rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-36235 
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field and custom SLA names via an Information Disclosure vulnerability in the mobile site view. The affected versions are before version 8.13.2, and from version 8.14.0 before 8.14.1.
Problem types: description: Information Disclosure
Affected products: vendor: Atlassian
product: Jira Server
vendor: Atlassian
product: Jira Data Center
Published: 2021-02-14T23:45:12.759Z
CVE-2020-36236 
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the ViewWorkflowSchemes.jspa and ListWorkflows.jspa endpoints. The affected versions are before version 8.5.11, from version 8.6.0 before 8.13.3, and from version 8.14.0 before 8.15.0.
Problem types: description: Cross-Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Jira Server
vendor: Atlassian
product: Jira Data Center
Published: 2021-02-14T23:50:13.382Z
CVE-2020-36237 
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options via an Information Disclosure vulnerability in the /rest/api/2/customFieldOption/ endpoint. The affected versions are before version 8.15.0.
Problem types: description: Information Disclosure
Affected products: vendor: Atlassian
product: Jira Server
vendor: Atlassian
product: Jira Data Center
Published: 2021-02-14T23:55:12.878Z
CVE-2020-36238 
The /rest/api/1.0/render resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to determine if a username is valid or not via a missing permissions check.
Problem types: cwe_id: CWE-863
description: Incorrect Authorization (CWE-863)
Affected products: vendor: Atlassian
product: Jira Server
vendor: Atlassian
product: Jira Data Center
Published: 2021-04-01T02:30:14.029Z
CVE-2020-36239 
Jira Data Center, Jira Core Data Center, Jira Software Data Center from version 6.3.0 before 8.5.16, from 8.6.0 before 8.13.8, from 8.14.0 before 8.17.0 and Jira Service Management Data Center from version 2.0.2 before 4.5.16, from version 4.6.0 before 4.13.8, and from version 4.14.0 before 4.17.0 exposed a Ehcache RMI network service which attackers, who can connect to the service, on port 40001 and potentially 40011[0][1], could execute arbitrary code of their choice in Jira through deserialization due to a missing authentication vulnerability. While Atlassian strongly suggests restricting access to the Ehcache ports to only Data Center instances, fixed versions of Jira will now require a shared secret in order to allow access to the Ehcache service. [0] In Jira Data Center, Jira Core Data Center, and Jira Software Data Center versions prior to 7.13.1, the Ehcache object port can be randomly allocated. [1] In Jira Service Management Data Center versions prior to 3.16.1, the Ehcache object port can be randomly allocated.
Problem types: cwe_id: CWE-862
description: CWE-862: Missing Authorization
Affected products: vendor: Atlassian
product: Jira Data Center
vendor: Atlassian
product: Jira Core Data Center
vendor: Atlassian
product: Jira Software Data Center
vendor: Atlassian
product: Jira Service Management Data Center
Published: 2021-07-29T10:12:42.879Z
CVE-2020-36240 
The ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0 before 4.1.2 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check.
Problem types: description: Arbitrary File Read
Affected products: vendor: Atlassian
product: Crowd
Published: 2021-03-01T16:23:08.996Z
CVE-2020-36241 
autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-05T07:11:07.000Z
CVE-2020-36242 
In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-07T19:50:57.000Z
CVE-2020-36243 
The Patient Portal of OpenEMR 5.0.2.1 is affected by a Command Injection vulnerability in /interface/main/backup.php. To exploit the vulnerability, an authenticated attacker can send a POST request that executes arbitrary OS commands via shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-07T19:59:50.000Z
CVE-2020-36244 
The daemon in GENIVI diagnostic log and trace (DLT), is vulnerable to a heap-based buffer overflow that could allow an attacker to remotely execute arbitrary code on the DLT-Daemon (versions prior to 2.18.6).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-10T00:00:00.000Z
CVE-2020-36245 
GramAddict through 1.2.3 allows remote attackers to execute arbitrary code because of use of UIAutomator2 and ATX-Agent. The attacker must be able to reach TCP port 7912, e.g., by being on the same Wi-Fi network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-17T21:49:12.000Z
CVE-2020-36246 
Amaze File Manager before 3.5.1 allows attackers to obtain root privileges via shell metacharacters in a symbolic link.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-19T04:55:11.000Z
CVE-2020-36247 
Open OnDemand before 1.5.7 and 1.6.x before 1.6.22 allows CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-19T05:19:56.000Z
CVE-2020-36248 
The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a backup archive, and consequently bypass the PIN lock feature by restoring from this archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: HIGH
attackVector: PHYSICAL
availabilityImpact: NONE
baseScore: 3.9
baseSeverity: LOW
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AC:H/AV:P/A:N/C:H/I:N/PR:L/S:U/UI:R
version: 3.1
Published: 2021-02-19T07:00:50.000Z
CVE-2020-36249 
The File Firewall before 2.8.0 for ownCloud Server does not properly enforce file-type restrictions for public shares.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-19T07:00:33.000Z
CVE-2020-36250 
In the ownCloud application before 2.15 for Android, the lock protection mechanism can be bypassed by moving the system date/time into the past.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: PHYSICAL
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:L/AV:P/A:N/C:H/I:H/PR:N/S:U/UI:N
version: 3.1
Published: 2021-02-19T07:00:17.000Z
CVE-2020-36251 
ownCloud Server before 10.3.0 allows an attacker, who has received non-administrative access to a group share, to remove everyone else's access to that share.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.5
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:L/S:U/UI:R
version: 3.1
Published: 2021-02-19T07:00:03.000Z
CVE-2020-36252 
ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim, to access any version of any file by sending a request for a predictable ID number.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: NONE
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:L/AV:A/A:N/C:H/I:N/PR:L/S:C/UI:N
version: 3.1
Published: 2021-02-19T06:59:36.000Z
CVE-2020-36254 
scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-25T08:29:43.000Z
CVE-2020-36255 
An issue was discovered in IdentityModel (aka ScottBrady.IdentityModel) before 1.3.0. The Branca implementation allows an attacker to modify and forge authentication tokens.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T02:06:10.000Z
CVE-2020-36277 
Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-11T20:23:46.000Z
CVE-2020-36278 
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-11T23:59:41.000Z
CVE-2020-36279 
Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-12T00:00:03.000Z
CVE-2020-36280 
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-12T00:00:24.000Z
CVE-2020-36281 
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-12T00:00:58.000Z
CVE-2020-36282 
JMS Client for RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0 is vulnerable to unsafe deserialization that can result in code execution via crafted StreamMessage data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-12T00:27:02.000Z
CVE-2020-36283 
HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver (Ethernet Emulation Mode). By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request to upload a configuration file to the device. An attacker could exploit this vulnerability to perform cross-site scripting attacks, Web cache poisoning, and other malicious activities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.6
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:R
version: 3.1
Published: 2021-03-24T15:23:29.000Z
CVE-2020-36284 
Union Pay up to 3.4.93.4.9, for android, contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability, allows attackers to shop for free in merchants' websites and mobile apps, via a crafted authentication code (MAC) which is generated based on a secret key which is NULL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T15:36:50.000Z
CVE-2020-36285 
Union Pay up to 3.3.12, for iOS mobile apps, contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability, allows attackers to shop for free in merchants' websites and mobile apps, via a crafted authentication code (MAC) which is generated based on a secret key which is NULL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T15:38:40.000Z
CVE-2020-36286 
The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to determine if a group exists & members of groups if they are assigned to publicly visible issue field.
Problem types: description: Information Disclosure
Affected products: vendor: Atlassian
product: Jira Server
vendor: Atlassian
product: Jira Data Center
Published: 2021-04-01T03:10:12.032Z
CVE-2020-36287 
The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to obtain gadget related settings via a missing permissions check.
Problem types: cwe_id: CWE-863
description: Incorrect Authorization (CWE-863)
Affected products: vendor: Atlassian
product: Jira Server
vendor: Atlassian
product: Jira Data Center
Published: 2021-04-09T02:00:14.081Z
CVE-2020-36288 
The issue navigation and search view in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before version 8.13.4, and from version 8.14.0 before version 8.15.1 allows remote attackers to inject arbitrary HTML or JavaScript via a DOM Cross-Site Scripting (XSS) vulnerability caused by parameter pollution.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Jira Server
vendor: Atlassian
product: Jira Data Center
Published: 2021-04-14T23:45:17.871Z
CVE-2020-36289 
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the QueryComponentRendererValue!Default.jspa endpoint. The affected versions are before version 8.5.13, from version 8.6.0 before 8.13.5, and from version 8.14.0 before 8.15.1.
Problem types: description: Information Disclosure
Affected products: vendor: Atlassian
product: Jira Server
vendor: Atlassian
product: Jira Data Center
Published: 2021-05-12T03:30:12.264Z
CVE-2020-36290 
The Livesearch macro in Confluence Server and Data Center before version 7.4.5, from version 7.5.0 before 7.6.3, and from version 7.7.0 before version 7.7.4 allows remote attackers with permission to edit a page or blog to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the page excerpt functionality.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Confluence Server
vendor: Atlassian
product: Confluence Data Center
Published: 2022-07-26T04:05:14.704Z
CVE-2020-36306 
Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the back_url field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T07:59:42.000Z
CVE-2020-36307 
Redmine before 4.0.7 and 4.1.x before 4.1.1 has stored XSS via textile inline links.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T07:59:32.000Z
CVE-2020-36308 
Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performing a CSV export and reading time entries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T07:59:18.000Z
CVE-2020-36309 
ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T17:32:45.000Z
CVE-2020-36310 
An issue was discovered in the Linux kernel before 5.8. arch/x86/kvm/svm/svm.c allows a set_memory_region_test infinite loop for certain nested page faults, aka CID-e72436bc3a52.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T23:29:14.000Z
CVE-2020-36311 
An issue was discovered in the Linux kernel before 5.9. arch/x86/kvm/svm/sev.c allows attackers to cause a denial of service (soft lockup) by triggering destruction of a large SEV VM (which requires unregistering many encrypted regions), aka CID-7be74942f184.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T23:28:49.000Z
CVE-2020-36312 
An issue was discovered in the Linux kernel before 5.8.10. virt/kvm/kvm_main.c has a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure, aka CID-f65886606c2d.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T23:28:25.000Z
CVE-2020-36313 
An issue was discovered in the Linux kernel before 5.7. The KVM subsystem allows out-of-range access to memslots after a deletion, aka CID-0774a964ef56. This affects arch/s390/kvm/kvm-s390.c, include/linux/kvm_host.h, and virt/kvm/kvm_main.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T23:28:11.000Z
CVE-2020-36314 
fr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Shell and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-11736.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-07T11:07:40.000Z
CVE-2020-36315 
In RELIC before 2020-08-01, RSA PKCS#1 v1.5 signature forgery can occur because certain checks of the padding (and of the first two bytes) are inadequate. NOTE: this requires that a low public exponent (such as 3) is being used. The product, by default, does not generate RSA keys with such a low number.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-07T20:10:30.000Z
CVE-2020-36316 
In RELIC before 2021-04-03, there is a buffer overflow in PKCS#1 v1.5 signature verification because garbage bytes can be present.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-07T20:10:08.000Z
CVE-2020-36317 
In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows creation of a non-UTF-8 Rust string when the provided closure panics. This bug could result in a memory safety violation when other string APIs assume that UTF-8 encoding is used on the same string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-11T19:06:28.000Z
CVE-2020-36318 
In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This bug could result in a use-after-free or double free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-11T19:05:27.000Z
CVE-2020-36319 Potential sensitive data exposure in applications using Vaadin 15
Insecure configuration of default ObjectMapper in com.vaadin:flow-server versions 3.0.0 through 3.0.5 (Vaadin 15.0.0 through 15.0.4) may expose sensitive data if the application also uses e.g. @RestController
Problem types: cwe_id: CWE-200
description: CWE-200 Information Exposure
Affected products: vendor: Vaadin
product: Vaadin
vendor: Vaadin
product: flow-server
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.1
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: This issue was discovered and responsibly reported by Christian Knoop (https://github.com/knoobie).
Published: 2021-04-23T16:05:40.661Z
CVE-2020-36320 Regular expression Denial of Service (ReDoS) in EmailValidator class in Vaadin 7
Unsafe validation RegEx in EmailValidator class in com.vaadin:vaadin-server versions 7.0.0 through 7.7.21 (Vaadin 7.0.0 through 7.7.21) allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses.
Problem types: cwe_id: CWE-400
description: CWE-400 Uncontrolled Resource Consumption
Affected products: vendor: Vaadin
product: Vaadin
vendor: Vaadin
product: vaadin-server
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2021-04-23T16:05:40.779Z
CVE-2020-36321 Directory traversal in development mode handler in Vaadin 14 and 15-17
Improper URL validation in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.4.1 (Vaadin 14.0.0 through 14.4.2), and 3.0 prior to 5.0 (Vaadin 15 prior to 18) allows attacker to request arbitrary files stored outside of intended frontend resources folder.
Problem types: cwe_id: CWE-22
description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Vaadin
product: Vaadin
vendor: Vaadin
product: flow-server
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2021-04-23T16:05:40.889Z
CVE-2020-36322 
An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. fuse_do_getattr() calls make_bad_inode() in inappropriate situations, causing a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-14T00:00:00.000Z
CVE-2020-36323 
In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed (or the program to crash) if the borrowed string changes after its length is checked.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-14T06:10:09.000Z
CVE-2020-36324 
Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-21T19:43:59.000Z
CVE-2020-36325 
An issue was discovered in Jansson through 2.13.1. Due to a parsing error in json_loads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-26T17:05:28.000Z
CVE-2020-36326 
PHPMailer 6.1.8 through 6.4.0 allows object injection through Phar Deserialization via addAttachment with a UNC pathname. NOTE: this is similar to CVE-2018-19296, but arose because 6.1.8 fixed a functionality problem in which UNC pathnames were always considered unreadable by PHPMailer, even in safe contexts. As an unintended side effect, this fix eliminated the code that blocked addAttachment exploitation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-28T02:21:53.000Z