rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-12017 
GE Grid Solutions Reason RT Clocks, RT430, RT431, and RT434, all firmware versions prior to 08A05. The device’s vulnerability in the web application could allow multiple unauthenticated attacks that could cause serious impact. The vulnerability may allow an unauthenticated attacker to execute arbitrary commands and send a request to a specific URL that could cause the device to become unresponsive. The unauthenticated attacker may change the password of the 'configuration' user account, allowing the attacker to modify the configuration of the device via the web interface using the new password. This vulnerability may also allow an unauthenticated attacker to bypass the authentication required to configure the device and reboot the system.
Problem types: cwe_id: CWE-306
description: MISSING AUTHENTICATION FOR CRITICAL FUNCTION CWE-306
Affected products: vendor: n/a
product: GE Grid Solutions Reason RT Clocks
Published: 2020-06-02T18:31:05.000Z
CVE-2020-12018 
Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An out-of-bounds vulnerability exists that may allow access to unauthorized data.
Problem types: cwe_id: CWE-125
description: OUT-OF-BOUNDS READ CWE-125
Affected products: vendor: n/a
product: Advantech WebAccess Node
Published: 2020-05-08T11:51:50.000Z
CVE-2020-12019 
WebAccess Node Version 8.4.4 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.
Problem types: cwe_id: CWE-121
description: STACK-BASED BUFFER OVERFLOW CWE-121
Affected products: vendor: n/a
product: WebAccess Node
Published: 2020-06-15T19:08:06.000Z
CVE-2020-12020 
Baxter ExactaMix EM 2400 Versions 1.10, 1.11, and 1.13 and ExactaMix EM1200 Versions 1.1, 1.2, and 1.4 does not restrict non administrative users from gaining access to the operating system and editing the application startup script. Successful exploitation of this vulnerability may allow an attacker to alter the startup script as the limited-access user.
Problem types: cwe_id: CWE-668
description: EXPOSURE OF RESOURCE TO WRONG SPHERE CWE-668
Affected products: vendor: n/a
product: Baxter ExactaMix EM 2400 & EM 1200
Published: 2020-06-29T13:51:49.000Z
CVE-2020-12021 
In OSIsoft PI Web API 2019 Patch 1 (1.12.0.6346) and all previous versions, the affected product is vulnerable to a cross-site scripting attack, which may allow an attacker to remotely execute arbitrary code.
Problem types: cwe_id: CWE-79
description: IMPROPER NEUTRALIZATION OF INPUT DURING WEB PAGE GENERATION ('CROSS-SITE SCRIPTING') CWE-79
Affected products: vendor: n/a
product: OSIsoft PI Web API 2019
Published: 2020-06-23T21:36:23.000Z
CVE-2020-12022 
Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An improper validation vulnerability exists that could allow an attacker to inject specially crafted input into memory where it can be executed.
Problem types: cwe_id: CWE-129
description: IMPROPER VALIDATION OF ARRAY INDEX CWE-129
Affected products: vendor: n/a
product: Advantech WebAccess Node
Published: 2020-05-08T11:38:54.000Z
CVE-2020-12023 Philips IntelliBridge Enterprise IBE Insertion of Sensitive Information into Log File
Philips IntelliBridge Enterprise (IBE), Versions B.12 and prior, IntelliBridge Enterprise system integration with SureSigns (VS4), EarlyVue (VS30) and IntelliVue Guardian (IGS). Unencrypted user credentials received in the IntelliBridge Enterprise (IBE) are logged within the transaction logs, which are secured behind the login based administrative web portal. The unencrypted user credentials sent from the affected products listed above, for the purpose of handshake or authentication with the Enterprise Systems, are logged as the payload in IntelliBridge Enterprise (IBE) within the transaction logs. An attacker with administrative privileges could exploit this vulnerability to read plain text credentials from log files.
Problem types: cwe_id: CWE-532
description: CWE-532
Affected products: vendor: Philips
product: IntelliBridge Enterprise (IBE)
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: ADJACENT_NETWORK
availabilityImpact: NONE
baseScore: 2
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: Customer Indiana University Health reported this vulnerability to Philips.
Published: 2020-06-11T19:11:03.000Z
CVE-2020-12024 
Baxter ExactaMix EM 2400 versions 1.10, 1.11, 1.13, 1.14 and ExactaMix EM1200 Versions 1.1, 1.2, 1.4 and 1.5 does not restrict access to the USB interface from an unauthorized user with physical access. Successful exploitation of this vulnerability may allow an attacker with physical access to the system the ability to load an unauthorized payload or unauthorized access to the hard drive by booting a live USB OS. This could impact confidentiality and integrity of the system and risk exposure of sensitive information including PHI.
Problem types: cwe_id: CWE-284
description: IMPROPER ACCESS CONTROL CWE-284
Affected products: vendor: n/a
product: Baxter ExactaMix EM 2400 & EM 1200
Published: 2020-06-29T13:51:31.000Z
CVE-2020-12025 
Rockwell Automation Logix Designer Studio 5000 Versions 32.00, 32.01, and 32.02 vulnerable to an xml external entity (XXE) vulnerability, which may allow an attacker to view hostnames or other resources from the program.
Problem types: cwe_id: CWE-611
description: IMPROPER RESTRICTION OF XML EXTERNAL ENTITY REFERENCE CWE-611
Affected products: vendor: n/a
product: Rockwell Automation Logix Designer Studio 5000 Versions 32.00, 32.01, and 32.02
Published: 2020-07-14T12:44:30.000Z
CVE-2020-12026 
Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow a low privilege user to overwrite files outside the application’s control.
Problem types: cwe_id: CWE-23
description: RELATIVE PATH TRAVERSAL CWE-23
Affected products: vendor: n/a
product: Advantech WebAccess Node
Published: 2020-05-08T11:48:19.000Z
CVE-2020-12027 Rockwell Automation FactoryTalk View SE
All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system. A remote, authenticated attacker may be able to leverage this information for reconnaissance efforts. Rockwell Automation recommends enabling built in security features found within FactoryTalk View SE. Users should follow guidance found in knowledge base articles 109056 and 1126943 to set up IPSec and/or HTTPs.
Problem types: cwe_id: CWE-200
description: EXPOSURE OF SENSITIVE INFORMATION TO AN UNAUTHORIZED ACTOR CWE-200
Affected products: vendor: Rockwell Automation
product: FactoryTalk View SE
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: Trend Micro’s Zero Day Initiative reported these vulnerabilities to Rockwell Automation
Published: 2020-07-20T15:13:36.859Z
CVE-2020-12028 Rockwell Automation FactoryTalk View SE
In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce appropriate permissions. Rockwell Automation recommends enabling built in security features found within FactoryTalk View SE. Users should follow guidance found in knowledge base articles 109056 and 1126943 to set up IPSec and/or HTTPs.
Problem types: cwe_id: CWE-264
description: PERMISSIONS, PRIVILEGES, AND ACCESS CONTROLS CWE-264
Affected products: vendor: Rockwell Automation
product: FactoryTalk View SE
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.3
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
version: 3.1
Credits: lang: en
value: Trend Micro’s Zero Day Initiative reported these vulnerabilities to Rockwell Automation
Published: 2020-07-20T15:17:11.738Z
CVE-2020-12029 Rockwell Automation FactoryTalk View SE
All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. A remote, unauthenticated attacker may be able to execute a crafted file on a remote endpoint that may result in remote code execution (RCE). Rockwell Automation recommends applying patch 1126289. Before installing this patch, the patch rollup dated 06 Apr 2020 or later MUST be applied. 1066644 – Patch Roll-up for CPR9 SRx.
Problem types: cwe_id: CWE-20
description: IMPROPER INPUT VALIDATION CWE-20
Affected products: vendor: Rockwell Automation
product: FactoryTalk View SE
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 9
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
version: 3.1
Credits: lang: en
value: Trend Micro’s Zero Day Initiative reported these vulnerabilities to Rockwell Automation
Published: 2020-07-20T14:56:42.195Z
CVE-2020-12030 Emerson WirelessHART Gateway
There is a flaw in the code used to configure the internal gateway firewall when the gateway's VLAN feature is enabled. If a user enables the VLAN setting, the internal gateway firewall becomes disabled resulting in exposure of all ports used by the gateway.
Problem types: cwe_id: CWE-284
description: IMPROPER ACCESS CONTROL CWE-284
Affected products: vendor: Emerson
product: Wireless 1410 Gateway
vendor: Emerson
product: Wireless 1420 Gateway
vendor: Emerson
product: Wireless 1552WU Gateway
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 10
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Emerson discovered this vulnerability and reported it to CISA once there was a solution.
Published: 2021-09-29T19:36:38.000Z
CVE-2020-12031 Rockwell Automation FactoryTalk View SE
In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a local, authenticated attacker may corrupt the associated memory space allowing for arbitrary code execution. Rockwell Automation recommends applying patch 1126290. Before installing this patch, the patch rollup dated 06 Apr 2020 or later MUST be applied. 1066644 – Patch Roll-up for CPR9 SRx.
Problem types: cwe_id: CWE-119
description: IMPROPER RESTRICTION OF OPERATIONS WITHIN THE BOUNDS OF A MEMORY BUFFER CWE-119
Affected products: vendor: Rockwell Automation
product: FactoryTalk View SE
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Trend Micro’s Zero Day Initiative reported these vulnerabilities to Rockwell Automation
Published: 2020-07-20T15:10:06.923Z
CVE-2020-12032 
Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store device data with sensitive information in an unencrypted database. This could allow an attacker with network access to view or modify sensitive data including PHI.
Problem types: cwe_id: CWE-311
description: MISSING ENCRYPTION OF SENSITIVE DATA CWE-311
Affected products: vendor: n/a
product: Baxter ExactaMix EM 2400 & EM 1200
Published: 2020-06-29T13:53:23.000Z
CVE-2020-12033 
In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not validate supplied identifiers, which could allow an unauthenticated, adjacent attacker to execute remote COM objects with elevated privileges.
Problem types: cwe_id: CWE-20
description: IMPROPER INPUT VALIDATION CWE-20
Affected products: vendor: n/a
product: Rockwell Automation FactoryTalk Services Platform
Published: 2020-06-23T21:45:14.000Z
CVE-2020-12034 
Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6.10, and 6.11, RSLinx Classic: Version 4.11.00 and prior, RSNetWorx software: Version 28.00.00 and prior, Studio 5000 Logix Designer software: Version 32 and prior) is vulnerable.The EDS subsystem does not provide adequate input sanitation, which may allow an attacker to craft specialized EDS files to inject SQL queries and manipulate the database storing the EDS files. This can lead to denial-of-service conditions.
Problem types: cwe_id: CWE-89
description: IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS USED IN AN SQL COMMAND ('SQL INJECTION') CWE-89
Affected products: vendor: n/a
product: EDS Subsystem, FactoryTalk Linx software (Previously called RSLinx Enterprise), RSLinx Classic, RSNetWorx software, Studio 5000 Logix Designer software
Published: 2020-05-20T02:38:00.000Z
CVE-2020-12035 
Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that provides access to biomedical information, device settings, calibration settings, and network configuration. This could allow an attacker to modify device settings and calibration.
Problem types: cwe_id: CWE-287
description: IMPROPER AUTHENTICATION CWE-287
Affected products: vendor: n/a
product: Baxter PrismaFlex and PrisMax
Published: 2020-06-29T13:49:50.000Z
CVE-2020-12036 
Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send treatment data to a PDMS (Patient Data Management System) or an EMR (Electronic Medical Record) system. An attacker could observe sensitive data sent from the device.
Problem types: cwe_id: CWE-319
description: CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-319
Affected products: vendor: n/a
product: Baxter PrismaFlex and PrisMax
Published: 2020-06-29T13:49:53.000Z
CVE-2020-12037 
Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send treatment data to a PDMS (Patient Data Management System) or an EMR (Electronic Medical Record) system. An attacker could observe sensitive data sent from the device.
Problem types: cwe_id: CWE-259
description: USE OF HARD-CODED PASSWORD CWE-259
Affected products: vendor: n/a
product: Baxter PrismaFlex and PrisMax
Published: 2020-06-29T13:49:46.000Z
CVE-2020-12038 
Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6.10, and 6.11, RSLinx Classic: Version 4.11.00 and prior, RSNetWorx software: Version 28.00.00 and prior, Studio 5000 Logix Designer software: Version 32 and prior) is vulnerable. A memory corruption vulnerability exists in the algorithm that matches square brackets in the EDS subsystem. This may allow an attacker to craft specialized EDS files to crash the EDSParser COM object, leading to denial-of-service conditions.
Problem types: cwe_id: CWE-119
description: IMPROPER RESTRICTION OF OPERATIONS WITHIN THE BOUNDS OF A MEMORY BUFFER CWE-119
Affected products: vendor: n/a
product: EDS Subsystem, FactoryTalk Linx software (Previously called RSLinx Enterprise), RSLinx Classic, RSNetWorx software, Studio 5000 Logix Designer software
Published: 2020-05-19T21:36:54.000Z
CVE-2020-12039 
Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX & Baxter Spectrum Infusion System v's8.x model 35700BAX2 contain hardcoded passwords when physically entered on the keypad provide access to biomedical menus including device settings, view calibration values, network configuration of Sigma Spectrum WBM if installed.
Problem types: cwe_id: CWE-259
description: CWE-259
Affected products: vendor: n/a
product: Baxter Sigma Spectrum Infusion Pumps
Published: 2020-06-29T13:45:48.000Z
CVE-2020-12040 
Sigma Spectrum Infusion System v's6.x (model 35700BAX) and Baxter Spectrum Infusion System Version(s) 8.x (model 35700BAX2) at the application layer uses an unauthenticated clear-text communication channel to send and receive system status and operational data. This could allow an attacker that has circumvented network security measures to view sensitive non-private data or to perform a man-in-the-middle attack.
Problem types: cwe_id: CWE-319
description: CWE-319
Affected products: vendor: n/a
product: Baxter Sigma Spectrum Infusion Pumps
Published: 2020-06-29T13:45:58.000Z
CVE-2020-12041 
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) telnet Command-Line Interface, grants access to sensitive data stored on the WBM that permits temporary configuration changes to network settings of the WBM, and allows the WBM to be rebooted. Temporary configuration changes to network settings are removed upon reboot.
Problem types: cwe_id: CWE-732
description: INCORRECT PERMISSION ASSIGNMENT FOR CRITICAL RESOURCE CWE-732
Affected products: vendor: n/a
product: Baxter Sigma Spectrum Infusion Pumps
Published: 2020-06-29T13:43:52.000Z
CVE-2020-12042 
Opto 22 SoftPAC Project Version 9.6 and prior. Paths specified within the zip files used to update the SoftPAC firmware are not sanitized. As a result, an attacker with user privileges can gain arbitrary file write access with system access.
Problem types: cwe_id: CWE-347
description: IMPROPER VERIFICATION OF CRYPTOGRAPHIC SIGNATURE CWE-347
Affected products: vendor: n/a
product: Opto 22 SoftPAC Project
Published: 2020-05-14T20:28:03.000Z
CVE-2020-12043 
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when configured for wireless networking the FTP service operating on the WBM remains operational until the WBM is rebooted.
Problem types: cwe_id: CWE-672
description: OPERATION ON A RESOURCE AFTER EXPIRATION OR RELEASE CWE-672
Affected products: vendor: n/a
product: Baxter Sigma Spectrum Infusion Pumps
Published: 2020-06-29T13:41:42.000Z
CVE-2020-12045 
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when used in conjunction with a Baxter Spectrum v8.x (model 35700BAX2), operates a Telnet service on Port 1023 with hard-coded credentials.
Problem types: cwe_id: CWE-259
description: USE OF HARD CODED PASSWORD CWE-259
Affected products: vendor: n/a
product: Baxter Sigma Spectrum Infusion Pumps
Published: 2020-06-29T13:43:40.000Z
CVE-2020-12046 
Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC’s firmware files’ signatures are not verified upon firmware update. This allows an attacker to replace legitimate firmware files with malicious files.
Problem types: cwe_id: CWE-347
description: IMPROPER VERIFICATION OF CRYPTOGRAPHIC SIGNATURE CWE-347
Affected products: vendor: n/a
product: Opto 22 SoftPAC Project
Published: 2020-05-14T20:30:55.000Z
CVE-2020-12047 
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter Spectrum v8.x (model 35700BAX2) in a factory-default wireless configuration enables an FTP service with hard-coded credentials.
Problem types: cwe_id: CWE-259
description: USE OF HARD-CODED PASSWORD CWE-259
Affected products: vendor: n/a
product: Baxter Sigma Spectrum Infusion Pumps
Published: 2020-06-29T13:41:37.000Z
CVE-2020-12048 
Phoenix Hemodialysis Delivery System SW 3.36 and 3.40, The Phoenix Hemodialysis device does not support data-in-transit encryption (e.g., TLS/SSL) when transmitting treatment and prescription data on the network between the Phoenix system and the Exalis dialysis data management tool. An attacker with access to the network could observe sensitive treatment and prescription data sent between the Phoenix system and the Exalis tool.
Problem types: cwe_id: CWE-319
description: CLEARTEXT TRANSMISSION OF SENSITIVE DATA CWE-319
Affected products: vendor: n/a
product: Baxter Phoenix Hemodialysis Delivery System
Published: 2020-06-29T13:48:04.000Z
CVE-2020-12049 
An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AF_UNIX socket could use this to make the system service reach its file descriptor limit, denying service to subsequent D-Bus clients.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-08T00:00:00.000Z
CVE-2020-12050 
SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new contents that cause loading of an arbitrary library.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-30T16:09:05.000Z
CVE-2020-12051 
The CentralAuth extension through REL1_34 for MediaWiki allows remote attackers to obtain sensitive hidden account information via an api.php?action=query&meta=globaluserinfo&guiuser= request. In other words, the information can be retrieved via the action API even though access would be denied when simply visiting wiki/Special:CentralAuth in a web browser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-21T21:24:33.000Z
CVE-2020-12052 
Grafana version < 6.7.3 is vulnerable for annotation popup XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-27T12:30:09.000Z
CVE-2020-12053 
In Unisys Stealth 3.4.x, 4.x and 5.x before 5.0.026, if certificate-based authorization is used without HTTPS, an endpoint could be authorized without a private key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T19:53:58.000Z
CVE-2020-12054 
The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter (a search query). Also affected are 16 themes (if the plugin is enabled) by the same author: Alchemist and Alchemist PRO, Izabel and Izabel PRO, Chique and Chique PRO, Clean Enterprise and Clean Enterprise PRO, Bold Photography PRO, Intuitive PRO, Devotepress PRO, Clean Blocks PRO, Foodoholic PRO, Catch Mag PRO, Catch Wedding PRO, and Higher Education PRO.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-23T12:39:32.000Z
CVE-2020-12058 
Several XSS vulnerabilities in osCommerce CE Phoenix before 1.0.6.0 allow an attacker to inject and execute arbitrary JavaScript code. The malicious code can be injected as follows: the page parameter to catalog/admin/order_status.php, catalog/admin/tax_rates.php, catalog/admin/languages.php, catalog/admin/countries.php, catalog/admin/tax_classes.php, catalog/admin/reviews.php, or catalog/admin/zones.php; or the zpage or spage parameter to catalog/admin/geo_zones.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-03T13:09:48.000Z
CVE-2020-12059 
An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-22T00:00:00.000Z
CVE-2020-12061 
An issue was discovered in Nitrokey FIDO U2F firmware through 1.1. Communication between the microcontroller and the secure element transmits credentials in plain. This allows an adversary to eavesdrop the communication and derive the secrets stored in the microcontroller. As a result, the attacker is able to arbitrarily manipulate the firmware of the microcontroller.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-21T11:03:45.000Z