rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-13100 
Arista’s CloudVision eXchange (CVX) server before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause a denial of service (crash and restart) in the ControllerOob agent via a malformed control-plane packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-26T15:00:16.000Z
CVE-2020-13101 
In OASIS Digital Signature Services (DSS) 1.0, an attacker can control the validation outcome (i.e., trigger either a valid or invalid outcome for a valid or invalid signature) via a crafted XML signature, when the InlineXML option is used. This defeats the expectation of non-repudiation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-24T07:04:02.000Z
CVE-2020-13109 
Morita Shogi 64 through 2020-05-02 for Nintendo 64 devices allows remote attackers to execute arbitrary code via crafted packet data to the built-in modem because 0x800b3e94 (aka the IF subcommand to top-level command 7) has a stack-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-16T01:56:50.000Z
CVE-2020-13110 
The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of malicious DLLs through use of the kerberos_sspi LoadLibrary() method, because of a DLL path search.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-16T11:56:54.000Z
CVE-2020-13111 
NaviServer 4.99.4 to 4.99.19 allows denial of service due to the nsd/driver.c ChunkedDecode function not properly validating the length of a chunk. A remote attacker can craft a chunked-transfer request that will result in a negative value being passed to memmove via the size parameter, causing the process to crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-16T14:50:16.000Z
CVE-2020-13112 
An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-21T15:56:28.000Z
CVE-2020-13113 
An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-21T16:03:03.000Z
CVE-2020-13114 
An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-21T15:50:42.000Z
CVE-2020-13116 
OpenText Carbonite Server Backup Portal before 8.8.7 allows XSS by an authenticated user via policy creation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-12T18:13:12.000Z
CVE-2020-13117 
Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a login request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-09T18:53:18.000Z
CVE-2020-13118 
An issue was discovered in Mikrotik-Router-Monitoring-System through 2018-10-22. SQL Injection exists in check_community.php via the parameter community.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-16T19:11:23.000Z
CVE-2020-13119 
ismartgate PRO 1.5.9 is vulnerable to clickjacking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-24T15:20:51.000Z
CVE-2020-13121 
Submitty through 20.04.01 has an open redirect via authentication/login?old= during an invalid login attempt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-16T19:39:33.000Z
CVE-2020-13122 
The novish command-line interface, included in NoviFlow NoviWare before NW500.2.12 and deployed on NoviSwitch devices, is vulnerable to command injection in the "show status destination ipaddr" command. This could be used by a read-only user (monitoring group) or admin to execute commands on the operating system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-17T15:59:25.000Z
CVE-2020-13124 
SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an authenticated user to execute arbitrary Python commands on the underlying operating system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-11T15:48:44.000Z
CVE-2020-13125 
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13126. Unauthenticated attackers can create users with the Subscriber role even if registration is disabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-17T00:39:00.000Z
CVE-2020-13126 
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13125. An attacker with the Subscriber role can upload arbitrary executable files to achieve remote code execution. NOTE: the free Elementor plugin is unaffected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-17T00:38:37.000Z
CVE-2020-13127 
A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to execute arbitrary SQL commands via the TASKS_LIST__pt.querystring parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-09T17:15:51.000Z
CVE-2020-13128 
An issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java (the servlet for handling file upload) accepts a delay parameter that causes a thread to sleep. It can be abused to cause all of a server's threads to sleep, leading to denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-17T23:04:55.000Z
CVE-2020-13129 
An issue was discovered in the stashcat app through 3.9.1 for macOS, Windows, Android, iOS, and possibly other platforms. The GET method is used with client_key and device_id data in the query string, which allows attackers to obtain sensitive information by reading web-server logs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-18T04:42:22.000Z
CVE-2020-13131 
An issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in this library (which is included in yubico-piv-tool) does not properly check embedded length fields during device communication. A malicious PIV token can misreport the returned length fields during RSA key generation. This will cause stack memory to be copied into heap allocated memory that gets returned to the caller. The leaked memory could include PINs, passwords, key material, and other sensitive information depending on the integration. During further processing by the caller, this information could leak across trust boundaries. Note that RSA key generation is triggered by the host and cannot directly be triggered by the token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-09T17:50:36.000Z
CVE-2020-13132 
An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_generate_key() function in lib/util.c through incorrect error handling code. This could be used to cause a denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-09T17:51:56.000Z
CVE-2020-13133 
Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. The successful exploitation requires admin privileges (for storing the XSS payload itself), and can exploit (be triggered by) unauthenticated users. All TOS versions with SecureChange deployments prior to R19.3 HF3 and R20-1 HF1 are affected. Vulnerabilities were fixed in R19.3 HF3 and R20-1 HF1
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-20T01:46:01.000Z
CVE-2020-13134 
Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. The successful exploitation requires admin privileges (for storing the XSS payload itself), and can exploit (be triggered by) admin users. All TOS versions with SecureChange deployments prior to R19.3 HF3 and R20-1 HF1 are affected. Vulnerabilities were fixed in R19.3 HF3 and R20-1 HF1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-20T01:45:57.000Z
CVE-2020-13135 
D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstrated by a Squid Proxy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-18T16:05:48.000Z
CVE-2020-13136 
D-Link DSP-W215 1.26b03 devices send an obfuscated hash that can be retrieved and understood by a network sniffer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-18T16:05:37.000Z
CVE-2020-13143 
gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-18T17:50:53.000Z
CVE-2020-13144 
Studio in Open edX Ironwood 2.5, when CodeJail is not used, allows a user to go to the "Create New course>New section>New subsection>New unit>Add new component>Problem button>Advanced tab>Custom Python evaluated code" screen, edit the problem, and execute Python code. This leads to arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-18T18:23:55.000Z
CVE-2020-13145 
Studio in Open edX Ironwood 2.5 allows users to upload SVG files via the "Content>File Uploads" screen. These files can contain JavaScript code and thus lead to Stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-18T18:24:25.000Z
CVE-2020-13146 
Studio in Open edX Ironwood 2.5 allows CSV injection because an added cohort in Course>Instructor>Cohorts may contain a formula that is exported via the "Course>Data Downloads>Reports>Download profile info" feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-18T18:24:10.000Z
CVE-2020-13149 
Weak permissions on the "%PROGRAMDATA%\MSI\Dragon Center" folder in Dragon Center before 2.6.2003.2401, shipped with Micro-Star MSI Gaming laptops, allows local authenticated users to overwrite system files and gain escalated privileges. One attack method is to change the Recommended App binary within App.json. Another attack method is to use this part of %PROGRAMDATA% for mounting an RPC Control directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-18T19:39:23.000Z
CVE-2020-13150 
D-link DSL-2750U ISL2750UEME3.V1E devices allow approximately 90 seconds of access to the control panel, after a restart, before MAC address filtering rules become active.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-15T15:56:11.000Z
CVE-2020-13151 
Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs), written in Lua, as part of a database query. It attempts to restrict code execution by disabling os.execute() calls, but this is insufficient. Anyone with network access can use a crafted UDF to execute arbitrary OS commands on all nodes of the cluster at the permission level of the user running the Aerospike service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-05T12:36:39.000Z
CVE-2020-13152 
A remote user can create a specially crafted M3U file, media playlist file that when loaded by the target user, will trigger a memory leak, whereby Amarok 2.8.0 continue to waste resources over time, eventually allows attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-20T12:32:21.000Z
CVE-2020-13153 
app/View/Events/resolved_attributes.ctp in MISP before 2.4.126 has XSS in the resolved attributes view.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-18T21:11:34.000Z
CVE-2020-13154 
Zoho ManageEngine Service Plus before 11.1 build 11112 allows low-privilege authenticated users to discover the File Protection password via a getFileProtectionSettings call to AjaxServlet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-18T21:38:13.000Z
CVE-2020-13155 
clearsystem.php in NukeViet 4.4 allows CSRF with resultant HTML injection via the deltype parameter to the admin/index.php?nv=webtools&op=clearsystem URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-23T19:15:11.000Z
CVE-2020-13156 
modules\users\admin\add_user.php in NukeViet 4.4 allows CSRF to add a user account via the admin/index.php?nv=users&op=user_add URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-23T19:14:04.000Z
CVE-2020-13157 
modules\users\admin\edit.php in NukeViet 4.4 allows CSRF to change a user's password via an admin/index.php?nv=users&op=edit&userid= URI. The old password is not needed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-23T19:11:54.000Z
CVE-2020-13158 
Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T17:43:12.000Z
CVE-2020-13159 
Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclient_mac, Hostname, or Alias field. NOTE: this may overlap CVE-2020-10818.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T17:39:12.000Z
CVE-2020-13160 
AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-09T16:36:17.000Z
CVE-2020-13162 
A time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure Client versions prior to 9.1.6 down to 5.3 R70 for Windows (which runs as NT AUTHORITY/SYSTEM) allows unprivileged users to run a Microsoft Installer executable with elevated privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-16T19:41:18.000Z
CVE-2020-13163 
em-imap 0.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-middle attack against users of the library. The hostname in a TLS server certificate is not verified.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-19T21:22:57.000Z
CVE-2020-13164 
In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packet-nfs.c by preventing excessive recursion, such as for a cycle in the directory graph on a filesystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-19T21:26:42.000Z
CVE-2020-13166 
The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used to send serialized ASP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-19T19:29:59.000Z
CVE-2020-13167 
Netsweeper through 6.4.3 allows unauthenticated remote code execution because webadmin/tools/unixlogin.php (with certain Referer headers) launches a command line with client-supplied parameters, and allows injection of shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-19T19:29:41.000Z
CVE-2020-13168 
SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-02T08:34:03.000Z
CVE-2020-13169 
Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and pages. This vulnerability may lead to the Information Disclosure and Escalation of Privileges (takeover of administrator account).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-17T17:40:15.000Z
CVE-2020-13170 
HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary data center was not enabled. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-11T19:41:25.000Z
CVE-2020-13173 
Initialization of the pcoip_credential_provider in Teradici PCoIP Standard Agent for Windows and PCoIP Graphics Agent for Windows versions 19.11.1 and earlier creates an insecure named pipe, which allows an attacker to intercept sensitive information or possibly elevate privileges via pre-installing an application which acquires that named pipe.
Problem types: description: Information Disclosure, Privilege Escalation
Affected products: vendor: n/a
product: PCoIP Standard Agent for Windows, PCoIP Graphics Agent for Windows
Published: 2020-05-28T21:05:33.000Z
CVE-2020-13174 
The web server in the Teradici Managament console versions 20.04 and 20.01.1 did not properly set the X-Frame-Options HTTP header, which could allow an attacker to trick a user into clicking a malicious link via clickjacking.
Problem types: cwe_id: CWE-1021
description: Clickjacking (CWE-1021)
Affected products: vendor: n/a
product: - Management Console
Published: 2020-08-11T17:31:57.000Z
CVE-2020-13175 
The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 (v15 and earlier for Cloud Access Connector) contains a local file inclusion vulnerability which allows an unauthenticated remote attacker to leak LDAP credentials via a specially crafted HTTP request.
Problem types: cwe_id: CWE-98
description: Local File Inclusion (CWE-98)
Affected products: vendor: n/a
product: - Cloud Access Connector - Cloud Access Connector Legacy
Published: 2020-08-11T17:40:37.000Z
CVE-2020-13176 
The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 24, 2020 (v16 and earlier for the Cloud Access Connector) contains a stored cross-site scripting (XSS) vulnerability which allows a remote unauthenticated attacker to poison log files with malicious JavaScript via the login page which is executed when an administrator views the logs within the application.
Problem types: cwe_id: CWE-79
description: Cross-Site Scripting (XSS) (CWE-79)
Affected products: vendor: n/a
product: - Cloud Access Connector - Cloud Access Connector Legacy
Published: 2020-08-11T17:40:55.000Z
CVE-2020-13177 
The support bundler in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows versions prior to 20.04.1 and 20.07.0 does not use hard coded paths for certain Windows binaries, which allows an attacker to gain elevated privileges via execution of a malicious binary placed in the system path.
Problem types: cwe_id: CWE-427
description: Uncontrolled Search Path Element (CWE-427)
Affected products: vendor: n/a
product: - PCoIP Standard Agent for Windows - PCoIP Graphics Agent for Windows
Published: 2020-08-11T17:47:23.000Z
CVE-2020-13178 
A function in the Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to version 20.04.1 does not properly validate the signature of an external binary, which could allow an attacker to gain elevated privileges via execution in the context of the PCoIP Agent process.
Problem types: cwe_id: CWE-345
description: Insufficient Verification of Data Authenticity (CWE-345)
Affected products: vendor: n/a
product: - PCoIP Standard Agent for Windows - PCoIP Graphics Agent for Windows
Published: 2020-08-11T17:50:43.000Z
CVE-2020-13179 
Broker Protocol messages in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to 20.04.1 are not cleaned up in server memory, which may allow an attacker to read confidential information from a memory dump via forcing a crashing during the single sign-on procedure.
Problem types: cwe_id: CWE-200
description: Exposure of Sensitive Information (CWE-200)
Affected products: vendor: n/a
product: - PCoIP Standard Agent for Windows - PCoIP Graphics Agent for Windows
Published: 2020-08-11T18:06:27.000Z
CVE-2020-13183 
Reflected Cross Site Scripting in Teradici PCoIP Management Console prior to 20.07 could allow an attacker to take over the user's active session if the user is exposed to a malicious payload.
Problem types: description: Reflected Cross Site Scripting
Affected products: vendor: n/a
product: Teradici PCoIP Management Console
Published: 2020-08-17T20:31:06.000Z
CVE-2020-13185 
Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an attacker in the ability to execute sensitive functions without credentials.
Problem types: cwe_id: CWE-288
description: CWE-288: Authentication Bypass Using an Alternate Path or Channel
Affected products: vendor: n/a
product: - Cloud Access Connector - Cloud Access Connector Legacy
Published: 2021-02-11T15:10:16.000Z
CVE-2020-13186 
An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with knowledge of both a machineID and user GUID to modify data if a user clicked a malicious link.
Problem types: cwe_id: CWE-352
description: CWE-352: Cross-Site Request Forgery (CSRF)
Affected products: vendor: n/a
product: - Cloud Access Connector - Cloud Access Connector Legacy
Published: 2021-02-11T15:14:48.000Z
CVE-2020-13223 
HashiCorp Vault and Vault Enterprise logged proxy environment variables that potentially included sensitive credentials. Fixed in 1.3.6 and 1.4.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-10T18:45:28.000Z
CVE-2020-13224 
TP-LINK NC200 devices through 2.1.10 build 200401, NC210 devices through 1.0.10 build 200401, NC220 devices through 1.3.1 build 200401, NC230 devices through 1.3.1 build 200401, NC250 devices through 1.3.1 build 200401, NC260 devices through 1.5.3 build_200401, and NC450 devices through 1.5.4 build 200401 have a Buffer Overflow
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-17T12:13:36.000Z
CVE-2020-13225 
phpIPAM 1.4 contains a stored cross site scripting (XSS) vulnerability within the Edit User Instructions field of the User Instructions widget.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-20T03:05:27.000Z