rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-11650 
An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3 before 11.3-U1. It allows a denial of service. The login authentication component has no limits on the length of an authentication message or the rate at which such messages are sent.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-08T22:12:46.000Z
CVE-2020-11651 
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-30T16:58:09.000Z
CVE-2020-11652 
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-30T17:00:03.000Z
CVE-2020-11653 
An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communication with a TLS termination proxy uses PROXY version 2. There can be an assertion failure and daemon restart, which causes a performance loss.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-08T00:00:00.000Z
CVE-2020-11655 
SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-09T02:49:33.000Z
CVE-2020-11656 
In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-09T02:49:18.000Z
CVE-2020-11658 
CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization.
Problem types: description: Authorization Bypass
Affected products: vendor: n/a
product: CA API Developer Portal
Published: 2020-04-15T20:46:55.000Z
CVE-2020-11659 
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administration action.
Problem types: description: Authorization Schema Bypass
Affected products: vendor: n/a
product: CA API Developer Portal
Published: 2020-04-15T20:47:05.000Z
CVE-2020-11660 
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive information.
Problem types: description: Authorization Schema Bypass
Affected products: vendor: n/a
product: CA API Developer Portal
Published: 2020-04-15T20:47:13.000Z
CVE-2020-11661 
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view and edit user data.
Problem types: description: Authorization Schema Bypass
Affected products: vendor: n/a
product: CA API Developer Portal
Published: 2020-04-15T19:08:23.000Z
CVE-2020-11662 
CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-Origin Resource Sharing flaw and access sensitive information.
Problem types: description: CORS OriginHeaderScrutiny
Affected products: vendor: n/a
product: CA API Developer Portal
Published: 2020-04-15T19:08:30.000Z
CVE-2020-11663 
CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to perform open redirect attacks.
Problem types: description: Open Redirect
Affected products: vendor: n/a
product: CA API Developer Portal
Published: 2020-04-15T19:08:37.000Z
CVE-2020-11664 
CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.
Problem types: description: Open Redirect
Affected products: vendor: n/a
product: CA API Developer Portal
Published: 2020-04-15T19:02:58.000Z
CVE-2020-11665 
CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.
Problem types: description: Open Redirect
Affected products: vendor: n/a
product: CA API Developer Portal
Published: 2020-04-15T19:03:09.000Z
CVE-2020-11666 
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privileges.
Problem types: description: Privilege Issue
Affected products: vendor: n/a
product: CA API Developer Portal
Published: 2020-04-15T19:03:19.000Z
CVE-2020-11668 
In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors, aka CID-a246b4d54770.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-09T20:13:02.000Z
CVE-2020-11669 
An issue was discovered in the Linux kernel before 5.2 on the powerpc platform. arch/powerpc/kernel/idle_book3s.S does not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR, aka CID-53a712bae5dd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-10T14:40:19.000Z
CVE-2020-11671 
Lack of authorization controls in REST API functions in TeamPass through 2.1.27.36 allows any TeamPass user with a valid API token to become a TeamPass administrator and read/modify all passwords via authenticated api/index.php REST API calls. NOTE: the API is not available by default.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-04T13:27:36.000Z
CVE-2020-11673 
An issue was discovered in the Responsive Poll through 1.3.4 for Wordpress. It allows an unauthenticated user to manipulate polls, e.g., delete, clone, or view a hidden poll. This is due to the usage of the callback wp_ajax_nopriv function in Includes/Total-Soft-Poll-Ajax.php for sensitive operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-13T15:01:12.000Z
CVE-2020-11674 
Cerner medico 26.00 allows variable reuse, possibly causing data corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T13:50:09.000Z
CVE-2020-11675 
Cerner medico 26.00 has a Local Buffer Overflow (issue 1 of 3).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T13:51:49.000Z
CVE-2020-11676 
Cerner medico 26.00 has a Local Buffer Overflow (issue 2 of 3).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T13:53:34.000Z
CVE-2020-11677 
Cerner medico 26.00 has a Local Buffer Overflow (issue 3 of 3).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T13:54:54.000Z
CVE-2020-11679 
Castel NextGen DVR v1.0.0 is vulnerable to privilege escalation through the Adminstrator/Users/Edit/:UserId functionality. Adminstrator/Users/Edit/:UserId fails to check that the request was submitted by an Administrator. This allows a normal user to escalate their privileges by adding additional roles to their account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-04T18:31:28.000Z
CVE-2020-11680 
Castel NextGen DVR v1.0.0 is vulnerable to authorization bypass on all administrator functionality. The application fails to check that a request was submitted by an administrator. Consequently, a normal user can perform actions including, but not limited to, creating/modifying the file store, creating/modifying alerts, creating/modifying users, etc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-04T18:38:21.000Z
CVE-2020-11681 
Castel NextGen DVR v1.0.0 stores and displays credentials for the associated SMTP server in cleartext. Low privileged users can exploit this to create an administrator user and obtain the SMTP credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-04T18:40:52.000Z
CVE-2020-11682 
Castel NextGen DVR v1.0.0 is vulnerable to CSRF in all state-changing request. A __RequestVerificationToken is set by the web interface, and included in requests sent by web interface. However, this token is not verified by the application: the token can be removed from all requests and the request will succeed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-04T19:10:00.000Z
CVE-2020-11683 
A timing side channel was discovered in AT91bootstrap before 3.9.2. It can be exploited by attackers with physical access to forge CMAC values and subsequently boot arbitrary code on an affected system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T13:31:58.000Z
CVE-2020-11684 
AT91bootstrap before 3.9.2 does not properly wipe encryption and authentication keys from memory before passing control to a less privileged software component. This can be exploited to disclose these keys and subsequently encrypt and sign the next boot stage (such as the bootloader).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T13:32:01.000Z
CVE-2020-11685 
In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-22T13:52:31.000Z
CVE-2020-11686 
In JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity server settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-22T13:52:33.000Z
CVE-2020-11687 
In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-22T13:52:34.000Z
CVE-2020-11688 
In JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-22T13:52:36.000Z
CVE-2020-11689 
In JetBrains TeamCity before 2019.2.1, a user without appropriate permissions was able to import settings from the settings.kts file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-22T13:52:38.000Z
CVE-2020-11690 
In JetBrains IntelliJ IDEA before 2020.1, the license server could be resolved to an untrusted host in some cases.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-22T13:52:39.000Z
CVE-2020-11691 
In JetBrains Hub before 2020.1.12099, content spoofing in the Hub OAuth error message was possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-22T13:52:41.000Z
CVE-2020-11692 
In JetBrains YouTrack before 2020.1.659, DB export was accessible to read-only administrators.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-22T13:52:43.000Z
CVE-2020-11693 
JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-22T13:52:44.000Z
CVE-2020-11694 
In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included. This is fixed in 2019.2.6 and 2019.3.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-10T20:46:27.000Z
CVE-2020-11696 
In Combodo iTop a menu shortcut name can be exploited with a stored XSS payload. This is fixed in all iTop packages (community, essential, professional) in version 2.7.0 and iTop essential and iTop professional in version 2.6.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-05T21:12:55.000Z
CVE-2020-11697 
In Combodo iTop, dashboard ids can be exploited with a reflective XSS payload. This is fixed in all iTop packages (community, essential, professional) for version 2.7.0 and in iTop essential and iTop professional packages for version 2.6.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-05T21:01:27.000Z
CVE-2020-11698 
An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snmp-x.php would allow a remote attacker to inject commands into the file snmpd.conf that would allow executing commands on the target server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-17T16:28:20.000Z
CVE-2020-11699 
An issue was discovered in Titan SpamTitan 7.07. Improper validation of the parameter fname on the page certs-x.php would allow an attacker to execute remote code on the target server. The user has to be authenticated before interacting with this page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-17T16:31:05.000Z
CVE-2020-11700 
An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter fname, used on the page certs-x.php, would allow an attacker to retrieve the contents of arbitrary files. The user has to be authenticated before interacting with this page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-17T16:34:18.000Z
CVE-2020-11701 
An issue was discovered in ProVide (formerly zFTPServer) through 13.1. CSRF exists in the User Web Interface, as demonstrated by granting filesystem access to the public for uploading and deleting files and directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-12T02:44:27.000Z
CVE-2020-11702 
An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The User Web Interface has Multiple Stored and Reflected XSS issues. Collaborate is Reflected via the filename parameter. Collaborate is Stored via the displayname parameter. Deletemultiple is Reflected via the files parameter. Share is Reflected via the target parameter. Share is Stored via the displayname parameter. Waitedit is Reflected via the Host header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-12T02:44:14.000Z
CVE-2020-11703 
An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/GetInheritedProperties allows HTTP Response Splitting via the language parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-12T02:44:06.000Z
CVE-2020-11704 
An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Web Interface has Multiple Stored and Reflected XSS. GetInheritedProperties is Reflected via the groups parameter. GetUserInfo is Reflected via POST data. SetUserInfo is Stored via the general parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-12T02:43:57.000Z
CVE-2020-11705 
An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/ImportCertificate allows an attacker to load an arbitrary certificate in .pfx format or overwrite arbitrary files via the fileName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-12T02:43:48.000Z
CVE-2020-11706 
An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Interface allows CSRF for actions such as: Change any username and password, admin ones included; Create/Delete users; Enable/Disable Services; Set a rogue update proxy; and Shutdown the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-12T02:43:29.000Z
CVE-2020-11707 
An issue was discovered in ProVide (formerly zFTPServer) through 13.1. It doesn't enforce permission over Windows Symlinks or Junctions. As a result, a low-privileged user (non-admin) can craft a Junction Link in a directory he has full control of, breaking out of the sandbox.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-12T02:42:41.000Z
CVE-2020-11708 
An issue was discovered in ProVide (formerly zFTPServer) through 13.1. Privilege escalation can occur via the /ajax/SetUserInfo messages parameter because of the EXECUTE() feature, which is for executing programs when certain events are triggered.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-12T02:42:30.000Z
CVE-2020-11709 
cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect and set_header functions, which creates possibilities for CRLF injection and HTTP response splitting in some specific contexts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-12T13:30:29.000Z
CVE-2020-11710 
An issue was discovered in docker-kong (for Kong) through 2.0.3. The admin API port may be accessible on interfaces other than 127.0.0.1. NOTE: The vendor argue that this CVE is not a vulnerability because it has an inaccurate bug scope and patch links. “1) Inaccurate Bug Scope - The issue scope was on Kong's docker-compose template, and not Kong's docker image itself. In reality, this issue is not associated with any version of the Kong gateway. As such, the description stating ‘An issue was discovered in docker-kong (for Kong) through 2.0.3.’ is incorrect. This issue only occurs if a user decided to spin up Kong via docker-compose without following the security documentation. The docker-compose template is meant for users to quickly get started with Kong, and is meant for development purposes only. 2) Incorrect Patch Links - The CVE currently points to a documentation improvement as a “Patch” link: https://github.com/Kong/docs.konghq.com/commit/d693827c32144943a2f45abc017c1321b33ff611.This link actually points to an improvement Kong Inc made for fool-proofing. However, instructions for how to protect the admin API were already well-documented here: https://docs.konghq.com/2.0.x/secure-admin-api/#network-layer-access-restrictions , which was first published back in 2017 (as shown in this commit: https://github.com/Kong/docs.konghq.com/commit/e99cf875d875dd84fdb751079ac37882c9972949) Lastly, the hyperlink to https://github.com/Kong/kong (an unrelated Github Repo to this issue) on the Hyperlink list does not include any meaningful information on this topic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-12T16:04:40.000Z
CVE-2020-11711 
An issue was discovered in Stormshield SNS 3.8.0. Authenticated Stored XSS in the admin login panel leads to SSL VPN credential theft. A malicious disclaimer file can be uploaded from the admin panel. The resulting file is rendered on the authentication interface of the admin panel. It is possible to inject malicious HTML content in order to execute JavaScript inside a victim's browser. This results in a stored XSS on the authentication interface of the admin panel. Moreover, an unsecured authentication form is present on the authentication interface of the SSL VPN captive portal. Users are allowed to save their credentials inside the browser. If an administrator saves his credentials through this unsecured form, these credentials could be stolen via the stored XSS on the admin panel without user interaction. Another possible exploitation would be modification of the authentication form of the admin panel into a malicious form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-25T00:00:00.000Z
CVE-2020-11712 
Open Upload through 0.4.3 allows XSS via index.php?action=u and the filename field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-12T16:21:42.000Z
CVE-2020-11713 
wolfSSL 4.3.0 has mulmod code in wc_ecc_mulmod_ex in ecc.c that does not properly resist timing side-channel attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-12T16:54:24.000Z
CVE-2020-11714 
eten PSG-6528VM 1.1 devices allow XSS via System Contact or System Location.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-12T17:32:39.000Z
CVE-2020-11715 
Panasonic P99 devices through 2020-04-10 have Incorrect Access Control. NOTE: the vendor states that all affected products are at "End-of-software-support."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-19T16:07:05.000Z
CVE-2020-11716 
Panasonic P110, Eluga Z1 Pro, Eluga X1, and Eluga X1 Pro devices through 2020-04-10 have Insecure Permissions. NOTE: the vendor states that all affected products are at "End-of-software-support."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-20T13:09:01.000Z
CVE-2020-11717 
An issue was discovered in Programi 014 31.01.2020. It has multiple SQL injection vulnerabilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-21T20:54:42.000Z
CVE-2020-11718 
An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and below. Its software-update packages are downloaded via cleartext HTTP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-23T15:54:35.000Z
CVE-2020-11719 
An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below. It relies on broken encryption with a weak and guessable static encryption key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-23T16:02:25.000Z
CVE-2020-11720 
An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below. During the installation, it sets up administrative access by default with the account admin and password 0000. After the installation, users/admins are not prompted to change this password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-23T15:58:55.000Z
CVE-2020-11721 
load_png in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which can cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-12T18:39:18.000Z
CVE-2020-11722 
Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua bytecode embedded in an uploaded .crawlrc file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-12T18:59:46.000Z
CVE-2020-11723 
Cellebrite UFED 5.0 through 7.29 uses four hardcoded RSA private keys to authenticate to the ADB daemon on target devices. Extracted keys can be used to place evidence onto target devices when performing a forensic extraction.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-14T19:55:00.000Z
CVE-2020-11724 
An issue was discovered in OpenResty before 1.15.8.4. ngx_http_lua_subrequest.c allows HTTP request smuggling, as demonstrated by the ngx.location.capture API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-12T20:55:26.000Z