7.0.0* Upgrade to HPE 3PAR StoreServ Management Console 3.7.1.1 or later.
Problem types: description: remote authentication bypass
Affected products: vendor: n/a
product: HPE 3PAR StoreServ Management and Core Software Media
Published: 2020-10-26T15:09:19.000Z
CVE-2020-7198 
There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2.
Problem types: description: remote escalation of privilege
Affected products: vendor: n/a
product: HP OneView; HPE Synergy Composer; HPE Synergy Composer 2
Published: 2020-11-06T14:14:04.000Z
CVE-2020-7199 
A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary commands, gaining privileged access, causing denial of service, and changing the configuration.
Problem types: description: remote authentication bypass
Affected products: vendor: n/a
product: HPE Edgeline Infrastructure Management Software
Published: 2020-12-02T00:41:38.000Z
CVE-2020-7200 
A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6. The vulnerability could be exploited to allow remote code execution.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: HPE Systems Insight Manager (SIM)
Published: 2020-12-18T22:14:48.000Z
CVE-2020-7201 
A potential security vulnerability has been identified in the HPE StoreEver MSL2024 Tape Library and HPE StoreEver 1/8 G2 Tape Autoloaders. The vulnerability could be remotely exploited to allow Cross-site Request Forgery (CSRF).
Problem types: description: remote cross-site request forgery (csrf)
Affected products: vendor: n/a
product: HPE StoreEver MSL Tape Libraries; HPE StoreEver 1/8 G2 Tape Autoloaders
Published: 2020-12-18T22:20:30.000Z
CVE-2020-7202 
A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4) firmware. The vulnerability could be remotely exploited to disclose the serial number and other information.
Problem types: description: Remote disclosure of information
Affected products: vendor: n/a
product: HPE ProLiant Servers, Apollo Products, Converged Systems, and Synergy Compute Modules with Integrated Lights-Out 5 (iLO 5), or Integrated Lights-Out 4 (iLO 4)
Published: 2021-01-05T14:08:28.000Z
CVE-2020-7203 
A potential security vulnerability has been identified in HPE iLO Amplifier Pack server version 1.70. The vulnerability could be exploited to allow remote code execution.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: iLO Amplifier Pack
Published: 2020-12-18T22:17:53.000Z
CVE-2020-7206 
HP nagios plugin for iLO (nagios-plugins-hpilo v1.50 and earlier) has a php code injection vulnerability.
Problem types: description: remote code injection
Affected products: vendor: n/a
product: nagios-plugins-ilo
Published: 2020-07-17T21:16:11.000Z
CVE-2020-7207 
A local elevation of privilege using physical access security vulnerability was found in HPE Proliant Gen10 Servers using Intel Innovation Engine (IE). This attack requires a physical attack to the server motherboard. To mitigate this issue, ensure your server is always physically secured. HPE will not address this issue in the impacted Gen 10 servers listed. HPE recommends using appropriate physical security methods as a compensating control to disallow an attacker from having physical access to the server main circuit board.
Problem types: description: local elevation of privilege
Affected products: vendor: n/a
product: HPE ProLiant BL460c Gen10 Server Blade; HPE ProLiant DL360 Gen10 Server; HPE ProLiant DL380 Gen10 Server; HPE ProLiant DL560 Gen10 Server; HPE ProLiant DL580 Gen10 Server; HPE ProLiant ML110 Gen10 Server; HPE ProLiant XL230k Gen10 Server; HPE Synergy 480 Gen10 Compute Module; HPE Synergy 660 Gen10 Compute Module; HPE ProLiant DL180 Gen10 Server; HPE ProLiant DL160 Gen10 Server; HPE ProLiant DL120 Gen10 Server; HPE ProLiant XL190r Gen10 Server; HPE ProLiant ML350 Gen10 Server; HPE ProLiant XL170r Gen10 Server; HPE Apollo 2000 System; HPE Apollo 4500 System; HPE ProLiant XL270d Gen10 Server; HPE Apollo 4200 Gen10 Server; HPE ProLiant e910 Server Blade; HPE ProLiant XL450 Gen10 Server; HPE ProLiant XL230k Gen10 Server - bad oid
Published: 2020-11-05T20:14:32.000Z
CVE-2020-7208 
LinuxKI v6.0-1 and earlier is vulnerable to an XSS which is resolved in release 6.0-2.
Problem types: description: XSS
Affected products: vendor: n/a
product: LinuxKI
Published: 2020-02-12T23:23:52.000Z
CVE-2020-7209 
LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.
Problem types: description: Remote Code Execution
Affected products: vendor: n/a
product: LinuxKI
Published: 2020-02-12T23:24:07.000Z
CVE-2020-7210 
Umbraco CMS 8.2.2 allows CSRF to enable/disable or delete user accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-23T12:24:25.000Z
CVE-2020-7211 
tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-21T16:12:33.000Z
CVE-2020-7212 
The _encode_invalid_chars function in util/url.py in the urllib3 library 1.25.2 through 1.25.7 for Python allows a denial of service (CPU consumption) because of an inefficient algorithm. The percent_encodings array contains all matches of percent encodings. It is not deduplicated. For a URL of length N, the size of percent_encodings may be up to O(N). The next step (normalize existing percent-encoded bytes) also takes up to O(N) for each step, so the total time is O(N^2). If percent_encodings were deduplicated, the time to compute _encode_invalid_chars would be O(kN), where k is at most 484 ((10+6*2)^2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-06T19:14:54.000Z
CVE-2020-7213 
Parallels 13 uses cleartext HTTP as part of the update process, allowing man-in-the-middle attacks. Users of out-of-date versions are presented with a pop-up window for a parallels_updates.xml file on the http://update.parallels.com web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-21T16:26:36.000Z
CVE-2020-7215 
An issue was discovered in Gallagher Command Centre 7.x before 7.90.991(MR5), 8.00 before 8.00.1161(MR5), and 8.10 before 8.10.1134(MR4). External system configuration data (used for third party integrations such as DVR systems) were logged in the Command Centre event trail. Any authenticated operator with the 'view events' privilege could see the full configuration, including cleartext usernames and passwords, under the event details of a Modified DVR System event.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-20T05:32:30.000Z
CVE-2020-7216 
An ni_dhcp4_parse_response memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets without a message type option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-05T14:34:25.000Z
CVE-2020-7217 
An ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets with a different client-id.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-10T21:32:25.000Z
CVE-2020-7218 
HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 0.10.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-31T12:26:44.000Z
CVE-2020-7219 
HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 1.6.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-31T12:39:17.000Z
CVE-2020-7220 
HashiCorp Vault Enterprise 0.11.0 through 1.3.1 fails, in certain circumstances, to revoke dynamic secrets for a mount in a deleted namespace. Fixed in 1.3.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-23T17:41:28.000Z
CVE-2020-7221 
mysql_install_db in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of auth_pam_tool_dir/auth_pam_tool. NOTE: this does not affect the Oracle MySQL product, which implements mysql_install_db differently.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-04T16:57:00.000Z
CVE-2020-7222 
An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504. The login page responds with JavaScript when one tries to authenticate. An attacker who changes the result parameter (to true) in this JavaScript code can bypass authentication and achieve limited privileges (ability to see every option but not modify them).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-17T23:40:39.000Z
CVE-2020-7224 
The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued value set; the parameters could allow unauthorized third-party libraries to load.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-16T17:26:45.000Z
CVE-2020-7226 
CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-24T14:17:16.000Z
CVE-2020-7227 
Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows an authenticated remote attacker to retrieve the source code of different functions of the web application via requests that lack certain mandatory parameters. This affects ifaces-diag.asp, system.asp, backup.asp, sys-power.asp, ifaces-wls.asp, ifaces-wls-pkt.asp, and ifaces-wls-pkt-adv.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-18T18:42:03.000Z
CVE-2020-7228 
The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms. These can be exploited by an authenticated user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-22T14:10:31.000Z
CVE-2020-7229 
An issue was discovered in Simplejobscript.com SJS before 1.65. There is unauthenticated SQL injection via the search engine. The parameter is landing_location. The function is countSearchedJobs(). The file is _lib/class.Job.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-21T16:16:15.000Z
CVE-2020-7231 
Evoko Home 1.31 devices provide different error messages for failed login requests depending on whether the username is valid.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-19T19:45:47.000Z
CVE-2020-7232 
Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information (such as usernames and password hashes) via a WebSocket request, as demonstrated by the sockjs/224/uf1psgff/websocket URI at a wss:// URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-19T19:45:39.000Z
CVE-2020-7233 
KMS Controls BAC-A1616BC BACnet devices have a cleartext password of snowman in the BACKDOOR_NAME variable in the BC_Logon.swf file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-19T19:45:23.000Z
CVE-2020-7234 
Ruckus ZoneFlex R310 104.0.0.0.1347 devices allow Stored XSS via the SSID field on the Configuration > Radio 2.4G > Wireless X screen (after a successful login to the super account).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-19T20:03:16.000Z
CVE-2020-7235 
UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= (profile title).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-19T20:03:04.000Z
CVE-2020-7236 
UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cw2?td= (Site Name field of the Site Setup section).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-19T20:02:54.000Z
CVE-2020-7237 
Cacti 1.2.8 allows Remote Code Execution (by privileged users) via shell metacharacters in the Performance Boost Debug Log field of poller_automation.php. OS commands are executed when a new poller cycle begins. The attacker must be authenticated, and must have access to modify the Performance Settings of the product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-20T04:06:41.000Z
CVE-2020-7238 
Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T16:43:44.000Z
CVE-2020-7239 
The conversation-watson plugin before 0.8.21 for WordPress has a DOM-based XSS vulnerability that is executed when a chat message containing JavaScript is sent.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-21T04:17:15.000Z
CVE-2020-7240 
Meinberg Lantime M300 and M1000 devices allow attackers (with privileges to configure a device) to execute arbitrary OS commands by editing the /config/netconf.cmd script (aka Extended Network Configuration). Note: According to the description, the vulnerability requires a fully authenticated super-user account using a webUI function that allows super users to edit a script supposed to execute OS commands. The given weakness enumeration (CWE-78) is not applicable in this case as it refers to abusing functions/input fields not supposed to be accepting OS commands by using 'Special Elements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-20T19:27:51.000Z
CVE-2020-7241 
The WP Database Backup plugin through 5.5 for WordPress stores downloads by default locally in the directory wp-content/uploads/db-backup/. This might allow attackers to read ZIP archives by guessing random ID numbers, guessing date strings with a 2020_{0..1}{0..2}_{0..3}{0..9} format, guessing UNIX timestamps, and making HTTPS requests with the complete guessed URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-20T19:44:28.000Z
CVE-2020-7242 
Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Diagnostics Trace Route page and entering shell metacharacters in the Target IP address field. (In some cases, authentication can be achieved with the comtech password for the comtech account.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-20T21:56:46.000Z
CVE-2020-7243 
Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Fetch URL page and entering shell metacharacters in the URL field. (In some cases, authentication can be achieved with the comtech password for the comtech account.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-20T21:56:33.000Z
CVE-2020-7244 
Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Poll Routes page and entering shell metacharacters in the Router IP Address field. (In some cases, authentication can be achieved with the comtech password for the comtech account.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-20T21:56:21.000Z
CVE-2020-7245 
Incorrect username validation in the registration process of CTFd v2.0.0 - v2.2.2 allows an attacker to take over an arbitrary account if the username is known and emails are enabled on the CTFd instance. To exploit the vulnerability, one must register with a username identical to the victim's username, but with white space inserted before and/or after the username. This will register the account with the same username as the victim. After initiating a password reset for the new account, CTFd will reset the victim's account password due to the username collision.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-23T22:47:11.000Z
CVE-2020-7246 
A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code file via the profile photo functionality, by leveraging a path traversal vulnerability in the users['photop_preview'] delete photo feature, allowing bypass of .htaccess protection. NOTE: this issue exists because of an incomplete fix for CVE-2015-3884.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-21T13:02:35.000Z
CVE-2020-7247 
smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the "uncommented" default configuration. The issue exists because of an incorrect return value upon failure of input validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-29T15:53:18.000Z
CVE-2020-7248 
libubox in OpenWrt before 18.06.7 and 19.x before 19.07.1 has a tagged binary data JSON serialization vulnerability that may cause a stack based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T20:49:53.000Z
CVE-2020-7249 
SMC D3G0804W 3.5.2.5-LAT_GA devices allow XSS via the SSID field on the WiFi Network Configuration page (after a successful login to the admin account).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-21T00:23:04.000Z
CVE-2020-7250 ENS symbolic link log file manipulation vulnerability
Symbolic link manipulation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows authenticated local user to potentially gain an escalation of privileges by pointing the link to files which the user which not normally have permission to alter via carefully creating symbolic links from the ENS log file directory.
Problem types: cwe_id: CWE-59
description: CWE-59 Improper Link Resolution Before File Access ('Link Following')
Affected products: vendor: McAfee LLC
product: McAfee Endpoint Security (ENS)
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: McAfee credits Jakub Palaczynski  (ING Tech Poland) and Eran Shimony (CyberArk) for independently reporting this flaw
Published: 2020-04-15T12:45:14.302Z