rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-35125 
A cross-site scripting (XSS) vulnerability in the forms component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript via mautic[return] (a different attack method than CVE-2020-35124, but also related to the Referer concept).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-09T21:39:33.000Z
CVE-2020-35126 
Typesetter CMS 5.x through 5.1 allows admins to conduct Site Title persistent XSS attacks via an Admin/Configuration URI. NOTE: the significance of this report is disputed because "admins are considered trustworthy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-11T03:57:08.000Z
CVE-2020-35127 
Ignite Realtime Openfire 4.6.0 has plugins/bookmarks/create-bookmark.jsp Stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-11T04:05:47.000Z
CVE-2020-35128 
Mautic before 3.2.4 is affected by stored XSS. An attacker with permission to manage companies, an application feature, could attack other users, including administrators. For example, by loading an externally crafted JavaScript file, an attacker could eventually perform actions as the target user. These actions include changing the user passwords, altering user or email addresses, or adding a new administrator to the system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-19T13:08:02.000Z
CVE-2020-35129 
Mautic before 3.2.4 is affected by stored XSS. An attacker with access to Social Monitoring, an application feature, could attack other users, including administrators. For example, an attacker could load an externally drafted JavaScript file that would allow them to eventually perform actions on the target user’s behalf, including changing the user’s password or email address or changing the attacker’s user role from a low-privileged user to an administrator account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-19T13:05:32.000Z
CVE-2020-35131 
Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCriteriaFunction in lib/MongoLite/Database.php, as demonstrated by values in JSON data to the /auth/check or /auth/requestreset URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-08T16:09:06.000Z
CVE-2020-35132 
An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via get_request in lib/function.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-11T04:36:03.000Z
CVE-2020-35133 
irfanView 4.56 contains an error processing parsing files of type .pcx. Which leads to out-of-bounds writing at i_view32+0xdb60.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-16T17:05:19.000Z
CVE-2020-35135 
The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-11T04:52:09.000Z
CVE-2020-35136 
Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilename_template parameter to admin/tools/dolibarr_export.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-23T14:39:49.000Z
CVE-2020-35137 
The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded API key, used to communicate with the MobileIron SaaS discovery API, as demonstrated by Mobile@Work (aka com.mobileiron). The key is in com/mobileiron/registration/RegisterActivity.java and can be used for api/v1/gateway/customers/servers requests. NOTE: Vendor states that this is an opt-in feature to the product - it is not enabled by default and customers cannot enable it without an explicit email to support. At this time, they do not plan change to make any changes to this feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-29T00:00:00.000Z
CVE-2020-35138 
The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded encryption key, used to encrypt the submission of username/password details during the authentication process, as demonstrated by Mobile@Work (aka com.mobileiron). The key is in the com/mobileiron/common/utils/C4928m.java file. NOTE: It has been asserted that there is no causality or connection between credential encryption and the MiTM attack
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-29T19:36:38.000Z
CVE-2020-35139 
An issue was discovered in OFPBundleCtrlMsg in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service (DoS) (infinite loop).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-11T00:00:00.000Z
CVE-2020-35141 
An issue was discovered in OFPQueueGetConfigReply in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service (DoS) (infinite loop).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-11T00:00:00.000Z
CVE-2020-35145 
Acronis True Image for Windows prior to 2021 Update 3 allowed local privilege escalation due to a DLL hijacking vulnerability in multiple components, aka an Untrusted Search Path issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-29T06:49:39.000Z
CVE-2020-35149 
lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-11T19:00:00.000Z
CVE-2020-35151 
The Online Marriage Registration System 1.0 post parameter "searchdata" in the user/search.php request is vulnerable to Time Based Sql Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-21T20:20:54.000Z
CVE-2020-35152 Privilege escalation through unquoted service binary path on Cloudflare WARP for Windows
Cloudflare WARP for Windows allows privilege escalation due to an unquoted service path. A malicious user or process running with non-administrative privileges can become an administrator by abusing the unquoted service path issue. Since version 1.2.2695.1, the vulnerability was fixed by adding quotes around the service's binary path. This issue affects Cloudflare WARP for Windows, versions prior to 1.2.2695.1.
Problem types: cwe_id: CWE-428
description: CWE-428
Affected products: vendor: Cloudflare
product: Cloudflare WARP for Windows
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 4.5
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: James Tan
Published: 2021-02-02T23:35:31.270Z
CVE-2020-35163 
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain a Use of Insufficiently Random Values Vulnerability.
Problem types: cwe_id: CWE-330
description: CWE-330: Use of Insufficiently Random Values
Affected products: vendor: Dell
product: Dell BSAFE Crypto-C Micro Edition
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2022-07-11T19:25:36.649Z
CVE-2020-35164 
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.
Problem types: cwe_id: CWE-385
description: CWE-385: Covert Timing Channel
Affected products: vendor: Dell
product: Dell BSAFE Crypto-C Micro Edition
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 6.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
version: 3.1
Published: 2022-07-11T19:25:40.941Z
CVE-2020-35165 
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.
Problem types: cwe_id: CWE-208
description: CWE-208: Observable Timing Discrepancy
Affected products: vendor: Dell
product: Dell BSAFE Crypto-C Micro Edition
default_status: unaffected
vendor: Dell
product: Dell BSAFE Micro Edition Suite
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.1
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2024-05-22T05:56:50.088Z
CVE-2020-35166 
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.
Problem types: cwe_id: CWE-385
description: CWE-385: Covert Timing Channel
Affected products: vendor: Dell
product: BSAFE Crypto-C Micro Edition
default_status: unaffected
vendor: Dell
product: Dell BSAFE Micro Edition Suite
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.1
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2022-07-11T19:25:46.298Z
CVE-2020-35167 
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.
Problem types: cwe_id: CWE-200
description: CWE-200: Information Exposure
Affected products: vendor: Dell
product: Dell BSAFE Crypto-C Micro Edition
CVSS v3.1: attackComplexity: HIGH
attackVector: PHYSICAL
availabilityImpact: NONE
baseScore: 4.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
version: 3.1
Published: 2022-07-11T19:25:51.197Z
CVE-2020-35168 
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.
Problem types: cwe_id: CWE-311
description: CWE-311: Missing Encryption of Sensitive Data
Affected products: vendor: Dell
product: Dell BSAFE Crypto-C Micro Edition
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 4.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2022-07-11T19:25:57.203Z
CVE-2020-35169 
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Improper Input Validation Vulnerability.
Problem types: cwe_id: CWE-347
description: CWE-347: Improper Verification of Cryptographic Signature
Affected products: vendor: Dell
product: Dell BSAFE Crypto-C Micro Edition
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 9.1
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
version: 3.1
Published: 2022-07-11T19:26:03.078Z
CVE-2020-35170 
Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, and Dell EMC PowerMax OS 5978.221.221 and 5978.479.479 contain a Cross-Site Scripting (XSS) vulnerability. An authenticated malicious user may potentially exploit this vulnerability to inject javascript code and affect other authenticated users’ sessions.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Dell
product: Unisphere for PowerMax
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
version: 3.1
Published: 2021-01-05T21:40:26.349Z
CVE-2020-35173 
The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server (aka services.ftpservice.FTPReceiver.ACTION_START_FTPSERVER and services.ftpservice.FTPReceiver.ACTION_STOP_FTPSERVER).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-30T19:04:12.000Z
CVE-2020-35175 
Frappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-11T22:10:40.000Z
CVE-2020-35176 
In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501 and CVE-2020-29600.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-11T23:16:22.000Z
CVE-2020-35177 
HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of users via the LDAP auth method. Fixed in 1.5.6 and 1.6.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-17T04:17:27.000Z
CVE-2020-35184 
The official composer docker images before 1.8.3 contain a blank password for a root user. System using the composer docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-17T01:25:03.000Z
CVE-2020-35185 
The official ghost docker images before 2.16.1-alpine (Alpine specific) contain a blank password for a root user. System using the ghost docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-17T00:39:47.000Z
CVE-2020-35186 
The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the adminer docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-17T01:13:27.000Z
CVE-2020-35187 
The official telegraf docker images before 1.9.4-alpine (Alpine specific) contain a blank password for a root user. System using the telegraf docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-17T00:58:19.000Z
CVE-2020-35189 
The official kong docker images before 1.0.2-alpine (Alpine specific) contain a blank password for a root user. System using the kong docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-17T00:44:39.000Z
CVE-2020-35190 
The official plone Docker images before version of 4.3.18-alpine (Alpine specific) contain a blank password for a root user. System using the plone docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-17T01:30:19.000Z
CVE-2020-35191 
The official drupal docker images before 8.5.10-fpm-alpine (Alpine specific) contain a blank password for a root user. System using the drupal docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-17T01:08:36.000Z
CVE-2020-35192 
The official vault docker images before 0.11.6 contain a blank password for a root user. System using the vault docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-17T01:33:02.000Z
CVE-2020-35193 
The official sonarqube docker images before alpine (Alpine specific) contain a blank password for a root user. System using the sonarqube docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-15T23:14:51.000Z
CVE-2020-35195 
The official haproxy docker images before 1.8.18-alpine (Alpine specific) contain a blank password for a root user. System using the haproxy docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-17T01:11:26.000Z
CVE-2020-35196 
The official rabbitmq docker images before 3.7.13-beta.1-management-alpine (Alpine specific) contain a blank password for a root user. System using the rabbitmq docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-17T01:20:33.000Z
CVE-2020-35197 
The official memcached docker images before 1.5.11-alpine (Alpine specific) contain a blank password for a root user. System using the memcached docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-17T01:03:15.000Z
CVE-2020-35198 
An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-12T10:55:47.000Z
CVE-2020-35199 
Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp groupchatJID Stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-12T17:20:41.000Z
CVE-2020-35200 
Ignite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-12T17:20:34.000Z
CVE-2020-35201 
Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp users Stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-12T17:20:19.000Z
CVE-2020-35202 
Ignite Realtime Openfire 4.6.0 has plugins/dbaccess/db-access.jsp sql Stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-12T17:20:27.000Z
CVE-2020-35203 
Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the initFile.jsp file via the msg parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-11T02:48:16.000Z
CVE-2020-35204 
Reflected XSS in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the PolicyAuthority/Common/FolderControl.jsp file via the unqID parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-11T02:53:14.000Z
CVE-2020-35205 
Server Side Request Forgery (SSRF) in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to scan internal ports and make outbound connections via the initFile.jsp file. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-11T02:52:14.000Z
CVE-2020-35206 
Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the cConn.jsp file via the ur parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-11T02:51:30.000Z
CVE-2020-35207 
An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. The PIN authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authenticate with an arbitrary PIN. NOTE: the vendor has indicated that this is not an attack of interest within the context of their threat model, which excludes jailbroken devices
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-12T18:07:51.000Z
CVE-2020-35208 
An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. The password authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authenticate with an arbitrary password. NOTE: the vendor has indicated that this is not an attack of interest within the context of their threat model, which excludes jailbroken devices
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-12T18:07:35.000Z
CVE-2020-35209 
An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-16T19:08:21.000Z
CVE-2020-35210 
A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-16T19:08:22.000Z