rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-11431 
The documentation component in i-net Clear Reports 16.0 to 19.2, HelpDesk 8.0 to 8.3, and PDFC 4.3 to 6.2 allows a remote unauthenticated attacker to read arbitrary system files and directories on the target server via Directory Traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-07T16:09:10.000Z
CVE-2020-11436 
LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other users including administrators.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-15T19:31:45.000Z
CVE-2020-11437 
LibreHealth EMR v2.0.0 is affected by SQL injection allowing low-privilege authenticated users to enumerate the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-15T19:28:07.000Z
CVE-2020-11438 
LibreHealth EMR v2.0.0 is affected by systemic CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-15T19:34:10.000Z
CVE-2020-11439 
LibreHealth EMR v2.0.0 is affected by a Local File Inclusion issue allowing arbitrary PHP to be included and executed within the EMR application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-15T19:23:50.000Z
CVE-2020-11440 
httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-23T13:59:12.000Z
CVE-2020-11441 
phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences to be reflected on an error page. NOTE: the vendor states "I don't see anything specifically exploitable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-31T16:50:23.000Z
CVE-2020-11443 
The Zoom IT installer for Windows (ZoomInstallerFull.msi) prior to version 4.6.10 deletes files located in %APPDATA%\Zoom before installing an updated version of the client. Standard users are able to write to this directory, and can write links to other directories on the machine. As the installer runs with SYSTEM privileges and follows these links, a user can cause the installer to delete files that otherwise cannot be deleted by the user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-04T13:44:21.000Z
CVE-2020-11444 
Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-02T17:22:04.000Z
CVE-2020-11445 
TP-Link cloud cameras through 2020-02-09 allow remote attackers to bypass authentication and obtain sensitive information via vectors involving a Wi-Fi session with GPS enabled, aka CNVD-2020-04855.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-01T03:57:55.000Z
CVE-2020-11446 
ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard links in some ESET directories and then force the product to write through these links into files that would normally not be write-able by the user, thus achieving privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-29T13:15:49.000Z
CVE-2020-11447 
An issue was discovered on Bell HomeHub 3000 SG48222070 devices. Remote authenticated users can retrieve the serial number via cgi/json-req - this is an information leak because the serial number is intended to prove an actor's physical access to the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-17T00:00:00.000Z
CVE-2020-11448 
An issue was discovered on Bell HomeHub 3000 SG48222070 devices. There is XSS related to the email field and the login page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-17T00:00:00.000Z
CVE-2020-11449 
An issue was discovered on Technicolor TC7337 8.89.17 devices. An attacker can discover admin credentials in the backup file, aka backupsettings.conf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-01T14:17:17.000Z
CVE-2020-11450 
Microstrategy Web 10.4 exposes the JVM configuration, CPU architecture, installation folder, and other information through the URL /MicroStrategyWS/happyaxis.jsp. An attacker could use this vulnerability to learn more about the environment the application is running in. This issue has been mitigated in all versions of the product 11.0 and higher.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-02T15:01:45.000Z
CVE-2020-11451 
The Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator to upload a ZIP archive containing files with arbitrary extensions and data. (This is also exploitable via SSRF). Note: The ability to upload visualization plugins requires administrator privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-02T15:00:28.000Z
CVE-2020-11452 
Microstrategy Web 10.4 includes functionality to allow users to import files or data from external resources such as URLs or databases. By providing an external URL under attacker control, it's possible to send requests to external resources (aka SSRF) or leak files from the local system using the file:// stream wrapper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-02T15:02:46.000Z
CVE-2020-11453 
Microstrategy Web 10.4 is vulnerable to Server-Side Request Forgery in the Test Web Service functionality exposed through the path /MicroStrategyWS/. The functionality requires no authentication and, while it is not possible to pass parameters in the SSRF request, it is still possible to exploit it to conduct port scanning. An attacker could exploit this vulnerability to enumerate the resources allocated in the network (IP addresses and services exposed). NOTE: MicroStrategy is unable to reproduce the issue reported in any version of its product
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-02T15:03:27.000Z
CVE-2020-11454 
Microstrategy Web 10.4 is vulnerable to Stored XSS in the HTML Container and Insert Text features in the window, allowing for the creation of a new dashboard. In order to exploit this vulnerability, a user needs to get access to a shared dashboard or have the ability to create a dashboard on the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-02T14:58:59.000Z
CVE-2020-11455 
LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-01T15:48:18.000Z
CVE-2020-11456 
LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and application/models/SurveysGroups.php (aka survey groups).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-01T15:48:08.000Z
CVE-2020-11457 
pfSense before 2.4.5 has stored XSS in system_usermanager_addprivs.php in the WebGUI via the descr parameter (aka full name) of a user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-01T15:47:58.000Z
CVE-2020-11458 
app/Model/feed.php in MISP before 2.4.124 allows administrators to choose arbitrary files that should be ingested by MISP. This does not cause a leak of the full contents of a file, but does cause a leaks of strings that match certain patterns. Among the data that can leak are passwords from database.php or GPG key passphrases from config.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-02T11:32:48.000Z
CVE-2020-11462 
An issue was discovered in OpenVPN Access Server before 2.7.0 and 2.8.x before 2.8.3. With the full featured RPC2 interface enabled, it is possible to achieve a temporary DoS state of the management interface when sending an XML Entity Expansion (XEE) payload to the XMLRPC based RPC2 interface. The duration of the DoS state depends on available memory and CPU speed. The default restricted mode of the RPC2 interface is NOT vulnerable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-04T13:45:41.000Z
CVE-2020-11463 
An issue was discovered in Deskpro before 2019.8.0. The /api/email_accounts endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve cleartext credentials of all helpdesk email accounts, including incoming and outgoing email credentials. This enables an attacker to get full access to all emails sent or received by the system including password reset emails, making it possible to reset any user's password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-01T20:52:02.000Z
CVE-2020-11464 
An issue was discovered in Deskpro before 2019.8.0. The /api/people endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve sensitive information about all users registered on the system. This includes their full name, privilege, email address, phone number, etc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-01T20:51:54.000Z
CVE-2020-11465 
An issue was discovered in Deskpro before 2019.8.0. The /api/apps/* endpoints failed to properly validate a user's privilege, allowing an attacker to control/install helpdesk applications and leak current applications' configurations, including applications used as user sources (used for authentication). This enables an attacker to forge valid authentication models that resembles any user on the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-01T20:51:46.000Z
CVE-2020-11466 
An issue was discovered in Deskpro before 2019.8.0. The /api/tickets endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve arbitrary information about all helpdesk tickets stored in database with numerous filters. This leaked sensitive information to unauthorized parties. Additionally, it leaked ticket authentication code, making it possible to make changes to a ticket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-01T20:51:37.000Z
CVE-2020-11467 
An issue was discovered in Deskpro before 2019.8.0. This product enables administrators to modify the helpdesk interface by editing /portal/api/style/edit-theme-set/template-sources theme templates, and uses TWIG as its template engine. While direct access to self and _self variables was not permitted, one could abuse the accessible variables in one's context to reach a native unserialize function via the code parameter. There, on could pass a crafted payload to trigger a set of POP gadgets in order to achieve remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-01T20:51:22.000Z
CVE-2020-11469 
Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local process (with the user's privileges) to obtain root access by replacing runwithroot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-01T22:01:28.000Z
CVE-2020-11470 
Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Zoom Client's microphone and camera access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-01T22:00:51.000Z
CVE-2020-11474 
NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-28T20:34:03.000Z
CVE-2020-11476 
Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-28T20:31:14.000Z
CVE-2020-11483 
NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contains a vulnerability in the AMI BMC firmware in which the firmware includes hard-coded credentials, which may lead to elevation of privileges or information disclosure.
Problem types: description: escalation of privileges and information disclosure
Affected products: vendor: NVIDIA
product: NVIDIA DGX Servers
Published: 2020-10-29T03:35:30.000Z
CVE-2020-11484 
NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contains a vulnerability in the AMI BMC firmware in which an attacker with administrative privileges can obtain the hash of the BMC/IPMI user password, which may lead to information disclosure.
Problem types: description: information disclosure
Affected products: vendor: NVIDIA
product: NVIDIA DGX Servers
Published: 2020-10-29T03:35:30.000Z
CVE-2020-11485 
NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contains a Cross-Site Request Forgery (CSRF) vulnerability in the AMI BMC firmware in which the web application does not sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request, which can lead to information disclosure or code execution.
Problem types: description: information disclosure or code execution
Affected products: vendor: NVIDIA
product: NVIDIA DGX Servers
Published: 2020-10-29T03:35:30.000Z
CVE-2020-11486 
NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which software allows an attacker to upload or transfer files that can be automatically processed within the product's environment, which may lead to remote code execution.
Problem types: description: remote code execution
Affected products: vendor: NVIDIA
product: NVIDIA DGX Servers
Published: 2020-10-29T03:35:31.000Z
CVE-2020-11487 
NVIDIA DGX servers, DGX-1 with BMC firmware versions prior to 3.38.30. DGX-2 with BMC firmware versions prior to 1.06.06 and all DGX A100 Servers with all BMC firmware versions, contains a vulnerability in the AMI BMC firmware in which the use of a hard-coded RSA 1024 key with weak ciphers may lead to information disclosure.
Problem types: description: information disclosure
Affected products: vendor: NVIDIA
product: NVIDIA DGX Servers
Published: 2020-10-29T03:35:31.000Z
CVE-2020-11488 
NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contains a vulnerability in the AMI BMC firmware in which software does not validate the RSA 1024 public key used to verify the firmware signature, which may lead to information disclosure or code execution.
Problem types: description: code execution or information disclosure
Affected products: vendor: NVIDIA
product: NVIDIA DGX Servers
Published: 2020-10-29T03:35:32.000Z
CVE-2020-11489 
NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contain a vulnerability in the AMI BMC firmware in which default SNMP community strings are used, which may lead to information disclosure.
Problem types: description: information disclosure
Affected products: vendor: NVIDIA
product: NVIDIA DGX Servers
Published: 2020-10-29T03:35:32.000Z
CVE-2020-11490 
Manage::Certificates in Zen Load Balancer 3.10.1 allows remote authenticated admins to execute arbitrary OS commands via shell metacharacters in the index.cgi cert_issuer, cert_division, cert_organization, cert_locality, cert_state, cert_country, or cert_email parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-02T13:07:41.000Z
CVE-2020-11491 
Monitoring::Logs in Zen Load Balancer 3.10.1 allows remote authenticated admins to conduct absolute path traversal attacks, as demonstrated by a filelog=/etc/shadow request to index.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-02T13:07:34.000Z
CVE-2020-11492 
An issue was discovered in Docker Desktop through 2.2.0.5 on Windows. If a local attacker sets up their own named pipe prior to starting Docker with the same name, this attacker can intercept a connection attempt from Docker Service (which runs as SYSTEM), and then impersonate their privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-05T13:10:17.000Z
CVE-2020-11493 
In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information about an uninitialized object because of direct transformation from PDF Object to Stream without concern for a crafted XObject.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-04T03:31:20.000Z
CVE-2020-11494 
An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL, aka CID-b9258a2cece4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-02T20:14:01.000Z
CVE-2020-11496 
Sprecher SPRECON-E firmware prior to 8.64b might allow local attackers with access to engineering data to insert arbitrary code. This firmware lacks the validation of the input values on the device side, which is provided by the engineering software during parameterization. Attackers with access to local configuration files can therefore insert malicious commands that are executed after compiling them to valid parameter files (“PDLs”), transferring them to the device, and restarting the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-19T18:52:19.000Z
CVE-2020-11497 
An issue was discovered in the NAB Transact extension 2.1.0 for the WooCommerce plugin for WordPress. An online payment system bypass allows orders to be marked as fully paid by assigning an arbitrary bank transaction ID during the payment-details entry step.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-26T18:25:23.000Z
CVE-2020-11498 
Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tun_darwin.go or tun_windows.go. A user can also use Nebula to execute arbitrary code in the user's own context, e.g., for user-level persistence or to bypass security controls. NOTE: the vendor states that this "requires a high degree of access and other preconditions that are tough to achieve."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-02T22:13:47.000Z
CVE-2020-11499 
Firmware Analysis and Comparison Tool (FACT) 3 has Stored XSS when updating analysis details via a localhost web request, as demonstrated by mishandling of the tags and version fields in helperFunctions/mongo_task_conversion.py.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-02T22:43:45.000Z
CVE-2020-11500 
Zoom Client for Meetings through 4.6.9 uses the ECB mode of AES for video and audio encryption. Within a meeting, all participants use a single 128-bit key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-03T12:07:28.000Z
CVE-2020-11501 
GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 (2018-07-16) because of an error in a 2017-10-06 commit. The DTLS client always uses 32 '\0' bytes instead of a random value, and thus contributes no randomness to a DTLS negotiation. This breaks the security guarantees of the DTLS protocol.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-03T12:42:28.000Z
CVE-2020-11503 
A heap-based buffer overflow in the awarrensmtp component of Sophos XG Firewall v17.5 MR11 and older potentially allows an attacker to run arbitrary code remotely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-18T15:25:29.000Z
CVE-2020-11505 
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3. A Workhorse bypass could lead to NuGet package and file disclosure (Exposure of Sensitive Information) via request smuggling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-22T19:46:37.000Z
CVE-2020-11506 
An issue was discovered in GitLab 10.7.0 and later through 12.9.2. A Workhorse bypass could lead to job artifact uploads and file disclosure (Exposure of Sensitive Information) via request smuggling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-22T19:50:39.000Z
CVE-2020-11507 
An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner 8.0.3 could cause arbitrary code execution with SYSTEM privileges when a malicious DLL library is loaded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-06T15:37:44.000Z
CVE-2020-11508 
An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows logged-in users with minimal permissions to create or replace existing pages with a malicious page containing arbitrary JavaScript via the wp_ajax_core37_lp_save_page (aka core37_lp_save_page) AJAX action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-07T18:44:49.000Z
CVE-2020-11509 
An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows remote attackers to upload page templates containing arbitrary JavaScript via the c37_wpl_import_template admin-post action (which will execute in an administrator's browser if the template is used to create a page).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-07T18:48:43.000Z
CVE-2020-11511 
The LearnPress plugin before 3.2.6.9 for WordPress allows remote attackers to escalate the privileges of any user to LP Instructor via the accept-to-be-teacher action parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-27T04:56:54.000Z
CVE-2020-11512 
Stored XSS in the IMPress for IDX Broker WordPress plugin before 2.6.2 allows authenticated attackers with minimal (subscriber-level) permissions to save arbitrary JavaScript in the plugin's settings panel via the idx_update_recaptcha_key AJAX action and a crafted idx_recaptcha_site_key parameter, which would then be executed in the browser of any administrator visiting the panel. This could be used to create new administrator-level accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-07T16:40:34.000Z
CVE-2020-11514 
The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to update arbitrary WordPress metadata, including the ability to escalate or revoke administrative privileges for existing users via the unsecured rankmath/v1/updateMeta REST API endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-07T16:50:15.000Z