rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-9322 
The /users endpoint in Statamic Core before 2.11.8 allows XSS to add an administrator user. This can be exploited via CSRF. Stored XSS can occur via a JavaScript payload in a username during account registration. Reflected XSS can occur via the /users PATH_INFO.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-08-08T00:00:00.000Z
CVE-2020-9323 
Aquaforest TIFF Server 4.0 allows Unauthenticated File and Directory Enumeration via tiffserver/tssp.aspx.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T13:11:55.000Z
CVE-2020-9324 
Aquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T13:13:15.000Z
CVE-2020-9325 
Aquaforest TIFF Server 4.0 allows Unauthenticated Arbitrary File Download.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T13:13:56.000Z
CVE-2020-9326 
BeyondTrust Privilege Management for Windows and Mac (aka PMWM; formerly Avecto Defendpoint) 5.1 through 5.5 before 5.5 SR1 mishandles command-line arguments with PowerShell .ps1 file extensions present, leading to a DefendpointService.exe crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-18T14:18:50.000Z
CVE-2020-9327 
In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-21T21:25:14.000Z
CVE-2020-9329 
Gogs through 0.11.91 allows attackers to violate the admin-specified repo-creation policy due to an internal/db/repo.go race condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-21T21:58:23.000Z
CVE-2020-9330 
Certain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or validate LDAP bind credentials when changing the LDAP connector IP address. A malicious actor who gains access to affected devices (e.g., by using default credentials) can change the LDAP connection IP address to a system owned by the actor without knowledge of the LDAP bind credentials. After changing the LDAP connection IP address, subsequent authentication attempts will result in the printer sending plaintext LDAP (Active Directory) credentials to the actor. Although the credentials may belong to a non-privileged user, organizations frequently use privileged service accounts to bind to Active Directory. The attacker gains a foothold on the Active Directory domain at a minimum, and may use the credentials to take over control of the Active Directory domain. This affects 3655*, 3655i*, 58XX*, 58XXi*, 59XX*, 59XXi*, 6655**, 6655i**, 72XX*, 72XXi*, 78XX**, 78XXi**, 7970**, 7970i**, EC7836**, and EC7856** devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-21T22:47:12.000Z
CVE-2020-9331 
CryptoPro CSP through 5.0.0.10004 on 32-bit platforms allows Local Privilege Escalation (by local users with the SeChangeNotifyPrivilege right) because user-mode input is mishandled during process creation. An attacker can write arbitrary data to an arbitrary location in the kernel's address space.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-23T04:49:06.000Z
CVE-2020-9332 
ftusbbus2.sys in FabulaTech USB for Remote Desktop through 2020-02-19 allows privilege escalation via crafted IoCtl code related to a USB HID device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-17T16:41:03.000Z
CVE-2020-9334 
A stored XSS vulnerability exists in the Envira Photo Gallery plugin through 1.7.6 for WordPress. Successful exploitation of this vulnerability would allow a authenticated low-privileged user to inject arbitrary JavaScript code that is viewed by other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-25T16:39:08.000Z
CVE-2020-9335 
Multiple stored XSS vulnerabilities exist in the 10Web Photo Gallery plugin before 1.5.46 WordPress. Successful exploitation of this vulnerability would allow a authenticated admin user to inject arbitrary JavaScript code that is viewed by other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-25T16:35:58.000Z
CVE-2020-9336 
fauzantrif eLection 2.0 has XSS via the Admin Dashboard -> Settings -> Election -> "message if election is closed" field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-22T21:38:49.000Z
CVE-2020-9337 
In GolfBuddy Course Manager 1.1, passwords are sent (with base64 encoding) via a GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-26T13:20:29.000Z
CVE-2020-9338 
SOPlanning 1.45 allows XSS via the "Your SoPlanning url" field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-22T21:38:40.000Z
CVE-2020-9339 
SOPlanning 1.45 allows XSS via the Name or Comment to status.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-22T21:38:29.000Z
CVE-2020-9340 
fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/op_kandidat.php id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-22T21:50:29.000Z
CVE-2020-9341 
CandidATS 2.1.0 is vulnerable to CSRF that allows for an administrator account to be added via the index.php?m=settings&a=addUser URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-22T21:50:41.000Z
CVE-2020-9342 
The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This affects versions before 17.0.605.474 (on Linux) of Cloud Protection For Salesforce, Email and Server Security, and Internet GateKeeper.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-22T22:41:28.000Z
CVE-2020-9343 
An issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1 on Windows. It is possible to perform a Denial of Service attack because the implementation doesn't limit the parsing of nested JSON structures. If a victim visits an attacker-controlled website, this vulnerability can be exploited via WebSocket data with a deeply nested JSON array.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T02:18:40.000Z
CVE-2020-9344 
Subversion ALM for the enterprise before 8.8.2 allows reflected XSS at multiple locations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T02:18:43.000Z
CVE-2020-9345 
An issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1 on Windows. It is possible to perform a Denial of Service attack because the application doesn't limit the number of opened WebSocket sockets. If a victim visits an attacker-controlled website, this vulnerability can be exploited.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T02:18:46.000Z
CVE-2020-9346 
Zoho ManageEngine Password Manager Pro 10.4 and prior has no protection against Cross-site Request Forgery (CSRF) attacks, as demonstrated by changing a user's role.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T21:42:06.000Z
CVE-2020-9347 
Zoho ManageEngine Password Manager Pro through 10.x has a CSV Excel Macro Injection vulnerability via a crafted name that is mishandled by the Export Passwords feature. NOTE: the vendor disputes the significance of this report because they expect CSV risk mitigation to be provided by an external application, and do not plan to add CSV constraints to their own products
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T21:44:31.000Z
CVE-2020-9349 
The CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 allows access to the RTSP service without a password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-02T14:50:37.000Z
CVE-2020-9350 
Graph Builder in SAS Visual Analytics 8.5 allows XSS via a graph template that is accessed directly.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-23T00:53:00.000Z
CVE-2020-9351 
An issue was discovered in SmartClient 12.0. If an unauthenticated attacker makes a POST request to /tools/developerConsoleOperations.jsp or /isomorphic/IDACall with malformed XML data in the _transaction parameter, the server replies with a verbose error showing where the application resides (the absolute path). NOTE: the documentation states "These tools are, by default, available to anyone ... so they should only be deployed into a trusted environment. Alternately, the tools can easily be restricted to administrators or end users by protecting the tools path with normal authentication and authorization mechanisms on the web server."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-23T00:00:00.000Z
CVE-2020-9352 
An issue was discovered in SmartClient 12.0. Unauthenticated exploitation of blind XXE can occur in the downloadWSDL feature by sending a POST request to /tools/developerConsoleOperations.jsp with a valid payload in the _transaction parameter. NOTE: the documentation states "These tools are, by default, available to anyone ... so they should only be deployed into a trusted environment. Alternately, the tools can easily be restricted to administrators or end users by protecting the tools path with normal authentication and authorization mechanisms on the web server."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-23T00:00:00.000Z
CVE-2020-9353 
An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) loadFile provided by the console functionality on the /tools/developerConsoleOperations.jsp (or /isomorphic/IDACall) URL is affected by unauthenticated Local File Inclusion via directory-traversal sequences in the elem XML element in the _transaction parameter. NOTE: the documentation states "These tools are, by default, available to anyone ... so they should only be deployed into a trusted environment. Alternately, the tools can easily be restricted to administrators or end users by protecting the tools path with normal authentication and authorization mechanisms on the web server."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-23T00:00:00.000Z
CVE-2020-9354 
An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) saveFile provided by the console functionality on the /tools/developerConsoleOperations.jsp (or /isomorphic/IDACall) URL allows an unauthenticated attacker to overwrite files via vectors involving an XML comment and /.. path traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-23T01:32:02.000Z
CVE-2020-9355 
danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-23T01:55:46.000Z
CVE-2020-9359 
KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-24T13:29:03.000Z
CVE-2020-9361 
CryptoPro CSP through 5.0.0.10004 on 64-bit platforms allows local users with the SeChangeNotifyPrivilege right to cause denial of service because user-mode input is mishandled during process creation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-23T04:48:06.000Z
CVE-2020-9362 
The Quick Heal AV parsing engine (November 2019) allows virus-detection bypass via a crafted GPFLAG in a ZIP archive. This affects Total Security, Home Security, Total Security Multi-Device, Internet Security, Total Security for Mac, AntiVirus Pro, AntiVirus for Server, and Total Security for Android.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-24T15:07:46.000Z
CVE-2020-9363 
The Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass via a crafted ZIP archive. This affects Endpoint Protection, Cloud Optix, Mobile, Intercept X Endpoint, Intercept X for Server, and Secure Web Gateway. NOTE: the vendor feels that this does not apply to endpoint-protection products because the virus would be detected upon extraction.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-24T15:07:39.000Z
CVE-2020-9364 
An issue was discovered in helpers/mailer.php in the Creative Contact Form extension 4.6.2 before 2019-12-03 for Joomla!. A directory traversal vulnerability resides in the filename field for uploaded attachments via the creativecontactform_upload parameter. An attacker could exploit this vulnerability with the "Send me a copy" option to receive any files of the filesystem via email.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-04T15:58:23.000Z
CVE-2020-9365 
An issue was discovered in Pure-FTPd 1.0.49. An out-of-bounds (OOB) read has been detected in the pure_strcmp function in utils.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-24T15:58:51.000Z
CVE-2020-9366 
A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special program, could corrupt memory and crash Screen or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-24T16:20:15.000Z
CVE-2020-9367 
The MPS Agent in Zoho ManageEngine Desktop Central MSP build MSP build 10.0.486 is vulnerable to DLL Hijacking: dcinventory.exe and dcconfig.exe try to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because this DLL is missing from the installation, thus making it possible to hijack the DLL and subsequently inject code, leading to an escalation of privilege to NT AUTHORITY\SYSTEM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-18T19:35:29.000Z
CVE-2020-9368 
The Module Olea Gift On Order module through 5.0.8 for PrestaShop enables an unauthenticated user to read arbitrary files on the server via getfile.php?file=/.. directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-02T17:12:27.000Z
CVE-2020-9369 
Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk consumption from temporary files, and a flood of notifications to listmasters) via a series of requests with malformed parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-24T17:25:39.000Z
CVE-2020-9370 
HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-05T12:27:54.000Z
CVE-2020-9371 
Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress. In the cpabc_appointments.php file, the Calendar Name input could allow attackers to inject arbitrary JavaScript or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-04T18:11:35.000Z
CVE-2020-9372 
The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields such as Description or Name) in any booking form to be any formula, which then could be exported via the Bookings list tab in /wp-admin/admin.php?page=cpabc_appointments.php. The attacker could achieve remote code execution via CSV injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-04T18:12:31.000Z
CVE-2020-9374 
On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-24T18:57:52.000Z
CVE-2020-9375 
TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-25T14:17:59.000Z
CVE-2020-9376 
D-Link DIR-610 devices allow Information Disclosure via SERVICES=DEVICE.ACCOUNT%0AAUTHORIZED_GROUP=1 to getcfg.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-09T12:08:01.000Z
CVE-2020-9377 
D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-09T12:06:48.000Z
CVE-2020-9379 
The Software Development Kit of the MiContact Center Business with Site Based Security 8.0 through 9.0.1.0 before KB496276 allows an authenticated user to access sensitive information. A successful exploit could allow unauthorized access to user conversations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-25T18:45:45.000Z
CVE-2020-9380 
IPTV Smarters WEB TV PLAYER through 2020-02-22 allows attackers to execute OS commands by uploading a script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-05T12:44:52.000Z
CVE-2020-9381 
controllers/admin.js in Total.js CMS 13 allows remote attackers to execute arbitrary code via a POST to the /admin/api/widgets/ URI. This can be exploited in conjunction with CVE-2019-15954.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-24T21:25:54.000Z
CVE-2020-9382 
An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki. Improper title sanitization allowed for the execution of any wiki page as a widget (as defined by this extension) via MediaWiki's {{#widget:}} parser function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-24T22:17:55.000Z
CVE-2020-9383 
An issue was discovered in the Linux kernel 3.16 through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it, aka CID-2e90ca68b0d2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-25T15:48:11.000Z
CVE-2020-9384 
An Insecure Direct Object Reference (IDOR) vulnerability in the Change Password feature of Subex ROC Partner Settlement 10.5 allows remote authenticated users to achieve account takeover via manipulation of POST parameters. NOTE: This vulnerability may only affect a testing version of the application
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-14T19:52:19.000Z
CVE-2020-9385 
A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in add_on in upcean.c, when called from eanx in upcean.c during EAN barcode generation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-24T23:14:26.000Z
CVE-2020-9386 
In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, file metadata information is disclosed to group members in the Elasticsearch result list despite them not having access to that artefact anymore.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-09T14:14:43.000Z
CVE-2020-9387 
In Mahara 19.04 before 19.04.5 and 19.10 before 19.10.3, account details are shared in the Elasticsearch results for accounts that are not accessible when the config setting 'Isolated institutions' is turned on.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-30T12:46:59.000Z
CVE-2020-9388 
CSRF protection was not present in SquaredUp before version 4.6.0. A CSRF attack could have been possible by an administrator executing arbitrary code in a HTML dashboard tile via a crafted HTML page, or by uploading a malicious SVG payload into a dashboard.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-03T00:00:00.000Z
CVE-2020-9389 
A username enumeration issue was discovered in SquaredUp before version 4.6.0. The login functionality was implemented in a way that would enable a malicious user to guess valid username due to a different response time from invalid usernames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-03T19:03:47.000Z
CVE-2020-9390 
SquaredUp allowed Stored XSS before version 4.6.0. A user was able to create a dashboard that executed malicious content in iframe or by uploading an SVG that contained a script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-03T00:00:00.000Z
CVE-2020-9391 
An issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 on the AArch64 architecture. It ignores the top byte in the address passed to the brk system call, potentially moving the memory break downwards when the application expects it to move upwards, aka CID-dcde237319e6. This has been observed to cause heap corruption with the GNU C Library malloc implementation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-25T17:55:59.000Z
CVE-2020-9392 
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permission check on the ImportJSONTable, createFromTpl, and getJSONExportTable endpoints, unauthenticated users can retrieve pricing table information, create new tables, or import/modify a table.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-23T16:14:51.000Z
CVE-2020-9393 
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-25T18:06:53.000Z
CVE-2020-9394 
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-25T18:07:00.000Z
CVE-2020-9395 
An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based buffer overflow exists in the client code that takes care of WPA2's 4-way-handshake via a malformed EAPOL-Key packet with a long keydata buffer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-06T21:09:28.000Z
CVE-2020-9398 
ISPConfig before 3.1.15p3, when the undocumented reverse_proxy_panel_allowed=sites option is manually enabled, allows SQL Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-25T20:23:55.000Z
CVE-2020-9399 
The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects versions before 12 definitions 200114-0 of Antivirus Pro, Antivirus Pro Plus, and Antivirus for Linux.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-28T13:58:46.000Z