yahoo-inc/cve-impacts huggingface dataset:
CVE-2020-10276: The password for the safety PLC is the default and thus easy to find (in manuals, etc.). This allows a manipulated program to be uploaded to the safety PLC, effectively disabling the emergency stop in case an object is too close to the robot. Navigation and any other components dependent on the laser scanner are not affected (thus it is hard to detect before something happens) though the laser scanner configuration can also be affected altering further the safety of the device.
Key phrases: be uploaded to the safety PLC, manipulated program
CVE-2020-10277: There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extraction of sensible files (such as the shadow file) or privilege escalation by manually adding a new user with sudo privileges on the machine.
Key phrases: privilege escalation
CVE-2020-10278: The BIOS onboard MiR's Computer is not protected by password, therefore, it allows a Bad Operator to modify settings such as boot order. This can be leveraged by a Malicious operator to boot from a Live Image.
Key phrases: modify settings such as boot order
CVE-2020-10279: MiR robot controllers (central computation unit) makes use of Ubuntu 16.04.2 an operating system, Thought for desktop uses, this operating system presents insecure defaults for robots. These insecurities include a way for users to escalate their access beyond what they were granted via file creation, access race conditions, insecure home directory configurations and defaults that facilitate Denial of Service (DoS) attacks.
Key phrases: Denial of Service (DoS), insecure defaults, file creation, access race conditions, insecure home directory configurations, denial of service (dos)
CVE-2020-1028: A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1126, CVE-2020-1136, CVE-2020-1150.
Key phrases: memory corruption, media foundation memory corruption
CVE-2020-10280: The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, effectively blocking the access to the dashboard.
Key phrases: dos
CVE-2020-10281: This vulnerability applies to the Micro Air Vehicle Link (MAVLink) protocol and allows a remote attacker to gain access to sensitive information provided it has access to the communication medium. MAVLink is a header-based protocol that does not perform encryption to improve transfer (and reception speed) and efficiency by design. The increasing popularity of the protocol (used accross different autopilots) has led to its use in wired and wireless mediums through insecure communication channels exposing sensitive information to a remote attacker with ability to intercept network traffic.
Key phrases: gain access, gain access to sensitive information provided it has, access sensitive information
CVE-2020-10282: The Micro Air Vehicle Link (MAVLink) protocol presents no authentication mechanism on its version 1.0 (nor authorization) whichs leads to a variety of attacks including identity spoofing, unauthorized access, PITM attacks and more. According to literature, version 2.0 optionally allows for package signing which mitigates this flaw. Another source mentions that MAVLink 2.0 only provides a simple authentication system based on HMAC. This implies that the flying system overall should add the same symmetric key into all devices of network. If not the case, this may cause a security issue, that if one of the devices and its symmetric key are compromised, the whole authentication system is not reliable.
Key phrases: for package signing which mitigates this flaw, identity spoofing, unauthorized access, pitm, security issue
CVE-2020-10283: The Micro Air Vehicle Link (MAVLink) protocol presents authentication mechanisms on its version 2.0 however according to its documentation, in order to maintain backwards compatibility, GCS and autopilot negotiate the version via the AUTOPILOT_VERSION message. Since this negotiation depends on the answer, an attacker may craft packages in a way that hints the autopilot to adopt version 1.0 of MAVLink for the communication. Given the lack of authentication capabilities in such version of MAVLink (refer to CVE-2020-10282), attackers may use this method to bypass authentication capabilities and interact with the autopilot directly.
Key phrases: bypass authentication
CVE-2020-10284: No authentication is required to control the robot inside the network, moreso the latest available user manual shows an option that lets the user to add a password to the robot but as in xarm_studio 1.3.0 the option is missing from the menu. Assuming manual control, even by forcefully removing the current operator from an active session.
CVE-2020-10285: The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute-force attack. There is no mechanism in place to mitigate or lockout automated attempts to gain access.
Key phrases: gain access, low entropy, brute-force, automated attempts
CVE-2020-10286: the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gaining unrestricted access to sensible files, encryption, or issue orders that disrupt robot operation.
Key phrases: robot operation
CVE-2020-10287: The IRC5 family with UAS service enabled comes by default with credentials that can be found on publicly available manuals. ABB considers this a well documented functionality that helps customer set up however, out of our research, we found multiple production systems running these exact default credentials and consider thereby this an exposure that should be mitigated. Moreover, future deployments should consider that these defaults should be forbidden (user should be forced to change them).
Key phrases: default credentials,
CVE-2020-10288: IRC5 exposes an ftp server (port 21). Upon attempting to gain access you are challenged with a request of username and password, however you can input whatever you like. As long as the field isn't empty it will be accepted.
Key phrases: gain access
CVE-2020-10289: Use of unsafe yaml load. Allows instantiation of arbitrary objects. The flaw itself is caused by an unsafe parsing of YAML values which happens whenever an action message is processed to be sent, and allows for the creation of Python objects. Through this flaw in the ROS core package of actionlib, an attacker with local or remote access can make the ROS Master, execute arbitrary code in Python form. Consider yaml.safe_load() instead. Located first in actionlib/tools/library.py:132. See links for more info on the bug.
Key phrases: execute arbitrary code, be sent, for the creation of Python objects, unsafe yaml load
CVE-2020-1029: An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0942, CVE-2020-0944.
Key phrases: elevation of privilege, elevation privilege
CVE-2020-10290: Universal Robots controller execute URCaps (zip files containing Java-powered applications) without any permission restrictions and a wide API that presents many primitives that can compromise the overall robot operations as demonstrated in our video. In our PoC we demonstrate how a malicious actor could 'cook' a custom URCap that when deployed by the user (intendedly or unintendedly) compromises the system
Key phrases: primitives
CVE-2020-10291: Visual Components (owned by KUKA) is a robotic simulator that allows simulating factories and robots in order toimprove planning and decision-making processes. Visual Components software requires a special license which can beobtained from a network license server. The network license server binds to all interfaces (0.0.0.0) and listensfor packets over UDP port 5093. No authentication/authorization is required in order to communicate with theserver. The protocol being used is a property protocol by RMS Sentinel which provides the licensing infrastructurefor the network license server. RMS Sentinel license manager service exposes UDP port 5093 which provides sensitivesystem information that could be leveraged for further exploitation without any kind of authentication. Thisinformation includes detailed hardware and OS characteristics.After a decryption process, a textual protocol is found which contains a simple header with the requested command,application-identifier, and some arguments. The protocol leaks information regarding the receiving serverinformation, license information and managing licenses, among others.Through this flaw, attackers can retreive information about a KUKA simulation system, particularly, the version ofthe licensing server, which is connected to the simulator, and which will allow them to launch local simulationswith similar characteristics, further understanding the dynamics of motion virtualization and opening doors toother attacks (see RVDP#711 and RVDP#712 for subsequent vulnerabilities that compromise integrity andavailability).Beyond compromising simulations, Visual Components provides capabilities to interface with industrial machinery.Particularly, their PLC Connectivity feature 'makes it easy' to connect simulations with control systems usingeither the industry standard OPC UA or other supported vendor specific interfaces. This fills the gap of jumpingfrom simulation to real and enables attackers to pivot from the Visual Components simulator to robots or otherIndustrial Control System (ICS) devices, such as PLCs.
Key phrases: all interfaces (0.0.0.0) and listensfor packets, launch local simulationswith similar characteristics, leak information, integrity
CVE-2020-10292: Visual Components (owned by KUKA) is a robotic simulator that allows simulating factories and robots in order toimprove planning and decision-making processes. Visual Components software requires a special license which can beobtained from a network license server. The network license server binds to all interfaces (0.0.0.0) and listensfor packets over UDP port 5093. No authentication/authorization is required in order to communicate with theserver. The protocol being used is a property protocol by RMS Sentinel which provides the licensing infrastructurefor the network license server. RMS Sentinel license manager service exposes UDP port 5093 which provides sensitivesystem information that could be leveraged for further exploitation without any kind of authentication. Thisinformation includes detailed hardware and OS characteristics.After a decryption process, a textual protocol is found which contains a simple header with the requested command,application-identifier, and some arguments. The protocol is vulnerable to DoS through an arbitrary pointerderreference. This flaw allows an attacker to to pass a specially crafted package that, when processed by theservice, causes an arbitrary pointer from the stack to be dereferenced, causing an uncaught exception thatterminates the service. This can be further contructed in combination with RVDP#710 which exploits an informationdisclosure leak, or with RVDP#711 for an stack-overflow and potential code execution.Beyond denying simulations, Visual Components provides capabilities to interface with industrial machinery andautomate certain processes (e.g. testing, benchmarking, etc.) which depending on the DevOps setup might beintegrated into the industrial flow. Accordingly, a DoS in the simulation might have higher repercusions, dependingon the Industrial Control System (ICS) ICS infrastructure.
Key phrases: all interfaces (0.0.0.0) and listensfor packets, to pass a specially crafted package that, dos, stack-overflow, repercusions, stack overflow
CVE-2020-1030: <p>An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p><p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted script or application.</p><p>The update addresses the vulnerability by correcting how the Windows Print Spooler Component writes to the file system.</p>
Key phrases: allows arbitrary writing, the file system, elevation of privilege, elevation privilege, arbitrary code, to write files
CVE-2020-1031: <p>An information disclosure vulnerability exists in the way that the Windows Server DHCP service improperly discloses the contents of its memory.</p><p>To exploit the vulnerability, an unauthenticated attacker could send a specially crafted packet to an affected DHCP server.  An attacker who successfully exploited this vulnerability could obtain information to further compromise the users system.</p><p>The security update addresses the vulnerability by correcting how DHCP servers initializes memory.</p>
Key phrases: obtain information, information disclosure, compromise
CVE-2020-1032: A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1036, CVE-2020-1040, CVE-2020-1041, CVE-2020-1042, CVE-2020-1043.
Key phrases: remote code execution, hyper-v remotefx vgpu remote code execution
CVE-2020-1033: <p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the users system.</p><p>An authenticated attacker could exploit this vulnerability by running a specially crafted application.</p><p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>
Key phrases: obtain information, information disclosure, compromise
CVE-2020-1034: <p>An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p><p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p><p>The security update addresses the vulnerability by ensuring the Windows Kernel properly handles objects in memory.</p>
Key phrases: elevation of privilege, elevation privilege, execute code
CVE-2020-1035: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1058, CVE-2020-1060, CVE-2020-1093.
Key phrases: remote code execution
CVE-2020-1036: A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1040, CVE-2020-1041, CVE-2020-1042, CVE-2020-1043.
Key phrases: remote code execution, hyper-v remotefx vgpu remote code execution
CVE-2020-10364: The SSH daemon on MikroTik routers through v6.44.3 could allow remote attackers to generate CPU activity, trigger refusal of new authorized connections, and cause a reboot via connect and write system calls, because of uncontrolled resource management.
Key phrases: generate CPU activity, cpu activity, reboot, uncontrolled resource management
CVE-2020-10365: LogicalDoc before 8.3.3 allows SQL Injection. LogicalDoc populates the list of available documents by querying the database. This list could be filtered by modifying some of the parameters. Some of them are not properly sanitized which could allow an authenticated attacker to perform arbitrary queries to the database.
Key phrases: perform arbitrary queries, perform arbitrary queries to the database, sql injection
CVE-2020-10366: LogicalDoc before 8.3.3 allows /servlet.gupld Directory Traversal, a different vulnerability than CVE-2020-9423 and CVE-2020-10365.
Key phrases: /servlet.gupld Directory Traversal, directory traversal
CVE-2020-1037: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Chakra Scripting Engine Memory Corruption Vulnerability'.
Key phrases: remote code execution, chakra scripting engine memory corruption
CVE-2020-10372: Ramp AltitudeCDN Altimeter before 2.4.0 allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to the dms/rest/services/datastore/createOrEditValueForKey URI.
Key phrases: the dms/rest/services/datastore, stored xss
CVE-2020-10374: A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot function in the Contact Support form.
Key phrases: unauthenticated remote command execution via a crafted POST
CVE-2020-10375: An issue was discovered in New Media Smarty before 9.10. Passwords are stored in the database in an obfuscated format that can be easily reversed. The file data.mdb contains these obfuscated passwords in the second column. NOTE: this is unrelated to the popular Smarty template engine product.
Key phrases: reversed
CVE-2020-10376: Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for an "Authorization: Basic" HTTP header.
Key phrases: discover passwords by sniffing the network for an
CVE-2020-10377: A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an attacker to access the system with compromised user credentials.
Key phrases: gain access, gain access to user credentials, access the system with compromised user credentials, weak encryption
CVE-2020-10378: In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.
Key phrases: out-of-bounds read, out of bounds read
CVE-2020-10379: In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c.
Key phrases: buffer overflows
CVE-2020-1038: <p>A denial of service vulnerability exists when Windows Routing Utilities improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding.</p><p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to cause a target system to stop responding.</p><p>The update addresses the vulnerability by correcting how Windows handles objects in memory.</p>
Key phrases: execute code or to elevate user rights directly, denial of service, stop responding
CVE-2020-10380: RMySQL through 0.10.19 allows SQL Injection.
Key phrases: SQL Injection, sql injection
CVE-2020-10381: An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing attackers to discover database and table names.
Key phrases: discover database and table names, sql injection
CVE-2020-10382: An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an authenticated remote code execution in the backup-scheduler.
Key phrases: remote code execution
CVE-2020-10383: An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated remote code execution in the com_mb24sysapi module.
Key phrases: unauthenticated remote code execution
CVE-2020-10384: An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.6.1. There is a local privilege escalation from the www-data account to the root account.
Key phrases: local privilege escalation
CVE-2020-10385: A stored cross-site scripting (XSS) vulnerability exists in the WPForms Contact Form (aka wpforms-lite) plugin before 1.5.9 for WordPress.
Key phrases: stored cross-site scripting (xss)
CVE-2020-10386: admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading a .php file in the admin/js/ directory.
Key phrases: achieve Code Execution by uploading a .php file, code execution
CVE-2020-10387: Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files from the server using a dot-dot-slash sequence (../) via the GET parameter file.
Key phrases: download files from the server using a dot, path traversal
CVE-2020-10388: The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored (Blind) XSS (injecting arbitrary web script or HTML) in admin/report-referrers.php (vulnerable file admin/include/functions-articles.php).
Key phrases: injecting arbitrary web script or HTML, execute Stored (Blind) XSS (injecting, stored (blind) xss
CVE-2020-10389: admin/save-settings.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by injecting PHP code into any POST parameter when saving global settings.
Key phrases: achieve Code Execution by injecting PHP code into, code execution
CVE-2020-1039: <p>A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.</p><p>An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file.</p><p>The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory.</p>
Key phrases: execute arbitrary code, remote code execution
CVE-2020-10390: OS Command Injection in export.php (vulnerable function called from include/functions-article.php) in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by saving the code to be executed as the wkhtmltopdf path via admin/save-settings.php.
Key phrases: achieve Code Execution by saving the code to, os command injection, code execution
CVE-2020-10391: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-article.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10392: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-category.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10393: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-field.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10394: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-glossary.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10395: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-group.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10396: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-language.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10397: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-news.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10398: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-template.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10399: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-user.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-1040: A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1036, CVE-2020-1041, CVE-2020-1042, CVE-2020-1043.
Key phrases: remote code execution, hyper-v remotefx vgpu remote code execution
CVE-2020-10400: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/article-collaboration.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10401: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-article.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10402: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-category.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10403: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-comment.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10404: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-field.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10405: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-glossary.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10406: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-group.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10407: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-news.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10408: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-subscriber.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10409: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-template.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-1041: A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1036, CVE-2020-1040, CVE-2020-1042, CVE-2020-1043.
Key phrases: remote code execution, hyper-v remotefx vgpu remote code execution
CVE-2020-10410: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-user.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10411: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/email-harvester.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10412: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/import-csv.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10413: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/import-html.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10414: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/index-attachments.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10415: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/index.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10416: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/kb-backup.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10417: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-articles.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10418: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-attachments.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10419: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-categories.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-1042: A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1036, CVE-2020-1040, CVE-2020-1041, CVE-2020-1043.
Key phrases: remote code execution, hyper-v remotefx vgpu remote code execution
CVE-2020-10420: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-comments.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10421: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-departments.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10422: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-drafts.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10423: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-feedbacks.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10424: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-fields.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10425: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-glossary.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10426: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-groups.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10427: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-languages.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10428: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-news.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10429: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-settings.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-1043: A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1036, CVE-2020-1040, CVE-2020-1041, CVE-2020-1042.
Key phrases: remote code execution, hyper-v remotefx vgpu remote code execution
CVE-2020-10430: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-subscribers.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10431: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-templates.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10432: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-tickets.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10433: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-users.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10434: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-versions.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10435: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/my-languages.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10436: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/my-profile.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10437: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/optimize-database.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10438: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/reply-ticket.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10439: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article-discussed.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-1044: <p>A security feature bypass vulnerability exists in SQL Server Reporting Services (SSRS) when the server improperly validates attachments uploaded to reports. An attacker who successfully exploited this vulnerability could upload file types that were disallowed by an administrator.</p><p>To exploit the vulnerability, an authenticated attacker would need to send a specially crafted request to an affected SSRS server.</p><p>The update addresses the vulnerability by modifying how SSRS validates attachment uploads.</p>
Key phrases: security feature bypass, feature bypass,
CVE-2020-10440: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article-mailed.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10441: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article-monthly.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10442: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article-popular.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10443: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article-printed.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10444: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article-rated.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10445: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10446: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-category.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10447: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-failed-login.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10448: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-referrers.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10449: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-search.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-1045: <p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p><p>The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.</p><p>The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names.</p>
Key phrases: security feature bypass, set a second cookie with the name being, feature bypass,
CVE-2020-10450: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-traffic.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10451: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-user.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10452: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/save-article.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10453: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/search-users.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss