rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-26797 
Mediainfo before version 20.08 has a heap buffer overflow vulnerability via MediaInfoLib::File_Gxf::ChooseParser_ChannelGrouping.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-18T19:17:32.000Z
CVE-2020-26799 
A reflected cross-site scripting (XSS) vulnerability was discovered in index.php on Luxcal 4.5.2 which allows an unauthenticated attacker to steal other users' data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-07-21T00:00:00.000Z
CVE-2020-26800 
A stack overflow vulnerability in Aleth Ethereum C++ client version <= 1.8.0 using a specially crafted a config.json file may result in a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-11T12:50:11.000Z
CVE-2020-26801 
A stored cross-site scripting (XSS) vulnerability was discovered in /Forms/device_vars_1 on TrippLite SU2200RTXL2Ua with firmware version 12.04.0055. This vulnerability allows authenticated attackers to obtain other users' information via a crafted POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-25T12:07:13.000Z
CVE-2020-26802 
forma.lms 2.3.0.2 is affected by Cross Site Request Forgery (CSRF) in formalms/appCore/index.php?r=lms/profile/show&ap=saveinfo via a GET request to change the admin email address in order to accomplish an account takeover.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-08T16:38:49.000Z
CVE-2020-26803 
In Sentrifugo 3.2, users can upload an image under "Assets -> Add" tab. This "Upload Images" functionality is suffered from "Unrestricted File Upload" vulnerability so attacker can upload malicious files using this functionality and control the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-12T18:52:45.000Z
CVE-2020-26804 
In Sentrifugo 3.2, users can share an announcement under "Organization -> Announcements" tab. Also, in this page, users can upload attachments with the shared announcements. This "Upload Attachment" functionality is suffered from "Unrestricted File Upload" vulnerability so attacker can upload malicious files using this functionality and control the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-12T18:52:42.000Z
CVE-2020-26805 
In Sentrifugo 3.2, admin can edit employee's informations via this endpoint --> /sentrifugo/index.php/empadditionaldetails/edit/userid/2. In this POST request, "employeeNumId" parameter is affected by SQLi vulnerability. Attacker can inject SQL commands into query, read data from database or write data into the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-12T18:52:40.000Z
CVE-2020-26806 
admin/file.do in ObjectPlanet Opinio before 7.15 allows Unrestricted File Upload of executable JSP files, resulting in remote code execution, because filePath can have directory traversal and fileContent can be valid JSP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-31T16:13:31.000Z
CVE-2020-26807 
SAP ERP Client for E-Bilanz, version - 1.0, installation sets Incorrect default filesystem permissions are set in its installation folder which allows anyone to modify the files in the folder.
Problem types: description: Incorrect Default Permissions
Affected products: vendor: SAP SE
product: SAP ERP Client for E-Bilanz 1.0
Published: 2020-11-10T16:20:55.000Z
CVE-2020-26808 
SAP AS ABAP(DMIS), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 and SAP S4 HANA(DMIS), versions - 101, 102, 103, 104, 105, allows an authenticated attacker to inject arbitrary code into function module leading to code injection that can be executed in the application which affects the confidentiality, availability and integrity of the application.
Problem types: description: Code Injection
Affected products: vendor: SAP SE
product: SAP AS ABAP(DMIS)
vendor: SAP SE
product: SAP S4 HANA(DMIS)
Published: 2020-11-10T16:12:24.000Z
CVE-2020-26809 
SAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing authentication and permission checks via the '/medias' endpoint hence gaining access to Secure Media folders. This folder could contain sensitive files that results in disclosure of sensitive information and impact system configuration confidentiality.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP Commerce Cloud
Published: 2020-11-10T16:10:56.000Z
CVE-2020-26810 
SAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an unauthenticated attacker to submit a crafted request over a network to a particular SAP Commerce module URL which will be processed without further interaction, the crafted request can render the SAP Commerce service itself unavailable leading to Denial of Service with no impact on confidentiality or integrity.
Problem types: description: Denial of Service
Affected products: vendor: SAP SE
product: SAP Commerce Cloud (Accelerator Payment Mock)
Published: 2020-11-10T16:20:28.000Z
CVE-2020-26811 
SAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an unauthenticated attacker to submit a crafted request over a network to a particular SAP Commerce module URL which will be processed without further interaction, the crafted request leads to Server Side Request Forgery attack which could lead to retrieval of limited pieces of information about the service with no impact on integrity or availability.
Problem types: description: Server-Side Request Forgery
Affected products: vendor: SAP SE
product: SAP Commerce Cloud (Accelerator Payment Mock)
Published: 2020-11-10T16:12:03.000Z
CVE-2020-26814 
SAP Process Integration (PGP Module - Business-to-Business Add On), version - 1.0, allows an attacker to read PGP Keys under certain conditions in the PGP Module of Business-to-Business Add-On, these keys can then be used to read messages processed by the module leading to Information Disclosure.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP Process Integration (PGP - Module Business-to-Business Add On)
Published: 2020-11-10T16:14:29.000Z
CVE-2020-26815 
SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to send a crafted request to a vulnerable web application. It is usually used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external network to retrieve sensitive / confidential resources which are otherwise restricted for internal usage only, resulting in a Server-Side Request Forgery vulnerability.
Problem types: description: Server Side Request Forgery
Affected products: vendor: SAP SE
product: SAP Fiori Launchpad (News Tile Application)
Published: 2020-11-10T16:13:00.000Z
CVE-2020-26816 
SAP AS JAVA (Key Storage Service), versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the key material which is stored in the SAP NetWeaver AS Java Key Storage service stored in the database in the DER encoded format and is not encrypted. This enables an attacker who has administrator access to the SAP NetWeaver AS Java to decode the keys because of missing encryption and get some application data and client credentials of adjacent systems. This highly impacts Confidentiality as information disclosed could contain client credentials of adjacent systems.
Problem types: description: Missing Encryption
Affected products: vendor: SAP SE
product: SAP NetWeaver AS JAVA (Key Storage Service)
Published: 2020-12-09T16:28:11.000Z
CVE-2020-26817 
SAP 3D Visual Enterprise Viewer, version - 9, allows an user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.
Problem types: description: Improper Input Validation
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Viewer
Published: 2020-11-10T16:15:35.000Z
CVE-2020-26818 
SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, which reveals sensitive system information that would otherwise be restricted to highly privileged users because of missing authorization, resulting in Information Disclosure.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP NetWeaver AS ABAP (Web Dynpro)
Published: 2020-11-10T16:17:12.000Z
CVE-2020-26819 
SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, that allows them to read and delete database logfiles because of Improper Access Control.
Problem types: description: Improper Access Control
Affected products: vendor: SAP SE
product: SAP NetWeaver AS ABAP (Web Dynpro)
Published: 2020-11-10T16:13:34.000Z
CVE-2020-26820 
SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is authenticated as an administrator to use the administrator console, to expose unauthenticated access to the file system and upload a malicious file. The attacker or another user can then use a separate mechanism to execute OS commands through the uploaded file leading to Privilege Escalation and completely compromise the confidentiality, integrity and availability of the server operating system and any application running on it.
Problem types: description: Privilege escalation
Affected products: vendor: SAP SE
product: SAP NetWeaver AS JAVA
Published: 2020-11-10T16:14:04.000Z
CVE-2020-26821 
SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the SVG Converter Service, this has an impact to the integrity and availability of the service.
Problem types: description: Missing Authorization
Affected products: vendor: SAP SE
product: SAP Solution Manager (JAVA stack)
Published: 2020-11-10T16:17:32.000Z
CVE-2020-26822 
SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Outside Discovery Configuration Service, this has an impact to the integrity and availability of the service.
Problem types: description: Missing Authorization
Affected products: vendor: SAP SE
product: SAP Solution Manager (JAVA stack)
Published: 2020-11-10T16:15:01.000Z
CVE-2020-26823 
SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Diagnostics Agent Connection Service, this has an impact to the integrity and availability of the service.
Problem types: description: Missing Authorization
Affected products: vendor: SAP SE
product: SAP Solution Manager (JAVA stack)
Published: 2020-11-10T16:17:49.000Z
CVE-2020-26824 
SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Legacy Ports Service, this has an impact to the integrity and availability of the service.
Problem types: description: Missing Authorization
Affected products: vendor: SAP SE
product: SAP Solution Manager (JAVA stack)
Published: 2020-11-10T16:16:44.000Z
CVE-2020-26825 
SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to use SAP Fiori Launchpad News tile Application to send malicious code, to a different end user (victim), because News tile does not sufficiently encode user controlled inputs, resulting in Reflected Cross-Site Scripting (XSS) vulnerability. Information maintained in the victim's web browser can be read, modified, and sent to the attacker. The malicious code cannot significantly impact the victim's browser and the victim can easily close the browser tab to terminate it.
Problem types: description: Reflected Cross Site Scripting
Affected products: vendor: SAP SE
product: SAP Fiori Launchpad (News Tile Application)
Published: 2020-11-13T14:28:00.000Z
CVE-2020-26826 
Process Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an attacker to upload any file (including script files) without proper file format validation, leading to Unrestricted File Upload.
Problem types: description: Unrestricted File Upload
Affected products: vendor: SAP SE
product: SAP NetWeaver AS JAVA
Published: 2020-12-09T16:30:35.000Z
CVE-2020-26828 
SAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload and download content of specific file type. In some file types it is possible to enter formulas which can call external applications or execute scripts. The execution of a payload (script) on target machine could be used to steal and modify the data available in the spreadsheet
Problem types: description: Formula Injection
Affected products: vendor: SAP SE
product: SAP Disclosure Management.
Published: 2020-12-09T16:30:20.000Z
CVE-2020-26829 
SAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. As result, an unauthenticated attacker can invoke certain functions that would otherwise be restricted to system administrators only, including access to system administration functions or shutting down the system completely.
Problem types: description: Missing Authentication Check
Affected products: vendor: SAP SE
product: SAP NetWeaver AS JAVA (P2P Cluster Communication)
Published: 2020-12-09T16:28:43.000Z
CVE-2020-26830 
SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, does not perform necessary authorization checks for an authenticated user. Due to inadequate access control, a network attacker authenticated as a regular user can use operations which should be restricted to administrators. These operations can be used to Change the User Experience Monitoring configuration, obtain details about the configured SAP Solution Manager agents, Deploy a malicious User Experience Monitoring script.
Problem types: description: Missing Authorization
Affected products: vendor: SAP SE
product: SAP Solution Manager (User Experience Monitoring)
Published: 2020-12-09T16:29:34.000Z
CVE-2020-26831 
SAP BusinessObjects BI Platform (Crystal Report), versions - 4.1, 4.2, 4.3, does not sufficiently validate uploaded XML entities during crystal report generation due to missing XML validation, An attacker with basic privileges can inject some arbitrary XML entities leading to internal file disclosure, internal directories disclosure, Server-Side Request Forgery (SSRF) and denial-of-service (DoS).
Problem types: description: Missing XML Validation
Affected products: vendor: SAP SE
product: SAP BusinessObjects BI Platform (Crystal Report)
Published: 2020-12-09T16:29:55.000Z
CVE-2020-26832 
SAP AS ABAP (SAP Landscape Transformation), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 and SAP S4 HANA (SAP Landscape Transformation), versions - 101, 102, 103, 104, 105, allows a high privileged user to execute a RFC function module to which access should be restricted, however due to missing authorization an attacker can get access to some sensitive internal information of vulnerable SAP system or to make vulnerable SAP systems completely unavailable.
Problem types: description: Missing Authorization
Affected products: vendor: SAP SE
product: SAP NetWeaver AS ABAP (SAP Landscape Transformation)
vendor: SAP SE
product: SAP S4 HANA (SAP Landscape Transformation)
Published: 2020-12-09T16:31:03.000Z
CVE-2020-26834 
SAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML bearer token-based user authentication. It is possible to manipulate a valid existing SAML bearer token to authenticate as a user whose name is identical to the truncated username for whom the SAML bearer token was issued.
Problem types: description: Improper Authentication
Affected products: vendor: SAP SE
product: SAP HANA Database
Published: 2020-12-09T16:30:45.000Z
CVE-2020-26835 
SAP NetWeaver AS ABAP, versions - 740, 750, 751, 752, 753, 754 , does not sufficiently encode URL which allows an attacker to input malicious java script in the URL which could be executed in the browser resulting in Reflected Cross-Site Scripting (XSS) vulnerability.
Problem types: description: Cross Site Scripting
Affected products: vendor: SAP SE
product: SAP NetWeaver AS ABAP
Published: 2020-12-09T16:30:53.000Z
CVE-2020-26836 
SAP Solution Manager (Trace Analysis), version - 720, allows for misuse of a parameter in the application URL leading to Open Redirect vulnerability, an attacker can enter a link to malicious site which could trick the user to enter credentials or download malicious software, as a parameter in the application URL and share it with the end user who could potentially become a victim of the attack.
Problem types: description: Open Redirect
Affected products: vendor: SAP SE
product: SAP Solution Manager (Trace Analysis)
Published: 2020-12-09T16:31:34.000Z
CVE-2020-26837 
SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, allows an authenticated user to upload a malicious script that can exploit an existing path traversal vulnerability to compromise confidentiality exposing elements of the file system, partially compromise integrity allowing the modification of some configurations and partially compromise availability by making certain services unavailable.
Problem types: description: Path Traversal
Affected products: vendor: SAP SE
product: SAP Solution Manager (User Experience Monitoring)
Published: 2020-12-09T16:31:24.000Z
CVE-2020-26838 
SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions - 100, 200 allows an attacker authenticated with (high) developer privileges to submit a crafted request to generate and execute code without requiring any user interaction. It is possible to craft a request which will result in the execution of Operating System commands leading to Code Injection vulnerability which could completely compromise the confidentiality, integrity and availability of the server and any data or other applications running on it.
Problem types: description: Code Injection
Affected products: vendor: SAP SE
product: SAP Business Warehouse
vendor: SAP SE
product: SAP BW4HANA
Published: 2020-12-09T16:31:14.000Z
CVE-2020-26867 ARC Informatique PcVue Deserialization of Untrusted Data
ARC Informatique PcVue prior to version 12.0.17 is vulnerable due to the deserialization of untrusted data, which may allow an attacker to remotely execute arbitrary code on the web and mobile back-end server.
Problem types: cwe_id: CWE-502
description: CWE-502: Deserialization of Untrusted Data
Affected products: vendor: ARC Informatique
product: PcVue
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Sergey Temnikov and Andrey Muravitsky of Kaspersky Lab reported these vulnerabilities to ARC Informatique.
Published: 2020-10-12T13:54:47.081Z
CVE-2020-26868 ARC Informatique PcVue Access to Critical Private Variable via Public Method
ARC Informatique PcVue prior to version 12.0.17 is vulnerable to a denial-of-service attack due to the ability of an unauthorized user to modify information used to validate messages sent by legitimate web clients. This issue also affects third-party systems based on the Web Services Toolkit.
Problem types: cwe_id: CWE-767
description: CWE-767: Access to Critical Private Variable via Public Method
Affected products: vendor: ARC Informatique
product: PcVue
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: Sergey Temnikov and Andrey Muravitsky of Kaspersky Lab reported these vulnerabilities to ARC Informatique.
Published: 2020-10-12T13:50:37.117Z
CVE-2020-26869 ARC Informatique PcVue Exposure of Sensitive Information to an Unauthorized Actor
ARC Informatique PcVue prior to version 12.0.17 is vulnerable to information exposure, allowing unauthorized users to access session data of legitimate users. This issue also affects third-party systems based on the Web Services Toolkit.
Problem types: cwe_id: CWE-200
description: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: ARC Informatique
product: PcVue
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: Sergey Temnikov and Andrey Muravitsky of Kaspersky Lab reported these vulnerabilities to ARC Informatique.
Published: 2020-10-12T13:52:50.268Z
CVE-2020-26870 
Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a namespace can change from HTML to MathML, as demonstrated by nesting of FORM elements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-07T15:50:09.000Z
CVE-2020-26876 
The wp-courses plugin through 2.0.27 for WordPress allows remote attackers to bypass the intended payment step (for course videos and materials) by using the /wp-json REST API, as exploited in the wild in September 2020. This occurs because show_in_rest is enabled for custom post types (e.g., /wp-json/wp/v2/course and /wp-json/wp/v2/lesson exist).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-07T16:56:25.000Z
CVE-2020-26877 
ApiFest OAuth 2.0 Server 0.3.1 does not validate the redirect URI in accordance with RFC 6749 and is susceptible to an open redirector attack. Specifically, it directly sends an authorization code to the redirect URI submitted with the authorization request, without checking whether the redirect URI is registered by the client who initiated the request. This allows an attacker to craft a request with a manipulated redirect URI (redirect_uri parameter), which is under the attacker's control, and consequently obtain the leaked authorization code when the server redirects the client to the manipulated redirect URI with an authorization code. NOTE: this is similar to CVE-2019-3778.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-29T13:15:33.000Z
CVE-2020-26878 
Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can submit a query to the API (/service/v1/createUser endpoint), injecting arbitrary commands that will be executed as root user via web.py.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-26T19:13:47.000Z
CVE-2020-26879 
Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py. An unauthenticated attacker can interact with the service API by using a backdoor value as the Authorization header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-26T19:20:44.000Z