rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-24872 
Cross Site Scripting (XSS) vulnerability in backend/pages/modify.php in Lepton-CMS version 4.7.0, allows remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-11T00:00:00.000Z
CVE-2020-24876 
Use of a hard-coded cryptographic key in Pancake versions < 4.13.29 allows an attacker to forge session cookies, which may lead to remote privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T16:07:10.000Z
CVE-2020-24877 
A SQL injection vulnerability in zzzphp v1.8.0 through /form/index.php?module=getjson may lead to a possible access restriction bypass.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-15T16:41:22.000Z
CVE-2020-24881 
SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-02T14:42:36.000Z
CVE-2020-24889 
A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-16T14:55:44.000Z
CVE-2020-24890 
libraw 20.0 has a null pointer dereference vulnerability in parse_tiff_ifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. Note: this vulnerability occurs only if you compile the software in a certain way
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-16T14:39:49.000Z
CVE-2020-24897 
The Table Filter and Charts for Confluence Server app before 5.3.25 (for Atlassian Confluence) allow remote attackers to inject arbitrary HTML or JavaScript via cross site scripting (XSS) through the provided Markdown markup to the "Table from CSV" macro.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 8.9
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AC:L/AV:N/A:L/C:H/I:H/PR:L/S:C/UI:R
version: 3.1
Published: 2020-08-29T19:57:29.000Z
CVE-2020-24898 
The Table Filter and Charts for Confluence Server app before 5.3.26 (for Atlassian Confluence) allows SSRF via the "Table from CSV" macro (URL parameter).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.6
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:L/AV:N/A:L/C:H/I:L/PR:L/S:U/UI:N
version: 3.1
Published: 2020-08-29T19:57:07.000Z
CVE-2020-24899 
Nagios XI 5.7.2 is affected by a remote code execution (RCE) vulnerability. An authenticated user can inject additional commands into normal webapp query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-15T17:39:35.000Z
CVE-2020-24900 
The default installation of Krpano Panorama Viewer version <=1.20.8 is prone to Reflected XSS due to insecure XML load in file /viewer/krpano.html, parameter xml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-07T12:43:36.000Z
CVE-2020-24901 
The default installation of Krpano Panorama Viewer version <=1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file viewer/krpano.html, parameter plugin[test].url.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-07T12:43:54.000Z
CVE-2020-24902 
Quixplorer <=2.4.1 is vulnerable to reflected cross-site scripting (XSS) caused by improper validation of user supplied input. A remote attacker could exploit this vulnerability using a specially crafted URL to execute a script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.7
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:N/S:C/UI:R
version: 3.1
Published: 2021-01-07T12:44:13.000Z
CVE-2020-24903 
Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting (XSS) caused by improper validation of user supplied input. A remote attacker could exploit this vulnerability using a specially crafted URL to execute a script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-07T12:44:31.000Z
CVE-2020-24904 
An issue was discovered in attach parameter in GNOME Gmail version 2.5.4, allows remote attackers to gain sensitive information via crafted "mailto" link.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-11T00:00:00.000Z
CVE-2020-24908 
Checkmk before 1.6.0p17 allows local users to obtain SYSTEM privileges via a Trojan horse shell script in the %PROGRAMDATA%\checkmk\agent\local directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-19T05:03:07.000Z
CVE-2020-24912 
A reflected cross-site scripting (XSS) vulnerability in qcubed (all versions including 3.1.1) in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-04T12:30:24.000Z
CVE-2020-24913 
A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-04T12:31:47.000Z
CVE-2020-24914 
A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1) unserializes the untrusted data of the POST-variable "strProfileData" and allows an unauthenticated attacker to execute code via a crafted POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-04T12:33:26.000Z
CVE-2020-24916 
CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-09T18:10:25.000Z
CVE-2020-24917 
osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in include/ajax.draft.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-30T15:45:41.000Z
CVE-2020-24918 
A buffer overflow in the RTSP service of the Ambarella Oryx RTSP Server 2020-01-07 allows an unauthenticated attacker to send a crafted RTSP request, with a long digest authentication header, to execute arbitrary code in parse_authentication_header() in libamprotocol-rtsp.so.1 in rtsp_svc (or cause a crash). This allows remote takeover of a Furbo Dog Camera, for example. NOTE: The vendor states that the RTSP library is used for DEMO only, using it in product is a customer's behavior. Ambarella has emphasized that RTSP is DEMO only library, should NOT be used in product in our document. Because Ambarella's SDK is proprietary, we didn't publish our SDK source code in public network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-30T11:44:02.000Z
CVE-2020-24922 
Cross Site Request Forgery (CSRF) vulnerability in xxl-job-admin/user/add in xuxueli xxl-job version 2.2.0, allows remote attackers to execute arbitrary code and esclate privileges via crafted .html file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-11T00:00:00.000Z
CVE-2020-24924 
A Persistent Cross-site Scripting vulnerability is found in ElkarBackup v1.3.3, where an attacker can steal the user session cookie using this vulnerability present on Policies >> action >> Name Parameter
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-15T12:50:40.000Z
CVE-2020-24925 
A Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3. An attacker is able to view the path of the source code jobs/sort where entire source code path is displayed in the browser itself helping the attacker identify the code structure /app/elkarbackup/src/Binovo/ElkarBackupBundle/Controller/DefaultController.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-15T12:52:29.000Z
CVE-2020-24928 
managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server (port 3020) open to all origins, which allows attackers to obtain sensitive Discord user information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-29T19:35:40.000Z
CVE-2020-24930 
Beijing Wuzhi Internet Technology Co., Ltd. Wuzhi CMS 4.0.1 is an open source content management system. The five fingers CMS backend in***.php file has arbitrary file deletion vulnerability. Attackers can use vulnerabilities to delete arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-27T20:47:51.000Z
CVE-2020-24932 
An SQL Injection vulnerability exists in Sourcecodester Complaint Management System 1.0 via the cid parameter in complaint-details.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-27T13:57:02.000Z
CVE-2020-24939 
Prototype pollution in Stampit supermixer 1.0.3 allows an attacker to modify the prototype of a base object which can vary in severity depending on the implementation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-16T15:52:02.000Z
CVE-2020-24940 
An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database in some situations in which table names are stripped during a mass assignment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-04T01:28:09.000Z
CVE-2020-24941 
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-04T01:27:50.000Z
CVE-2020-24944 
picoquic (before 3rd of July 2020) allows attackers to cause a denial of service (infinite loop) via a crafted QUIC frame, related to the picoquic_decode_frames and picoquic_decode_stream_frame functions and epoch==3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-08T20:13:35.000Z
CVE-2020-24948 
The ao_ccss_import AJAX call in Autoptimize Wordpress Plugin 2.7.6 does not ensure that the file provided is a legitimate Zip file, allowing high privilege users to upload arbitrary files, such as PHP, leading to remote command execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T14:06:10.000Z
CVE-2020-24949 
Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a crafted request to the server and perform remote command execution (RCE).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T13:51:12.000Z
CVE-2020-24950 
SQL Injection vulnerability in file Base_module_model.php in Daylight Studio FUEL-CMS version 1.4.9, allows remote attackers to execute arbitrary code via the col parameter to function list_items.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-11T00:00:00.000Z
CVE-2020-24955 
SUPERAntiSyware Professional X Trial 10.0.1206 is vulnerable to local privilege escalation because it allows unprivileged users to restore a malicious DLL from quarantine into the system32 folder via an NTFS directory junction, as demonstrated by a crafted ualapi.dll file that is detected as malware.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-01T21:40:58.000Z
CVE-2020-24963 
An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested version v3.0.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-04T15:47:32.000Z
CVE-2020-24972 
The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handling of command-line options. The Qt platformpluginpath command-line option can be used to load an arbitrary DLL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R
version: 3.1
Published: 2020-08-29T20:40:19.000Z
CVE-2020-24977 
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T23:20:35.000Z
CVE-2020-24978 
In NASM 2.15.04rc3, there is a double-free vulnerability in pp_tokline asm/preproc.c. This is fixed in commit 8806c3ca007b84accac21dd88b900fb03614ceb7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T23:20:23.000Z
CVE-2020-24981 
An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an error message caused by directly accessing the website built by UCMS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-04T19:45:25.000Z
CVE-2020-24982 
An issue was discovered in Quadbase ExpressDashboard (EDAB) 7 Update 9. It allows CSRF. An attacker may be able to trick an authenticated user into changing the email address associated with their account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-15T17:39:38.000Z
CVE-2020-24983 
An issue was discovered in Quadbase EspressReports ES 7 Update 9. An unauthenticated attacker can create a malicious HTML file that houses a POST request made to the DashboardBuilder within the target web application. This request will utilise the target admin session and perform the authenticated request (to change the Dashboard name) as if the victim had done so themselves, aka CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-11T21:40:37.000Z
CVE-2020-24984 
An issue was discovered in Quadbase EspressReports ES 7 Update 9. It allows CSRF, whereby an attacker may be able to trick an authenticated admin level user into uploading malicious files to the web server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-11T21:11:28.000Z
CVE-2020-24985 
An issue was discovered in Quadbase EspressReports ES 7 Update 9. An authenticated user is able to navigate to the MenuPage section of the application, and change the frmsrc parameter value to retrieve and execute external files or payloads.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-15T17:51:47.000Z
CVE-2020-24986 
Concrete5 up to and including 8.5.2 allows Unrestricted Upload of File with Dangerous Type such as a .php file via File Manager. It is possible to modify site configuration to upload the PHP file and execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-04T19:29:19.000Z
CVE-2020-24987 
Tenda AC18 Router through V15.03.05.05_EN and through V15.03.05.19(6318) CN devices could cause a remote code execution due to incorrect authentication handling of vulnerable logincheck() function in /usr/lib/lua/ngx_authserver/ngx_wdas.lua file if the administrator UI Interface is set to "radius".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-04T19:24:39.000Z
CVE-2020-24990 
An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-28T18:49:24.000Z
CVE-2020-24992 
There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when an administrator accesses the content management module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T18:44:08.000Z
CVE-2020-24993 
There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when visitors access the article module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T18:44:59.000Z
CVE-2020-24994 
Stack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-23T19:32:27.000Z
CVE-2020-24995 
Buffer overflow vulnerability in sniff_channel_order function in aacdec_template.c in ffmpeg 3.1.2, allows attackers to execute arbitrary code (local).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-30T21:19:48.000Z
CVE-2020-24996 
There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftohtml binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T22:17:33.000Z
CVE-2020-24999 
There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2. It can be triggered by sending a crafted PDF file to the pdftohtml binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T22:17:24.000Z
CVE-2020-25004 
Heybbs v1.2 has a SQL injection vulnerability in user.php file via the ID parameter which may allow a remote attacker to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T21:07:12.000Z
CVE-2020-25005 
Heybbs v1.2 has a SQL injection vulnerability in msg.php file via the ID parameter which may allow a remote attacker to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T21:07:08.000Z
CVE-2020-25006 
Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a remote attacker to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T21:07:05.000Z
CVE-2020-25010 
An arbitrary code execution vulnerability in Kyland KPS2204 6 Port Managed Din-Rail Programmable Serial Device Servers Software Version:R0002.P05 allows remote attackers to upload a malicious script file by constructing a POST type request and writing a payload in the request parameters as an instruction to write a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-17T03:37:37.000Z
CVE-2020-25011 
A sensitive information disclosure vulnerability in Kyland KPS2204 6 Port Managed Din-Rail Programmable Serial Device Servers Software Version:R0002.P05 allows remote attackers to get username and password by request /cgi-bin/webadminget.cgi script via the browser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-17T03:37:49.000Z
CVE-2020-25013 
JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-16T15:00:24.000Z
CVE-2020-25014 
A stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attackers to execute arbitrary code via a crafted http packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-27T17:18:30.000Z
CVE-2020-25015 
A specific router allows changing the Wi-Fi password remotely. Genexis Platinum 4410 V2-1.28, a compact router generally used at homes and offices was found to be vulnerable to Broken Access Control and CSRF which could be combined to remotely change the WIFI access point’s password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-16T17:34:23.000Z
CVE-2020-25016 
A safety violation was discovered in the rgb crate before 0.8.20 for Rust, leading to (for example) dereferencing of arbitrary pointers or disclosure of uninitialized memory. This occurs because structs can be treated as bytes for read and write operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-29T15:05:00.000Z
CVE-2020-25017 
Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy’s setCopy() header map API does not replace all existing occurences of a non-inline header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-01T16:39:40.000Z
CVE-2020-25018 
Envoy master between 2d69e30 and 3b5acb2 may fail to parse request URL that requires host canonicalization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-01T16:46:06.000Z
CVE-2020-25019 
jitsi-meet-electron (aka Jitsi Meet Electron) before 2.3.0 calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-29T16:07:29.000Z
CVE-2020-25020 
MPXJ through 8.1.3 allows XXE attacks. This affects the GanttProjectReader and PhoenixReader components.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-29T18:31:48.000Z
CVE-2020-25021 
An issue was discovered in Noise-Java through 2020-08-27. ChaChaPolyCipherState.encryptWithAd() allows out-of-bounds access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-04T03:34:10.000Z
CVE-2020-25022 
An issue was discovered in Noise-Java through 2020-08-27. AESGCMFallbackCipherState.encryptWithAd() allows out-of-bounds access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-04T03:34:30.000Z