rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-10514 iCatch DVR - Command Injection
iCatch DVR firmware before 20200103 do not validate function parameter properly, resulting attackers executing arbitrary command.
Problem types: description: Command Injection
Affected products: vendor: iCatch Inc.
product: DVR firmware
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2020-04-15T06:20:24.071Z
CVE-2020-10515 
STARFACE UCC Client before 6.7.1.204 on WIndows allows binary planting to execute code with System rights, aka usd-2020-0006.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-02T21:30:17.000Z
CVE-2020-10516 Improper access control in GitHub Enterprise Server leading to privilege escalation of organization member
An improper access control vulnerability was identified in the GitHub Enterprise Server API that allowed an organization member to escalate permissions and gain access to unauthorized repositories within an organization. This vulnerability affected all versions of GitHub Enterprise Server prior to 2.21 and was fixed in 2.20.9, 2.19.15, and 2.18.20. This vulnerability was reported via the GitHub Bug Bounty program.
Problem types: cwe_id: CWE-285
description: CWE-285: Improper Authorization
Affected products: vendor: GitHub
product: GitHub Enterprise Server
Credits: lang: en
value: Vaibhav Singh
Published: 2020-06-03T13:31:24.000Z
CVE-2020-10517 Improper access control in GitHub Enterprise Server leading to the enumeration of private repository names
An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to determine the names of unauthorized private repositories given their numerical IDs. This vulnerability did not allow unauthorized access to any repository content besides the name. This vulnerability affected all versions of GitHub Enterprise Server prior to 2.22 and was fixed in versions 2.21.6, 2.20.15, and 2.19.21. This vulnerability was reported via the GitHub Bug Bounty program.
Problem types: cwe_id: CWE-285
description: CWE-285: Improper Authorization
Affected products: vendor: GitHub
product: GitHub Enterprise Server
Credits: lang: en
value: William Bowling
Published: 2020-08-27T21:55:16.000Z
CVE-2020-10518 Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server
A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configuration of the underlying parsers used by GitHub Pages were not sufficiently restricted and made it possible to execute commands on the GitHub Enterprise Server instance. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 2.22 and was fixed in 2.21.6, 2.20.15, and 2.19.21. The underlying issues contributing to this vulnerability were identified both internally and through the GitHub Security Bug Bounty program.
Problem types: cwe_id: CWE-77
description: CWE-77: Command Injection - Generic
Affected products: vendor: GitHub
product: GitHub Enterprise Server
Credits: lang: en
value: William Bowling
Published: 2020-08-27T21:55:11.000Z
CVE-2020-10519 Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server
A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configuration of the underlying parsers used by GitHub Pages were not sufficiently restricted and made it possible to execute commands on the GitHub Enterprise Server instance. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 2.22.7 and was fixed in 2.22.7, 2.21.15, and 2.20.24. The underlying issues contributing to this vulnerability were identified through the GitHub Security Bug Bounty program.
Problem types: cwe_id: CWE-77
description: CWE-77: Command Injection - Generic
Affected products: vendor: GitHub
product: GitHub Enterprise Server
Credits: lang: en
value: yvvdwf
Published: 2021-03-03T03:25:21.000Z
CVE-2020-10531 
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-12T18:09:40.000Z
CVE-2020-10532 
The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-12T18:21:27.000Z
CVE-2020-10534 
In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation resulted in blocked users re-gaining escalated privileges. This is related to the case in which an IP address is contained in two ranges, one of which is locally disabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-12T22:14:41.000Z
CVE-2020-10535 
GitLab 12.8.x before 12.8.6, when sign-up is enabled, allows remote attackers to bypass email domain restrictions within the two-day grace period for an unconfirmed email address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-12T22:25:52.000Z
CVE-2020-10537 
An issue was discovered in Epikur before 20.1.1. A Glassfish 4.1 server with a default configuration is running on TCP port 4848. No password is required to access it with the administrator account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-05T09:17:38.000Z
CVE-2020-10538 
An issue was discovered in Epikur before 20.1.1. It stores the secret passwords of the users as MD5 hashes in the database. MD5 can be brute-forced efficiently and should not be used for such purposes. Additionally, since no salt is used, rainbow tables can speed up the attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-05T09:18:55.000Z
CVE-2020-10539 
An issue was discovered in Epikur before 20.1.1. The Epikur server contains the checkPasswort() function that, upon user login, checks the submitted password against the user password's MD5 hash stored in the database. It is also compared to a second MD5 hash, which is the same for every user (aka a "Backdoor Password" of 3p1kursupport). If the submitted password matches either one, access is granted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-05T09:21:27.000Z
CVE-2020-10540 
Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-13T05:25:16.000Z
CVE-2020-10541 
Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request. This was fixed in 12.5.108.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-13T05:34:26.000Z
CVE-2020-10543 
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-05T13:17:49.000Z
CVE-2020-10544 
An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11. In a web application using PrimeFaces, an attacker can provide JavaScript code in an input field whose data is later used as a tooltip title without any input validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-13T14:32:14.000Z
CVE-2020-10546 
rConfig 3.9.4 and previous versions has unauthenticated compliancepolicies.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-04T03:25:04.000Z
CVE-2020-10547 
rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-04T03:24:41.000Z
CVE-2020-10548 
rConfig 3.9.4 and previous versions has unauthenticated devices.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-04T03:24:33.000Z
CVE-2020-10549 
rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-04T03:24:25.000Z
CVE-2020-10551 
QQBrowser before 10.5.3870.400 installs a Windows service TsService.exe. This file is writable by anyone belonging to the NT AUTHORITY\Authenticated Users group, which includes all local and remote users. This can be abused by local attackers to escalate privileges to NT AUTHORITY\SYSTEM by writing a malicious executable to the location of TsService.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-09T12:38:40.000Z
CVE-2020-10552 
An issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the default user sysdba and password masterke after installation. This allows any user to access it and read and modify the contents, including passwords. Local database files can be accessed directly as well.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-05T19:24:48.000Z
CVE-2020-10553 
An issue was discovered in Psyprax before 3.2.2. The file %PROGRAMDATA%\Psyprax32\PPScreen.ini contains a hash for the lockscreen (aka screensaver) of the application. If that entry is removed, the lockscreen is no longer displayed and the app is no longer locked. All local users are able to modify that file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-05T19:23:06.000Z
CVE-2020-10554 
An issue was discovered in Psyprax beforee 3.2.2. Passwords used to encrypt the data are stored in the database in an obfuscated format, which can be easily reverted. For example, the password AAAAAAAA is stored in the database as MMMMMMMM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-05T19:20:15.000Z
CVE-2020-10557 
An issue was discovered in AContent through 1.4. It allows the user to run commands on the server with a low-privileged account. The upload section in the file manager page contains an arbitrary file upload vulnerability via upload.php. The extension .php7 bypasses file upload restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T14:31:09.000Z
CVE-2020-10558 
The driving interface of Tesla Model 3 vehicles in any release before 2020.4.10 allows Denial of Service to occur due to improper process separation, which allows attackers to disable the speedometer, web browser, climate controls, turn signal visual and sounds, navigation, autopilot notifications, along with other miscellaneous functions from the main screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T18:12:39.000Z
CVE-2020-10560 
An issue was discovered in Open Source Social Network (OSSN) through 5.3. A user-controlled file path with a weak cryptographic rand() can be used to read any file with the permissions of the webserver. This can lead to further compromise. The attacker must conduct a brute-force attack against the SiteKey to insert into a crafted URL for components/OssnComments/ossn_com.php and/or libraries/ossn.lib.upgrade.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-30T12:04:45.000Z
CVE-2020-10561 
An issue was discovered on Xiaomi Mi Jia ink-jet printer < 3.4.6_0138. Injecting parameters to ippserver through the web management background, resulting in command execution vulnerabilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-24T16:31:49.000Z
CVE-2020-10562 
An issue was discovered in DEVOME GRR before 3.4.1c. admin_edit_room.php mishandles file uploads.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-13T20:47:56.000Z
CVE-2020-10563 
An issue was discovered in DEVOME GRR before 3.4.1c. frmcontactlist.php mishandles a SQL query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-13T20:47:46.000Z
CVE-2020-10564 
An issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory traversal can lead to remote code execution by uploading a crafted txt file into the lib directory, because of a wfu_include_lib call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-13T22:07:09.000Z
CVE-2020-10565 
grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part of a memrw command (read_* or write_*) by a guest through a grub2.cfg file. This allows an untrusted guest to perform arbitrary read or write operations in the context of the grub-bhyve process, resulting in code execution as root on the host OS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-14T00:53:02.000Z
CVE-2020-10566 
grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, mishandles font loading by a guest through a grub2.cfg file, leading to a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-14T00:52:53.000Z
CVE-2020-10567 
An issue was discovered in Responsive Filemanager through 9.14.0. In the ajax_calls.php file in the save_img action in the name parameter, there is no validation of what kind of extension is sent. This makes it possible to execute PHP code if a legitimate JPEG image contains this code in the EXIF data, and the .php extension is used in the name parameter. (A potential fast patch is to disable the save_img action in the config file.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-14T00:00:00.000Z
CVE-2020-10568 
The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison. This leads to remote code execution in includes/class-wp-installer.php via a series of requests that leverage unintended comparisons of integers to strings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-14T13:50:04.000Z
CVE-2020-10569 
SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Additionally, it allows unauthenticated access to upload files, which can be used to execute commands on the system by chaining it with a GhostCat attack. NOTE: This may be a duplicate of CVE-2020-1938
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-21T19:01:37.000Z
CVE-2020-10570 
The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attackers to bypass intended restrictions on message reading and message replying. This might be interpreted as a bypass of the passcode feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T13:56:47.000Z
CVE-2020-10571 
An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-14T17:23:28.000Z
CVE-2020-10573 
An issue was discovered in Janus through 0.9.1. janus_audiobridge.c has a double mutex unlock when listing private rooms in AudioBridge.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-14T19:07:37.000Z
CVE-2020-10574 
An issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't actually exist during a "query_logger" Admin API request, because of a typo in the JSON validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-14T19:07:26.000Z
CVE-2020-10575 
An issue was discovered in Janus through 0.9.1. plugins/janus_videocall.c in the VideoCall plugin mishandles session management because a race condition causes some references to be freed too early or too many times.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-14T19:06:58.000Z
CVE-2020-10576 
An issue was discovered in Janus through 0.9.1. plugins/janus_voicemail.c in the VoiceMail plugin has a race condition that could cause a server crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-14T19:07:20.000Z
CVE-2020-10577 
An issue was discovered in Janus through 0.9.1. janus.c has multiple concurrent threads that misuse the source property of a session, leading to a race condition when claiming sessions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-14T19:07:13.000Z
CVE-2020-10578 
An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-14T19:30:40.000Z
CVE-2020-10579 
A directory traversal on the /admin/sysmon.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote attackers to list the content of arbitrary server directories accessible to the user running the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-25T19:48:45.000Z
CVE-2020-10580 
A command injection on the /admin/broadcast.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote authenticated attackers to execute arbitrary PHP code on the server as the user running the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-25T19:48:33.000Z
CVE-2020-10581 
Multiple session validity check issues in several administration functionalities of Invigo Automatic Device Management (ADM) through 5.0 allow remote attackers to read potentially sensitive data hosted by the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-25T19:48:00.000Z
CVE-2020-10582 
A SQL injection on the /admin/display_errors.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote attackers to execute arbitrary SQL requests (including data reading and modification) on the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-25T19:47:40.000Z
CVE-2020-10583 
The /admin/admapi.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote authenticated attackers to execute arbitrary OS commands on the server as the user running the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-25T19:47:30.000Z
CVE-2020-10584 
A directory traversal on the /admin/search_by.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote attackers to read arbitrary server files accessible to the user running the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-25T19:47:17.000Z
CVE-2020-10587 
antiX and MX Linux allow local users to achieve root access via "persist-config --command /bin/sh" because of the Sudo configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-14T21:47:51.000Z
CVE-2020-10588 
v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/add.sh and /etc/v2rayL/remove.sh are owned by a low-privileged user but execute as root via Sudo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-15T20:25:10.000Z
CVE-2020-10589 
v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/config.json is owned by a low-privileged user but contains commands that are executed as root, after v2rayL.service is restarted via Sudo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-15T20:25:36.000Z
CVE-2020-10590 
Replicated Classic 2.x versions have an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration. An attacker with network access to the Admin Console port (8800) on the Replicated Classic server could retrieve the TLS Keypair (Cert and Key) used to configure the Admin Console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-28T11:38:46.000Z
CVE-2020-10591 
An issue was discovered in Walmart Labs Concord before 1.44.0. CORS Access-Control-Allow-Origin headers have a potentially unsafe dependency on Origin headers, and are not configurable. This allows remote attackers to discover host information, nodes, API metadata, and references to usernames via api/v1/apikey.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-15T20:48:17.000Z
CVE-2020-10592 
Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (CPU consumption), aka TROVE-2020-002.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-23T12:16:48.000Z
CVE-2020-10593 
Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-23T12:22:03.000Z
CVE-2020-10594 
An issue was discovered in drf-jwt 1.15.x before 1.15.1. It allows attackers with access to a notionally invalidated token to obtain a new, working token via the refresh endpoint, because the blacklist protection mechanism is incompatible with the token-refresh feature. NOTE: drf-jwt is a fork of jpadilla/django-rest-framework-jwt, which is unmaintained.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-15T21:22:09.000Z