stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2020-7704 (severity: CRITICAL, weakness: CWE-1321)
The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor.
CVE-2020-7705 (severity: HIGH, weakness: CWE-1021)
This affects the package MintegralAdSDK from 0.0.0. The SDK distributed by the company contains malicious functionality that tracks any URL opened by the app and reports it back to the company, along with performing advertisement attribution fraud. Mintegral can remotely activate hooks on the UIApplication, openURL, SKStoreProductViewController, loadProductWithParameters and NSURLProtocol methods along with anti-debug and proxy detection protection. If those hooks are active MintegralAdSDK sends obfuscated data about every opened URL in an application to their servers. Note that the malicious functionality is enabled even if the SDK was not enabled to serve ads.
CVE-2020-7706 (severity: CRITICAL, weakness: CWE-1321)
The package connie-lang before 0.1.1 are vulnerable to Prototype Pollution in the configuration language library used by connie.
CVE-2020-7707 (severity: CRITICAL, weakness: CWE-1321)
The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function.
CVE-2020-7708 (severity: CRITICAL, weakness: CWE-1321)
The package irrelon-path before 4.7.0; the package @irrelon/path before 4.7.0 are vulnerable to Prototype Pollution via the set, unSet, pushVal and pullVal functions.
CVE-2020-7709 (severity: HIGH, weakness: CWE-1321)
This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported.
CVE-2020-7710 (severity: CRITICAL, weakness: CWE-94)
This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host machine.
CVE-2020-7711 (severity: HIGH, weakness: CWE-476)
This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference caused by sending malformed XML signatures.
CVE-2020-7712 (severity: HIGH, weakness: CWE-78)
This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function.
CVE-2020-7713 (severity: CRITICAL, weakness: CWE-1321)
All versions of package arr-flatten-unflatten are vulnerable to Prototype Pollution via the constructor.
CVE-2020-7714 (severity: CRITICAL, weakness: CWE-1321)
All versions of package confucious are vulnerable to Prototype Pollution via the set function.
CVE-2020-7715 (severity: CRITICAL, weakness: CWE-1321)
All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function.
CVE-2020-7716 (severity: CRITICAL, weakness: CWE-1321)
All versions of package deeps are vulnerable to Prototype Pollution via the set function.
CVE-2020-7717 (severity: CRITICAL, weakness: CWE-1321)
All versions of package dot-notes are vulnerable to Prototype Pollution via the create function.
CVE-2020-7718 (severity: CRITICAL, weakness: CWE-1321)
All versions of package gammautils are vulnerable to Prototype Pollution via the deepSet and deepMerge functions.
CVE-2020-7719 (severity: CRITICAL, weakness: CWE-1321)
Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function.
CVE-2020-7720 (severity: HIGH, weakness: CWE-1321)
The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions.
CVE-2020-7721 (severity: CRITICAL, weakness: CWE-1321)
All versions of package node-oojs are vulnerable to Prototype Pollution via the setPath function.
CVE-2020-7722 (severity: CRITICAL, weakness: CWE-1321)
All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function.
CVE-2020-7723 (severity: CRITICAL, weakness: CWE-1321)
All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function.
CVE-2020-7724 (severity: CRITICAL, weakness: CWE-1321)
All versions of package tiny-conf are vulnerable to Prototype Pollution via the set function.
CVE-2020-7725 (severity: CRITICAL, weakness: CWE-1321)
All versions of package worksmith are vulnerable to Prototype Pollution via the setValue function.
CVE-2020-7726 (severity: CRITICAL, weakness: CWE-1321)
All versions of package safe-object2 are vulnerable to Prototype Pollution via the setter function.
CVE-2020-7727 (severity: CRITICAL, weakness: CWE-1321)
All versions of package gedi are vulnerable to Prototype Pollution via the set function.
CVE-2020-7729 (severity: HIGH, weakness: CWE-1188)
The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load() instead of its secure replacement safeLoad() of the package js-yaml inside grunt.file.readYAML.
CVE-2020-7730 (severity: CRITICAL, weakness: CWE-78)
The package bestzip before 2.1.7 are vulnerable to Command Injection via the options param.
CVE-2020-7731 (severity: HIGH, weakness: CWE-476)
This affects all versions <0.7.0 of package github.com/russellhaering/gosaml2. There is a crash on nil-pointer dereference caused by sending malformed XML signatures.
CVE-2020-7733 (severity: HIGH, weakness: CWE-400)
The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA.
CVE-2020-7734 (severity: HIGH, weakness: CWE-79)
All versions of package cabot are vulnerable to Cross-site Scripting (XSS) via the Endpoint column.
CVE-2020-7735 (severity: MEDIUM, weakness: CWE-78)
The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.
CVE-2020-7736 (severity: CRITICAL, weakness: CWE-1321)
The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function.
CVE-2020-7737 (severity: CRITICAL, weakness: CWE-1321)
All versions of package safetydance are vulnerable to Prototype Pollution via the set function.
CVE-2020-7738 (severity: HIGH, weakness: NVD-CWE-Other)
All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load() of the package js-yaml instead of its secure replacement , safeLoad().
CVE-2020-7739 (severity: HIGH, weakness: CWE-918)
This affects all versions of package phantomjs-seo. It is possible for an attacker to craft a url that will be passed to a PhantomJS instance allowing for an SSRF attack.
CVE-2020-7740 (severity: HIGH, weakness: CWE-20)
This affects all versions of package node-pdf-generator. Due to lack of user input validation and sanitization done to the content given to node-pdf-generator, it is possible for an attacker to craft a url that will be passed to an external server allowing an SSRF attack.
CVE-2020-7741 (severity: CRITICAL, weakness: CWE-79)
This affects the package hellojs before 1.18.6. The code get the param oauth_redirect from url and pass it to location.assign without any check and sanitisation. So we can simply pass some XSS payloads into the url param oauth_redirect, such as javascript:alert(1).
CVE-2020-7742 (severity: HIGH, weakness: NVD-CWE-Other)
This affects the package simpl-schema before 1.10.2.
CVE-2020-7743 (severity: HIGH, weakness: CWE-1321)
The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.
CVE-2020-7744 (severity: MEDIUM, weakness: CWE-319)
This affects all versions of package com.mintegral.msdk:alphab. The Android SDK distributed by the company contains malicious functionality in this module that tracks: 1. Downloads from Google urls either within Google apps or via browser including file downloads, e-mail attachments and Google Docs links. 2. All apk downloads, either organic or not. Mintegral listens to download events in Android's download manager and detects if the downloaded file's url contains: a. google.com or comes from a Google app (the com.android.vending package) b. Ends with .apk for apk downloads In both cases, the module sends the captured data back to Mintegral's servers. Note that the malicious functionality keeps running even if the app is currently not in focus (running in the background).
CVE-2020-7745 (severity: HIGH, weakness: CWE-94)
This affects the package MintegralAdSDK before 6.6.0.0. The SDK distributed by the company contains malicious functionality that acts as a backdoor. Mintegral and their partners (advertisers) can remotely execute arbitrary code on a user device.
CVE-2020-7746 (severity: CRITICAL, weakness: CWE-1321)
This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys of the object being set are not checked, leading to a prototype pollution.
CVE-2020-7747 (severity: MEDIUM, weakness: CWE-79)
This affects all versions of package lightning-server. It is possible to inject malicious JavaScript code as part of a session controller.
CVE-2020-7748 (severity: HIGH, weakness: CWE-1321)
This affects the package @tsed/core before 5.65.7. This vulnerability relates to the deepExtend function which is used as part of the utils directory. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program.
CVE-2020-7749 (severity: HIGH, weakness: CWE-74)
This affects all versions of package osm-static-maps. User input given to the package is passed directly to a template without escaping ({{{ ... }}}). As such, it is possible for an attacker to inject arbitrary HTML/JS code and depending on the context. It will be outputted as an HTML on the page which gives opportunity for XSS or rendered on the server (puppeteer) which also gives opportunity for SSRF and Local File Read.
CVE-2020-7750 (severity: CRITICAL, weakness: CWE-79)
This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not escape SVG properly, which can be used to inject arbitrary elements into the DOM via the _transformMeasurements function.
CVE-2020-7751 (severity: HIGH, weakness: CWE-1321)
pathval before version 1.1.1 is vulnerable to prototype pollution.
CVE-2020-7752 (severity: HIGH, weakness: CWE-78)
This affects the package systeminformation before 4.27.11. This package is vulnerable to Command Injection. The attacker can concatenate curl's parameters to overwrite Javascript files and then execute any OS commands.
CVE-2020-7753 (severity: HIGH, weakness: CWE-400)
All versions of package trim are vulnerable to Regular Expression Denial of Service (ReDoS) via trim().
CVE-2020-7754 (severity: HIGH, weakness: NVD-CWE-Other)
This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters.
CVE-2020-7755 (severity: HIGH, weakness: CWE-400)
All versions of package dat.gui are vulnerable to Regular Expression Denial of Service (ReDoS) via specifically crafted rgb and rgba values.
CVE-2020-7757 (severity: MEDIUM, weakness: CWE-22)
This affects all versions of package droppy. It is possible to traverse directories to fetch configuration files from a droopy server.
CVE-2020-7758 (severity: HIGH, weakness: CWE-22)
This affects versions of package browserless-chrome before 1.40.2-chrome-stable. User input flowing from the workspace endpoint gets used to create a file path filePath and this is fetched and then sent back to a user. This can be escaped to fetch arbitrary files from a server.
CVE-2020-7759 (severity: HIGH, weakness: CWE-89)
The package pimcore/pimcore from 6.7.2 and before 6.8.3 are vulnerable to SQL Injection in data classification functionality in ClassificationstoreController. This can be exploited by sending a specifically-crafted input in the relationIds parameter as demonstrated by the following request: http://vulnerable.pimcore.example/admin/classificationstore/relations?relationIds=[{"keyId"%3a"''","groupId"%3a"'asd'))+or+1%3d1+union+(select+1,2,3,4,5,6,name,8,password,'',11,12,'',14+from+users)+--+"}]
CVE-2020-7760 (severity: HIGH, weakness: CWE-400)
This affects the package codemirror before 5.58.2; the package org.apache.marmotta.webjars:codemirror before 5.58.2. The vulnerable regular expression is located in https://github.com/codemirror/CodeMirror/blob/cdb228ac736369c685865b122b736cd0d397836c/mode/javascript/javascript.jsL129. The ReDOS vulnerability of the regex is mainly due to the sub-pattern (s|/*.*?*/)*
CVE-2020-7761 (severity: MEDIUM, weakness: NVD-CWE-Other)
This affects the package @absolunet/kafe before 3.2.10. It allows cause a denial of service when validating crafted invalid emails.
CVE-2020-7762 (severity: MEDIUM, weakness: CWE-22)
This affects the package jsreport-chrome-pdf before 1.10.0.
CVE-2020-7763 (severity: HIGH, weakness: CWE-22)
This affects the package phantom-html-to-pdf before 0.6.1.
CVE-2020-7764 (severity: HIGH, weakness: CWE-444)
This affects the package find-my-way before 2.2.5, from 3.0.0 and before 3.0.5. It accepts the Accept-Version' header by default, and if versioned routes are not being used, this could lead to a denial of service. Accept-Version can be used as an unkeyed header in a cache poisoning attack.
CVE-2020-7765 (severity: MEDIUM, weakness: NVD-CWE-Other)
This affects the package @firebase/util before 0.3.4. This vulnerability relates to the deepExtend function within the DeepCopy.ts file. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program.
CVE-2020-7766 (severity: CRITICAL, weakness: CWE-1321)
This affects all versions of package json-ptr. The issue occurs in the set operation (https://flitbit.github.io/json-ptr/classes/_src_pointer_.jsonpointer.htmlset) when the force flag is set to true. The function recursively set the property in the target object, however it does not properly check the key being set, leading to a prototype pollution.
CVE-2020-7767 (severity: MEDIUM, weakness: CWE-400)
All versions of package express-validators are vulnerable to Regular Expression Denial of Service (ReDoS) when validating specifically-crafted invalid urls.
CVE-2020-7768 (severity: CRITICAL, weakness: CWE-1321)
The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition.
CVE-2020-7769 (severity: CRITICAL, weakness: CWE-88)
This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails.
CVE-2020-7770 (severity: CRITICAL, weakness: CWE-1321)
This affects the package json8 before 1.0.3. The function adds in the target object the property specified in the path, however it does not properly check the key being set, leading to a prototype pollution.
CVE-2020-7771 (severity: CRITICAL, weakness: CWE-1321)
The package asciitable.js before 1.0.3 are vulnerable to Prototype Pollution via the main function.
CVE-2020-7772 (severity: CRITICAL, weakness: NVD-CWE-Other)
This affects the package doc-path before 2.1.2.
CVE-2020-7773 (severity: MEDIUM, weakness: CWE-79)
This affects the package markdown-it-highlightjs before 3.3.1. It is possible insert malicious JavaScript as a value of lang in the markdown-it-highlightjs Inline code highlighting feature. const markdownItHighlightjs = require("markdown-it-highlightjs"); const md = require('markdown-it'); const reuslt_xss = md() .use(markdownItHighlightjs, { inline: true }) .render('console.log(42){.">js}'); console.log(reuslt_xss);
CVE-2020-7774 (severity: CRITICAL, weakness: CWE-1321)
The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.
CVE-2020-7775 (severity: CRITICAL, weakness: CWE-78)
This affects all versions of package freediskspace. The vulnerability arises out of improper neutralization of arguments in line 71 of freediskspace.js.
CVE-2020-7776 (severity: MEDIUM, weakness: CWE-79)
This affects the package phpoffice/phpspreadsheet from 0.0.0. The library is vulnerable to XSS when creating an html output from an excel file by adding a comment on any cell. The root cause of this issue is within the HTML writer where user comments are concatenated as part of link and this is returned as HTML. A fix for this issue is available on commit 0ed5b800be2136bcb8fa9c1bdf59abc957a98845/master branch.
CVE-2020-7777 (severity: HIGH, weakness: NVD-CWE-Other)
This affects all versions of package jsen. If an attacker can control the schema file, it could run arbitrary JavaScript code on the victim machine. In the module description and README file there is no mention about the risks of untrusted schema files, so I assume that this is applicable. In particular the required field of the schema is not properly sanitized. The resulting string that is build based on the schema definition is then passed to a Function.apply();, leading to an Arbitrary Code Execution.
CVE-2020-7778 (severity: HIGH, weakness: CWE-78)
This affects the package systeminformation before 4.30.2. The attacker can overwrite the properties and functions of an object, which can lead to executing OS commands.
CVE-2020-7779 (severity: HIGH, weakness: CWE-400)
All versions of package djvalidator are vulnerable to Regular Expression Denial of Service (ReDoS) by sending crafted invalid emails - for example, --@------------------------------------------------------------------------------------------------------------------------!.
CVE-2020-7780 (severity: HIGH, weakness: CWE-352)
This affects the package com.softwaremill.akka-http-session:core_2.13 before 0.5.11; the package com.softwaremill.akka-http-session:core_2.12 before 0.5.11; the package com.softwaremill.akka-http-session:core_2.11 before 0.5.11. For older versions, endpoints protected by randomTokenCsrfProtection could be bypassed with an empty X-XSRF-TOKEN header and an empty XSRF-TOKEN cookie.
CVE-2020-7781 (severity: CRITICAL, weakness: CWE-78)
This affects the package connection-tester before 0.2.1. The injection point is located in line 15 in index.js. The following PoC demonstrates the vulnerability:
CVE-2020-7782 (severity: CRITICAL, weakness: CWE-78)
This affects all versions of package spritesheet-js. It depends on a vulnerable package platform-command. The injection point is located in line 32 in lib/generator.js, which is triggered by main entry of the package.
CVE-2020-7784 (severity: CRITICAL, weakness: CWE-78)
This affects all versions of package ts-process-promises. The injection point is located in line 45 in main entry of package in lib/process-promises.js. The vulnerability is demonstrated with the following PoC:
CVE-2020-7785 (severity: CRITICAL, weakness: CWE-78)
This affects all versions of package node-ps. The injection point is located in line 72 in lib/index.js.
CVE-2020-7786 (severity: CRITICAL, weakness: CWE-78)
This affects all versions of package macfromip. The injection point is located in line 66 in macfromip.js.
CVE-2020-7787 (severity: HIGH, weakness: CWE-287)
This affects all versions of package react-adal. It is possible for a specially crafted JWT token and request URL can cause the nonce, session and refresh values to be incorrectly validated, causing the application to treat an attacker-generated JWT token as authentic. The logical defect is caused by how the nonce, session and refresh values are stored in the browser local storage or session storage. Each key is automatically appended by ||. When the received nonce and session keys are generated, the list of values is stored in the browser storage, separated by ||, with || always appended to the end of the list. Since || will always be the last 2 characters of the stored values, an empty string ("") will always be in the list of the valid values. Therefore, if an empty session parameter is provided in the callback URL, and a specially-crafted JWT token contains an nonce value of "" (empty string), then adal.js will consider the JWT token as authentic.
CVE-2020-7788 (severity: CRITICAL, weakness: CWE-1321)
This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.
CVE-2020-7789 (severity: MEDIUM, weakness: CWE-78)
This affects the package node-notifier before 9.0.0. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array.
CVE-2020-7790 (severity: MEDIUM, weakness: CWE-22)
This affects the package spatie/browsershot from 0.0.0. By specifying a URL in the file:// protocol an attacker is able to include arbitrary files in the resultant PDF.
CVE-2020-7791 (severity: HIGH, weakness: NVD-CWE-Other)
This affects the package i18n before 2.1.15. Vulnerability arises out of insufficient handling of erroneous language tags in src/i18n/Concrete/TextLocalizer.cs and src/i18n/LocalizedApplication.cs.
CVE-2020-7792 (severity: HIGH, weakness: CWE-1321)
This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn 'mixes objects into the target object, recursively mixing existing child objects as well'. In both cases, the key used to access the target object recursively is not checked, leading to a Prototype Pollution.
CVE-2020-7793 (severity: HIGH, weakness: NVD-CWE-Other)
The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info).
CVE-2020-7794 (severity: CRITICAL, weakness: CWE-78)
This affects all versions of package buns. The injection point is located in line 678 in index file lib/index.js in the exported function install(requestedModule).
CVE-2020-7795 (severity: CRITICAL, weakness: CWE-77)
The package get-npm-package-version before 1.0.7 are vulnerable to Command Injection via main function in index.js.
CVE-2020-7796 (severity: CRITICAL, weakness: CWE-918)
Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled.
CVE-2020-7799 (severity: HIGH, weakness: CWE-917)
An issue was discovered in FusionAuth before 1.11.0. An authenticated user, allowed to edit e-mail templates (Home -> Settings -> Email Templates) or themes (Home -> Settings -> Themes), can execute commands on the underlying operating system by abusing freemarker.template.utility.Execute in the Apache FreeMarker engine that processes custom templates.
CVE-2020-7800 (severity: HIGH, weakness: CWE-754)
The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Improper Check for Unusual or Exceptional Conditions (CWE-754) vulnerability. The affected product is vulnerable to specially crafted TCP packets, which can cause the device to shut down or reboot and lose configuration settings. This is a different issue than CVE-2019-16879, CVE-2019-20045, CVE-2019-20046, CVE-2020-7801, and CVE-2020-7802.
CVE-2020-7801 (severity: MEDIUM, weakness: CWE-200)
The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) vulnerability. The affected product is vulnerable to information exposure over the SNMP protocol. This is a different issue than CVE-2019-16879, CVE-2019-20045, CVE-2019-20046, CVE-2020-7800, and CVE-2020-7802.
CVE-2020-7802 (severity: MEDIUM, weakness: CWE-276)
The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Incorrect Default Permissions (CWE-276) vulnerability. The affected product is vulnerable to insufficient default permissions, which could allow an attacker to view network configurations through SNMP communication. This is a different issue than CVE-2019-16879, CVE-2019-20045, CVE-2019-20046, CVE-2020-7800, and CVE-2020-7801.