rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-14930 
An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur because the password-reset feature discloses the verification token. Upon a getverificationcode.jsp request, this token is transmitted not only to the registered phone number of the user account, but is also transmitted to the unauthenticated HTTP client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-19T20:50:41.000Z
CVE-2020-14931 
A stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) 1.3a might allow remote WHOIS servers to execute arbitrary code via a long line in a response that is mishandled by nic_format_buff.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-19T21:03:24.000Z
CVE-2020-14932 
compose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates from an HTTP GET request. This is related to mailto.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-20T12:07:23.000Z
CVE-2020-14933 
compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST request. NOTE: the vendor disputes this because these two conditions for PHP object injection are not satisfied: existence of a PHP magic method (such as __wakeup or __destruct), and any attack-relevant classes must be declared before unserialize is called (or must be autoloaded).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-20T12:07:06.000Z
CVE-2020-14934 
Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent. The function parsing the received SNMP request does not verify the input message's requested variables against the capacity of the internal SNMP engine buffer. If the number of variables in the request exceeds the allocated buffer, a memory write out of the buffer boundaries occurs. This write operation provides a possibility to overwrite other variables allocated in the .bss section by the application. Because the sender of the frame is in control of the content that will be written beyond the buffer limits, and there is no strict process memory separation, this issue may allow overwriting of sensitive memory areas of an IoT device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-18T16:25:51.000Z
CVE-2020-14935 
Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP bulk get request response encoding function. The function parsing the received SNMP request does not verify the input message's requested variables against the capacity of the internal SNMP engine buffer. When a bulk get request response is assembled, a stack buffer dedicated for OIDs (with a limited capacity) is allocated in snmp_engine_get_bulk(). When snmp_engine_get_bulk() is populating the stack buffer, an overflow condition may occur due to lack of input length validation. This makes it possible to overwrite stack regions beyond the allocated buffer, including the return address from the function. As a result, the code execution path may be redirected to an address provided in the SNMP bulk get payload. If the target architecture uses common addressing space for program and data memory, it may also be possible to supply code in the SNMP request payload, and redirect the execution path to the remotely injected code, by modifying the function's return address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-18T16:32:37.000Z
CVE-2020-14936 
Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent. Functions parsing the OIDs in SNMP requests lack sufficient allocated target-buffer capacity verification when writing parsed OID values. The function snmp_oid_decode_oid() may overwrite memory areas beyond the provided target buffer, when called from snmp_message_decode() upon an SNMP request reception. Because the content of the write operations is externally provided in the SNMP requests, it enables a remote overwrite of an IoT device's memory regions beyond the allocated buffer. This overflow may allow remote overwrite of stack and statically allocated variables memory regions by sending a crafted SNMP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-18T16:35:20.000Z
CVE-2020-14937 
Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in the SNMP BER encoder/decoder. The length of provided input/output buffers is insufficiently verified during the encoding and decoding of data. This may lead to out-of-bounds buffer read or write access in BER decoding and encoding functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-18T15:27:37.000Z
CVE-2020-14938 
An issue was discovered in map.c in FreedroidRPG 1.0rc2. It assumes lengths of data sets read from saved game files. It copies data from a file into a fixed-size heap-allocated buffer without size verification, leading to a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-23T09:57:09.000Z
CVE-2020-14939 
An issue was discovered in savestruct_internal.c in FreedroidRPG 1.0rc2. Saved game files are composed of Lua scripts that recover a game's state. A file can be modified to put any Lua code inside, leading to arbitrary code execution while loading.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-23T09:56:50.000Z
CVE-2020-14940 
An issue was discovered in io/gpx/GPXDocumentReader.java in TuxGuitar 1.5.4. It uses misconfigured XML parsers, leading to XXE while loading GP6 (.gpx) and GP7 (.gp) tablature files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-23T09:56:36.000Z
CVE-2020-14942 
Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-21T14:44:29.000Z
CVE-2020-14943 
The Firstname and Lastname parameters in Global RADAR BSA Radar 1.6.7234.24750 and earlier are vulnerable to stored cross-site scripting (XSS) via Update User Profile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T21:50:09.000Z
CVE-2020-14944 
Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. This can allow for manipulation and takeover of user accounts if successfully exploited. The following vulnerable functions are exposed: ChangePassword, SaveUserProfile, and GetUser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T21:48:58.000Z
CVE-2020-14945 
A privilege escalation vulnerability exists within Global RADAR BSA Radar 1.6.7234.24750 and earlier that allows an authenticated, low-privileged user to escalate their privileges to administrator rights (i.e., the BankAdmin role) via modified SaveUser data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T21:45:24.000Z
CVE-2020-14946 
downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and earlier allows users to download transaction files. When downloading the files, a user is able to view local files on the web server by manipulating the FileName and FilePath parameters in the URL, or while using a proxy. This vulnerability could be used to view local sensitive files or configuration files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T21:43:00.000Z
CVE-2020-14947 
OCS Inventory NG 2.7 allows Remote Command Execution via shell metacharacters to require/commandLine/CommandLine.php because mib_file in plugins/main_sections/ms_config/ms_snmp_config.php is mishandled in get_mib_oid.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-30T20:44:34.000Z
CVE-2020-14950 
aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modified /system?action=ServiceAdmin request (start, stop, or restart) to the setting menu of Sotfware Store.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-21T15:58:33.000Z
CVE-2020-14954 
Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data (e.g., from a man-in-the-middle attacker) and evaluates it in a TLS context, aka "response injection."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-21T16:55:41.000Z
CVE-2020-14955 
In Jiangmin Antivirus 16.0.13.129, the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220440.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-26T17:03:23.000Z
CVE-2020-14956 
In Windows cleaning assistant 3.2, the driver file (AtpKrnl.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x223CCA.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-30T14:37:56.000Z
CVE-2020-14957 
In Windows cleaning assistant 3.2, the driver file (AtpKrnl.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x223CCD.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-30T14:40:17.000Z
CVE-2020-14958 
In Gogs 0.11.91, MakeEmailPrimary in models/user_mail.go lacks a "not the owner of the email" check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-21T19:57:21.000Z
CVE-2020-14959 
Multiple XSS vulnerabilities in the Easy Testimonials plugin before 3.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the wp-admin/post.php Client Name, Position, Web Address, Other, Location Reviewed, Product Reviewed, Item Reviewed, or Rating parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-21T23:04:49.000Z
CVE-2020-14960 
A SQL injection vulnerability in PHP-Fusion 9.03.50 affects the endpoint administration/comments.php via the ctype parameter,
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-21T23:04:40.000Z
CVE-2020-14961 
Concrete5 before 8.5.3 does not constrain the sort direction to a valid asc or desc value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-21T23:04:30.000Z
CVE-2020-14962 
Multiple XSS vulnerabilities in the Final Tiles Gallery plugin before 3.4.19 for WordPress allow remote attackers to inject arbitrary web script or HTML via the Title (aka imageTitle) or Caption (aka description) field of an image to wp-admin/admin-ajax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-21T23:04:15.000Z
CVE-2020-14965 
On TP-Link TL-WR740N v4 and TL-WR740ND v4 devices, an attacker with access to the admin panel can inject HTML code and change the HTML context of the target pages and stations in the access-control settings via targets_lists_name or hosts_lists_name. The vulnerability can also be exploited through a CSRF, requiring no authentication as an administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-23T13:30:13.000Z
CVE-2020-14966 
An issue was discovered in the jsrsasign package through 8.0.18 for Node.js. It allows a malleability in ECDSA signatures by not checking overflows in the length of a sequence and '0' characters appended or prepended to an integer. The modified signatures are verified as valid. This could have a security-relevant impact if an application relied on a single canonical signature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T11:20:13.000Z
CVE-2020-14967 
An issue was discovered in the jsrsasign package before 8.0.18 for Node.js. Its RSA PKCS1 v1.5 decryption implementation does not detect ciphertext modification by prepending '\0' bytes to ciphertexts (it decrypts modified ciphertexts without error). An attacker might prepend these bytes with the goal of triggering memory corruption issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T11:19:35.000Z
CVE-2020-14968 
An issue was discovered in the jsrsasign package before 8.0.17 for Node.js. Its RSASSA-PSS (RSA-PSS) implementation does not detect signature manipulation/modification by prepending '\0' bytes to a signature (it accepts these modified signatures as valid). An attacker can abuse this behavior in an application by creating multiple valid signatures where only one signature should exist. Also, an attacker might prepend these bytes with the goal of triggering memory corruption issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T11:19:49.000Z
CVE-2020-14969 
app/Model/Attribute.php in MISP 2.4.127 lacks an ACL lookup on attribute correlations. This occurs when querying the attribute restsearch API, revealing metadata about a correlating but unreachable attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T11:48:44.000Z
CVE-2020-14971 
Pi-hole through 5.0 allows code injection in piholedhcp (the Static DHCP Leases section) by modifying Teleporter backup files and then restoring them. This occurs in settings.php. To exploit this, an attacker would request a backup of limited files via teleporter.php. These are placed into a .tar.gz archive. The attacker then modifies the host parameter in dnsmasq.d files, and then compresses and uploads these files again.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-23T13:41:31.000Z
CVE-2020-14972 
Multiple SQL injection vulnerabilities in Sourcecodester Pisay Online E-Learning System 1.0 allow remote unauthenticated attackers to bypass authentication and achieve Remote Code Execution (RCE) via the user_email, user_pass, and id parameters on the admin login-portal and the edit-lessons webpages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T17:21:53.000Z
CVE-2020-14973 
The loginForm within the general/login.php webpage in webTareas 2.0p8 suffers from a Reflected Cross Site Scripting (XSS) vulnerability via the query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T17:19:01.000Z
CVE-2020-14974 
The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to unlock a file and kill processes (even ones running as SYSTEM) that hold a handle, via IOCTL code 0x222124.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-23T19:07:48.000Z
CVE-2020-14975 
The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to delete, move, or copy arbitrary files via IOCTL code 0x222124.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-23T19:06:26.000Z
CVE-2020-14976 
GNS3 ubridge through 0.9.18 on macOS, as used in GNS3 server before 2.1.17, allows a local attacker to read arbitrary files because it handles configuration-file errors by printing the configuration file while executing in a setuid root context.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-23T19:04:53.000Z
CVE-2020-14977 
An issue was discovered in F-Secure SAFE 17.7 on macOS. The XPC services use the PID to identify the connecting client, which allows an attacker to perform a PID reuse attack and connect to a privileged XPC service, and execute privileged commands on the system. NOTE: the attacker needs to execute code on an already compromised machine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-23T19:02:30.000Z
CVE-2020-14978 
An issue was discovered in F-Secure SAFE 17.7 on macOS. Due to incorrect client version verification, an attacker can connect to a privileged XPC service, and execute privileged commands on the system. NOTE: the attacker needs to execute code on an already compromised machine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-23T19:01:27.000Z
CVE-2020-14979 
The WinRing0.sys and WinRing0x64.sys drivers 1.2.0 in EVGA Precision X1 through 1.0.6 allow local users, including low integrity processes, to read and write to arbitrary memory locations. This allows any user to gain NT AUTHORITY\SYSTEM privileges by mapping \Device\PhysicalMemory into the calling process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-11T17:55:13.000Z
CVE-2020-14980 
The Sophos Secure Email application through 3.9.4 for Android has Missing SSL Certificate Validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T17:39:22.000Z
CVE-2020-14981 
The ThreatTrack VIPRE Password Vault app through 1.100.1090 for iOS has Missing SSL Certificate Validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T17:37:58.000Z
CVE-2020-14982 
A Blind SQL Injection vulnerability in Kronos WebTA 3.8.x and later before 4.0 (affecting the com.threeis.webta.H352premPayRequest servlet's SortBy parameter) allows an attacker with the Employee, Supervisor, or Timekeeper role to read sensitive data from the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-15T20:09:33.000Z
CVE-2020-14983 
The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow. A malicious user can overwrite the server's stack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T19:13:34.000Z
CVE-2020-14987 
An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows remote attackers to execute arbitrary code because there is a mishandling of the capability for administrators to write and run Groovy scripts within the updater editor. An attacker must use an AST transforming annotation such as @Grab.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-11T17:50:32.000Z
CVE-2020-14988 
An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows XSS in the login page via the loginmessage parameter, the text editor via the src attribute of HTML elements, the translations menu via the foldername parameter, the author page via the link URL, or the upload image functionality via an SVG document containing JavaScript.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-11T18:07:20.000Z
CVE-2020-14989 
An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows CSRF if the attacker uses GET where POST was intended.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-11T18:14:00.000Z
CVE-2020-14990 
IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T20:53:31.000Z
CVE-2020-14993 
A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers to execute arbitrary code via the formuserphonenumber parameter in an authusersms action to mainfunction.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-23T11:50:58.000Z
CVE-2020-14999 
A logic bug in system monitoring driver of Acronis Agent after 12.5.21540 and before 12.5.23094 allowed to bypass Windows memory protection and access sensitive data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-27T12:48:07.000Z
CVE-2020-15000 
A PIN management problem was discovered on Yubico YubiKey 5 devices 5.2.0 to 5.2.6. OpenPGP has three passwords: Admin PIN, Reset Code, and User PIN. The Reset Code is used to reset the User PIN, but it is disabled by default. A flaw in the implementation of OpenPGP sets the Reset Code to a known value upon initialization. If the retry counter for the Reset Code is set to non-zero without changing the Reset Code, this known value can be used to reset the User PIN. To set the retry counters, the Admin PIN is required.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-09T17:57:40.000Z
CVE-2020-15001 
An information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and 5.3.0 to 5.3.1. The OTP application allows a user to set optional access codes on OTP slots. This access code is intended to prevent unauthorized changes to OTP configurations. The access code is not checked when updating NFC specific components of the OTP configurations. This may allow an attacker to access configured OTPs and passwords stored in slots that were not configured by the user to be read over NFC, despite a user having set an access code. (Users who have not set an access code, or who have not configured the OTP slots, are not impacted by this issue.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-09T18:05:30.000Z
CVE-2020-15002 
OX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-23T04:51:42.000Z
CVE-2020-15003 
OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user (via the session API during shared Drive access).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-23T04:54:27.000Z
CVE-2020-15004 
OX App Suite through 7.10.3 allows stats/diagnostic?param= XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-23T04:55:35.000Z
CVE-2020-15005 
In MediaWiki before 1.31.8, 1.32.x and 1.33.x before 1.33.4, and 1.34.x before 1.34.2, private wikis behind a caching server using the img_auth.php image authorization security feature may have had their files cached publicly, so any unauthorized user could view them. This occurs because Cache-Control and Vary headers were mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-24T22:07:37.000Z
CVE-2020-15006 
Bludit 3.12.0 allows stored XSS via JavaScript code in an SVG document to bl-kernel/ajax/logo-upload.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-24T10:41:54.000Z
CVE-2020-15007 
A buffer overflow in the M_LoadDefaults function in m_misc.c in id Tech 1 (aka Doom engine) allows arbitrary code execution via an unsafe usage of fscanf, because it does not limit the number of characters to be read in a format argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-24T10:55:38.000Z