rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-29071 
An XSS issue was found in the Shares feature of LiquidFiles before 3.3.19. The issue arises from the insecure rendering of HTML files uploaded to the platform as attachments, when the -htmlview URL is directly accessed. The impact ranges from executing commands as root on the server to retrieving sensitive information about encrypted e-mails, depending on the permissions of the target user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-25T02:48:04.000Z
CVE-2020-29072 
A Cross-Site Script Inclusion vulnerability was found on LiquidFiles before 3.3.19. This client-side attack requires user interaction (opening a link) and successful exploitation could lead to encrypted e-mail content leakage via messages/sent?format=js and popup?format=js.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-25T02:47:47.000Z
CVE-2020-29074 
scan.c in x11vnc 0.9.16 uses IPC_CREAT|0777 in shmget calls, which allows access by actors other than the current user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-25T22:06:36.000Z
CVE-2020-29075 PDF Injection BlackHat Talk
Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.30010 (and earlier) and 2017.011.30180 (and earlier) are affected by an information exposure vulnerability, that could enable an attacker to get a DNS interaction and track if the user has opened or closed a PDF file when loaded from the filesystem without a prompt. User interaction is required to exploit this vulnerability.
Problem types: cwe_id: CWE-20
description: Improper Input Validation (CWE-20)
Affected products: vendor: Adobe
product: Acrobat Reader DC
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
version: 3.1
Published: 2021-02-23T03:18:50.226Z
CVE-2020-29127 
An issue was discovered on Fujitsu Eternus Storage DX200 S4 devices through 2020-11-25. After logging into the portal as a root user (using any web browser), the portal can be accessed with root privileges when the URI cgi-bin/csp?cspid={XXXXXXXXXX}&csppage=cgi_PgOverview&csplang=en is visited from a different web browser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-30T06:30:43.000Z
CVE-2020-29128 
petl before 1.68, in some configurations, allows resolution of entities in an XML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-26T05:01:00.000Z
CVE-2020-29129 
ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-26T19:03:55.000Z
CVE-2020-29130 
slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-26T00:00:00.000Z
CVE-2020-29133 
jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-27T00:53:12.000Z
CVE-2020-29134 
The TOTVS Fluig platform allows path traversal through the parameter "file = .. /" encoded in base64. This affects all versions Fluig Lake 1.7.0, Fluig 1.6.5 and Fluig 1.6.4
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T15:50:35.000Z
CVE-2020-29135 
cPanel before 90.0.17 has multiple instances of URL parameter injection (SEC-567).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-27T01:34:02.000Z
CVE-2020-29136 
In cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach (SEC-575).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-27T01:34:24.000Z
CVE-2020-29137 
cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface (SEC-577).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-27T01:34:12.000Z
CVE-2020-29138 
Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET_4.109.0, allows remote unauthenticated users to download the router configuration file via the /backupsettings.conf URI, when any valid session is running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-27T15:07:58.000Z
CVE-2020-29139 
A SQL injection vulnerability in interface/main/finder/patient_select.php from library/patient.inc in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the searchFields parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-15T20:22:07.000Z
CVE-2020-29140 
A SQL injection vulnerability in interface/reports/immunization_report.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the form_code parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-15T20:17:06.000Z
CVE-2020-29142 
A SQL injection vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the schedule_facility parameter when restrict_user_facility=on is in global settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-15T20:00:31.000Z
CVE-2020-29143 
A SQL injection vulnerability in interface/reports/non_reported.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the form_code parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-15T20:27:06.000Z
CVE-2020-29144 
In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS via an Alert Dashboard comment. In most test cases, session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or exploiting admins' browsers by using the beef framework.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-27T03:35:38.000Z
CVE-2020-29145 
In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS via the name or description field to a solutionUnitServlet?SuName=UserReferenceDataSU Access Rights Group. In most test cases, session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or exploiting admins' browsers by using the beef framework.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-27T03:35:21.000Z
CVE-2020-29146 
A cross site scripting (XSS) vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a constructed payload created by adding the X-Forwarded-For field to the header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-14T16:10:26.000Z
CVE-2020-29147 
A SQL injection vulnerability in wy_controlls/wy_side_visitor.php of Wayang-CMS v1.0 allows attackers to obtain sensitive database information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-14T16:10:29.000Z
CVE-2020-29156 
The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the order_id parameter in a fetch_order_status action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-27T18:47:31.000Z
CVE-2020-29157 
An issue in RAONWIZ K Editor v2018.0.0.10 allows attackers to perform a DLL hijacking attack when the service or system is restarted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-14T19:59:14.000Z
CVE-2020-29158 
An issue was discovered in Zammad before 3.5.1. An Agent with Customer permissions in a Group can bypass intended access control on internal Articles via the Ticket detail view.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T07:56:06.000Z
CVE-2020-29159 
An issue was discovered in Zammad before 3.5.1. The default signup Role (for newly created Users) can be a privileged Role, if configured by an admin. This behvaior was unintended.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T07:55:44.000Z
CVE-2020-29160 
An issue was discovered in Zammad before 3.5.1. A REST API call allows an attacker to change Ticket Article data in a way that defeats auditing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T07:55:27.000Z
CVE-2020-29163 
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-03T12:26:58.000Z
CVE-2020-29164 
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-03T12:27:05.000Z
CVE-2020-29165 
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotely gaining administrator privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-03T12:27:11.000Z
CVE-2020-29166 
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-03T12:27:17.000Z
CVE-2020-29168 
SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitive information via the q parameter to the getuser.php endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-02-17T00:00:00.000Z
CVE-2020-29171 
Cross-site scripting (XSS) vulnerability in admin/wp-security-blacklist-menu.php in the Tips and Tricks HQ All In One WP Security & Firewall (all-in-one-wp-security-and-firewall) plugin before 4.4.6 for WordPress.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-10T14:23:40.000Z
CVE-2020-29172 
A cross-site scripting (XSS) vulnerability in the LiteSpeed Cache plugin before 3.6.1 for WordPress can be exploited via the Server IP setting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-26T01:56:28.000Z
CVE-2020-29176 
An arbitrary file upload vulnerability in Z-BlogPHP v1.6.1.2100 allows attackers to execute arbitrary code via a crafted JPG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-02T22:21:26.000Z
CVE-2020-29177 
Z-BlogPHP v1.6.1.2100 was discovered to contain an arbitrary file deletion vulnerability via \app_del.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-02T22:21:27.000Z
CVE-2020-29189 
Incorrect Access Control vulnerability in TerraMaster TOS <= 4.2.06 allows remote authenticated attackers to bypass read-only restriction and obtain full access to any folder within the NAS
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-24T14:36:59.000Z
CVE-2020-29193 
Panasonic Security System WV-S2231L 4.25 has an insecure hard-coded password of lkjhgfdsa (which is just the asdf keyboard row in reverse order).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T06:30:59.000Z
CVE-2020-29194 
Panasonic Security System WV-S2231L 4.25 allows a denial of service of the admin control panel (which will require a physical reset to restore administrative control) via Randomnum=99AC8CEC6E845B28&mode=1 in a POST request to the cgi-bin/set_factory URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T06:33:27.000Z
CVE-2020-29203 
struct2json before 2020-11-18 is affected by a Buffer Overflow because strcpy is used for S2J_STRUCT_GET_string_ELEMENT.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-26T19:09:54.000Z
CVE-2020-29204 
XXL-JOB 2.2.0 allows Stored XSS (in Add User) to bypass the 20-character limit via xxl-job-admin/src/main/java/com/xxl/job/admin/controller/UserController.java.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-27T05:36:08.000Z
CVE-2020-29205 
XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T19:00:39.000Z
CVE-2020-29214 
SQL injection vulnerability in SourceCodester Alumni Management System 1.0 allows the user to inject SQL payload to bypass the authentication via admin/login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-15T19:57:22.000Z
CVE-2020-29215 
A Cross Site Scripting in SourceCodester Employee Management System 1.0 allows the user to execute alert messages via /Employee Management System/addemp.php on admin account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-15T19:57:29.000Z
CVE-2020-29227 
An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file inclusion resulting in code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-14T13:24:20.000Z
CVE-2020-29228 
EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by SQL injection in the User Login Page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-30T18:13:21.000Z
CVE-2020-29230 
EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS) in the Admin Panel - Manage User tab using the Full Name of the user. This vulnerability can result in the attacker injecting the XSS payload in the User Registration section and each time admin visits the manage user section from the admin panel, the XSS triggers and the attacker can steal the cookie according to the crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-30T18:18:10.000Z
CVE-2020-29231 
EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS) in the Admin Profile Page. This vulnerability can result in the attacker injecting the XSS payload in Admin Full Name and each time admin visits the Profile page from the admin panel, the XSS triggers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-30T18:21:48.000Z
CVE-2020-29233 
WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Page description component. This vulnerability can allow an attacker to inject the XSS payload in the Page description and each time any user will visits the website, the XSS triggers and attacker can steal the cookie according to the crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-30T14:48:01.000Z
CVE-2020-29238 
An integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows remote attackers to obtain sensitive information when the server running as reverse proxy via specially crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-10T02:10:05.000Z
CVE-2020-29239 
Online Birth Certificate System Project V 1.0 is affected by cross-site scripting (XSS). This vulnerability can result in an attacker injecting the XSS payload in the User Registration section. When an admin visits the View Detail of Application section from the admin panel, the attacker can able to steal the cookie according to the crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-02T16:37:16.000Z
CVE-2020-29240 
Lepton-CMS 4.7.0 is affected by cross-site scripting (XSS). An attacker can inject the XSS payload in the URL field of the admin page and each time an admin visits the Menu-Pages-Pages Overview section, the XSS will be triggered.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-02T16:45:16.000Z
CVE-2020-29241 
Online News Portal using PHP/MySQLi 1.0 is affected by cross-site scripting (XSS) which allows remote attackers to inject an arbitrary web script or HTML via the "Title" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-21T14:41:06.000Z
CVE-2020-29242 
dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readPICFrame.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T07:03:46.000Z
CVE-2020-29243 
dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readAPICFrame.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T07:05:12.000Z
CVE-2020-29244 
dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readTextWithDescrFrame.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T07:07:14.000Z
CVE-2020-29245 
dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readAtomData.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-28T07:08:22.000Z
CVE-2020-29247 
WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Admin Panel. An attacker can inject the XSS payload in Page keywords and each time any user will visit the website, the XSS triggers, and the attacker can able to steal the cookie according to the crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-24T19:22:46.000Z
CVE-2020-29249 
CXUUCMS V3 allows class="layui-input" XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-27T06:13:52.000Z
CVE-2020-29250 
CXUUCMS V3 allows XSS via the first and third input fields to /public/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-27T06:17:06.000Z
CVE-2020-29254 
TikiWiki 21.2 allows templates to be edited without CSRF protection. This could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected system. An attacker could exploit this vulnerability by persuading a user of the interface to follow a maliciously crafted link. A successful exploit could allow the attacker to perform arbitrary actions on an affected system with the privileges of the user. These action include allowing attackers to submit their own code through an authenticated user resulting in local file Inclusion. If an authenticated user who is able to edit TikiWiki templates visits an malicious website, template code can be edited.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-11T15:11:10.000Z
CVE-2020-29257 
Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the q parameter to feedback.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-09T22:18:59.000Z
CVE-2020-29258 
Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the w parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-09T22:22:18.000Z
CVE-2020-29259 
Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedback.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-09T22:34:58.000Z
CVE-2020-29260 
libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-02T22:14:35.000Z
CVE-2020-29279 
PHP remote file inclusion in the assign_resume_tpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-02T21:08:44.000Z
CVE-2020-29280 
The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-02T21:08:39.000Z
CVE-2020-29282 
SQL injection vulnerability in BloodX 1.0 allows attackers to bypass authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-02T21:08:22.000Z
CVE-2020-29283 
An SQL injection vulnerability was discovered in Online Doctor Appointment Booking System PHP and Mysql via the q parameter to getuser.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-02T21:08:16.000Z
CVE-2020-29284 
The file view-chair-list.php in Multi Restaurant Table Reservation System 1.0 does not perform input validation on the table_id parameter which allows unauthenticated SQL Injection. An attacker can send malicious input in the GET request to /dashboard/view-chair-list.php?table_id= to trigger the vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-02T21:08:09.000Z
CVE-2020-29285 
SQL injection vulnerability was discovered in Point of Sales in PHP/PDO 1.0, which can be exploited via the id parameter to edit_category.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-02T21:07:51.000Z
CVE-2020-29287 
An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be exploited via the id parameter in view_car.php or the car_id parameter in booking.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-02T21:07:20.000Z
CVE-2020-29288 
An SQL injection vulnerability was discovered in Gym Management System In manage_user.php file, GET parameter 'id' is vulnerable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-02T21:07:16.000Z
CVE-2020-29292 
iBall WRD12EN 1.0.0 devices allow cross-site request forgery (CSRF) attacks as demonstrated by enabling DNS settings or modifying the range for IP addresses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-30T16:11:55.000Z
CVE-2020-29297 
Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-01-20T00:00:00.000Z