yahoo-inc/cve-impacts huggingface dataset:
CVE-2020-23721: An issue was discovered in FUEL CMS V1.4.7. An attacker can use a XSS payload and bypass a filter via /fuelCM/fuel/pages/edit/1?lang=english.
Key phrases: bypass a filter, xss payload
CVE-2020-23722: An issue was discovered in FUEL CMS 1.4.7. There is a escalation of privilege vulnerability to obtain super admin privilege via the "id" and "fuel_id" parameters.
Key phrases: obtain super admin privilege, escalation of privilege, escalation privilege
CVE-2020-23726: There is a local denial of service vulnerability in Wise Care 365 5.5.4, attackers can cause computer crash (BSOD).
Key phrases: local denial of service, computer crash (bsod)
CVE-2020-23727: There is a local denial of service vulnerability in the Antiy Zhijia Terminal Defense System 5.0.2.10121559 and an attacker can cause a computer crash (BSOD).
Key phrases: local denial of service, computer crash (bsod)
CVE-2020-23735: In Saibo Cyber Game Accelerator 3.7.9 there is a local privilege escalation vulnerability. Attackers can use the constructed program to increase user privileges
Key phrases: local privilege escalation
CVE-2020-23736: There is a local denial of service vulnerability in DaDa accelerator 5.6.19.816,, attackers can use constructed programs to cause computer crashes (BSOD).
Key phrases: local denial of service, constructed programs, computer crashes (bsod)
CVE-2020-23738: There is a local denial of service vulnerability in Advanced SystemCare 13 PRO 13.5.0.174. Attackers can use a constructed program to cause a computer crash (BSOD)
Key phrases: local denial of service, computer crash (bsod)
CVE-2020-23740: In DriverGenius 9.61.5480.28 there is a local privilege escalation vulnerability in the driver wizard, attackers can use constructed programs to increase user privileges.
Key phrases: local privilege escalation, increase user privileges
CVE-2020-23741: In AnyView (network police) network monitoring software 4.6.0.1, there is a local denial of service vulnerability in AnyView, attackers can use a constructed program to cause a computer crash (BSOD).
Key phrases: local denial of service, computer crash (bsod)
CVE-2020-23754: Cross Site Scripting (XSS) vulnerability in infusions/member_poll_panel/poll_admin.php in PHP-Fusion 9.03.50, allows attackers to execute arbitrary code, via the polls feature.
Key phrases: execute arbitrary code, cross site scripting (xss)
CVE-2020-23761: Cross Site Scripting (XSS) vulnerability in subrion CMS Version <= 4.2.1 allows remote attackers to execute arbitrary web script via the "payment gateway" column on transactions tab.
Key phrases: execute arbitrary web script, execute arbitrary web script via the "payment, cross site scripting (xss)
CVE-2020-23762: Cross Site Scripting (XSS) vulnerability in the Larsens Calender plugin Version <= 1.2 for WordPress allows remote attackers to execute arbitrary web script via the "titel" column on the "Eintrage hinzufugen" tab.
Key phrases: execute arbitrary web script, execute arbitrary web script via the "titel, cross site scripting (xss)
CVE-2020-23763: SQL injection in admin.php in Online Book Store 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication.
Key phrases: execute arbitrary SQL commands, bypass authentication, execute arbitrary SQL commands and bypass authentication, sql injection
CVE-2020-23765: A file upload vulnerability was discovered in the file path /bl-plugins/backup/plugin.php on Bludit version 3.12.0. If an attacker is able to gain Administrator rights they will be able to use unsafe plugins to upload a backup file and control the server.
Key phrases: gain Administrator rights, file upload
CVE-2020-23766: An arbitrary file deletion vulnerability was discovered on htmly v2.7.5 which allows remote attackers to use any absolute path to delete any file in the server should they gain Administrator privileges.
Key phrases: gain Administrator privileges, use any absolute path to delete any file, arbitrary file deletion
CVE-2020-23768: An information disclosure vulnerability was discovered in alipay_function.php in the log file of Alibaba payment interface on PHPPYUN prior to version 5.0.1. If exploited, this vulnerability will allow attackers to obtain users' personally identifiable information including e-mail address and telephone numbers.
Key phrases: obtain users' personally identifiable information, obtain users' personally identifiable information including e, information disclosure
CVE-2020-23774: A reflected XSS vulnerability exists in tohtml/convert.php of Winmail 6.5, which can cause JavaScript code to be executed.
Key phrases: reflected xss
CVE-2020-23776: A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on. An attacker can use this vulnerability to cause the server to send a request to a specific URL. An attacker can modify the request header 'HOST' value to cause the server to send the request.
Key phrases: ssrf
CVE-2020-23790: An Arbitrary File Upload vulnerability was discovered in the Golo Laravel theme v 1.1.5.
Key phrases: arbitrary file upload
CVE-2020-23793: An issue was discovered in spice-server spice-server-0.14.0-6.el7_6.1.x86_64 of Redhat's VDI product. There is a security vulnerablility that can restart KVMvirtual machine without any authorization. It is not yet known if there will be other other effects.
Key phrases: security vulnerablility, other effects
CVE-2020-23804: Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input.
Key phrases: cause a denial of service via crafted input, uncontrolled recursion
CVE-2020-23811: xxl-job 2.2.0 allows Information Disclosure of username, model, and password via job/admin/controller/UserController.java.
Key phrases: Information Disclosure of username, information disclosure
CVE-2020-23814: Multiple cross-site scripting (XSS) vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) AppName and (2)AddressList parameter in JobGroupController.java file.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via (, cross-site scripting (xss)
CVE-2020-23824: ArGo Soft Mail Server 1.8.8.9 is affected by Cross Site Request Forgery (CSRF) for perform remote arbitrary code execution. The component is the Administration dashboard. When using admin/user credentials, if the admin/user admin opens a website with the malicious page that will run the CSRF.
Key phrases: cross site request forgery (csrf), arbitrary code, arbitrary code execution
CVE-2020-23826: The Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to remote command execution (RCE) through command injection via the HTTP API. NOTE: This may be a duplicate of CVE-2020-10176
Key phrases: remote command execution (rce), command injection
CVE-2020-23828: A File Upload vulnerability in SourceCodester Online Course Registration v1.0 allows remote attackers to achieve Remote Code Execution (RCE) on the hosting webserver by uploading a crafted PHP web-shell that bypasses the image upload filters. An attack uses /Online%20Course%20Registration/my-profile.php with the POST parameter photo.
Key phrases: achieve Remote Code Execution (RCE) on, file upload, remote code execution (rce)
CVE-2020-23829: interface/new/new_comprehensive_save.php in LibreHealth EHR 2.0.0 suffers from an authenticated file upload vulnerability, allowing remote attackers to achieve remote code execution (RCE) on the hosting webserver by uploading a maliciously crafted image.
Key phrases: achieve remote code execution (RCE) on, authenticated file upload
CVE-2020-23830: A Cross-Site Request Forgery (CSRF) vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 allows remote attackers to deny future logins by changing an authenticated victim's username when they visit a third-party site.
Key phrases: deny future logins by changing an authenticated victim, cross-site request forgery (csrf)
CVE-2020-23831: A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Stock Management System v1.0 allows remote attackers to harvest login credentials and session cookies when an unauthenticated victim clicks on a malicious URL and enters credentials.
Key phrases: harvest login credentials and session cookies when an, reflected cross-site scripting (xss), unauthenticated victim, malicious url
CVE-2020-23832: A Persistent Cross-Site Scripting (XSS) vulnerability in message_admin.php in Projectworlds Car Rental Management System v1.0 allows unauthenticated remote attackers to harvest an admin login session cookie and steal an admin session upon an admin login.
Key phrases: harvest an admin login session cookie and steal, persistent cross-site scripting (xss)
CVE-2020-23833: Projectworlds House Rental v1.0 suffers from an unauthenticated SQL Injection vulnerability, allowing remote attackers to execute arbitrary code on the hosting webserver via a malicious index.php POST request.
Key phrases: execute arbitrary code, execute arbitrary code on the hosting webserver via, sql injection
CVE-2020-23834: Insecure Service File Permissions in the bd service in Real Time Logic BarracudaDrive v6.5 allow local attackers to escalate privileges to admin by replacing the %SYSTEMDRIVE%\\bd\\bd.exe file. When the computer next starts, the new bd.exe will be run as LocalSystem.
Key phrases: escalate privileges to admin by replacing the %, insecure service file permissions
CVE-2020-23835: A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Tailor Management System v1.0 allows remote attackers to harvest keys pressed by an unauthenticated victim who clicks on a malicious URL and begins typing.
Key phrases: harvest keys pressed by an unauthenticated victim who, reflected cross-site scripting (xss)
CVE-2020-23836: A Cross-Site Request Forgery (CSRF) vulnerability in edit_user.php in OSWAPP Warehouse Inventory System (aka OSWA-INV) through 2020-08-10 allows remote attackers to change the admin's password after an authenticated admin visits a third-party site.
Key phrases: change the admin's password after an authenticated, cross-site request forgery (csrf)
CVE-2020-23837: A Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote attackers to add admin (or other) users after an authenticated admin visits a third-party site or clicks on a URL.
Key phrases: add admin (or other) users after, cross-site request forgery (csrf)
CVE-2020-23839: A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpage, allows remote attackers to execute JavaScript code in the client's browser and harvest login credentials after a client clicks a link, enters credentials, and submits the login form.
Key phrases: execute JavaScript code in the client's browser, reflected cross-site scripting (xss)
CVE-2020-23849: Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript.
Key phrases: stored xss
CVE-2020-23851: A stack-based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt, BMP *pb) function at ffjpeg/src/jfif.c:513:28, which could cause a denial of service by submitting a malicious jpeg image.
Key phrases: stack-based buffer overflow, denial of service, stack based buffer overflow
CVE-2020-23852: A heap based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt, BMP *pb) function at ffjpeg/src/jfif.c (line 544 & line 545), which could cause a denial of service by submitting a malicious jpeg image.
Key phrases: heap based buffer overflow, denial of service
CVE-2020-23856: Use-after-Free vulnerability in cflow 1.6 in the void call(char *name, int line) function at src/parser.c, which could cause a denial of service via the pointer variable caller->callee.
Key phrases: use-after-free, denial of service, use after free
CVE-2020-23861: A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, which causes a denial of service by submitting a dwg file.
Key phrases: heap-based buffer overflow, denial of service, heap based buffer overflow
CVE-2020-23864: An issue exits in IOBit Malware Fighter version 8.0.2.547. Local escalation of privileges is possible by dropping a malicious DLL file into the WindowsApps folder.
Key phrases: local escalation of privileges, escalation privilege
CVE-2020-23868: NeDi 1.9C allows inc/rt-popup.php d XSS.
Key phrases: inc/rt-popup.php d XSS, xss
CVE-2020-23872: A NULL pointer dereference in the function TextPage::restoreState of pdf2xml v2.0 allows attackers to cause a denial of service (DoS).
Key phrases: denial of service (DoS), cause a denial of service (DoS), null pointer dereference, denial of service (dos)
CVE-2020-23873: pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump.
Key phrases: heap-buffer overflow, heap buffer overflow
CVE-2020-23874: pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::addAttributsNode.
Key phrases: heap-buffer overflow, heap buffer overflow
CVE-2020-23876: pdf2xml v2.0 was discovered to contain a memory leak in the function TextPage::testLinkedText.
Key phrases: memory leak
CVE-2020-23877: pdf2xml v2.0 was discovered to contain a stack buffer overflow in the component getObjectStream.
Key phrases: stack buffer overflow
CVE-2020-23878: pdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch.
Key phrases: stack buffer overflow
CVE-2020-23879: pdf2json v0.71 was discovered to contain a NULL pointer dereference in the component ObjectStream::getObject.
Key phrases: null pointer dereference
CVE-2020-23884: A buffer overflow in Nomacs v3.15.0 allows attackers to cause a denial of service (DoS) via a crafted MNG file.
Key phrases: denial of service (DoS), cause a denial of service (DoS), buffer overflow, denial of service (dos)
CVE-2020-23886: XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted pict file. Related to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree.
Key phrases: denial of service (DoS), cause a denial of service (DoS), heap overflow, denial of service (dos)
CVE-2020-23887: XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted ico file. Related to a Read Access Violation starting at USER32!SmartStretchDIBits+0x33.
Key phrases: denial of service (DoS), cause a denial of service (DoS), heap overflow, denial of service (dos), read access violation
CVE-2020-23888: A User Mode Write AV in Editor!TMethodImplementationIntercept+0x53f6c3 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted psd file.
Key phrases: denial of service (DoS), cause a denial of service (DoS), denial of service (dos)
CVE-2020-23889: A User Mode Write AV starting at Editor!TMethodImplementationIntercept+0x4189c6 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted ico file.
Key phrases: denial of service (DoS), cause a denial of service (DoS), denial of service (dos)
CVE-2020-23890: A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted JPG file. Related to Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at JPGCodec+0x753648.
Key phrases: denial of service (DoS), cause a denial of service (DoS), buffer overflow, denial of service (dos)
CVE-2020-23891: A User Mode Write AV in Editor+0x5cd7 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file.
Key phrases: denial of service (DoS), cause a denial of service (DoS), user mode write av, denial of service (dos)
CVE-2020-23893: A User Mode Write AV in Editor!TMethodImplementationIntercept+0x3c3682 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file.
Key phrases: denial of service (DoS), cause a denial of service (DoS), denial of service (dos)
CVE-2020-23894: A User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file.
Key phrases: denial of service (DoS), cause a denial of service (DoS), user mode write av, denial of service (dos)
CVE-2020-23895: A User Mode Write AV in Editor+0x76af of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file.
Key phrases: denial of service (DoS), cause a denial of service (DoS), user mode write av, denial of service (dos)
CVE-2020-23896: A User Mode Write AV in Editor+0x576b of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tiff file.
Key phrases: denial of service (DoS), cause a denial of service (DoS), user mode write av, denial of service (dos)
CVE-2020-23897: A User Mode Write AV in Editor!TMethodImplementationIntercept+0x54dcec of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file.
Key phrases: denial of service (DoS), cause a denial of service (DoS), denial of service (dos)
CVE-2020-23898: A User Mode Write AV in Editor+0x5ea2 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file.
Key phrases: denial of service (DoS), cause a denial of service (DoS), user mode write av, denial of service (dos)
CVE-2020-23899: A User Mode Write AV in Editor+0x5f91 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file.
Key phrases: denial of service (DoS), cause a denial of service (DoS), user mode write av, denial of service (dos)
CVE-2020-23900: A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file. Related to Data from Faulting Address controls Code Flow starting at Editor!TMethodImplementationIntercept+0x57a3b.
Key phrases: denial of service (DoS), cause a denial of service (DoS), buffer overflow, denial of service (dos)
CVE-2020-23901: A User Mode Write AV in Editor+0x5d15 of WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file.
Key phrases: denial of service (DoS), cause a denial of service (DoS), user mode write av, denial of service (dos)
CVE-2020-23902: A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service (DoS) via a crafted tga file. Related to Data from Faulting Address may be used as a return value starting at Editor!TMethodImplementationIntercept+0x528a3.
Key phrases: denial of service (DoS), cause a denial of service (DoS), buffer overflow, denial of service (dos)
CVE-2020-23903: A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.
Key phrases: denial of service (DoS), cause a denial of service (DoS), divide by zero, denial of service (dos)
CVE-2020-23904: A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file. NOTE: the vendor states "I cannot reproduce it" and it "is a demo program.
Key phrases: denial of service (DoS), cause a denial of service (DoS), stack buffer overflow, denial of service (dos)
CVE-2020-23906: FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted audio file due to insufficient verification of data authenticity.
Key phrases: denial of service (DoS), cause a denial of service (DoS), denial of service (dos), insufficient verification of data authenticity
CVE-2020-23907: An issue was discovered in retdec v3.3. In function canSplitFunctionOn() of ir_modifications.cpp, there is a possible out of bounds read due to a heap buffer overflow. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution.
Key phrases: heap buffer overflow, deny of service, memory disclosure, possible code execution, out of bounds read
CVE-2020-23909: Heap-based buffer over-read in function png_convert_4 in file pngex.cc in AdvanceMAME through 2.1.
Key phrases: heap-based buffer over-read, buffer over read
CVE-2020-23910: Stack-based buffer overflow vulnerability in asn1c through v0.9.28 via function genhash_get in genhash.c.
Key phrases: stack-based buffer overflow, stack based buffer overflow
CVE-2020-23911: An issue was discovered in asn1c through v0.9.28. A NULL pointer dereference exists in the function _default_error_logger() located in asn1fix.c. It allows an attacker to cause Denial of Service.
Key phrases: cause Denial of Service, null pointer dereference, denial of service
CVE-2020-23912: An issue was discovered in Bento4 through v1.6.0-637. A NULL pointer dereference exists in the function AP4_StszAtom::GetSampleSize() located in Ap4StszAtom.cpp. It allows an attacker to cause Denial of Service.
Key phrases: cause Denial of Service, null pointer dereference, denial of service
CVE-2020-23914: An issue was discovered in cpp-peglib through v0.1.12. A NULL pointer dereference exists in the peg::AstOptimizer::optimize() located in peglib.h. It allows an attacker to cause Denial of Service.
Key phrases: cause Denial of Service, null pointer dereference, denial of service
CVE-2020-23915: An issue was discovered in cpp-peglib through v0.1.12. peg::resolve_escape_sequence() in peglib.h has a heap-based buffer over-read.
Key phrases: heap-based buffer over-read, buffer over read
CVE-2020-23921: An issue was discovered in fast_ber through v0.4. yy::yylex() in asn_compiler.hpp has a heap-based buffer over-read.
Key phrases: heap-based buffer over-read, buffer over read
CVE-2020-23922: An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read.
Key phrases: heap-based buffer over-read, buffer over read
CVE-2020-23928: An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer over-read.
Key phrases: heap-based buffer over-read, buffer over read
CVE-2020-23930: An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function nhmldump_send_header located in write_nhml.c. It allows an attacker to cause Denial of Service.
Key phrases: cause Denial of Service, null pointer dereference, denial of service
CVE-2020-23931: An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer over-read.
Key phrases: heap-based buffer over-read, buffer over read
CVE-2020-23932: An issue was discovered in gpac before 1.0.1. A NULL pointer dereference exists in the function dump_isom_sdp located in filedump.c. It allows an attacker to cause Denial of Service.
Key phrases: cause Denial of Service, null pointer dereference, denial of service
CVE-2020-23934: An issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system commands by uploading a php web shell in the "Filemanager" section.
Key phrases: php web shell
CVE-2020-23935: Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'# && Password: (Write Something)".
Key phrases: ['Bypass via "Username: admin\\'#', 'Authentication Bypass', 'authentication bypass']
CVE-2020-23936: PHPGurukul Vehicle Parking Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'# && Password: (Write Something)".
Key phrases: ['Bypass via "Username: admin\\'#', 'Authentication Bypass', 'authentication bypass']
CVE-2020-23945: A SQL injection vulnerability exists in Victor CMS V1.0 in the cat_id parameter of the category.php file. This parameter can be used by sqlmap to obtain data information in the database.
Key phrases: obtain data, sql injection
CVE-2020-23957: Pega Platform through 8.4.x is affected by Cross Site Scripting (XSS) via the ConnectionID parameter, as demonstrated by a pyActivity=Data-TRACERSettings.pzStartTracerSession request to a PRAuth URI.
Key phrases: cross site scripting (xss)
CVE-2020-23960: Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Fork before 5.8.3 allows remote attackers to perform unauthorized actions as administrator to (1) approve the mass of the user's comments, (2) restoring a deleted user, (3) installing or running modules, (4) resetting the analytics, (5) pinging the mailmotor api, (6) uploading things to the media library, (7) exporting locale.
Key phrases: perform unauthorized actions as administrator to (1, cross-site request forgery (csrf), cross site request forgery
CVE-2020-23962: A cross site scripting (XSS) vulnerability in Catfish CMS 4.9.90 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "announcement_gonggao" parameter.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, cross site scripting (xss)
CVE-2020-23966: SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafted GET request.
Key phrases: execute arbitrary commands, execute arbitrary commands via the post parameter to, sql injection
CVE-2020-23967: Dr.Web Security Space versions 11 and 12 allow elevation of privilege for local users without administrative privileges to NT AUTHORITY\\\\SYSTEM due to insufficient control during autoupdate.
Key phrases: NT AUTHORITY\\\\SYSTEM due to insufficient control during autoupdate, elevation of privilege, elevation privilege
CVE-2020-23968: Ilex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a symlink attack on ProgramData\\Ilex\\S&G\\Logs\\000-sngWSService1.log.
Key phrases: elevation of privileges via a symlink attack on, elevation privilege
CVE-2020-23971: gmapfp.org Joomla Component GMapFP J3.30pro is affected by Insecure Permissions. An attacker can access the upload function without authenticating to the application and also can upload files due the issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double extensions.
Key phrases: insecure permissions, unrestricted file uploads
CVE-2020-23972: In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double extensions.
Key phrases: unrestricted file uploads, double extensions
CVE-2020-23973: KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter.
Key phrases: sql injection
CVE-2020-23974: Create-Project Manager 1.07 has Multi Persistent Cross-site Scripting and HTML injection in via Online chat, Social feed,Message(title-tag), Add new client (all-tags).
Key phrases: multi persistent cross-site scripting, html injection
CVE-2020-23975: Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has cross site scripting via the 'search.php' id parameter.
Key phrases: cross site scripting, cross-site scripting
CVE-2020-23976: Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id parameter.
Key phrases: sql injection
CVE-2020-23977: KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter.
Key phrases: cross site scripting, cross-site scripting
CVE-2020-23978: SQL injection can occur in Soluzione Globale Ecommerce CMS v1 via the parameter " offerta.php"
Key phrases: sql injection
CVE-2020-23979: 13enforme CMS 1.0 has SQL Injection via the 'content.php' id parameter.
Key phrases: sql injection
CVE-2020-23980: DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page.
Key phrases: SQL Injection via the username field on the, sql injection
CVE-2020-23981: 13enforme CMS 1.0 has Cross Site Scripting via the "content.php" id parameter.
Key phrases: cross site scripting
CVE-2020-23982: DesignMasterEvents Conference management 1.0.0 has cross site scripting via the 'certificate.php'
Key phrases: cross site scripting, cross-site scripting
CVE-2020-23983: Michael-design iChat Realtime PHP Live Support System 1.6 has persistent Cross-site Scripting via chat,text-filed tags.
Key phrases: cross-site scripting
CVE-2020-23984: Online Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer registration-form all-tags.
Key phrases: persistent cross-site scripting
CVE-2020-23986: Github Read Me Stats commit 3c7220e4f7144f6cb068fd433c774f6db47ccb95 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the function renderError.
Key phrases: reflected cross-site scripting (xss)
CVE-2020-23989: NeDi 1.9C allows pwsec.php oid XSS.
Key phrases: pwsec.php oid XSS, oid xss
CVE-2020-23992: Cross Site Scripting (XSS) in Nagios XI 5.7.1 allows remote attackers to run arbitrary code via returnUrl parameter in a crafted GET request.
Key phrases: run arbitrary code, run arbitrary code via returnUrl parameter in a, cross site scripting (xss)
CVE-2020-23995: An information disclosure vulnerability in ILIAS before 5.3.19, 5.4.12 and 6.0 allows remote authenticated attackers to get the upload data path via a workspace upload.
Key phrases: get the upload data path via a workspace, information disclosure
CVE-2020-23996: A local file inclusion vulnerability in ILIAS before 5.3.19, 5.4.10 and 6.0 allows remote authenticated attackers to execute arbitrary code via the import of personal data.
Key phrases: execute arbitrary code, execute arbitrary code via the import of personal, local file inclusion
CVE-2020-24000: SQL Injection vulnerability in eyoucms cms v1.4.7, allows attackers to execute arbitrary code and disclose sensitive information, via the tid parameter to index.php.
Key phrases: execute arbitrary code, execute arbitrary code and disclose sensitive information, sql injection
CVE-2020-24003: Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Skype Client's microphone and camera access.
Key phrases: obtain unprompted microphone and camera access, obtain unprompted microphone and camera access by loading, disable-library-validation entitlement
CVE-2020-24007: Umanni RH 1.0 does not limit the number of authentication attempts. An unauthenticated user may exploit this vulnerability to launch a brute-force authentication attack against the Login page.
Key phrases: brute-force authentication
CVE-2020-24008: Umanni RH 1.0 has a user enumeration vulnerability. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
Key phrases: determine if the user is valid or not, user enumeration, brute force
CVE-2020-24020: Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnn_execute_layer_pad in libavfilter/dnn/dnn_backend_native_layer_pad.c due to a call to memcpy without length checks, which could let a remote malicious user execute arbitrary code.
Key phrases: execute arbitrary code, buffer overflow
CVE-2020-24025: Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path.
CVE-2020-24026: TinyShop, a free and open source mall based on RageFrame2, has a stored XSS vulnerability that affects version 1.2.0. TinyShop allows XSS via the explain_first and again_explain parameters of the /evaluate/index.php page. The vulnerability may be exploited remotely, resulting in cross-site scripting (XSS) or information disclosure.
Key phrases: XSS via the explain_first and again_explain parameters of, xss, information disclosure
CVE-2020-24027: In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling of a RTSP "PLAY" command, when the command specifies seeking by absolute time.
Key phrases: buffer overflow
CVE-2020-24028: ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates.
Key phrases: achieve privilege escalation via user creations, user permission updates
CVE-2020-24029: Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request.
Key phrases: unauthenticated password changes
CVE-2020-24030: ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse.
Key phrases: sensitive data via token reuse, weak token expiration, privilege escalation
CVE-2020-24032: tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone.
Key phrases: cmd=set&tz=OS command injection via, os command injection, shell metacharacters
CVE-2020-24033: An issue was discovered in fs.com S3900 24T4S 1.7.0 and earlier. The form does not have an authentication or token authentication mechanism that allows remote attackers to forge requests on behalf of a site administrator to change all settings including deleting users, creating new users with escalated privileges.
Key phrases: forge requests on behalf of a site administrator, deleting users, escalate privilege
CVE-2020-24034: Sagemcom F@ST 5280 routers using firmware version 1.150.61 have insecure deserialization that allows any authenticated user to perform a privilege escalation to any other user. By making a request with valid sess_id, nonce, and ha1 values inside of the serialized session cookie, an attacker may alter the user value inside of this cookie, and assume the role and permissions of the user specified. By assuming the role of the user internal, which is inaccessible to end users by default, the attacker gains the permissions of the internal account, which includes the ability to flash custom firmware to the router, allowing the attacker to achieve a complete compromise.
Key phrases: perform a privilege escalation to any other user, achieve a complete compromise, insecure deserialization
CVE-2020-24036: PHP object injection in the Ajax endpoint of the backend in ForkCMS below version 5.8.3 allows an authenticated remote user to execute malicious code.
Key phrases: execute malicious code, php object injection
CVE-2020-24038: myFax version 229 logs sensitive information in the export log module which allows any user to access critical information.
Key phrases: access critical information, sensitive information
CVE-2020-24045: A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. The restricted shell can be bypassed by presenting a fake vmware-tools ISO image to the guest virtual machine running SpamTitan Gateway. This ISO image should contain a valid Perl script at the vmware-freebsd-tools/vmware-tools-distrib/vmware-install.pl path. The fake ISO image will be mounted and the script wmware-install.pl will be executed with super-user privileges as soon as the hidden option to install VMware Tools is selected in the main menu of the restricted shell (option number 5). The contents of the script can be whatever the attacker wants, including a backdoor or similar.
Key phrases: the guest virtual machine running SpamTitan Gateway, sandbox escape issue, backdoor
CVE-2020-24046: A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. This restricted shell can be bypassed after changing the properties of the user admin in the operating system file /etc/passwd. This file cannot be accessed though the restricted shell, but it can be modified by abusing the Backup/Import Backup functionality of the web interface. An authenticated attacker would be able to obtain the file /var/tmp/admin.passwd after executing a Backup operation. This file can be manually modified to change the GUID of the user to 0 (root) and change the restricted shell to a normal shell /bin/sh. After the modification is done, the file can be recompressed to a .tar.bz file and imported again via the Import Backup functionality. The properties of the admin user will be overwritten and a root shell will be granted to the user upon the next successful login.
Key phrases: obtain the file /var/tmp/admin.passwd, sandbox escape issue
CVE-2020-24051: The Moog EXO Series EXVF5C-2 and EXVP7C2-3 units support the ONVIF interoperability IP-based physical security protocol, which requires authentication for some of its operations. It was found that the authentication check for those ONVIF operations can be bypassed. An attacker can abuse this issue to execute privileged operations without authentication, for instance, to create a new Administrator user.
CVE-2020-24052: Several XML External Entity (XXE) vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units allow remote unauthenticated users to read arbitrary files via a crafted Document Type Definition (DTD) in an XML request.
Key phrases: read arbitrary files, read arbitrary files via a crafted Document Type, xml external entity (xxe)
CVE-2020-24053: Moog EXO Series EXVF5C-2 and EXVP7C2-3 units have a hardcoded credentials vulnerability. This could cause a confidentiality issue when using the FTP, Telnet, or SSH protocols.
Key phrases: hardcoded credentials, confidentiality issue
CVE-2020-24054: The administration console of the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units features a 'statusbroadcast' command that can spawn a given process repeatedly at a certain time interval as 'root'. One of the limitations of this feature is that it only takes a path to a binary without arguments; however, this can be circumvented using special shell variables, such as '${IFS}'. As a result, an attacker can execute arbitrary commands as 'root' on the units.
Key phrases: execute arbitrary commands
CVE-2020-24055: Verint 5620PTZ Verint_FW_0_42 and Verint 4320 V4320_FW_0_23, and V4320_FW_0_31 units feature an autodiscovery service implemented in the binary executable '/usr/sbin/DM' that listens on port TCP 6666. The service is vulnerable to a stack buffer overflow. It is worth noting that this service does not require any authentication.
Key phrases: stack buffer overflow
CVE-2020-24056: A hardcoded credentials vulnerability exists in Verint 5620PTZ Verint_FW_0_42, Verint 4320 V4320_FW_0_23, V4320_FW_0_31, and Verint S5120FD Verint_FW_0_42units. This could cause a confidentiality issue when using the FTP, Telnet, or SSH protocols.
Key phrases: hardcoded credentials, confidentiality issue
CVE-2020-24057: The management website of the Verint S5120FD Verint_FW_0_42 unit features a CGI endpoint ('ipfilter.cgi') that allows the user to manage network filtering on the unit. This endpoint is vulnerable to a command injection. An authenticated attacker can leverage this issue to execute arbitrary commands as 'root'.
Key phrases: execute arbitrary commands, manage network filtering on the unit, command injection
CVE-2020-24063: The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF.
Key phrases: includes/lib/download.php?subdomain= SSRF, ssrf
CVE-2020-24074: The decode program in silk-v3-decoder Version:20160922 Build By kn007 does not strictly check data, resulting in a buffer overflow.
Key phrases: buffer overflow
CVE-2020-24075: Cross Site Scripting (XSS) vulnerability in Name Input Field in Contact Us form in Laborator Kalium before 3.0.4, allows remote attackers to execute arbitrary code.
Key phrases: execute arbitrary code, cross site scripting (xss)
CVE-2020-24085: A cross-site scripting (XSS) vulnerability exists in MISP v2.4.128 in app/Controller/UserSettingsController.php at SetHomePage() function. Due to a lack of controller validation in "path" parameter, an attacker can execute malicious JavaScript code.
Key phrases: cross-site scripting (xss)
CVE-2020-24088: An issue was discovered in MmMapIoSpace routine in Foxconn Live Update Utility 2.1.6.26, allows local attackers to escalate privileges.
Key phrases: escalate privileges
CVE-2020-24089: An issue was discovered in ImfHpRegFilter.sys in IOBit Malware Fighter version 8.0.2, allows local attackers to cause a denial of service (DoS).
Key phrases: denial of service (DoS), cause a denial of service (DoS), denial of service (dos)
CVE-2020-24104: XSS on the PIX-Link Repeater/Router LV-WR07 with firmware v28K.Router.20170904 allows attackers to steal credentials without being connected to the network. The attack vector is a crafted ESSID, as demonstrated by the wireless.htm SET2 parameter.
Key phrases: steal credentials without being connected to the network, xss
CVE-2020-24113: Directory Traversal vulnerability in Contacts File Upload Interface in Yealink W60B version 77.83.0.85, allows attackers to gain sensitive information and cause a denial of service (DoS).
Key phrases: denial of service (DoS), gain sensitive information, gain sensitive information and cause a denial of, directory traversal, denial of service (dos)
CVE-2020-24115: In projectworlds Online Book Store 1.0 Use of Hard-coded Credentials in source code leads to admin panel access.
Key phrases: hard-coded credentials, admin panel access
CVE-2020-24119: A heap buffer overflow read was discovered in upx 4.0.0, because the check in p_lx_elf.cpp is not perfect.
Key phrases: heap buffer overflow
CVE-2020-24130: A cross site request forgery (CSRF) vulnerability in the configure.html component of Ponzu 0.11.0 allows attackers to change user and administrator credentials, and add or delete administrator accounts.
Key phrases: change user and administrator credentials, cross site request forgery (csrf)
CVE-2020-24133: A heap buffer overflow vulnerability in the r_asm_swf_disass function of Radare2-extras before commit e74a93c allows attackers to execute arbitrary code or carry out denial of service (DOS) attacks.
Key phrases: execute arbitrary code, denial of service (DOS), execute arbitrary code or carry out denial of, heap buffer overflow, denial of service (dos)
CVE-2020-24135: A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Wcms 0.3.2, which allows remote attackers to inject arbitrary web script and HTML via the type parameter to wex/cssjs.php.
Key phrases: inject arbitrary web script, inject arbitrary web script and HTML via the, reflected cross site scripting (xss)
CVE-2020-24136: Directory traversal in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the pagename parameter to wex/html.php.
Key phrases: read arbitrary files, read arbitrary files on the server that is, directory traversal
CVE-2020-24137: Directory traversal vulnerability in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the path parameter to wex/cssjs.php.
Key phrases: read arbitrary files, read arbitrary files on the server that is, directory traversal
CVE-2020-24138: Cross Site Scripting (XSS) vulnerability in wcms 0.3.2 allows remote attackers to inject arbitrary web script and HTML via the pagename parameter to wex/html.php.
Key phrases: inject arbitrary web script, inject arbitrary web script and HTML via the, cross site scripting (xss)
CVE-2020-24139: Server-side request forgery in Wcms 0.3.2 lets an attacker send crafted requests from the back-end server of a vulnerable web application via the path parameter to wex/cssjs.php. It can help identify open ports, local network hosts and execute command on local services.
Key phrases: server-side request forgery, vulnerable web application, open ports, local network hosts, server side request forgery, execute commands
CVE-2020-24140: Server-side request forgery in Wcms 0.3.2 let an attacker send crafted requests from the back-end server of a vulnerable web application via the pagename parameter to wex/html.php. It can help identify open ports, local network hosts and execute command on local services.
Key phrases: server-side request forgery, vulnerable web application, open ports, local network hosts, server side request forgery, execute commands
CVE-2020-24141: Server-side request forgery in the WP-DownloadManager plugin 1.68.4 for WordPress lets an attacker send crafted requests from the back-end server of a vulnerable web application via the file_remote parameter to download-add.php. It can help identify open ports, local network hosts and execute command on services
Key phrases: server-side request forgery, vulnerable web application, open ports, local network hosts, server side request forgery, execute commands
CVE-2020-24142: Server-side request forgery in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker send crafted requests from the back-end server of a vulnerable web application via the njt-tk-download-video parameter. It can help identify open ports, local network hosts and execute command on services
Key phrases: server-side request forgery, vulnerable web application, open ports, local network hosts, server side request forgery, execute commands
CVE-2020-24143: Directory traversal in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker get access to files that are stored outside the web root folder via the njt-tk-download-video parameter.
Key phrases: directory traversal
CVE-2020-24144: Directory traversal in the Media File Organizer (aka media-file-organizer) plugin 1.0.1 for WordPress lets an attacker get access to files that are stored outside the web root folder via the items[] parameter in a move operation.
Key phrases: directory traversal
CVE-2020-24145: Cross Site Scripting (XSS) vulnerability in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted deletescreenshot action.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via a, cross site scripting (xss)
CVE-2020-24146: Directory traversal in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows authorized users to delete arbitrary files and possibly cause a denial of service via the fileName parameter in a deletescreenshot action.
Key phrases: delete arbitrary files, delete arbitrary files and possibly cause a denial, directory traversal, denial of service
CVE-2020-24147: Server-side request forgery (SSR) vulnerability in the WP Smart Import (wp-smart-import) plugin 1.0.0 for WordPress via the file field.
Key phrases: server-side request forgery (ssr), server side request forgery
CVE-2020-24148: Server-side request forgery (SSRF) in the Import XML and RSS Feeds (import-xml-feed) plugin 2.0.1 for WordPress via the data parameter in a moove_read_xml action.
Key phrases: server-side request forgery (ssrf), server side request forgery
CVE-2020-24149: Server-side request forgery (SSRF) in the Podcast Importer SecondLine (podcast-importer-secondline) plugin 1.1.4 for WordPress via the podcast_feed parameter in a secondline_import_initialize action to the secondlinepodcastimport page.
Key phrases: server-side request forgery (ssrf), server side request forgery
CVE-2020-24158: 360 Speed Browser 12.0.1247.0 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code. It is a dual-core browser owned by Beijing Qihoo Technology.
Key phrases: dll hijacking
CVE-2020-24159: NetEase Youdao Dictionary has a DLL hijacking vulnerability, which can be exploited by attackers to gain server permissions. This affects Guangzhou NetEase Youdao Dictionary 8.9.2.0.
Key phrases: gain server permissions, dll hijacking
CVE-2020-24160: Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code.
Key phrases: dll hijacking