rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-25855 
The function AES_UnWRAP() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for a memcpy() operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of service. An attacker can impersonate an Access Point and attack a vulnerable Wi-Fi client, by injecting a crafted packet into the WPA2 handshake. The attacker needs to know the network's PSK in order to exploit this.
Problem types: cwe_id: CWE-121
description: Stack buffer overflow (CWE-121)
Affected products: vendor: n/a
product: Realtek RTL8195A Wi-Fi Module
Published: 2021-02-03T16:49:05.000Z
CVE-2020-25856 
The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an rtl_memcpy() operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of service. An attacker can impersonate an Access Point and attack a vulnerable Wi-Fi client, by injecting a crafted packet into the WPA2 handshake. The attacker needs to know the network's PSK in order to exploit this.
Problem types: cwe_id: CWE-121
description: Stack buffer overflow (CWE-121)
Affected products: vendor: n/a
product: Realtek RTL8195A Wi-Fi Module
Published: 2021-02-03T16:49:02.000Z
CVE-2020-25857 
The function ClientEAPOLKeyRecvd() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an rtl_memcpy() operation, resulting in a stack buffer overflow which can be exploited for denial of service. An attacker can impersonate an Access Point and attack a vulnerable Wi-Fi client, by injecting a crafted packet into the WPA2 handshake. The attacker does not need to know the network's PSK.
Problem types: cwe_id: CWE-121
description: Stack buffer overflow (CWE-121)
Affected products: vendor: n/a
product: Realtek RTL8195A Wi-Fi Module
Published: 2021-02-03T16:48:59.000Z
CVE-2020-25858 
The QCMAP_Web_CLIENT binary in the Qualcomm QCMAP software suite prior to versions released in October 2020 does not validate the return value of a strstr() or strchr() call in the Tokenizer() function. An attacker who invokes the web interface with a crafted URL can crash the process, causing denial of service. This version of QCMAP is used in many kinds of networking devices, primarily mobile hotspots and LTE routers.
Problem types: cwe_id: CWE-476
description: Remote authenticated null dereference (CWE-476)
Affected products: vendor: n/a
product: Qualcomm QCMAP
Published: 2020-10-15T15:11:50.000Z
CVE-2020-25859 
The QCMAP_CLI utility in the Qualcomm QCMAP software suite prior to versions released in October 2020 uses a system() call without validating the input, while handling a SetGatewayUrl() request. A local attacker with shell access can pass shell metacharacters and run arbitrary commands. If QCMAP_CLI can be run via sudo or setuid, this also allows elevating privileges to root. This version of QCMAP is used in many kinds of networking devices, primarily mobile hotspots and LTE routers.
Problem types: cwe_id: CWE-78
description: Local command injection (CWE-78)
Affected products: vendor: n/a
product: Qualcomm QCMAP
Published: 2020-10-15T15:12:56.000Z
CVE-2020-25860 
The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update file takes place before the file is reopened for installation. An attacker who can modify the update file just before it is reopened can install arbitrary code on the device.
Problem types: cwe_id: CWE-367
description: Time-of-Check Time-of-Use (CWE-367)
Affected products: vendor: n/a
product: Pengutronix RAUC
Published: 2020-12-21T17:23:27.000Z
CVE-2020-25862 
In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the TCP dissector could crash. This was addressed in epan/dissectors/packet-tcp.c by changing the handling of the invalid 0xFFFF checksum.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-06T14:41:25.000Z
CVE-2020-25863 
In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash. This was addressed in epan/dissectors/packet-multipart.c by correcting the deallocation of invalid MIME parts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-06T14:43:03.000Z
CVE-2020-25864 
HashiCorp Consul and Consul Enterprise up to version 1.9.4 key-value (KV) raw mode was vulnerable to cross-site scripting. Fixed in 1.9.5, 1.8.10 and 1.7.14.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-20T13:07:21.000Z
CVE-2020-25866 
In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for compressed (not uncompressed) messages. This was addressed in epan/dissectors/packet-blip.c by allowing reasonable compression ratios and rejecting ZIP bombs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-06T14:42:38.000Z
CVE-2020-25867 
SoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings. It allows a bypass to get access without authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-07T20:55:32.000Z
CVE-2020-25868 
Pexip Infinity 22.x through 24.x before 24.2 has Improper Input Validation for call setup. An unauthenticated remote attacker can trigger a software abort (temporary loss of service).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-07T13:42:38.000Z
CVE-2020-25869 
An information leak was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. Handling of actor ID does not necessarily use the correct database or correct wiki.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-27T20:40:25.000Z
CVE-2020-25872 
A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-29T19:11:07.000Z
CVE-2020-25873 
A directory traversal vulnerability in the component system/manager/class/web/database.php was discovered in Baijiacms V4 which allows attackers to arbitrarily delete folders on the server via the "id" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-29T19:11:08.000Z
CVE-2020-25875 
A stored cross site scripting (XSS) vulnerability in the 'Smileys' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payload entered into the 'Smiley Code' parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-09T21:56:04.000Z
CVE-2020-25876 
A stored cross site scripting (XSS) vulnerability in the 'Pages' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payload entered into the 'Page Title' parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-09T21:56:03.000Z
CVE-2020-25877 
A stored cross site scripting (XSS) vulnerability in the 'Add Page' feature of BlackCat CMS 1.3.6 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Title' parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-09T21:56:00.000Z
CVE-2020-25878 
A stored cross site scripting (XSS) vulnerability in the 'Admin-Tools' feature of BlackCat CMS 1.3.6 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads entered into the 'Output Filters' and 'Droplets' modules.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-09T21:55:58.000Z
CVE-2020-25879 
A stored cross site scripting (XSS) vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Username' parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-09T21:55:57.000Z
CVE-2020-25881 
A vulnerability was discovered in the filename parameter in pathindex.php?r=cms-backend/attachment/delete&sub=&filename=../../../../111.txt&filetype=image/jpeg of the master version of RKCMS. This vulnerability allows for an attacker to perform a directory traversal via a crafted .txt file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-29T19:54:49.000Z
CVE-2020-25887 
Buffer overflow in mg_resolve_from_hosts_file in Mongoose 6.18, when reading from a crafted hosts file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-25889 
Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-08T13:00:53.000Z
CVE-2020-25890 
The web application of Kyocera printer (ECOSYS M2640IDW) is affected by Stored XSS vulnerability, discovered in the addition a new contact in "Machine Address Book". Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-17T20:05:23.000Z
CVE-2020-25900 
HelloTalk through 3.4.1 stores full-precision GPS coordinates even when the user had intended to share only a country or city. Furthermore, these coordinates are placed into a database on the client of other users. (The client side was changed in 2019 to encrypt that database.)
Problem types: cwe_id: CWE-359
description: CWE-359 Exposure of Private Personal Information to an Unauthorized Actor
Affected products: vendor: HelloTalk
product: HelloTalk
default_status: unknown
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2026-06-05T00:00:00.000Z
CVE-2020-25901 
Host Header Injection in Spiceworks 7.5.7.0 allowing the attacker to render arbitrary links that point to a malicious website with poisoned Host header webpages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-18T14:30:34.000Z
CVE-2020-25902 
Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting (XSS) vulnerability. The XSS payload will execute on the class room, which leads to stealing cookies from users who join the class. NOTE: Third-parties dispute the validity of this entry as a possible false positive during research
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-02T12:35:49.000Z
CVE-2020-25905 
An SQL Injection vulnerabilty exists in Sourcecodester Mobile Shop System in PHP MySQL 1.0 via the email parameter in (1) login.php or (2) LoginAsAdmin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-28T00:00:00.000Z
CVE-2020-25911 
A XML External Entity (XXE) vulnerability was discovered in the modRestServiceRequest component in MODX CMS 2.7.3 which can lead to an information disclosure or denial of service (DOS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-31T18:32:50.000Z
CVE-2020-25912 
A XML External Entity (XXE) vulnerability was discovered in symphony\lib\toolkit\class.xmlelement.php in Symphony 2.7.10 which can lead to an information disclosure or denial of service (DOS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-31T18:32:50.000Z
CVE-2020-25915 
Cross Site Scripting (XSS) vulnerability in UserController.php in ThinkCMF version 5.1.5, allows attackers to execute arbitrary code via crafted user_login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-11T00:00:00.000Z
CVE-2020-25917 
Stratodesk NoTouch Center before 4.4.68 is affected by: Incorrect Access Control. A low privileged user on the platform, for example a user with "helpdesk" privileges, can perform privileged operations including adding a new administrator to the platform via the easyadmin/user/submitCreateTCUser.do page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-26T01:50:52.000Z
CVE-2020-25925 
Cross Site Scripting (XSS) in Webmail Calender in IceWarp WebClient 10.3.5 allows remote attackers to inject arbitrary web script or HTML via the "p4" field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-07T13:53:07.000Z
CVE-2020-25926 
The DNS client in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Insufficient entropy in the DNS transaction id. The impact is: DNS cache poisoning (remote). The component is: dns_query_type(). The attack vector is: a specific DNS response packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-18T18:35:28.000Z
CVE-2020-25927 
The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Out-of-bounds Read. The impact is: a denial of service (remote). The component is: DNS response processing in function: dns_upcall(). The attack vector is: a specific DNS response packet. The code does not check whether the number of queries/responses specified in the DNS packet header corresponds to the query/response data available in the DNS packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-18T18:37:36.000Z
CVE-2020-25928 
The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: DNS response processing functions: dns_upcall(), getoffset(), dnc_set_answer(). The attack vector is: a specific DNS response packet. The code does not check the "response data length" field of individual DNS answers, which may cause out-of-bounds read/write operations, leading to Information leak, Denial-or-Service, or Remote Code Execution, depending on the context.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-18T18:41:00.000Z
CVE-2020-25950 
Advanced Webhost Billing System 3.7.0 is affected by Cross Site Request Forgery (CSRF) attacks that can delete a contact from the My Additional Contact page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-08T06:54:23.000Z
CVE-2020-25952 
SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-16T15:37:11.000Z
CVE-2020-25955 
SourceCodester Student Management System Project in PHP version 1.0 is vulnerable to stored a cross-site scripting (XSS) via the 'add subject' tab.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-08T13:05:18.000Z
CVE-2020-25966 
Sectona Spectra before 3.4.0 has a vulnerable SOAP API endpoint that leaks sensitive information about the configured assets without proper authentication. This could be used by unauthorized parties to get configured login credentials of the assets via a modified pAccountID value. NOTE: The vendor has indicated this is not a vulnerability and states "This vulnerability occurred due to wrong configuration of system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-28T17:37:16.000Z
CVE-2020-25967 
The member center function in fastadmin V1.0.0.20200506_beta is vulnerable to a Server-Side Template Injection (SSTI) vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-10T21:07:53.000Z
CVE-2020-25969 
gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-05T00:00:00.000Z
CVE-2020-25985 
MonoCMS Blog 1.0 is affected by: Arbitrary File Deletion. Any authenticated user can delete files on and off the webserver (php files can be unlinked and not deleted).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-07T11:25:26.000Z
CVE-2020-25986 
A Cross Site Request Forgery (CSRF) vulnerability in MonoCMS Blog 1.0 allows attackers to change the password of a user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-06T12:51:29.000Z
CVE-2020-25987 
MonoCMS Blog 1.0 stores hard-coded admin hashes in the log.xml file in the source files for MonoCMS Blog. Hash type is bcrypt and hashcat mode 3200 can be used to crack the hash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-06T12:51:26.000Z
CVE-2020-25988 
UPNP Service listening on port 5555 in Genexis Platinum 4410 Router V2.1 (P4410-V2–1.34H) has an action 'X_GetAccess' which leaks the credentials of 'admin', provided that the attacker is network adjacent.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-17T19:43:08.000Z
CVE-2020-25989 
Privilege escalation via arbitrary file write in pritunl electron client 1.0.1116.6 through v1.2.2550.20. Successful exploitation of the issue may allow an attacker to execute code on the effected system with root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-19T20:51:35.000Z
CVE-2020-25990 
WebsiteBaker 2.12.2 allows SQL Injection via parameter 'display_name' in /websitebaker/admin/preferences/save.php. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-01T13:57:54.000Z
CVE-2020-26006 
Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting (XSS) via account.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-24T12:41:56.000Z
CVE-2020-26007 
An arbitrary file upload vulnerability in the upload payment plugin of ShopXO v1.9.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-20T21:12:00.000Z
CVE-2020-26008 
The PluginsUpload function in application/service/PluginsAdminService.php of ShopXO v1.9.0 contains an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via uploading a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-20T21:12:01.000Z
CVE-2020-26028 
An issue was discovered in Zammad before 3.4.1. Admin Users without a ticket.* permission can access Tickets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T07:57:44.000Z
CVE-2020-26029 
An issue was discovered in Zammad before 3.4.1. There are wrong authorization checks for impersonation requests via X-On-Behalf-Of. The authorization checks are performed for the actual user and not the one given in the X-On-Behalf-Of header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T07:57:36.000Z
CVE-2020-26030 
An issue was discovered in Zammad before 3.4.1. There is an authentication bypass in the SSO endpoint via a crafted header, when SSO is not configured. An attacker can create a valid and authenticated session that can be used to perform any actions in the name of other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T07:57:23.000Z
CVE-2020-26031 
An issue was discovered in Zammad before 3.4.1. The global-search feature leaks Knowledge Base drafts to Knowledge Base readers (who are authenticated but have insufficient permissions).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T07:57:06.000Z
CVE-2020-26032 
An SSRF issue was discovered in Zammad before 3.4.1. The SMS configuration interface for Massenversand is implemented in a way that renders the result of a test request to the User. An attacker can use this to request any URL via a GET request from the network interface of the server. This may lead to disclosure of information from intranet systems.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T07:56:54.000Z
CVE-2020-26033 
An issue was discovered in Zammad before 3.4.1. The Tag and Link REST API endpoints (for add and delete) lack a CSRF token check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T07:56:43.000Z
CVE-2020-26034 
An account-enumeration issue was discovered in Zammad before 3.4.1. The Create User functionality is implemented in a way that would enable an anonymous user to guess valid user email addresses. The application responds differently depending on whether the input supplied was recognized as associated with a valid user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T07:56:33.000Z
CVE-2020-26035 
An issue was discovered in Zammad before 3.4.1. There is Stored XSS via a Tags element in a TIcket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T07:56:18.000Z
CVE-2020-26037 
Directory Traversal vulnerability in Server functionalty in Even Balance Punkbuster version 1.902 before 1.905 allows remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-16T00:00:00.000Z
CVE-2020-26041 
An issue was discovered in Hoosk CmS v1.8.0. There is an Remote Code Execution vulnerability in install/index.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-29T13:40:19.000Z
CVE-2020-26042 
An issue was discovered in Hoosk CMS v1.8.0. There is a SQL injection vulnerability in install/index.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-29T13:43:20.000Z
CVE-2020-26043 
An issue was discovered in Hoosk CMS v1.8.0. There is a XSS vulnerability in install/index.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-29T13:45:37.000Z
CVE-2020-26045 
FUEL CMS 1.4.11 allows SQL Injection via parameter 'name' in /fuel/permissions/create/. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-05T14:16:59.000Z
CVE-2020-26046 
FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-05T14:17:17.000Z