rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-5574 
HTML attribute value injection vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type for AWS 7 r.4606 (7.2.1) and earlier (Movable Type for AWS 7), Movable Type 6.5.3 and earlier (Movable Type 6.5), Movable Type Advanced 6.5.3 and earlier (Movable Type Advanced 6.5), Movable Type 6.3.11 and earlier (Movable Type 6.3), Movable Type Advanced 6.3.11 and earlier (Movable Type 6.3), Movable Type Premium 1.29 and earlier, and Movable Type Premium Advanced 1.29 and earlier) allows remote attackers to inject arbitrary HTML attribute value via unspecified vectors.
Problem types: description: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Affected products: vendor: Six Apart Ltd.
product: Movable Type
Published: 2020-05-14T01:00:21.000Z
CVE-2020-5575 
Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type for AWS 7 r.4606 (7.2.1) and earlier (Movable Type for AWS 7), Movable Type 6.5.3 and earlier (Movable Type 6.5), Movable Type Advanced 6.5.3 and earlier (Movable Type Advanced 6.5), Movable Type 6.3.11 and earlier (Movable Type 6.3), Movable Type Advanced 6.3.11 and earlier (Movable Type 6.3), Movable Type Premium 1.29 and earlier, and Movable Type Premium Advanced 1.29 and earlier) allows remote attackers to inject arbitrary script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Six Apart Ltd.
product: Movable Type
Published: 2020-05-14T01:00:21.000Z
CVE-2020-5576 
Cross-site request forgery (CSRF) vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type for AWS 7 r.4606 (7.2.1) and earlier (Movable Type for AWS 7), Movable Type 6.5.3 and earlier (Movable Type 6.5), Movable Type Advanced 6.5.3 and earlier (Movable Type Advanced 6.5), Movable Type 6.3.11 and earlier (Movable Type 6.3), Movable Type Advanced 6.3.11 and earlier (Movable Type 6.3), Movable Type Premium 1.29 and earlier, and Movable Type Premium Advanced 1.29 and earlier) allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: Six Apart Ltd.
product: Movable Type
Published: 2020-05-14T01:00:22.000Z
CVE-2020-5577 
Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type for AWS 7 r.4606 (7.2.1) and earlier (Movable Type for AWS 7), Movable Type 6.5.3 and earlier (Movable Type 6.5), Movable Type Advanced 6.5.3 and earlier (Movable Type Advanced 6.5), Movable Type 6.3.11 and earlier (Movable Type 6.3), Movable Type Advanced 6.3.11 and earlier (Movable Type 6.3), Movable Type Premium 1.29 and earlier, and Movable Type Premium Advanced 1.29 and earlier) allow remote authenticated attackers to upload arbitrary files and execute a php script via unspecified vectors.
Problem types: description: Unrestricted Upload of File with Dangerous Type
Affected products: vendor: Six Apart Ltd.
product: Movable Type
Published: 2020-05-14T01:00:22.000Z
CVE-2020-5579 
SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: SQL Injection
Affected products: vendor: Stranger Studios
product: Paid Memberships
Published: 2020-05-20T10:15:21.000Z
CVE-2020-5580 
Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to view and/or alter Single sign-on settings via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2020-06-30T10:20:40.000Z
CVE-2020-5581 
Path traversal vulnerability in Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to obtain unintended information via unspecified vectors.
Problem types: description: Path Traversal
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2020-06-30T10:20:41.000Z
CVE-2020-5582 
Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to alter the data for the file attached to Report via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2020-06-30T10:20:41.000Z
CVE-2020-5583 
Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to obtain unauthorized Multi-Report's data via unspecified vectors.
Problem types: description: Fails to restrict access
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2020-06-30T10:20:42.000Z
CVE-2020-5584 
Cybozu Garoon 4.0.0 to 5.0.1 allow remote attackers to obtain unintended information via unspecified vectors.
Problem types: description: Information Disclosure
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2020-06-30T10:20:42.000Z
CVE-2020-5585 
Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2020-06-30T10:20:43.000Z
CVE-2020-5586 
Cross-site scripting vulnerability in Cybozu Garoon 4.10.3 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2020-06-30T10:20:43.000Z
CVE-2020-5587 
Cybozu Garoon 4.0.0 to 5.0.1 allow remote authenticated attackers to obtain unintended information via unspecified vectors.
Problem types: description: Information Disclosure
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2020-06-30T10:20:44.000Z
CVE-2020-5588 
Path traversal vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to obtain unintended information via unspecified vectors.
Problem types: description: Path Traversal
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2020-06-30T10:20:44.000Z
CVE-2020-5589 
SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware versions prior to 4.5.2 have vulnerability that someone within the Bluetooth range can make the Bluetooth pairing and operate such as changing volume of the product.
Problem types: cwe_id: CWE-306
description: CWE-306: missing authentication for critical function
Affected products: vendor: Sony Corporation
product: Sony wireless headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N, WI-SP600N
Published: 2020-06-09T08:00:17.000Z
CVE-2020-5590 
Directory traversal vulnerability in EC-CUBE 3.0.0 to 3.0.18 and 4.0.0 to 4.0.3 allows remote authenticated attackers to delete arbitrary files and/or directories on the server via unspecified vectors.
Problem types: description: Directory traversal
Affected products: vendor: EC-CUBE CO.,LTD.
product: EC-CUBE
Published: 2020-06-19T09:35:19.000Z
CVE-2020-5591 
XACK DNS 1.11.0 to 1.11.4, 1.10.0 to 1.10.8, 1.8.0 to 1.8.23, 1.7.0 to 1.7.18, and versions before 1.7.0 allow remote attackers to cause a denial of service condition resulting in degradation of the recursive resolver's performance or compromising the recursive resolver as a reflector in a reflection attack.
Problem types: description: Denial-of-service (DoS)
Affected products: vendor: XACK, Inc.
product: XACK DNS
Published: 2020-06-05T10:05:15.000Z
CVE-2020-5592 
Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Zenphoto
product: Zenphoto
Published: 2020-06-11T07:00:18.000Z
CVE-2020-5593 
Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file.
Problem types: description: Code injection
Affected products: vendor: Zenphoto
product: Zenphoto
Published: 2020-06-11T07:00:19.000Z
CVE-2020-5594 
Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a vulnerability that allows cleartext transmission of sensitive information between CPU modules and GX Works3 and/or GX Works2 via unspecified vectors.
Problem types: description: Cleartext Transmission of Sensitive Information
Affected products: vendor: Mitsubishi Electric Corporation
product: MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules
Published: 2020-06-23T07:35:23.000Z
CVE-2020-5595 
TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains a buffer overflow vulnerability, which may allow a remote attacker to stop the network functions of the products or execute a malicious program via a specially crafted packet.
Problem types: description: Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: Mitsubishi Electric Corporation
product: GOT2000 series GT27, GT25, and GT23
Published: 2020-07-07T08:05:39.000Z
CVE-2020-5596 
TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) does not properly manage sessions, which may allow a remote attacker to stop the network functions of the products or execute a malicious program via a specially crafted packet.
Problem types: description: Session fixation
Affected products: vendor: Mitsubishi Electric Corporation
product: GOT2000 series GT27, GT25, and GT23
Published: 2020-07-07T08:05:39.000Z
CVE-2020-5597 
TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains a null pointer dereference vulnerability, which may allow a remote attacker to stop the network functions of the products or execute a malicious program via a specially crafted packet.
Problem types: description: NULL Pointer Dereference
Affected products: vendor: Mitsubishi Electric Corporation
product: GOT2000 series GT27, GT25, and GT23
Published: 2020-07-07T08:05:39.000Z
CVE-2020-5598 
TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains an improper access control vulnerability, which may which may allow a remote attacker tobypass access restriction and stop the network functions of the products or execute a malicious program via a specially crafted packet.
Problem types: description: Improper Access Control
Affected products: vendor: Mitsubishi Electric Corporation
product: GOT2000 series GT27, GT25, and GT23
Published: 2020-07-07T08:05:40.000Z
CVE-2020-5599 
TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains an improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability, which may allow a remote attacker to stop the network functions of the products or execute a malicious program via a specially crafted packet.
Problem types: description: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Affected products: vendor: Mitsubishi Electric Corporation
product: GOT2000 series GT27, GT25, and GT23
Published: 2020-07-07T08:05:40.000Z
CVE-2020-5600 
TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains a resource management error vulnerability, which may allow a remote attacker to stop the network functions of the products or execute a malicious program via a specially crafted packet.
Problem types: description: Resource Management Errors
Affected products: vendor: Mitsubishi Electric Corporation
product: GOT2000 series GT27, GT25, and GT23
Published: 2020-07-07T08:05:41.000Z
CVE-2020-5601 
Chrome Extension for e-Tax Reception System Ver1.0.0.0 allows remote attackers to execute an arbitrary command via unspecified vectors.
Problem types: description: Arbitrary command execution
Affected products: vendor: National Tax Agency
product: Chrome Extension for e-Tax Reception System
Published: 2020-06-30T10:20:44.000Z
CVE-2020-5602 
Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit (EM Configurator) Ver. 1.010L and earlier, GT Designer3 (GOT2000) Ver. 1.221F and earlier, GX LogViewer Ver. 1.96A and earlier, GX Works2 Ver. 1.586L and earlier, GX Works3 Ver. 1.058L and earlier, M_CommDTM-HART Ver. 1.00A, M_CommDTM-IO-Link Ver. 1.02C and earlier, MELFA-Works Ver. 4.3 and earlier, MELSEC-L Flexible High-Speed I/O Control Module Configuration Tool Ver.1.004E and earlier, MELSOFT FieldDeviceConfigurator Ver. 1.03D and earlier, MELSOFT iQ AppPortal Ver. 1.11M and earlier, MELSOFT Navigator Ver. 2.58L and earlier, MI Configurator Ver. 1.003D and earlier, Motion Control Setting Ver. 1.005F and earlier, MR Configurator2 Ver. 1.72A and earlier, MT Works2 Ver. 1.156N and earlier, RT ToolBox2 Ver. 3.72A and earlier, and RT ToolBox3 Ver. 1.50C and earlier) allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vectors.
Problem types: description: XML external entities (XXE)
Affected products: vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electoric FA Engineering Software
Published: 2020-06-30T10:20:45.000Z
CVE-2020-5603 
Uncontrolled resource consumption vulnerability in Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit (EM Configurator) Ver. 1.010L and earlier, GT Designer3 (GOT2000) Ver. 1.221F and earlier, GX LogViewer Ver. 1.96A and earlier, GX Works2 Ver. 1.586L and earlier, GX Works3 Ver. 1.058L and earlier, M_CommDTM-HART Ver. 1.00A, M_CommDTM-IO-Link Ver. 1.02C and earlier, MELFA-Works Ver. 4.3 and earlier, MELSEC-L Flexible High-Speed I/O Control Module Configuration Tool Ver.1.004E and earlier, MELSOFT FieldDeviceConfigurator Ver. 1.03D and earlier, MELSOFT iQ AppPortal Ver. 1.11M and earlier, MELSOFT Navigator Ver. 2.58L and earlier, MI Configurator Ver. 1.003D and earlier, Motion Control Setting Ver. 1.005F and earlier, MR Configurator2 Ver. 1.72A and earlier, MT Works2 Ver. 1.156N and earlier, RT ToolBox2 Ver. 3.72A and earlier, and RT ToolBox3 Ver. 1.50C and earlier) allows an attacker to cause a denial of service (DoS) condition attacks via unspecified vectors.
Problem types: description: Uncontrolled Resource Consumption
Affected products: vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electoric FA Engineering Software
Published: 2020-06-30T10:20:45.000Z
CVE-2020-5604 
Android App 'Mercari' (Japan version) prior to version 3.52.0 allows arbitrary method execution of a Java object by a remote attacker via a Man-In-The-Middle attack by using Java Reflection API of JavaScript code on WebView.
Problem types: description: Exposed Dangerous Method or Function
Affected products: vendor: Mercari, Inc.
product: Android App 'Mercari' (Japan version)
Published: 2020-07-09T01:05:20.000Z
CVE-2020-5605 
Directory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to access sensitive information such as setting values via unspecified vectors.
Problem types: description: Directory traversal
Affected products: vendor: BUFFALO INC.
product: WHR-G54S
Published: 2020-09-18T05:05:24.000Z
CVE-2020-5606 
Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary script via a specially crafted page.
Problem types: description: Cross-site scripting
Affected products: vendor: BUFFALO INC.
product: WHR-G54S
Published: 2020-09-18T05:05:24.000Z
CVE-2020-5607 
Open redirect vulnerability in SHIRASAGI v1.13.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Problem types: description: Open Redirect
Affected products: vendor: SHIRASAGI Project
product: SHIRASAGI
Published: 2020-07-10T01:30:18.000Z
CVE-2020-5608 
CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to bypass authentication and send altered communication packets via unspecified vectors.
Problem types: description: Authentication bypass
Affected products: vendor: Yokogawa Electric Corporation
product: CAMS for HIS
Published: 2020-08-05T13:13:02.000Z
CVE-2020-5609 
Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to create or overwrite arbitrary files and run arbitrary commands via unspecified vectors.
Problem types: description: Directory traversal
Affected products: vendor: Yokogawa Electric Corporation
product: CAMS for HIS
Published: 2020-08-05T13:12:59.000Z
CVE-2020-5610 
Global TechStream (GTS) for TOYOTA dealers version 15.10.032 and earlier allows an attacker to cause a denial-of-service (DoS) condition and execute arbitrary code via unspecified vectors.
Problem types: description: Denial-of-service (DoS)
Affected products: vendor: TOYOTA MOTOR CORPORATION
product: Global TechStream (GTS) for TOYOTA dealers
Published: 2020-07-30T08:00:14.000Z
CVE-2020-5611 
Cross-site request forgery (CSRF) vulnerability in Social Sharing Plugin versions prior to 1.2.10 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: Social Rocket
product: Social Sharing Plugin
Published: 2020-07-27T06:55:12.000Z
CVE-2020-5612 
Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.
Problem types: description: Cross-site scripting
Affected products: vendor: kujirahand
product: KonaWiki
Published: 2020-07-29T01:05:20.000Z
CVE-2020-5613 
Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.
Problem types: description: Cross-site scripting
Affected products: vendor: kujirahand
product: KonaWiki
Published: 2020-07-29T01:05:28.000Z
CVE-2020-5614 
Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors.
Problem types: description: Directory traversal
Affected products: vendor: kujirahand
product: KonaWiki
Published: 2020-07-29T01:05:37.000Z
CVE-2020-5615 
Cross-site request forgery (CSRF) vulnerability in [Calendar01] free edition ver1.0.0 and [Calendar02] free edition ver1.0.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: PHP Factory
product: [Calendar01] and [Calendar02]
Published: 2020-08-04T01:05:49.000Z
CVE-2020-5616 
[Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01] [Calendar01] free edition ver1.0.0, [Calendar02] free edition ver1.0.0, [PKOBO-News01] free edition ver1.0.3 and earlier, [PKOBO-vote01] free edition ver1.0.1 and earlier, [Telop01] free edition ver1.0.0, [Gallery01] free edition ver1.0.3 and earlier, [CalendarForm01] free edition ver1.0.3 and earlier, and [Link01] free edition ver1.0.0 allows remote attackers to bypass authentication and log in to the product with administrative privileges via unspecified vectors.
Problem types: description: Authentication bypass
Affected products: vendor: PHP Factory
product: [Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01]
Published: 2020-08-04T01:05:50.000Z
CVE-2020-5617 
Privilege escalation vulnerability in SKYSEA Client View Ver.12.200.12n to 15.210.05f allows an attacker to obtain unauthorized privileges and modify/obtain sensitive information or perform unintended operations via unspecified vectors.
Problem types: description: Privilege escalation
Affected products: vendor: Sky Co., LTD.
product: SKYSEA Client View
Published: 2020-08-04T01:05:50.000Z
CVE-2020-5619 
Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Kajitori Co.,Ltd
product: Exment
Published: 2020-08-25T02:20:22.000Z
CVE-2020-5620 
Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via a specially crafted file.
Problem types: description: Cross-site scripting
Affected products: vendor: Kajitori Co.,Ltd
product: Exment
Published: 2020-08-25T02:20:22.000Z
CVE-2020-5621 
Cross-site request forgery (CSRF) vulnerability in NETGEAR switching hubs (GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier) allow remote attackers to hijack the authentication of administrators and alter the settings of the device via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: Neuroinformatics Unit, Integrative Computational Brain Science Collaboration Division, RIKEN Center for Brain Science
product: Multiple NETGEAR switching hubs
Published: 2020-08-28T04:05:28.000Z
CVE-2020-5622 
Shadankun Server Security Type (excluding normal blocking method types) Ver.1.5.3 and earlier allows remote attackers to cause a denial of service which may result in not being able to add newly detected attack source IP addresses as blocking targets for about 10 minutes via a specially crafted request.
Problem types: description: Denial-of-service (DoS)
Affected products: vendor: Cyber Security Cloud , Inc.
product: Shadankun Server Security Type (excluding normal blocking method types)
Published: 2020-09-02T04:35:14.000Z
CVE-2020-5623 
NITORI App for Android versions 6.0.4 and earlier and NITORI App for iOS versions 6.0.2 and earlier allow remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.
Problem types: description: Fails to restrict access
Affected products: vendor: Nitori Holdings Co., Ltd.
product: NITORI App for Android and NITORI App for iOS
Published: 2020-08-28T04:05:29.000Z
CVE-2020-5624 
SQL injection vulnerability in the XooNIps 3.48 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: SQL Injection
Affected products: vendor: Neuroinformatics Unit, Integrative Computational Brain Science Collaboration Division, RIKEN Center for Brain Science
product: XooNIps
Published: 2020-08-28T04:05:29.000Z