rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-23243 
Cross Site Scripting (XSS) vulnerability in NavigateCMS NavigateCMS 2.9 via the name="wrong_path_redirect" feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-26T20:23:26.000Z
CVE-2020-23249 
GigaVUE-OS (GVOS) 5.4 - 5.9 stores a Redis database password in plaintext.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-05T21:47:48.000Z
CVE-2020-23250 
GigaVUE-OS (GVOS) 5.4 - 5.9 uses a weak algorithm for a hash stored in internal database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-05T21:47:44.000Z
CVE-2020-23256 
An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-01-20T00:00:00.000Z
CVE-2020-23257 
Buffer Overflow vulnerability found in Espruino 2v05.41 allows an attacker to cause a denial of service via the function jsvGarbageCollectMarkUsed in file src/jsvar.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2020-23258 
An issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the Jsi_ValueIsNumber function in ./src/jsiValue.c file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2020-23259 
An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the Jsi_Strlen function in the src/jsiChar.c file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2020-23260 
An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2020-23262 
An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-22T15:35:58.000Z
CVE-2020-23263 
Persistent Cross-site scripting vulnerability on Fork CMS version 5.8.2 allows remote attackers to inject arbitrary Javascript code via the "navigation_title" parameter and the "title" parameter in /private/en/pages/add.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-06T21:42:08.000Z
CVE-2020-23264 
Cross-site request forgery (CSRF) in Fork-CMS before 5.8.2 allow remote attackers to hijack the authentication of logged administrators.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-06T21:46:39.000Z
CVE-2020-23266 
An issue was discovered in gpac 0.8.0. The OD_ReadUTF8String function in odf_code.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted media file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-21T23:04:26.000Z
CVE-2020-23267 
An issue was discovered in gpac 0.8.0. The gf_hinter_track_process function in isom_hinter_track_process.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted media file
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-21T23:04:26.000Z
CVE-2020-23269 
An issue was discovered in gpac 0.8.0. The stbl_GetSampleSize function in isomedia/stbl_read.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted media file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-21T23:04:27.000Z
CVE-2020-23273 
Heap-buffer overflow in the randomize_iparp function in edit_packet.c. of Tcpreplay v4.3.2 allows attackers to cause a denial of service (DOS) via a crafted pcap.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-21T23:04:28.000Z
CVE-2020-23282 
SQL injection in Logon Page in MV's mConnect application, v02.001.00, allows an attacker to use a non existing user with a generic password to connect to the application and get access to unauthorized information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T13:13:33.000Z
CVE-2020-23283 
Information disclosure in Logon Page in MV's mConnect application v02.001.00 allows an attacker to know valid users from the application's database via brute force.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T12:49:49.000Z
CVE-2020-23284 
Information disclosure in aspx pages in MV's IDCE application v1.0 allows an attacker to copy and paste aspx pages in the end of the URL application that connect into the database which reveals internal and sensitive information without logging into the web application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-20T19:29:07.000Z
CVE-2020-23302 
There is a heap-use-after-free at ecma-helpers-string.c:772 in ecma_ref_ecma_string in JerryScript 2.2.0
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T22:12:36.000Z
CVE-2020-23303 
There is a heap-buffer-overflow at jmem-poolman.c:165 in jmem_pools_collect_empty in JerryScript 2.2.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T22:12:50.000Z
CVE-2020-23306 
There is a stack-overflow at ecma-regexp-object.c:535 in ecma_regexp_match in JerryScript 2.2.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T22:12:59.000Z
CVE-2020-23308 
There is an Assertion 'context_p->stack_top_uint8 == LEXER_EXPRESSION_START' at js-parser-expr.c:3565 in parser_parse_expression in JerryScript 2.2.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T22:13:10.000Z
CVE-2020-23309 
There is an Assertion 'context_p->stack_depth == context_p->context_stack_depth' failed at js-parser-statm.c:2756 in parser_parse_statements in JerryScript 2.2.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T22:13:19.000Z
CVE-2020-23310 
There is an Assertion 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at js-parser-statm.c:733 in parser_parse_function_statement in JerryScript 2.2.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T22:13:30.000Z
CVE-2020-23311 
There is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context_p->token.type == LEXER_COMMA' failed at js-parser-expr.c:3230 in parser_parse_object_initializer in JerryScript 2.2.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T22:13:41.000Z
CVE-2020-23312 
There is an Assertion 'context.status_flags & PARSER_SCANNING_SUCCESSFUL' failed at js-parser.c:2185 in parser_parse_source in JerryScript 2.2.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T22:13:49.000Z
CVE-2020-23313 
There is an Assertion 'scope_stack_p > context_p->scope_stack_p' failed at js-scanner-util.c:2510 in scanner_literal_is_created in JerryScript 2.2.0
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T22:13:56.000Z
CVE-2020-23314 
There is an Assertion 'block_found' failed at js-parser-statm.c:2003 parser_parse_try_statement_end in JerryScript 2.2.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T22:14:08.000Z
CVE-2020-23315 
There is an ASSERTION (pFuncBody->GetYieldRegister() == oldYieldRegister) failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:48.000Z
CVE-2020-23319 
There is an Assertion in '(flags >> CBC_STACK_ADJUST_SHIFT) >= CBC_STACK_ADJUST_BASE || (CBC_STACK_ADJUST_BASE - (flags >> CBC_STACK_ADJUST_SHIFT)) <= context_p->stack_depth' in parser_emit_cbc_backward_branch in JerryScript 2.2.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T22:14:19.000Z
CVE-2020-23320 
There is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' in parser_parse_function_arguments in JerryScript 2.2.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T22:14:26.000Z
CVE-2020-23321 
There is a heap-buffer-overflow at lit-strings.c:431 in lit_read_code_unit_from_utf8 in JerryScript 2.2.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T22:14:31.000Z
CVE-2020-23322 
There is an Assertion in 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context_p->token.type == LEXER_COMMA' in parser_parse_object_initializer in JerryScript 2.2.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T22:14:35.000Z
CVE-2020-23323 
There is a heap-buffer-overflow at re-parser.c in re_parse_char_escape in JerryScript 2.2.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T22:14:40.000Z
CVE-2020-23327 
Cross Site Scripting vulnerability found in ZblogCN ZblogPHP v.1.0 allows a local attacker to execute arbitrary code via a crafted payload in title parameter of the module management model.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2020-23330 
An issue was discovered in Bento4 version 06c39d9. A NULL pointer dereference exists in the AP4_Stz2Atom::GetSampleSize component located in /Core/Ap4Stz2Atom.cpp. It allows an attacker to cause a denial of service (DOS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-17T21:27:44.000Z
CVE-2020-23331 
An issue was discovered in Bento4 version 06c39d9. A NULL pointer dereference exists in the AP4_DescriptorListWriter::Action component located in /Core/Ap4Descriptor.h. It allows an attacker to cause a denial of service (DOS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-17T21:27:47.000Z
CVE-2020-23332 
A heap-based buffer overflow exists in the AP4_StdcFileByteStream::ReadPartial component located in /StdC/Ap4StdCFileByteStream.cpp of Bento4 version 06c39d9. This issue can lead to a denial of service (DOS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-17T21:27:47.000Z
CVE-2020-23333 
A heap-based buffer overflow exists in the AP4_CttsAtom::AP4_CttsAtom component located in /Core/Ap4Utils.h of Bento4 version 06c39d9. This can lead to a denial of service (DOS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-17T21:27:48.000Z
CVE-2020-23334 
A WRITE memory access in the AP4_NullTerminatedStringAtom::AP4_NullTerminatedStringAtom component of Bento4 version 06c39d9 can lead to a segmentation fault.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-17T21:27:48.000Z
CVE-2020-23341 
A reflected cross site scripting (XSS) vulnerability in the /header.tmpl.php component of ATutor 2.2.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-17T21:45:59.000Z
CVE-2020-23342 
A CSRF vulnerability exists in Anchor CMS 0.12.7 anchor/views/users/edit.php that can change the Delete admin users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-19T13:35:04.000Z
CVE-2020-23349 
An intent redirection issue was doscovered in Sina Weibo Android SDK 4.2.7 (com.sina.weibo.sdk.share.WbShareTransActivity), any unexported Activities could be started by the com.sina.weibo.sdk.share.WbShareTransActivity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-05T15:36:05.000Z
CVE-2020-23352 
Z-BlogPHP 1.6.0 Valyria is affected by incorrect access control. PHP loose comparison and a magic hash can be used to bypass authentication. zb_user/plugin/passwordvisit/include.php:passwordvisit_input_password() uses loose comparison to authenticate, which can be bypassed via magic hash values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-27T15:25:14.000Z
CVE-2020-23355 
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Codiad 2.8.4 /componetns/user/class.user.php:Authenticate() is vulnerable in magic hash authentication bypass. If encrypted or hash value for the passwords form certain formats of magic hash, e.g, 0e123, another hash value 0e234 something can successfully authenticate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-27T15:26:31.000Z
CVE-2020-23356 
dmin/kernel/api/login.class.phpin in nibbleblog v3.7.1c allows type juggling for login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-27T15:27:03.000Z
CVE-2020-23359 
WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-27T15:29:03.000Z
CVE-2020-23360 
oscommerce v2.3.4.1 has a functional problem in user registration and password rechecking, where a non-identical password can bypass the checks in /catalog/admin/administrators.php and /catalog/password_reset.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-27T15:29:31.000Z
CVE-2020-23361 
phpList 3.5.3 allows type juggling for login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-27T15:30:07.000Z
CVE-2020-23362 
Insecure Permissons vulnerability found in Shop_CMS YerShop all versions allows a remote attacker to escalate privileges via the cover_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-05-09T00:00:00.000Z
CVE-2020-23363 
Cross Site Request Forgery (CSRF) vulnerability found in Verytops Verydows all versions that allows an attacker to execute arbitrary code via a crafted script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-05-09T00:00:00.000Z
CVE-2020-23369 
In YzmCMS 5.6, XSS was discovered in member/member_content/init.html via the SRC attribute of an IFRAME element because of using UEditor 1.4.3.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-10T22:14:11.000Z
CVE-2020-23370 
In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, which allows remote attackers to upload a swf file. The swf file can be injected with arbitrary web script or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-10T22:14:03.000Z
CVE-2020-23371 
Cross-site scripting (XSS) vulnerability in static/admin/js/kindeditor/plugins/multiimage/images/swfupload.swf in noneCms v1.3.0 allows remote attackers to inject arbitrary web script or HTML via the movieName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-10T22:13:51.000Z
CVE-2020-23373 
Cross-site scripting (XSS) vulnerability in admin/nav/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-10T22:13:29.000Z
CVE-2020-23374 
Cross-site scripting (XSS) vulnerability in admin/article/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-10T22:13:06.000Z
CVE-2020-23376 
NoneCMS v1.3 has a CSRF vulnerability in public/index.php/admin/nav/add.html, as demonstrated by adding a navigation column which can be injected with arbitrary web script or HTML via the name parameter to launch a stored XSS attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-10T22:12:53.000Z
CVE-2020-23426 
zzcms 201910 contains an access control vulnerability through escalation of privileges in /user/adv.php, which allows an attacker to modify data for further attacks such as CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-08T14:27:47.000Z
CVE-2020-23438 
Wondershare filmora 9.2.11 is affected by Trojan Dll hijacking leading to privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-03-04T00:00:00.000Z
CVE-2020-23446 
Verint Workforce Optimization suite 15.1 (15.1.0.37634) has Unauthenticated Information Disclosure via API
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-22T13:24:03.000Z
CVE-2020-23447 
newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-26T17:15:11.000Z
CVE-2020-23448 
newbee-mall all versions are affected by incorrect access control to remotely gain privileges through AdminLoginInterceptor.java. The authentication logic of the system's background /admin is in code AdminLoginInterceptor, which can be bypassed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-26T17:15:53.000Z
CVE-2020-23449 
newbee-mall all versions are affected by incorrect access control to remotely gain privileges through NewBeeMallIndexConfigServiceImpl.java. Unauthorized changes can be made to any user information through the userID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-26T17:16:22.000Z
CVE-2020-23450 
Spiceworks Version <= 7.5.00107 is affected by XSS. Any name typed on Custom Groups function is vulnerable to stored XSS as they displayed on http://127.0.0.1/inventory/groups/ without output sanitization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-01T15:10:44.000Z
CVE-2020-23451 
Spiceworks Version <= 7.5.00107 is affected by CSRF which can lead to privilege escalation via "/settings/v1/users" function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-15T13:15:59.000Z
CVE-2020-23452 
A cross-site scripting (XSS) vulnerability in Selenium Grid v3.141.59 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the hub parameter under the /grid/console page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-05T00:00:00.000Z
CVE-2020-23466 
Cross Site Scripting (XSS) vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attackers to run arbitrary code via the wzipcode field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-19T01:08:35.000Z
CVE-2020-23469 
gmate v0.12+bionic contains a regular expression denial of service (ReDoS) vulnerability in the gedit3 plugin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-22T19:22:07.000Z
CVE-2020-23478 
Leo Editor v6.2.1 was discovered to contain a regular expression denial of service (ReDoS) vulnerability in the component plugins/importers/dart.py.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-22T19:23:20.000Z
CVE-2020-23481 
CMS Made Simple 2.2.14 was discovered to contain a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Field Definition text field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-22T19:47:33.000Z
CVE-2020-23489 
The import.json.php file before 8.9 for Avideo is vulnerable to a File Deletion vulnerability. This allows the deletion of configuration.php, which leads to certain privilege checks not being in place, and therefore a user can escalate privileges to admin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-16T17:04:08.000Z
CVE-2020-23490 
There was a local file disclosure vulnerability in AVideo < 8.9 via the proxy streaming. An unauthenticated attacker can exploit this issue to read an arbitrary file on the server. Which could leak database credentials or other sensitive information such as /etc/passwd file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-16T17:03:52.000Z
CVE-2020-23512 
VR CAM P1 Model P1 v1 has an incorrect access control vulnerability where an attacker can obtain complete access of the device from web (remote) without authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-15T13:40:33.000Z
CVE-2020-23517 
Cross Site Scripting (XSS) vulnerability in Aryanic HighMail (High CMS) versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-26T01:08:38.000Z
CVE-2020-23518 
Cross Site Scripting (XSS) vulnerability in UltimateKode Neo Billing - Accounting, Invoicing And CRM Software up to version 3.5 which allows remote attackers to inject arbitrary web script or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-02T16:53:15.000Z
CVE-2020-23520 
imcat 5.2 allows an authenticated file upload and consequently remote code execution via the picture functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-09T15:34:38.000Z
CVE-2020-23522 
Pixelimity 1.0 has cross-site request forgery via the admin/setting.php data [Password] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-19T12:07:21.000Z
CVE-2020-23533 
Union Pay up to 1.2.0, for web based versions contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability, allows attackers to shop for free in merchants' websites and mobile apps, via a crafted authentication code (MAC) which is generated based on a secret key which is NULL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T15:34:59.000Z
CVE-2020-23534 
A server-side request forgery (SSRF) vulnerability in Upgrade.php of gopeak masterlab 2.1.5, via the 'source' parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-25T15:59:14.000Z
CVE-2020-23539 
An issue was discovered in Realtek rtl8723de BLE Stack <= 4.1 that allows remote attackers to cause a Denial of Service via the interval field to the CONNECT_REQ message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-08T16:45:38.000Z