rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-28930 
A Cross-Site Scripting (XSS) issue in the 'update user' and 'delete user' functionalities in settings/users.php in EPSON EPS TSE Server 8 (21.0.11) allows an authenticated attacker to inject a JavaScript payload in the user management page that is executed by an administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-16T20:26:33.000Z
CVE-2020-28931 
Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious website.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-16T20:28:02.000Z
CVE-2020-28935 Local symlink attack in Unbound and NSD
NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local vulnerability that would allow for a local symlink attack. When writing the PID file, Unbound and NSD create the file if it is not there, or open an existing file for writing. In case the file was already present, they would follow symlinks if the file happened to be a symlink instead of a regular file. An additional chown of the file would then take place after it was written, making the user Unbound/NSD is supposed to run as the new owner of the file. If an attacker has local access to the user Unbound/NSD runs as, she could create a symlink in place of the PID file pointing to a file that she would like to erase. If then Unbound/NSD is killed and the PID file is not cleared, upon restarting with root privileges, Unbound/NSD will rewrite any file pointed at by the symlink. This is a local vulnerability that could create a Denial of Service of the system Unbound/NSD is running on. It requires an attacker having access to the limited permission user Unbound/NSD runs as and point through the symlink to a critical file on the system.
Problem types: cwe_id: CWE-59
description: CWE-59: Improper Link Resolution Before File Access ('Link Following')
Affected products: vendor: NLnet Labs
product: Unbound
vendor: NLnet Labs
product: NSD
Credits: lang: en
value: We would like to thank Mason Loring Bliss for bringing the issue to our attention.
Published: 2020-12-07T21:46:47.878Z
CVE-2020-28937 
OpenClinic version 0.8.2 is affected by a missing authentication vulnerability that allows unauthenticated users to access any patient's medical test results, possibly resulting in disclosure of Protected Health Information (PHI) stored in the application, via a direct request for the /tests/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-03T15:54:36.000Z
CVE-2020-28938 
OpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows users of the application to force actions on behalf of other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-03T15:57:24.000Z
CVE-2020-28939 
OpenClinic version 0.8.2 is affected by a medical/test_new.php insecure file upload vulnerability. This vulnerability allows authenticated users (with substantial privileges) to upload malicious files, such as PHP web shells, which can lead to arbitrary code execution on the application server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-03T15:59:03.000Z
CVE-2020-28940 
On Western Digital My Cloud OS 5 devices before 5.06.115, the NAS Admin dashboard has an authentication bypass vulnerability that could allow an unauthenticated user to execute privileged commands on the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-01T15:27:52.000Z
CVE-2020-28941 
An issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through 5.9.9. Local attackers on systems with the speakup driver could cause a local denial of service attack, aka CID-d41227544427. This occurs because of an invalid free when the line discipline is used more than once.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-19T15:23:28.000Z
CVE-2020-28942 
An issue exists in PrimeKey EJBCA before 7.4.3 when enrolling with EST while proxied through an RA over the Peers protocol. As a part of EJBCA's domain security model, the peer connector allows the restriction of client certificates (for the RA, not the end user) to a limited set of allowed CAs, thus restricting the accessibility of that RA to the rights it has within a specific role. While this works for other protocols such as CMP, it was found that the EJBCA enrollment over an EST implementation bypasses this check, allowing enrollment with a valid client certificate through any functioning and authenticated RA connected to the CA. NOTE: an attacker must already have a trusted client certificate and authorization to enroll against the targeted CA.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-19T16:38:46.000Z
CVE-2020-28943 
OX App Suite 7.10.4 and earlier allows SSRF via a snippet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-30T21:03:47.000Z
CVE-2020-28944 
OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-30T21:06:19.000Z
CVE-2020-28945 
OX App Suite 7.10.4 and earlier allows XSS via crafted content to reach an undocumented feature, such as ![](http://onerror=Function.constructor, in a Notes item.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-03T19:38:27.000Z
CVE-2020-28946 
An improper webserver configuration on Plum IK-401 devices with firmware before 1.02 allows an attacker (with network access to the device) to obtain the configuration file, including hashed credential data. Successful exploitation could allow access to hashed credential data with a single unauthenticated GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-08T19:40:22.000Z
CVE-2020-28947 
In MISP 2.4.134, XSS exists in the template element index view because the id parameter is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-19T17:44:26.000Z
CVE-2020-28948 
Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-19T18:14:33.000Z
CVE-2020-28949 
Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-19T18:14:18.000Z
CVE-2020-28950 
The installer of Kaspersky Anti-Ransomware Tool (KART) prior to KART 4.0 Patch C was vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges during installation process.
Problem types: description: Local Privilege Escalation (LPE)
Affected products: vendor: n/a
product: Kaspersky Anti-Ransomware Tool
Published: 2020-12-04T21:11:56.000Z
CVE-2020-28951 
libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package names. This is related to uci_parse_package in file.c and uci_strdup in util.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-19T19:01:57.000Z
CVE-2020-28952 
An issue was discovered on Athom Homey and Homey Pro devices before 5.0.0. ZigBee hub devices should generate a unique Standard Network Key that is then exchanged with all enrolled devices so that all inter-device communication is encrypted. However, the cited Athom products use another widely known key that is designed for testing purposes: "01030507090b0d0f00020406080a0c0d" (the decimal equivalent of 1 3 5 7 9 11 13 15 0 2 4 6 8 10 12 13), which is human generated and static across all issued devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-09T19:31:33.000Z
CVE-2020-28953 
In BigBlueButton before 2.2.29, a user can vote more than once in a single poll.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-19T21:15:05.000Z
CVE-2020-28954 
web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitization, as demonstrated by accepting control characters in a user name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-19T21:14:53.000Z
CVE-2020-28955 
SugarCRM v6.5.18 was discovered to contain a cross-site scripting (XSS) vulnerability in the Create Employee module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the First Name or Last Name input fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:20:19.000Z
CVE-2020-28956 
Multiple cross-site scripting (XSS) vulnerabilities in the Sales module of SugarCRM v6.5.18 allows attackers to execute arbitrary web scripts or HTML via crafted payloads entered into the primary address state or alternate address state input fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:20:18.000Z
CVE-2020-28957 
Multiple cross-site scripting (XSS) vulnerabilities in the Customer Add module of Foxlor v0.10.16 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the name, firstname, or username input fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:20:17.000Z
CVE-2020-28960 
Chichen Tech CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities in the file product_list.php via the id and cid parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:20:13.000Z
CVE-2020-28961 
Perfex CRM v2.4.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component ./clients/client via the company name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:20:16.000Z
CVE-2020-28963 
Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was discovered to contain a buffer overflow via the decompress function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:20:11.000Z
CVE-2020-28964 
Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Search function. This vulnerability allows attackers to escalate local process privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:20:09.000Z
CVE-2020-28967 
FlashGet v1.9.6 was discovered to contain a buffer overflow in the 'current path directory' function. This vulnerability allows attackers to elevate local process privileges via overwriting the registers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:20:08.000Z
CVE-2020-28968 
Draytek VigorAP 1000C contains a stored cross-site scripting (XSS) vulnerability in the RADIUS Setting - RADIUS Server Configuration module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username input field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:20:05.000Z
CVE-2020-28969 
Aplioxio PDF ShapingUp 5.0.0.139 contains a buffer overflow which allows attackers to cause a denial of service (DoS) via a crafted PDF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-22T19:20:05.000Z
CVE-2020-28970 
An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin authentication bypass vulnerability could allow an unauthenticated user to execute privileged commands on the device via a cookie. (In addition, an upload endpoint could then be used by an authenticated administrator to upload executable PHP scripts.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-01T15:32:12.000Z
CVE-2020-28971 
An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin authentication bypass vulnerability could allow an unauthenticated user to execute privileged commands on the device via a cookie, because of insufficient validation of URI paths.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-01T15:12:46.000Z
CVE-2020-28972 
In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the vmware.py files) does not always validate the SSL/TLS certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-27T00:00:00.000Z
CVE-2020-28973 
The ABUS Secvest wireless alarm system FUAA50000 (v3.01.17) fails to properly authenticate some requests to its built-in HTTPS interface. Someone can use this vulnerability to obtain sensitive information from the system, such as usernames and passwords. This information can then be used to reconfigure or disable the alarm system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-21T18:58:59.000Z
CVE-2020-28974 
A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-20T17:49:57.000Z
CVE-2020-28975 
svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service (segmentation fault) via a crafted model SVM (introduced via pickle, json, or any other model permanence standard) with a large value in the _n_support array. NOTE: the scikit-learn vendor's position is that the behavior can only occur if the library's API is violated by an application that changes a private attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-21T00:00:00.000Z
CVE-2020-28976 
The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/detail.php?subdomain=SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-30T13:14:45.000Z
CVE-2020-28977 
The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/get.php?subdomain=SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-30T13:19:08.000Z
CVE-2020-28978 
The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/tree.php?subdomain=SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-30T13:21:27.000Z
CVE-2020-28984 
prive/formulaires/configurer_preferences.php in SPIP before 3.2.8 does not properly validate the couleur, display, display_navigation, display_outils, imessage, and spip_ecran parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-23T21:48:53.000Z
CVE-2020-28991 
Gitea 0.9.99 through 1.12.x before 1.12.6 does not prevent a git protocol path that specifies a TCP port number and also contains newlines (with URL encoding) in ParseRemoteAddr in modules/auth/repo_form.go.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-24T00:29:39.000Z
CVE-2020-28993 
A Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and Pico CMTS through 2.0. Successful exploitation of this vulnerability would allow an unauthenticated attacker to retrieve administrator credentials by sending a malicious POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-01T15:04:48.000Z
CVE-2020-28994 
A SQL injection vulnerability was discovered in Karenderia Multiple Restaurant System, affecting versions 5.4.2 and below. The vulnerability allows for an unauthenticated attacker to perform various tasks such as modifying and leaking all contents of the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-24T17:17:22.000Z
CVE-2020-28998 
An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the Telnet service that allows a remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-26T01:22:15.000Z
CVE-2020-28999 
An issue was discovered in Apexis Streaming Video Web Application on Geeni GNC-CW013 doorbell 1.8.1 devices. A remote attacker can take full control of the camera with a high-privileged account. The vulnerability exists because a static username and password are compiled into a shared library (libhipcam.so) used to provide the streaming camera service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-26T01:23:41.000Z
CVE-2020-29000 
An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the RTSP service that allows a remote attacker to take full control of the device with a high-privileged account. By sending a crafted message, an attacker is able to remotely deliver a telnet session. Any attacker that has the ability to control DNS can exploit this vulnerability to remotely login to the device and gain access to the camera system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-26T01:24:59.000Z
CVE-2020-29001 
An issue was discovered on Geeni GNC-CW028 Camera 2.7.2, Geeni GNC-CW025 Doorbell 2.9.5, Merkury MI-CW024 Doorbell 2.9.6, and Merkury MI-CW017 Camera 2.9.6 devices. A vulnerability exists in the RESTful Services API that allows a remote attacker to take full control of the camera with a high-privileged account. The vulnerability exists because a static username and password are compiled into the ppsapp RESTful application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-26T01:26:27.000Z
CVE-2020-29002 
includes/CologneBlueTemplate.php in the CologneBlue skin for MediaWiki through 1.35 allows XSS via a qbfind message supplied by an administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-24T05:38:08.000Z
CVE-2020-29003 
The PollNY extension for MediaWiki through 1.35 allows XSS via an answer option for a poll question, entered during Special:CreatePoll or Special:UpdatePoll.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-24T05:37:50.000Z
CVE-2020-29004 
The API in the Push extension for MediaWiki through 1.35 did not require an edit token in ApiPushBase.php and therefore facilitated a CSRF attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-29T06:22:51.000Z
CVE-2020-29005 
The API in the Push extension for MediaWiki through 1.35 used cleartext for ApiPush credentials, allowing for potential information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-29T06:19:43.000Z
CVE-2020-29006 
MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-24T14:17:50.000Z
CVE-2020-29007 
The Score extension through 0.3.0 for MediaWiki has a remote code execution vulnerability due to improper sandboxing of the GNU LilyPond executable. This allows any user with an ability to edit articles (potentially including unauthenticated anonymous users) to execute arbitrary Scheme or shell code by using crafted {{Image data to generate musical scores containing malicious code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-15T00:00:00.000Z
CVE-2020-29010 
An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS version 6.2.4 and below, version 6.0.10 and belowmay allow remote authenticated actors to read the SSL VPN events log entries of users in other VDOMs by  executing "get vpn ssl monitor" from the CLI. The sensitive data includes usernames, user groups, and IP address.
Problem types: cwe_id: CWE-200
description: Information disclosure
Affected products: vendor: Fortinet
product: FortiOS
cpes: cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N/E:F/RL:X/RC:X
Published: 2025-03-17T13:06:16.993Z
CVE-2020-29011 
Instances of SQL Injection vulnerabilities in the checksum search and MTA-quarantine modules of FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may allow an authenticated attacker to execute unauthorized code on the underlying SQL interpreter via specifically crafted HTTP requests.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: Fortinet FortiSandbox
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
exploitCodeMaturity: FUNCTIONAL
integrityImpact: HIGH
privilegesRequired: LOW
remediationLevel: NOT_DEFINED
reportConfidence: NOT_DEFINED
scope: UNCHANGED
temporalScore: 8.6
temporalSeverity: HIGH
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:X
version: 3.1
Published: 2021-08-04T15:26:11.000Z