rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-35391 
Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must be placed after the RouterCfm.cfg filename, or that the HTTP request headers must be unusual, but it is not known why these are relevant to the device's HTTP response behavior.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N
attackVector: ADJACENT_NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 9.6
baseSeverity: CRITICAL
Published: 2021-01-01T00:00:00.000Z
CVE-2020-35395 
XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-15T15:38:55.000Z
CVE-2020-35396 
EGavilan Barcodes generator 1.0 is affected by: Cross Site Scripting (XSS) via the index.php. An Attacker is able to inject the XSS payload in the web application each time a user visits the website.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-15T15:45:18.000Z
CVE-2020-35398 
An issue was discovered in UTI Mutual fund Android application 5.4.18 and prior, allows attackers to brute force enumeration of usernames determined by the error message returned after invalid credentials are attempted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-23T21:10:36.000Z
CVE-2020-35416 
Multiple cross-site scripting (XSS) vulnerabilities exist in PHPJabbers Appointment Scheduler 2.3, in the index.php admin login webpage (with different request parameters), allows remote attackers to inject arbitrary web script or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-15T20:50:43.000Z
CVE-2020-35418 
Cross Site Scripting (XSS) in the contact page of Group Office CRM 6.4.196 by uploading a crafted svg file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-14T16:11:16.000Z
CVE-2020-35419 
Cross Site Scripting (XSS) in Group Office CRM 6.4.196 via the SET_LANGUAGE parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-14T16:11:14.000Z
CVE-2020-35427 
SQL injection vulnerability in PHPGurukul Employee Record Management System 1.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-20T13:22:44.000Z
CVE-2020-35430 
SQL Injection in com/inxedu/OS/edu/controller/letter/AdminMsgSystemController in Inxedu v2.0.6 via the ids parameter to admin/letter/delsystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-29T16:21:12.000Z
CVE-2020-35437 
Subrion CMS 4.2.1 is affected by: Cross Site Scripting (XSS) through the avatar[path] parameter in a POST request to the /_core/profile/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-26T03:58:04.000Z
CVE-2020-35438 
Cross Site Scripting (XSS) vulnerability in the kk Star Ratings plugin before 4.1.5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T12:43:19.000Z
CVE-2020-35441 
FDCMS (aka Fangfa Content Management System) 4.0 contains a front-end SQL injection via Admin/Lib/Action/FloginAction.class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-02T21:40:26.000Z
CVE-2020-35442 
FDCMS (also known as Fangfa Content Management System) 4.0 allows remote attackers to get a webshell in the background via Front/lib/Action/FindexAction.class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-02T21:40:33.000Z
CVE-2020-35448 
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfd_getl_signed_32 in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section in elf.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-27T03:38:54.000Z
CVE-2020-35450 
Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain set_language calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-26T04:14:05.000Z
CVE-2020-35451 Oozie local privilege escalation
There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to replace the files in Oozie's sharelib during it's creation.
Problem types: cwe_id: CWE-377
description: CWE-377 Insecure Temporary File
Affected products: vendor: Apache Software Foundation
product: Apache Oozie
Credits: lang: en
value: The Apache Oozie PMC would like to thank Jonathan Leitschuh for reporting the issue
Published: 2021-03-09T15:20:13.000Z
CVE-2020-35452 mod_auth_digest possible stack overflow by one nul byte
Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could create one, though some particular compiler and/or compilation option might make it possible, with limited consequences anyway due to the size (a single byte) and the value (zero byte) of the overflow
Problem types: description: mod_auth_digest possible stack overflow by one nul byte
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Credits: lang: en
value: This issue was discovered and reported by GHSL team member @antonio-morales (Antonio Morales)
Published: 2021-06-10T07:10:21.000Z
CVE-2020-35453 
HashiCorp Vault Enterprise’s Sentinel EGP policy feature incorrectly allowed requests to be processed in parent and sibling namespaces. Fixed in 1.5.6 and 1.6.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-17T04:22:34.000Z
CVE-2020-35454 
The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from an Android backup because of insecure application configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-17T14:58:58.000Z
CVE-2020-35455 
The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from Shared Preferences and the SQLite database because of insecure data storage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-17T14:58:14.000Z
CVE-2020-35456 
The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to view private chat messages and media files via logcat because of excessive logging.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-17T14:56:44.000Z
CVE-2020-35457 
GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of calls to g_option_group_add_entries()." The researcher states that this pattern is undocumented
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-14T22:25:09.000Z
CVE-2020-35458 
An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk_remember_me_id parameter in the login_from_cookie cookie. The user logout routine could be used by unauthenticated remote attackers to execute code as hauser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-12T14:21:23.000Z
CVE-2020-35459 
An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" (when "crm" is run) were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-12T14:32:23.000Z
CVE-2020-35460 
common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-14T22:48:19.000Z
CVE-2020-35462 
Version 3.16.0 of the CoScale agent Docker image contains a blank password for the root user. Systems deployed using affected versions of the CoScale agent container may allow a remote attacker to achieve root access with a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-15T22:35:40.000Z
CVE-2020-35463 
Version 1.0.0 of the Instana Dynamic APM Docker image contains a blank password for the root user. Systems deployed using affected versions of the Instana Dynamic APM container may allow a remote attacker to achieve root access with a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-15T22:40:20.000Z
CVE-2020-35464 
Version 1.3.0 of the Weave Cloud Agent Docker image contains a blank password for the root user. Systems deployed using affected versions of the Weave Cloud Agent container may allow a remote attacker to achieve root access with a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-15T22:45:44.000Z
CVE-2020-35466 
The Blackfire Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affected versions of the Blackfire container may allow a remote attacker to achieve root access with a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-15T22:56:56.000Z
CVE-2020-35467 
The Docker Docs Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affected versions of the Docker Docs container may allow a remote attacker to achieve root access with a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-15T22:59:54.000Z
CVE-2020-35468 
The Appbase streams Docker image 2.1.2 contains a blank password for the root user. Systems deployed using affected versions of the streams container may allow a remote attacker to achieve root access with a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-15T23:03:10.000Z
CVE-2020-35469 
The Software AG Terracotta Server OSS Docker image 5.4.1 contains a blank password for the root user. Systems deployed using affected versions of the Terracotta Server OSS container may allow a remote attacker to achieve root access with a blank password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-15T23:08:37.000Z
CVE-2020-35470 
Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol header. This affects situations with tcp-proxy as the network filter (not HTTP filters).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-15T00:48:35.000Z
CVE-2020-35471 
Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-15T00:48:24.000Z
CVE-2020-35473 
An information leakage vulnerability in the Bluetooth Low Energy advertisement scan response in Bluetooth Core Specifications 4.0 through 5.2, and extended scan response in Bluetooth Core Specifications 5.0 through 5.2, may be used to identify devices using Resolvable Private Addressing (RPA) by their response or non-response to specific scan requests from remote addresses. RPAs that have been associated with a specific remote device may also be used to identify a peer in the same manner by using its reaction to an active scan request. This has also been called an allowlist-based side channel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-08T00:00:00.000Z
CVE-2020-35474 
In MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS because the definition of MediaWiki:recentchanges-legend-watchlistexpiry can be changed onwiki so that the output is raw HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-18T07:30:48.000Z
CVE-2020-35475 
In MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can contain raw HTML. XSS can happen when a user visits Special:UserRights but does not have rights to change all userrights, and the table on the left side has unchangeable groups in it. (The right column with the changeable groups is not affected and is escaped correctly.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-18T07:32:34.000Z
CVE-2020-35476 
A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is written to a gnuplot file in the /tmp directory. This file is then executed via the mygnuplot.sh shell script. (tsd/GraphHandler.java attempted to prevent command injections by blocking backticks but this is insufficient.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-16T00:00:00.000Z
CVE-2020-35477 
MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one sets MediaWiki:Mainpage to Special:MyLanguage/Main Page, visits a log entry on Special:Log, and toggles the "Change visibility of selected log entries" checkbox (or a tags checkbox) next to it, there is a redirection to the main page's action=historysubmit (instead of the desired behavior in which a revision-deletion form appears).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-18T07:37:24.000Z
CVE-2020-35478 
MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw HTML with SCRIPT tags via LogFormatter::makePageLink(). This affects MediaWiki 1.33.0 and later.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-18T07:33:43.000Z
CVE-2020-35479 
MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry itself does not escape in all code paths. For example, the return of Language::userTimeAndDate is is always unsafe for HTML in a month value. This affects MediaWiki 1.12.0 and later.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-18T07:42:25.000Z
CVE-2020-35480 
An issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and hidden users (accounts that have been explicitly hidden due to being abusive, or similar) that the viewer cannot see are handled differently, exposing sensitive information about the hidden status to unprivileged viewers. This exists on various code paths.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-18T07:40:38.000Z
CVE-2020-35481 
SolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-03T15:47:59.000Z
CVE-2020-35482 
SolarWinds Serv-U before 15.2.2 allows authenticated reflected XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-03T15:49:44.000Z
CVE-2020-35483 
AnyDesk before 6.1.0 on Windows, when run in portable mode on a system where the attacker has write access to the application directory, allows this attacker to compromise a local user account via a read-only setting for a Trojan horse gcapi.dll file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-11T14:33:43.000Z
CVE-2020-35488 
The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service (daemon crash) via a crafted Syslog payload to the Syslog service. This attack requires a specific configuration. Also, the name of the directory created must use a Syslog field. (For example, on Linux it is not possible to create a .. directory. On Windows, it is not possible to create a CON directory.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-05T14:03:44.000Z
CVE-2020-35489 
The contact-form-7 (aka Contact Form 7) plugin before 5.3.2 for WordPress allows Unrestricted File Upload and remote code execution because a filename may contain special characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-17T18:16:00.000Z
CVE-2020-35490 
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-17T18:43:51.000Z
CVE-2020-35491 
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-17T18:43:41.000Z
CVE-2020-35492 
A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo's image-compositor (for example, by convincing a user to open a file in an application using cairo, or if an application uses cairo on untrusted input) to cause a stack buffer overflow -> out-of-bounds WRITE. The highest impact from this vulnerability is to confidentiality, integrity, as well as system availability.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: n/a
product: cairo
Published: 2021-03-18T18:59:41.000Z
CVE-2020-35493 
A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34.
Problem types: cwe_id: CWE-20
description: CWE-20->CWE-122->CWE-125
Affected products: vendor: n/a
product: binutils
Published: 2021-01-04T14:22:55.000Z
CVE-2020-35494 
There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils versions prior to 2.34.
Problem types: cwe_id: CWE-908
description: CWE-908
Affected products: vendor: n/a
product: binutils
Published: 2021-01-04T14:23:23.000Z
CVE-2020-35495 
There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availability. This flaw affects binutils versions prior to 2.34.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: n/a
product: binutils
Published: 2021-01-04T14:23:52.000Z
CVE-2020-35496 
There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. This flaw affects binutils versions prior to 2.34.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: n/a
product: binutils
Published: 2021-01-04T14:24:21.000Z
CVE-2020-35497 
A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other users' personal information, including name, email and public SSH key.
Problem types: cwe_id: CWE-284
description: CWE-284->CWE-200
Affected products: vendor: n/a
product: ovirt-engine
Published: 2020-12-21T16:22:22.000Z
CVE-2020-35498 
A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: n/a
product: openvswitch
Published: 2021-02-11T00:00:00.000Z
CVE-2020-35499 
A NULL pointer dereference flaw in Linux kernel versions prior to 5.11 may be seen if sco_sock_getsockopt function in net/bluetooth/sco.c do not have a sanity check for a socket connection, when using BT_SNDMTU/BT_RCVMTU for SCO sockets. This could allow a local attacker with a special user privilege to crash the system (DOS) or leak kernel internal information.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: n/a
product: kernel
Published: 2021-02-19T19:49:58.000Z
CVE-2020-35501 
A flaw was found in the Linux kernels implementation of audit rules, where a syscall can unexpectedly not be correctly not be logged by the audit subsystem
Problem types: cwe_id: CWE-863
description: CWE-863
Affected products: vendor: n/a
product: kernel
Published: 2022-03-30T00:00:00.000Z
CVE-2020-35502 
A flaw was found in Privoxy in versions before 3.0.29. Memory leaks when a response is buffered and the buffer limit is reached or Privoxy is running out of memory can lead to a system crash.
Problem types: cwe_id: CWE-401
description: CWE-401
Affected products: vendor: n/a
product: privoxy
Published: 2021-03-25T18:56:55.000Z
CVE-2020-35503 
A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs in the megasas_command_cancelled() callback function while dropping a SCSI request. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: n/a
product: QEMU
Published: 2021-06-02T13:22:19.000Z
CVE-2020-35504 
A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: n/a
product: QEMU
Published: 2021-05-28T10:20:40.000Z