rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-27403 
A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TCL Technology Group Corporation allows an attacker on the adjacent network to arbitrarily browse and download sensitive files over an insecure web server running on port 7989 that lists all files & directories. An unprivileged remote attacker on the adjacent network, can download most system files, leading to serious critical information disclosure. Also, some TV models and/or FW versions may expose the webserver with the entire filesystem accessible on another port. For example, nmap scan for all ports run directly from the TV model U43P6046 (Android 8.0) showed port 7983 not mentioned in the original CVE description, but containing the same directory listing of the entire filesystem. This webserver is bound (at least) to localhost interface and accessible freely to all unprivileged installed apps on the Android such as a regular web browser. Any app can therefore read any files of any other apps including Android system settings including sensitive data such as saved passwords, private keys etc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-10T17:18:56.000Z
CVE-2020-27406 
Cross Site Scripting (XSS) vulnerability in DynPG 4.9.1, allows authenticated attackers to execute arbitrary code via the groupname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-02T10:11:44.000Z
CVE-2020-27408 
OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker to change the password of arbitrary users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-04T15:27:22.000Z
CVE-2020-27409 
OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php via the modname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-04T15:26:32.000Z
CVE-2020-27413 
An issue was discovered in Mahavitaran android application 7.50 and below, allows local attackers to read cleartext username and password while the user is logged into the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-07T13:35:24.000Z
CVE-2020-27414 
Mahavitaran android application 7.50 and prior transmit sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header, MITM or browser history.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-02T03:08:13.000Z
CVE-2020-27416 
Mahavitaran android application 7.50 and prior are affected by account takeover due to improper OTP validation, allows remote attackers to control a users account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-08T18:36:50.000Z
CVE-2020-27418 
A Use After Free vulnerability in Fedora Linux kernel 5.9.0-rc9 allows attackers to obatin sensitive information via vgacon_invert_region() function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-27422 
In Anuko Time Tracker v1.19.23.5311, the password reset link emailed to the user doesn't expire once used, allowing an attacker to use the same link to takeover the account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-16T15:49:10.000Z
CVE-2020-27423 
Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial of Service attack on any legitimate user's mailbox
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-16T15:45:52.000Z
CVE-2020-27428 
A DOM-based cross-site scripting (XSS) vulnerability in Scratch-Svg-Renderer v0.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted sb3 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-05T23:37:45.000Z
CVE-2020-27449 
Cross Site Scripting (XSS) vulnerability in Query Report feature in Zoho ManageEngine Password Manager Pro version 11001, allows remote attackers to execute arbitrary code and steal cookies via crafted JavaScript payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-11T00:00:00.000Z
CVE-2020-27459 
Chronoforeum 2.0.11 allows Stored XSS vulnerabilities when inserting a crafted payload into a post. If any user sees the post, the inserted XSS code is executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-16T14:55:49.000Z
CVE-2020-27461 
A remote code execution vulnerability in SEOPanel 4.6.0 has been fixed for 4.7.0. This vulnerability allowed for remote code execution through an authenticated file upload via the Settings Panel>Import website function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-20T18:10:53.000Z
CVE-2020-27464 
An insecure update feature in the /updater.php component of rConfig 3.9.6 and below allows attackers to execute arbitrary code via a crafted ZIP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-20T18:10:54.000Z
CVE-2020-27466 
An arbitrary file write vulnerability in lib/AjaxHandlers/ajaxEditTemplate.php of rConfig 3.9.6 allows attackers to execute arbitrary code via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-20T18:10:56.000Z
CVE-2020-27467 
A Directory Traversal vulnerability exits in Processwire CMS before 2.7.1 via the download parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-22T20:59:55.000Z
CVE-2020-27478 
Cross Site Scripting vulnerability found in Simplcommerce v.40734964b0811f3cbaf64b6dac261683d256f961 thru 3103357200c70b4767986544e01b19dbf11505a7 allows a remote attacker to execute arbitrary code via a crafted script to the search bar feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-30T00:00:00.000Z
CVE-2020-27481 
An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin <= 2.1.4 exists due to the usage of "wp_ajax_nopriv" call in WordPress, which allows any unauthenticated user to get access to the function "gdlr_lms_cancel_booking" where POST Parameter "id" was sent straight into SQL query without sanitization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-12T13:47:40.000Z
CVE-2020-27483 
Garmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter trusts the offset provided for the stack value duplication instruction, DUP. The offset is unchecked and memory prior to the start of the execution stack can be read and treated as a TVM object. A successful exploit could use the vulnerability to leak runtime information such as the heap handle or pointer for a number of TVM context variables. Some reachable values may be controlled enough to forge a TVM object on the stack, leading to possible remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-16T20:59:35.000Z
CVE-2020-27484 
Garmin Forerunner 235 before 8.20 is affected by: Integer Overflow. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter fails to check for overflow when allocating the array for the NEWA instruction. This a constrained read/write primitive across the entire MAX32630 address space. A successful exploit would allow a ConnectIQ app store application to escape and perform activities outside the restricted application execution environment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-16T20:59:25.000Z
CVE-2020-27485 
Garmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter fails to check the index provided when accessing the local variable in the LGETV and LPUTV instructions. This provides the ability to both read and write memory outside the bounds of the TVM context allocation. It can be leveraged to construct a use-after-free scenario, leading to a constrained read/write primitive across the entire MAX32630 address space. A successful exploit would allow a ConnectIQ app store application to escape and perform activities outside the restricted application execution environment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-16T20:59:16.000Z
CVE-2020-27486 
Garmin Forerunner 235 before 8.20 is affected by: Buffer Overflow. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter trusts the string length provided in the data section of the PRG file. It allocates memory for the string immediately, and then copies the string into the TVM object by using a function similar to strcpy. This copy can exceed the length of the allocated string data and overwrite heap data. A successful exploit would allow a ConnectIQ app store application to escape and perform activities outside the restricted application execution environment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-16T20:59:06.000Z
CVE-2020-27488 
Loxone Miniserver devices with firmware before 11.1 (aka 11.1.9.3) are unable to use an authentication method that is based on the "signature of the update package." Therefore, these devices (or attackers who are spoofing these devices) can continue to use an unauthenticated cloud service for an indeterminate time period (possibly forever). Once an individual device's firmware is updated, and authentication occurs once, the cloud service recategorizes the device so that authentication is subsequently always required, and spoofing cannot occur.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-13T19:06:54.000Z
CVE-2020-27507 
The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow that crashes the server or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-03-15T00:00:00.000Z
CVE-2020-27508 
In two-factor authentication, the system also sending 2fa secret key in response, which enables an intruder to breach the 2fa security.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-11T15:13:30.000Z
CVE-2020-27509 
Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a specially crafted XSS payload in the 'subject' field. The payload executes when the recipient logs into their mailbox.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-26T12:33:43.000Z
CVE-2020-27511 
An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service (ReDOS) through stripping crafted HTML tags.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-21T19:22:37.000Z
CVE-2020-27514 
Directory Traversal vulnerability in delete function in admin.api.TemplateController in ZrLog version 2.1.15, allows remote attackers to delete arbitrary files and cause a denial of service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-11T00:00:00.000Z
CVE-2020-27515 
A Cross Site Scripting (XSS) vulnerability in Savsoft Quiz v5.0 allows remote attackers to inject arbitrary web script or HTML via the Skype ID field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-26T01:55:43.000Z
CVE-2020-27518 
All versions of Windscribe VPN for Mac and Windows <= v2.02.10 contain a local privilege escalation vulnerability in the WindscribeService component. A low privilege user could leverage several openvpn options to execute code as root/SYSTEM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-04T13:46:07.000Z
CVE-2020-27519 
Pritunl Client v1.2.2550.20 contains a local privilege escalation vulnerability in the pritunl-service component. The attack vector is: malicious openvpn config. A local attacker could leverage the log and log-append along with log injection to create or append to privileged script files and execute code as root/SYSTEM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-30T13:16:08.000Z
CVE-2020-27523 
Solstice-Pod up to 5.0.2 WEBRTC server mishandles the format-string specifiers %x; %p; %c and %s in the screen_key, display_name, browser_name, and operation_system parameter during the authentication process. This may crash the server and force Solstice-Pod to reboot, which leads to a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-11T14:23:42.000Z
CVE-2020-27524 
On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version (N+R_CN_AU_P0395) mishandles %x and %s format string specifiers in a device name. This may lead to memory content leaks and potentially crash the services.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-11T14:20:56.000Z
CVE-2020-27533 
A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-22T14:53:02.000Z
CVE-2020-27534 
util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.TempDir call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-30T22:28:10.000Z
CVE-2020-27539 
Heap overflow with full parsing of HTTP respose in Rostelecom CS-C2SHW 5.0.082.1. AgentUpdater service has a self-written HTTP parser and builder. HTTP parser has a heap buffer overflow (OOB write). In default configuration camera parses responses only from HTTPS URLs from config file, so vulnerable code is unreachable and one more bug required to reach it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-25T20:26:41.000Z
CVE-2020-27540 
Bash injection vulnerability and bypass of signature verification in Rostelecom CS-C2SHW 5.0.082.1. The camera reads firmware update configuration from SD card file vc\version.json. fw-sign parameter and from this configuration is directly inserted into a bash command. Firmware update is run automatically if there is special file on the inserted SD card.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-25T20:17:20.000Z
CVE-2020-27541 
Denial of Service vulnerability in Rostelecom CS-C2SHW 5.0.082.1. AgentGreen service has a bug in parsing broadcast discovery UDP packet. Sending a packet of too small size will lead to an attempt of allocating buffer of negative size. As the result service AgentGreen will be terminated and started again later.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-25T20:32:00.000Z
CVE-2020-27542 
Rostelecom CS-C2SHW 5.0.082.1 is affected by: Bash command injection. The camera reads configuration from QR code (including network settings). The static IP configuration from QR code is copied to the file /config/ip-static and after reboot data from this file is inserted into bash command (without any escaping). So bash injection is possible. Camera doesn't parse QR codes if it's already successfully configured. Camera is always rebooted after successful configuration via QR code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-25T20:37:46.000Z
CVE-2020-27543 
The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-25T16:15:00.000Z
CVE-2020-27544 
An issue was discovered in FoldingAtHome Client Advanced Control GUI before commit 9b619ae64443997948a36dda01b420578de1af77, allows remote attackers to execute arbitrary code via crafted payload to function parse_message in file Connection.py.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-11T00:00:00.000Z
CVE-2020-27545 
libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-15T00:00:00.000Z
CVE-2020-27553 
In BASETech GE-131 BT-1837836 firmware 20180921, the web-server on the system is configured with the option “DocumentRoot /etc“. This allows an attacker with network access to the web-server to download any files from the “/etc” folder without authentication. No path traversal sequences are needed to exploit this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-17T14:23:17.000Z
CVE-2020-27554 
Cleartext Transmission of Sensitive Information vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 exists which could leak sensitive information transmitted between the mobile app and the camera device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-17T14:21:56.000Z
CVE-2020-27555 
Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to execute arbitrary system commands as the root user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-17T14:20:52.000Z
CVE-2020-27556 
A predictable device ID in BASETech GE-131 BT-1837836 firmware 20180921 allows unauthenticated remote attackers to connect to the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-17T14:19:44.000Z
CVE-2020-27557 
Unprotected Storage of Credentials vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 allows local users to gain access to the video streaming username and password via SQLite files containing plain text credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-17T14:18:54.000Z
CVE-2020-27558 
Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-17T14:17:18.000Z
CVE-2020-27560 
ImageMagick 7.0.10-34 allows Division by Zero in OptimizeLayerFrames in MagickCore/layer.c, which may cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-22T00:00:00.000Z
CVE-2020-27568 
Insecure File Permissions exist in Aviatrix Controller 5.3.1516. Several world writable files and directories were found in the controller resource. Note: All Aviatrix appliances are fully encrypted. This is an extra layer of security.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-21T21:16:44.000Z
CVE-2020-27569 
Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs to a location that is world writable and can be leveraged to gain write access to any file on the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-21T21:23:07.000Z
CVE-2020-27574 
Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF). If an authenticated user visits a malicious page, unintended actions could be performed in the web application as the authenticated user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-08T20:57:59.000Z
CVE-2020-27575 
Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functionality in which administrators are able to manage users. The edit users form contains a parameter vulnerable to command injection due to insufficient validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-08T21:02:56.000Z
CVE-2020-27576 
Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS). Users are able to create folders in the web application. The folder name is insufficiently validated resulting in a stored cross-site scripting vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-08T21:13:16.000Z
CVE-2020-27583 
IBM InfoSphere Information Server 8.5.0.0 is affected by deserialization of untrusted data which could allow remote unauthenticated attackers to execute arbitrary code. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-21T00:00:40.000Z
CVE-2020-27585 
Quick Heal Total Security before 19.0 allows attackers with local admin rights to modify sensitive anti virus settings via a brute-attack on the settings password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-30T19:41:56.000Z
CVE-2020-27586 
Quick Heal Total Security before version 19.0 transmits quarantine and sysinfo files via clear text.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-30T19:41:59.000Z
CVE-2020-27587 
Quick Heal Total Security before 19.0 allows attackers with local admin rights to obtain access to files in the File Vault via a brute-force attack on the password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-30T19:42:02.000Z
CVE-2020-27589 
Synopsys hub-rest-api-python (aka blackduck on PyPI) version 0.0.25 - 0.0.52 does not validate SSL certificates in certain cases.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-06T13:15:13.000Z
CVE-2020-27600 
HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1_100.26 allows remote attackers to execute arbitrary commands via shell metacharacters in the ssid0 or ssid1 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-02T20:11:40.000Z
CVE-2020-27601 
In BigBlueButton before 2.2.7, lockSettingsProps.disablePrivateChat does not apply to already opened chats. This occurs in bigbluebutton-html5/imports/ui/components/chat/service.js.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-21T14:09:49.000Z