rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-14021 
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The ASP.net SMS module can be used to read and validate the source code of ASP files. By altering the path, it can be made to read any file on the Operating System, usually with NT AUTHORITY\SYSTEM privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-18T17:19:39.000Z
CVE-2020-14022 
Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk importing new contacts ("Import Contacts" functionality) from a file. It is possible to upload an executable or .bat file that can be executed with the help of a functionality (E.g. the "Application Starter" module) within the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-22T17:43:45.000Z
CVE-2020-14023 
Ozeki NG SMS Gateway through 4.17.6 allows SSRF via SMS WCF or RSS To SMS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-22T17:35:58.000Z
CVE-2020-14024 
Ozeki NG SMS Gateway through 4.17.6 has multiple authenticated stored and/or reflected XSS vulnerabilities via the (1) Receiver or Recipient field in the Mailbox feature, (2) OZFORM_GROUPNAME field in the Group configuration of addresses, (3) listname field in the Defining address lists configuration, or (4) any GET Parameter in the /default URL of the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-22T17:39:20.000Z
CVE-2020-14025 
Ozeki NG SMS Gateway through 4.17.6 has multiple CSRF vulnerabilities. For example, an administrator, by following a link, can be tricked into making unwanted changes such as installing new modules or changing a password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-22T17:41:28.000Z
CVE-2020-14026 
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the Export Of Contacts feature in Ozeki NG SMS Gateway through 4.17.6 via a value that is mishandled in a CSV export.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-22T17:32:28.000Z
CVE-2020-14027 
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The database connection strings accept custom unsafe arguments, such as ENABLE_LOCAL_INFILE, that can be leveraged by attackers to enable MySQL Load Data Local (rogue MySQL server) attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-22T17:23:31.000Z
CVE-2020-14028 
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. By leveraging a path traversal vulnerability in the Autoreply module's Script Name, an attacker may write to or overwrite arbitrary files, with arbitrary content, usually with NT AUTHORITY\SYSTEM privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-22T17:21:26.000Z
CVE-2020-14029 
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The RSS To SMS module processes XML files in an unsafe manner. This opens the application to an XML External Entity attack that can be used to perform SSRF or read arbitrary local files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-18T17:14:04.000Z
CVE-2020-14030 
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. It stores SMS messages in .NET serialized format on the filesystem. By generating (and writing to the disk) malicious .NET serialized files, an attacker can trick the product into deserializing them, resulting in arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-29T13:08:12.000Z
CVE-2020-14031 
An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The outbox functionality of the TXT File module can be used to delete all/most files in a folder. Because the product usually runs as NT AUTHORITY\SYSTEM, the only files that will not be deleted are those currently being run by the system and/or files that have special security attributes (e.g., Windows Defender files).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-22T17:19:05.000Z
CVE-2020-14032 
ASRock 4x4 BOX-R1000 before BIOS P1.40 allows privilege escalation via code execution in the SMM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-23T10:13:07.000Z
CVE-2020-14033 
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_streaming_rtsp_parse_sdp in plugins/janus_streaming.c has a Buffer Overflow via a crafted RTSP server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-15T16:11:14.000Z
CVE-2020-14034 
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_get_codec_from_pt in utils.c has a Buffer Overflow via long value in an SDP Offer packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-15T16:10:34.000Z
CVE-2020-14039 
In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU requirements (if VerifyOptions.Roots equals nil and the installation is on Windows). Thus, X.509 certificate verification is incomplete.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-17T15:43:33.000Z
CVE-2020-14040 
The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-17T19:22:31.000Z
CVE-2020-14042 
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Site Scripting (XSS) vulnerability was found in Codiad v1.7.8 and later. The vulnerability occurs because of improper sanitization of the folder's name $path variable in components/filemanager/class.filemanager.php. NOTE: the vendor states "Codiad is no longer under active maintenance by core contributors."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-25T14:43:48.000Z
CVE-2020-14043 
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Side Request Forgery (CSRF) vulnerability was found in Codiad v1.7.8 and later. The request to download a plugin from the marketplace is only available to admin users and it isn't CSRF protected in components/market/controller.php. This might cause admins to make a vulnerable request without them knowing and result in remote code execution. NOTE: the vendor states "Codiad is no longer under active maintenance by core contributors."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-24T15:34:43.000Z
CVE-2020-14044 
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Server-Side Request Forgery (SSRF) vulnerability was found in Codiad v1.7.8 and later. A user with admin privileges could use the plugin install feature to make the server request any URL via components/market/class.market.php. This could potentially result in remote code execution. NOTE: the vendor states "Codiad is no longer under active maintenance by core contributors."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-24T15:34:08.000Z
CVE-2020-14048 
Zoho ManageEngine ServiceDesk Plus before 11.1 build 11115 allows remote unauthenticated attackers to change the installation status of deployed agents.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-12T01:41:42.000Z
CVE-2020-14049 
Viber for Windows up to 13.2.0.39 does not properly quote its custom URI handler. A malicious website could launch Viber with arbitrary parameters, forcing a victim to send an NTLM authentication request, and either relay the request or capture the hash for offline password cracking. NOTE: this issue exists because of an incomplete fix for CVE-2019-12569.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-22T17:27:35.000Z
CVE-2020-14054 
SOKKIA GNR5 Vanguard WEB version 1.2 (build: 91f2b2c3a04d203d79862f87e2440cb7cefc3cd3) and hardware version 212 allows remote attackers to bypass admin authentication via a SQL injection attack that uses the User Name or Password field on the login page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-15T15:50:54.000Z
CVE-2020-14055 
Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the language setting due to insufficient output encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-01T16:10:29.000Z
CVE-2020-14056 
Monsta FTP 2.10.1 or below is prone to a server-side request forgery vulnerability due to insufficient restriction of the web fetch functionality. This allows attackers to read arbitrary local files and interact with arbitrary third-party services.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-01T16:06:43.000Z
CVE-2020-14057 
Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations. This allows attackers to read and write arbitrary local files, allowing an attacker to gain remote code execution in common deployments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-01T16:13:42.000Z
CVE-2020-14058 
An issue was discovered in Squid before 4.12 and 5.x before 5.0.3. Due to use of a potentially dangerous function, Squid and the default certificate validation helper are vulnerable to a Denial of Service when opening a TLS connection to an attacker-controlled server for HTTPS. This occurs because unrecognized error values are mapped to NULL, but later code expects that each error value is mapped to a valid error string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-30T18:30:56.000Z
CVE-2020-14059 
An issue was discovered in Squid 5.x before 5.0.3. Due to an Incorrect Synchronization, a Denial of Service can occur when processing objects in an SMP cache because of an Ipc::Mem::PageStack::pop ABA problem during access to the memory page/slot management list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-30T18:23:39.000Z
CVE-2020-14060 
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-14T20:46:47.000Z
CVE-2020-14061 
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and oracle.jms.AQjmsXAConnectionFactory (aka weblogic/oracle-aqjms).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-14T19:42:39.000Z
CVE-2020-14062 
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-14T19:42:22.000Z
CVE-2020-14063 
A stored Cross-Site Scripting (XSS) vulnerability in the TC Custom JavaScript plugin before 1.2.2 for WordPress allows unauthenticated remote attackers to inject arbitrary JavaScript via the tccj-content parameter. This is displayed in the page footer of every front-end page and executed in the browser of visitors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-21T17:12:21.000Z
CVE-2020-14064 
IceWarp Email Server 12.3.0.1 has Incorrect Access Control for user accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-15T19:11:02.000Z
CVE-2020-14065 
IceWarp Email Server 12.3.0.1 allows remote attackers to upload files and consume disk space.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-15T19:12:01.000Z
CVE-2020-14066 
IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-15T19:12:45.000Z
CVE-2020-14067 
The install_from_hash functionality in Navigate CMS 2.9 does not consider the .phtml extension when examining files within a ZIP archive that may contain PHP code, in check_upload in lib/packages/extensions/extension.class.php and lib/packages/themes/theme.class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-15T00:41:38.000Z
CVE-2020-14068 
An issue was discovered in MK-AUTH 19.01. The web login functionality allows an attacker to bypass authentication and gain client privileges via SQL injection in central/executar_login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-29T16:24:56.000Z
CVE-2020-14069 
An issue was discovered in MK-AUTH 19.01. There are SQL injection issues in mkt/ PHP scripts, as demonstrated by arp.php, dhcp.php, hotspot.php, ip.php, pgaviso.php, pgcorte.php, pppoe.php, queues.php, and wifi.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-29T16:26:45.000Z
CVE-2020-14070 
An issue was discovered in MK-AUTH 19.01. There is authentication bypass in the web login functionality because guessable credentials to admin/executar_login.php result in admin access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-29T16:27:58.000Z
CVE-2020-14071 
An issue was discovered in MK-AUTH 19.01. XSS vulnerabilities in admin and client scripts allow an attacker to execute arbitrary JavaScript code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-29T16:28:41.000Z
CVE-2020-14072 
An issue was discovered in MK-AUTH 19.01. It allows command execution as root via shell metacharacters to /auth admin scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-29T16:29:38.000Z
CVE-2020-14073 
XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties. An attacker with Read/Write privileges can create a map, and then use the Map Designer Properties screen to insert JavaScript code. This can be exploited against any user with View Maps or Edit Maps access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-23T19:09:54.000Z
CVE-2020-14074 
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action kick_ban_wifi_mac_allow with a sufficiently long qcawifi.wifi0_vap0.maclist key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-15T03:37:08.000Z
CVE-2020-14075 
TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action pppoe_connect, ru_pppoe_connect, or dhcp_connect with the key wan_ifname (or wan0_dns), allowing an authenticated user to run arbitrary commands on the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-15T03:36:58.000Z
CVE-2020-14076 
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action st_dev_connect, st_dev_disconnect, or st_dev_rconnect with a sufficiently long wan_type key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-15T12:46:46.000Z
CVE-2020-14077 
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action set_sta_enrollee_pin_wifi1 (or set_sta_enrollee_pin_wifi0) with a sufficiently long wps_sta_enrollee_pin key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-15T03:36:50.000Z
CVE-2020-14078 
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action wifi_captive_portal_login with a sufficiently long REMOTE_ADDR key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-15T03:36:43.000Z
CVE-2020-14079 
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action auto_up_fw (or auto_up_lp) with a sufficiently long update_file_name key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-15T03:36:34.000Z
CVE-2020-14080 
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an unauthenticated user to execute arbitrary code by POSTing to apply_sec.cgi via the action ping_test with a sufficiently long ping_ipaddr key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-15T03:36:27.000Z
CVE-2020-14081 
TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action send_log_email with the key auth_acname (or auth_passwd), allowing an authenticated user to run arbitrary commands on the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-15T03:36:16.000Z
CVE-2020-14092 
The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-02T15:20:01.000Z
CVE-2020-14093 
Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-15T04:06:04.000Z
CVE-2020-14094 
In Xiaomi router R3600, ROM version<1.0.20, the connection service can be injected through the web interface, resulting in stack overflow or remote code execution.
Problem types: description: remote code execution
Affected products: vendor: Xiaomi
product: Xiaomi router R3600
Published: 2020-06-24T15:51:22.000Z
CVE-2020-14095 
In Xiaomi router R3600, ROM version<1.0.20, a connect service suffers from an injection vulnerability through the web interface, leading to a stack overflow or remote code execution.
Problem types: description: stack overflow or remote code execution
Affected products: vendor: Xiaomi
product: Xiaomi router R3600
Published: 2020-06-24T15:17:35.000Z
CVE-2020-14096 
Memory overflow in Xiaomi AI speaker Rom version <1.59.6 can happen when the speaker verifying a malicious firmware during OTA process.
Problem types: description: Memory overflow
Affected products: vendor: n/a
product: Xiaomi AI speaker
Published: 2020-09-11T13:36:15.000Z
CVE-2020-14097 
Wrong nginx configuration, causing specific paths to be downloaded without authorization. This affects Xiaomi router AX6 ROM version < 1.0.18.
Problem types: description: Unauthorized download
Affected products: vendor: n/a
product: Xiaomi router AX6
Published: 2021-01-13T22:27:49.000Z
CVE-2020-14098 
The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26.
Problem types: description: Authentication bypass
Affected products: vendor: n/a
product: Xiaomi router AX1800
vendor: n/a
product: Xiaomi route RM1800
Published: 2021-01-13T22:30:41.000Z
CVE-2020-14099 
On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password.
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Xiaomi Router AX1800,Xiaomi Rourer RM1800
Published: 2021-04-08T17:52:45.000Z
CVE-2020-14100 
In Xiaomi router R3600 ROM version<1.0.66, filters in the set_WAN6 interface can be bypassed, causing remote code execution. The router administrator can gain root access from this vulnerability.
Problem types: description: remote code execution
Affected products: vendor: n/a
product: Xiaomi router R3600
Published: 2020-09-11T13:42:01.000Z
CVE-2020-14101 
The data collection SDK of the router web management interface caused the leakage of the token. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26.
Problem types: description: Information leakage
Affected products: vendor: n/a
product: Xiaomi router AX1800
vendor: n/a
product: Xiaomi route RM1800
Published: 2021-01-13T22:25:07.000Z
CVE-2020-14102 
There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26.
Problem types: description: command injection
Affected products: vendor: n/a
product: Xiaomi router AX1800
vendor: n/a
product: Xiaomi route RM1800
Published: 2021-01-13T22:33:05.000Z
CVE-2020-14103 
The application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI < 2020.01.15.
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Xiaomi 10
Published: 2021-04-08T20:23:25.000Z
CVE-2020-14104 
A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50.
Problem types: description: Remote code execution
Affected products: vendor: n/a
product: Xiaomi router AX3600
Published: 2021-04-08T17:44:10.000Z
CVE-2020-14105 
The application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI < 2020.01.15.
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Xiaomi 10
Published: 2021-04-20T15:49:21.000Z
CVE-2020-14106 
The application in the mobile phone can unauthorized access to the list of running processes in the mobile phone, Xiaomi Mobile Phone MIUI < 2021.01.26.
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Xiaomi Mobile Phone
Published: 2021-04-08T20:57:52.000Z
CVE-2020-14107 
A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Xiaomi mirror screen
Published: 2022-01-18T16:52:15.000Z
CVE-2020-14109 
There is command injection in the meshd program in the routing system, resulting in command execution under administrator authority on Xiaomi router AX3600 with ROM version =< 1.1.12
Problem types: description: resulting in command execution under administrator authority
Affected products: vendor: n/a
product: Xiaomi Router AX3600
Published: 2021-09-16T11:55:33.000Z