rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-9255 
Huawei Honor 10 smartphones with versions earlier than 10.0.0.178(C00E178R1P4) have a denial of service vulnerability. Certain service in the system does not sufficiently validate certain parameter which is received, the attacker should trick the user into installing a malicious application, successful exploit could cause a denial of service condition.
Problem types: description: Denial of Service
Affected products: vendor: Huawei
product: Honor 10
Published: 2020-07-17T22:55:18.000Z
CVE-2020-9256 
Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150(C00E136R5P3) have an improper authorization vulnerability. The system does not properly restrict the use of system service by applications, the attacker should trick the user into installing a malicious application, successful exploit could cause a denial of audio service.
Problem types: description: Improper Authorization
Affected products: vendor: Huawei
product: Mate 30 Pro
Published: 2020-07-17T23:08:19.000Z
CVE-2020-9257 
HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versions earlier than 10.1.0.160(C00E160R2P8) have a buffer overflow vulnerability. The software access data past the end, or before the beginning, of the intended buffer when handling certain operations of certificate, the attacker should trick the user into installing a malicious application, successful exploit may cause code execution.
Problem types: description: Buffer Overflow
Affected products: vendor: Huawei
product: HUAWEI P30 Pro
Published: 2020-07-17T22:41:36.000Z
CVE-2020-9258 
HUAWEI P30 smartphone with versions earlier than 10.1.0.135(C00E135R2P11) have an improper input verification vulnerability. An attribution in a module is not set correctly and some verification is lacked. Attackers with local access can exploit this vulnerability by injecting malicious fragment. This may lead to user information leak.
Problem types: description: Improper Input Verification
Affected products: vendor: n/a
product: HUAWEI P30
Published: 2020-07-10T13:11:21.000Z
CVE-2020-9259 
Huawei Honor V30 smartphones with versions earlier than 10.1.0.212(C00E210R5P1) have an improper authentication vulnerability. The system does not sufficiently validate certain parameter passed from the bottom level, the attacker should trick the user into installing a malicious application and control the bottom level, successful exploit could cause information disclosure.
Problem types: description: Improper Authentication
Affected products: vendor: Huawei
product: Honor V30
Published: 2020-07-17T22:53:06.000Z
CVE-2020-9260 
HUAWEI P30 and HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E22R2P5) and versions earlier than 10.1.0.160(C00E160R2P8) have an information disclosure vulnerability. Certain WI-FI function's default configuration in the system seems insecure, an attacker should craft a WI-FI hotspot to launch the attack. Successful exploit could cause information disclosure.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: HUAWEI P30;HUAWEI P30 Pro
Published: 2020-07-10T13:08:18.000Z
CVE-2020-9261 
HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a type confusion vulnerability. The system does not properly check and transform the type of certain variable, the attacker tricks the user into installing then running a crafted application, successful exploit could cause code execution.
Problem types: description: Type Confusion
Affected products: vendor: n/a
product: HUAWEI Mate 30
Published: 2020-07-06T18:19:20.000Z
CVE-2020-9262 
HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a crafted application with high privilege, successful exploit could cause code execution.
Problem types: description: Use After Free
Affected products: vendor: n/a
product: HUAWEI Mate 30
Published: 2020-07-06T18:05:47.000Z
CVE-2020-9263 
HUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than 10.1.0.160(C00E160R2P11) have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a crafted application with common privilege, successful exploit could cause code execution.
Problem types: description: Use After Free
Affected products: vendor: n/a
product: HUAWEI Mate 30;HUAWEI P30
Published: 2020-10-19T19:57:15.000Z
CVE-2020-9264 
ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-18T14:56:52.000Z
CVE-2020-9265 
phpMyChat-Plus 1.98 is vulnerable to multiple SQL injections against the deluser.php Delete User functionality, as demonstrated by pmc_username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-18T17:22:38.000Z
CVE-2020-9266 
SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary changing of the admin password via process/xajax_server.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-18T17:22:30.000Z
CVE-2020-9267 
SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary user creation via process/xajax_server.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-18T17:22:21.000Z
CVE-2020-9268 
SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nom_createur&by= substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-18T17:22:13.000Z
CVE-2020-9269 
SOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via the users parameter, as demonstrated by export_ical.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-18T17:22:06.000Z
CVE-2020-9270 
ICE Hrm 26.2.0 is vulnerable to CSRF that leads to password reset via service.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-18T17:21:57.000Z
CVE-2020-9271 
ICE Hrm 26.2.0 is vulnerable to CSRF that leads to user creation via service.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-18T17:21:48.000Z
CVE-2020-9272 
ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c cap_to_text function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-20T15:17:13.000Z
CVE-2020-9273 
In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in alloc_pool in pool.c, and possible remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-20T15:22:53.000Z
CVE-2020-9274 
An issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been detected in the diraliases linked list. When the *lookup_alias(const char alias) or print_aliases(void) function is called, they fail to correctly detect the end of the linked list and try to access a non-existent list member. This is related to init_aliases in diraliases.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-26T15:29:32.000Z
CVE-2020-9275 
An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. A cfm UDP service listening on port 65002 allows remote, unauthenticated exfiltration of administrative credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-20T22:39:33.000Z
CVE-2020-9276 
An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. The function do_cgi(), which processes cgi requests supplied to the device's web servers, is vulnerable to a remotely exploitable stack-based buffer overflow. Unauthenticated exploitation is possible by combining this vulnerability with CVE-2020-9277.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-20T22:40:08.000Z
CVE-2020-9277 
An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. Authentication can be bypassed when accessing cgi modules. This allows one to perform administrative tasks (e.g., modify the admin password) with no authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-20T22:40:32.000Z
CVE-2020-9278 
An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. The device can be reset to its default configuration by accessing an unauthenticated URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-20T22:41:14.000Z
CVE-2020-9279 
An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. A hard-coded account allows management-interface login with high privileges. The logged-in user can perform critical tasks and take full control of the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-20T22:41:28.000Z
CVE-2020-9280 
In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the default "/Uploads" folder instead. This affects installations which allowed upload folder protection via the optional silverstripe/secureassets module under 3.x. This module is installed and enabled by default on the Common Web Platform (CWP). The vulnerability only affects files uploaded after an upgrade to 4.x.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-15T20:18:14.000Z
CVE-2020-9281 
A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted "protected" comment (with the cke_protected syntax).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-07T00:02:27.000Z
CVE-2020-9282 
In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, certain personal information is discoverable inspecting network responses on the 'Edit access' screen when sharing portfolios.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-09T13:42:59.000Z
CVE-2020-9283 
golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accepts public keys. Also, a server can attack any SSH client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-20T00:00:00.000Z
CVE-2020-9285 
Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard that hosts the WiFi card on the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-20T00:00:00.000Z
CVE-2020-9286 
An improper authorization vulnerability in FortiADC may allow a remote authenticated user with low privileges to perform certain actions such as rebooting the system.
Problem types: description: Improper Access Control
Affected products: vendor: n/a
product: FortiADC
Published: 2020-04-07T18:52:09.000Z
CVE-2020-9287 
An Unsafe Search Path vulnerability in FortiClient EMS online installer 6.2.1 and below may allow a local attacker with control over the directory in which FortiClientEMSOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that directory.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: Fortinet FortiClient EMS
Published: 2020-03-15T21:56:00.000Z
CVE-2020-9288 
An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the ESS profile or the Radius Profile.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: Fortinet FortiWLC
Published: 2020-06-22T15:14:43.000Z
CVE-2020-9289 
Use of a hard-coded cryptographic key to encrypt password data in CLI configuration in FortiManager 6.2.3 and below, FortiAnalyzer 6.2.3 and below may allow an attacker with access to the CLI configuration or the CLI backup file to decrypt the sensitive data, via knowledge of the hard-coded key.
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Fortinet FortiManager
Published: 2020-06-16T20:12:40.000Z
CVE-2020-9290 
An Unsafe Search Path vulnerability in FortiClient for Windows online installer 6.2.3 and below may allow a local attacker with control over the directory in which FortiClientOnlineInstaller.exe and FortiClientVPNOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that directory.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: Fortinet FortiClient for Windows
Published: 2020-03-15T21:52:05.000Z
CVE-2020-9291 
An Insecure Temporary File vulnerability in FortiClient for Windows 6.2.1 and below may allow a local user to gain elevated privileges via exhausting the pool of temporary file names combined with a symbolic link attack.
Problem types: description: Improper Access Control, Privilege Escalation
Affected products: vendor: Fortinet
product: Fortinet FortiClient for Windows
CVSS v3.1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: LOW
baseScore: 6.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
version: 3.1
Published: 2020-06-01T18:39:42.000Z
CVE-2020-9292 
An unquoted service path vulnerability in the FortiSIEM Windows Agent component may allow an attacker to gain elevated privileges via the AoWinAgt executable service path.
Problem types: description: Escalation of privilege
Affected products: vendor: n/a
product: Fortinet FortiSIEMWindowsAgent
Published: 2020-06-04T12:41:09.000Z
CVE-2020-9294 
An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a remote unauthenticated attacker to access the system as a legitimate user by requesting a password change via the user interface.
Problem types: description: Improper Access Control
Affected products: vendor: Fortinet
product: FortiMail
vendor: Fortinet
product: FortiVoiceEnterprise
Published: 2020-04-27T16:20:22.000Z
CVE-2020-9295 
FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and FortiClient 6.2 running AV engine version 6.00137 and below may not immediately detect certain types of malformed or non-standard RAR archives, potentially containing malicious files. Based on the samples provided, FortiClient will detect the malicious files upon trying extraction by real-time scanning and FortiGate will detect the malicious archive if Virus Outbreak Prevention is enabled.
Problem types: cwe_id: CWE-358
description: Denial of service
Affected products: vendor: Fortinet
product: FortiClientWindows
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.7
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N/E:U/RL:X/RC:X
Published: 2025-03-17T13:40:48.531Z
CVE-2020-9296 
Netflix Titus uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint violation error messages, different types of interpolation are supported, including Java EL expressions. If an attacker can inject arbitrary data in the error message template being passed to ConstraintValidatorContext.buildConstraintViolationWithTemplate() argument, they will be able to run arbitrary Java code.
Problem types: description: Server-Side Template Injection
Affected products: vendor: n/a
product: Netflix Titus
Published: 2020-06-16T13:19:56.000Z
CVE-2020-9297 
Netflix Titus, all versions prior to version v0.1.1-rc.274, uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint violation error messages, different types of interpolation are supported, including Java EL expressions. If an attacker can inject arbitrary data in the error message template being passed to ConstraintValidatorContext.buildConstraintViolationWithTemplate() argument, they will be able to run arbitrary Java code.
Problem types: description: Server-Side Template Injection
Affected products: vendor: n/a
product: Netflix Titus
Published: 2020-07-14T19:07:54.000Z
CVE-2020-9298 
The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requests on behalf of Spinnaker potentially leading to sensitive data disclosure.
Problem types: description: Server-Side Request Forgery
Affected products: vendor: n/a
product: Netflix Orca Spinnaker
Published: 2020-08-28T14:45:54.000Z
CVE-2020-9299 
There were XSS vulnerabilities discovered and reported in the Dispatch application, affecting name and description parameters of Incident Priority, Incident Type, Tag Type, and Incident Filter. This vulnerability can be exploited by an authenticated user.
Problem types: description: Multiple Cross-Site Scripting Vulnerabilities
Affected products: vendor: n/a
product: Netflix Dispatch
Published: 2020-11-09T14:50:18.000Z
CVE-2020-9300 
The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin, users adding themselves as a participant in a restricted incident, and users able to view restricted incidents via the search feature. If your install has followed the secure deployment guidelines the risk of this is lowered, as this may only be exploited by an authenticated user.
Problem types: description: Multiple Multiple Access Control Issues in Dispatch
Affected products: vendor: n/a
product: Netflix Dispatch
Published: 2020-11-09T14:41:37.000Z
CVE-2020-9301 
Nolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all versions prior to version 1.23.4, 1.22.4 or 1.21.5. The vulnerability exists within the handling of SpEL expressions that allows an attacker to read and write arbitrary files within the orca container via authenticated HTTP POST requests.
Problem types: description: SpEL Template injection
Affected products: vendor: n/a
product: Netflix Spinnaker
Published: 2020-12-11T02:10:32.000Z
CVE-2020-9306 
Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .pyc file to store the cleartext password for the python user account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:U/UI:N
version: 3.1
Published: 2021-02-17T23:11:24.000Z
CVE-2020-9307 
Hirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 allow a denial of service. An unauthenticated, adjacent attacker can cause an infinite loop on one of the HSR ring ports of the device. This effectively breaks the redundancy of the HSR ring. If the attacker can perform the same attack on a second device, the ring is broken into two parts (thus disrupting communication between devices in the different parts).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-11T20:32:13.000Z
CVE-2020-9308 
archive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with an invalid or corrupted header (such as a header size of zero), leading to a SIGSEGV or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-20T06:07:23.000Z
CVE-2020-9309 
Silverstripe CMS through 4.5 can be susceptible to script execution from malicious upload contents under allowed file extensions (for example HTML code in a TXT file). When these files are stored as protected or draft files, the MIME detection can cause browsers to execute the file contents. Uploads stored as protected or draft files are allowed by default for authorised users only, but can also be enabled through custom logic as well as modules such as silverstripe/userforms. Sites using the previously optional silverstripe/mimevalidator module can configure MIME whitelists rather than extension whitelists, and hence prevent this issue. Sites on the Common Web Platform (CWP) use this module by default, and are not affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-15T20:57:20.000Z
CVE-2020-9311 
In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can craft profile information which can lead to XSS for other users through specially crafted login form URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-15T21:00:17.000Z
CVE-2020-9314 
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x allows image injection in the Administration console via the productNameSrc parameter to an admingui URI. This issue exists because of an incomplete fix for CVE-2012-0516. NOTE: a related support policy can be found in the www.oracle.com references attached to this CVE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-10T22:23:34.000Z
CVE-2020-9315 
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. NOTE: a related support policy can be found in the www.oracle.com references attached to this CVE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-10T22:23:02.000Z
CVE-2020-9318 
Red Gate SQL Monitor 9.0.13 through 9.2.14 allows an administrative user to perform a SQL injection attack by configuring the SNMP alert settings in the UI. This is fixed in 9.2.15.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-20T20:58:19.000Z
CVE-2020-9320 
Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security (Gateway), Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and Cross Platform Anti-malware SDK. NOTE: Vendor asserts that vulnerability does not exist in product
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-20T21:39:43.000Z
CVE-2020-9321 
configurationwatcher.go in Traefik 2.x before 2.1.4 and TraefikEE 2.0.0 mishandles the purging of certificate contents from providers before logging.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T18:14:29.000Z