yahoo-inc/cve-impacts huggingface dataset:
CVE-2020-10454: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/sitemap-generator.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10455: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/translate.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10456: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/trash-box.php by adding a question mark (?) followed by the payload.
Key phrases: injecting arbitrary web script or HTML, Reflected XSS (injecting arbitrary web script or, reflected xss
CVE-2020-10457: Path Traversal in admin/imagepaster/image-renaming.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to rename any file on the webserver using a dot-dot-slash sequence (../) via the POST parameter imgName (for the new name) and imgUrl (for the current file to be renamed).
Key phrases: rename any file on the webserver using a, path traversal
CVE-2020-10458: Path Traversal in admin/imagepaster/operations.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete any folder on the webserver using a dot-dot-slash sequence (../) via the GET parameter crdir, when the GET parameter action is set to df, causing a Denial of Service.
Key phrases: delete any folder on the webserver using a, path traversal, denial of service
CVE-2020-10459: Path Traversal in admin/assetmanager/assetmanager.php (vulnerable function saved in admin/assetmanager/functions.php) in Chadha PHPKB Standard Multi-Language 9 allows attackers to list the files that are stored on the webserver using a dot-dot-slash sequence (../) via the POST parameter inpCurrFolder.
Key phrases: list the files that are stored on the, path traversal
CVE-2020-1046: A remote code execution vulnerability exists when Microsoft .NET Framework processes input, aka '.NET Framework Remote Code Execution Vulnerability'.
Key phrases: remote code execution, .net framework remote code execution
CVE-2020-10460: admin/include/operations.php (via admin/email-harvester.php) in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject untrusted input inside CSV files via the POST parameter data.
Key phrases: inject untrusted input inside CSV files via the, post parameter data
CVE-2020-10461: The way comments in article.php (vulnerable function in include/functions-article.php) are handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored (Blind) XSS (injecting arbitrary web script or HTML) in admin/manage-comments.php, via the GET parameter cmt.
Key phrases: injecting arbitrary web script or HTML, execute Stored (Blind) XSS (injecting, comments in article.php, stored (blind) xss
CVE-2020-10462: Reflected XSS in admin/edit-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, reflected xss
CVE-2020-10463: Reflected XSS in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, reflected xss
CVE-2020-10464: Reflected XSS in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, reflected xss
CVE-2020-10465: Reflected XSS in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, reflected xss
CVE-2020-10466: Reflected XSS in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, reflected xss
CVE-2020-10467: Reflected XSS in admin/edit-comment.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, reflected xss
CVE-2020-10468: Reflected XSS in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, reflected xss
CVE-2020-10469: Reflected XSS in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, reflected xss
CVE-2020-1047: <p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory. An attacker who successfully exploited these vulnerabilities could gain elevated privileges on a target operating system.</p><p>This vulnerability by itself does not allow arbitrary code to be run.  However, this vulnerability could be used in conjunction with one or more vulnerabilities (e.g. a remote code execution vulnerability and another elevation of privilege) that could take advantage of the elevated privileges when running.</p><p>The update addresses the vulnerabilities by correcting how Windows Hyper-V handles objects in memory.</p>
Key phrases: allow arbitrary code, gain elevated privileges, be run, elevation of privilege, remote code execution, elevation privilege
CVE-2020-10470: Reflected XSS in admin/manage-fields.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, reflected xss
CVE-2020-10471: Reflected XSS in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, reflected xss
CVE-2020-10472: Reflected XSS in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, reflected xss
CVE-2020-10473: Reflected XSS in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, reflected xss
CVE-2020-10474: Reflected XSS in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, reflected xss
CVE-2020-10475: Reflected XSS in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, reflected xss
CVE-2020-10476: Reflected XSS in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, reflected xss
CVE-2020-10477: Reflected XSS in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, reflected xss
CVE-2020-10478: CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to change the global settings, potentially gaining code execution or causing a denial of service, via a crafted request.
Key phrases: change the global settings, csrf, denial of service, code execution
CVE-2020-10479: CSRF in admin/add-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new news article via a crafted request.
Key phrases: add a new news article via a crafted, csrf
CVE-2020-1048: An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Print Spooler Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1070.
Key phrases: allows arbitrary writing, the file system, elevation of privilege, windows print spooler elevation of privilege, elevation privilege
CVE-2020-10480: CSRF in admin/add-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new category via a crafted request.
Key phrases: add a new category via a crafted request, csrf
CVE-2020-10481: CSRF in admin/add-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new glossary term via a crafted request.
Key phrases: add a new glossary term via a crafted, csrf
CVE-2020-10482: CSRF in admin/add-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new article template via a crafted request.
Key phrases: add a new article template via a crafted, csrf
CVE-2020-10483: CSRF in admin/ajax-hub.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to post a comment on any article via a crafted request.
Key phrases: post a comment on any article via a, csrf
CVE-2020-10484: CSRF in admin/add-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to create a custom field via a crafted request.
Key phrases: create a custom field via a crafted request, csrf
CVE-2020-10485: CSRF in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article via a crafted request.
Key phrases: delete an article via a crafted request, csrf
CVE-2020-10486: CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a comment via a crafted request.
Key phrases: delete a comment via a crafted request, csrf
CVE-2020-10487: CSRF in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a glossary term via a crafted request.
Key phrases: delete a glossary term via a crafted request, csrf
CVE-2020-10488: CSRF in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a news article via a crafted request.
Key phrases: delete a news article via a crafted request, csrf
CVE-2020-10489: CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a ticket via a crafted request.
Key phrases: delete a ticket via a crafted request, csrf
CVE-2020-1049: A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'. This CVE ID is unique from CVE-2020-1050.
Key phrases: cross site scripting, microsoft dynamics (on-premise) cross site scripting, cross-site scripting
CVE-2020-10490: CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a department via a crafted request.
Key phrases: delete a department via a crafted request, csrf
CVE-2020-10491: CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a department via a crafted request.
Key phrases: add a department via a crafted request, csrf
CVE-2020-10492: CSRF in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article template via a crafted request.
Key phrases: delete an article template via a crafted request, csrf
CVE-2020-10493: CSRF in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a glossary term, given the id, via a crafted request.
Key phrases: edit a glossary term, csrf
CVE-2020-10494: CSRF in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a news article, given the id, via a crafted request.
Key phrases: edit a news article, csrf
CVE-2020-10495: CSRF in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article template, given the id, via a crafted request.
Key phrases: edit an article template, csrf
CVE-2020-10496: CSRF in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article, given the id, via a crafted request.
Key phrases: edit an article, csrf
CVE-2020-10497: CSRF in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a category via a crafted request.
Key phrases: delete a category via a crafted request, csrf
CVE-2020-10498: CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a category, given the id, via a crafted request.
Key phrases: edit a category, csrf
CVE-2020-10499: CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to close any ticket, given the id, via a crafted request.
Key phrases: close any ticket, csrf
CVE-2020-1050: A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'. This CVE ID is unique from CVE-2020-1049.
Key phrases: cross site scripting, microsoft dynamics (on-premise) cross site scripting, cross-site scripting
CVE-2020-10500: CSRF in admin/reply-ticket.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to reply to any ticket, given the id, via a crafted request.
Key phrases: reply to any ticket, csrf
CVE-2020-10501: CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a department, given the id, via a crafted request.
Key phrases: edit a department, csrf
CVE-2020-10502: CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to approve any comment, given the id, via a crafted request.
Key phrases: approve any comment, csrf
CVE-2020-10503: CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to disapprove any comment, given the id, via a crafted request.
Key phrases: disapprove any comment, csrf
CVE-2020-10504: CSRF in admin/edit-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a comment, given the id, via a crafted request.
Key phrases: edit a comment, csrf
CVE-2020-10505: The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of SQL Injection, an attacker can use a union based injection query string to get databases schema and username/password.
Key phrases: sql injection
CVE-2020-10506: The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Path Traversal, allowing attackers to access arbitrary files.
Key phrases: access arbitrary files, path traversal
CVE-2020-10507: The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Unrestricted file upload (RCE) , that would allow attackers to gain access in the hosting machine.
Key phrases: gain access, gain access in the hosting machine, unrestricted file upload (rce)
CVE-2020-10508: Sunnet eHRD, a human training and development management system, improperly stores system files. Attackers can use a specific URL and capture confidential information.
Key phrases: specific url, confidential information
CVE-2020-10509: Sunnet eHRD, a human training and development management system, contains vulnerability of Cross-Site Scripting (XSS), attackers can inject arbitrary command into the system and launch XSS attack.
Key phrases: inject arbitrary command, cross-site scripting (xss), arbitrary commands
CVE-2020-1051: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1174, CVE-2020-1175, CVE-2020-1176.
Key phrases: remote code execution, jet database engine remote code execution
CVE-2020-10510: Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. After login, attackers can use a specific URL, access unauthorized functionality and data.
Key phrases: broken access control
CVE-2020-10511: HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL.
Key phrases: insecure configurations, flaws
CVE-2020-10512: HGiga C&Cmail CCMAILQ before olln-calendar-6.0-100.i386.rpm and CCMAILN before olln-calendar-5.0-100.i386.rpm contains a SQL Injection vulnerability which allows attackers to injecting SQL commands in the URL parameter to execute unauthorized commands.
Key phrases: injecting SQL commands in the URL parameter to, sql injection
CVE-2020-10513: The file management interface of iCatch DVR firmware before 20200103 contains broken access control which allows the attacker to remotely manipulate arbitrary file.
Key phrases: manipulate arbitrary file, remotely manipulate arbitrary file, broken access control
CVE-2020-10514: iCatch DVR firmware before 20200103 do not validate function parameter properly, resulting attackers executing arbitrary command.
Key phrases: executing arbitrary command, function parameter, execute arbitrary, arbitrary commands
CVE-2020-10515: STARFACE UCC Client before 6.7.1.204 on WIndows allows binary planting to execute code with System rights, aka usd-2020-0006.
Key phrases: execute code with System rights, binary planting
CVE-2020-10516: An improper access control vulnerability was identified in the GitHub Enterprise Server API that allowed an organization member to escalate permissions and gain access to unauthorized repositories within an organization. This vulnerability affected all versions of GitHub Enterprise Server prior to 2.21 and was fixed in 2.20.9, 2.19.15, and 2.18.20. This vulnerability was reported via the GitHub Bug Bounty program.
Key phrases: gain access, improper access control
CVE-2020-10517: An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to determine the names of unauthorized private repositories given their numerical IDs. This vulnerability did not allow unauthorized access to any repository content besides the name. This vulnerability affected all versions of GitHub Enterprise Server prior to 2.22 and was fixed in versions 2.21.6, 2.20.15, and 2.19.21. This vulnerability was reported via the GitHub Bug Bounty program.
Key phrases: any repository content besides the name, improper access control, unauthorized access
CVE-2020-10518: A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configuration of the underlying parsers used by GitHub Pages were not sufficiently restricted and made it possible to execute commands on the GitHub Enterprise Server instance. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 2.22 and was fixed in 2.21.6, 2.20.15, and 2.19.21. The underlying issues contributing to this vulnerability were identified both internally and through the GitHub Security Bug Bounty program.
Key phrases: remote code execution, execute commands
CVE-2020-10519: A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configuration of the underlying parsers used by GitHub Pages were not sufficiently restricted and made it possible to execute commands on the GitHub Enterprise Server instance. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 2.22.7 and was fixed in 2.22.7, 2.21.15, and 2.20.24. The underlying issues contributing to this vulnerability were identified through the GitHub Security Bug Bounty program.
Key phrases: remote code execution, execute commands
CVE-2020-1052: <p>An elevation of privilege vulnerability exists in the way that the ssdpsrv.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p><p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p><p>The security update addresses the vulnerability by ensuring the ssdpsrv.dll properly handles objects in memory.</p>
Key phrases: elevation of privilege, elevation privilege, execute code
CVE-2020-1053: <p>An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p><p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p><p>The update addresses the vulnerability by correcting how DirectX handles objects in memory.</p>
Key phrases: run arbitrary code, elevation of privilege, elevation privilege
CVE-2020-10531: An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
Key phrases: integer overflow, heap-based buffer overflow, heap based buffer overflow
CVE-2020-10532: The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI.
Key phrases: discover cleartext passwords via the /domains/list, domains list uri
CVE-2020-10534: In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation resulted in blocked users re-gaining escalated privileges. This is related to the case in which an IP address is contained in two ranges, one of which is locally disabled.
Key phrases: ip range evaluation, blocked users, escalated privileges, escalate privilege
CVE-2020-10535: GitLab 12.8.x before 12.8.6, when sign-up is enabled, allows remote attackers to bypass email domain restrictions within the two-day grace period for an unconfirmed email address.
Key phrases: bypass email domain restrictions, bypass email domain restrictions within the two-
CVE-2020-10537: An issue was discovered in Epikur before 20.1.1. A Glassfish 4.1 server with a default configuration is running on TCP port 4848. No password is required to access it with the administrator account.
CVE-2020-10538: An issue was discovered in Epikur before 20.1.1. It stores the secret passwords of the users as MD5 hashes in the database. MD5 can be brute-forced efficiently and should not be used for such purposes. Additionally, since no salt is used, rainbow tables can speed up the attack.
Key phrases: brute-forced, rainbow tables
CVE-2020-10539: An issue was discovered in Epikur before 20.1.1. The Epikur server contains the checkPasswort() function that, upon user login, checks the submitted password against the user password's MD5 hash stored in the database. It is also compared to a second MD5 hash, which is the same for every user (aka a "Backdoor Password" of 3p1kursupport). If the submitted password matches either one, access is granted.
Key phrases: backdoor password
CVE-2020-1054: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1143.
Key phrases: elevation of privilege, elevation privilege
CVE-2020-10540: Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules.
Key phrases: CSRF for certain combinations of rights and modules, csrf
CVE-2020-10541: Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request. This was fixed in 12.5.108.
Key phrases: remote code execution via a specially crafted Mail
CVE-2020-10543: Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
Key phrases: a heap-based buffer overflow because nested, integer overflow, heap based buffer overflow
CVE-2020-10544: An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11. In a web application using PrimeFaces, an attacker can provide JavaScript code in an input field whose data is later used as a tooltip title without any input validation.
Key phrases: xss
CVE-2020-10546: rConfig 3.9.4 and previous versions has unauthenticated compliancepolicies.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices.
Key phrases: sql injection, lateral movement
CVE-2020-10547: rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices.
Key phrases: sql injection, lateral movement
CVE-2020-10548: rConfig 3.9.4 and previous versions has unauthenticated devices.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices.
Key phrases: sql injection, lateral movement
CVE-2020-10549: rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices.
Key phrases: unauthenticated snippets, sql injection, lateral movement
CVE-2020-1055: A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize user inputs, aka 'Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability'.
Key phrases: cross-site-scripting (xss), cross-site scripting
CVE-2020-10551: QQBrowser before 10.5.3870.400 installs a Windows service TsService.exe. This file is writable by anyone belonging to the NT AUTHORITY\\Authenticated Users group, which includes all local and remote users. This can be abused by local attackers to escalate privileges to NT AUTHORITY\\SYSTEM by writing a malicious executable to the location of TsService.
Key phrases: escalate privilege
CVE-2020-10552: An issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the default user sysdba and password masterke after installation. This allows any user to access it and read and modify the contents, including passwords. Local database files can be accessed directly as well.
Key phrases: access it and read and modify the contents
CVE-2020-10553: An issue was discovered in Psyprax before 3.2.2. The file %PROGRAMDATA%\\Psyprax32\\PPScreen.ini contains a hash for the lockscreen (aka screensaver) of the application. If that entry is removed, the lockscreen is no longer displayed and the app is no longer locked. All local users are able to modify that file.
CVE-2020-10554: An issue was discovered in Psyprax beforee 3.2.2. Passwords used to encrypt the data are stored in the database in an obfuscated format, which can be easily reverted. For example, the password AAAAAAAA is stored in the database as MMMMMMMM.
Key phrases: reverted
CVE-2020-10557: An issue was discovered in AContent through 1.4. It allows the user to run commands on the server with a low-privileged account. The upload section in the file manager page contains an arbitrary file upload vulnerability via upload.php. The extension .php7 bypasses file upload restrictions.
Key phrases: run commands on the server with a low, arbitrary file upload
CVE-2020-10558: The driving interface of Tesla Model 3 vehicles in any release before 2020.4.10 allows Denial of Service to occur due to improper process separation, which allows attackers to disable the speedometer, web browser, climate controls, turn signal visual and sounds, navigation, autopilot notifications, along with other miscellaneous functions from the main screen.
Key phrases: occur due to improper process separation, disable the speedometer, denial of service
CVE-2020-1056: An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.
Key phrases: access information from one domain and inject it, elevation of privilege, web-based attack scenario, microsoft edge elevation of privilege, elevation privilege
CVE-2020-10560: An issue was discovered in Open Source Social Network (OSSN) through 5.3. A user-controlled file path with a weak cryptographic rand() can be used to read any file with the permissions of the webserver. This can lead to further compromise. The attacker must conduct a brute-force attack against the SiteKey to insert into a crafted URL for components/OssnComments/ossn_com.php and/or libraries/ossn.lib.upgrade.php.
Key phrases: user-controlled file path, weak cryptographic rand(), compromise, brute-force
CVE-2020-10561: An issue was discovered on Xiaomi Mi Jia ink-jet printer < 3.4.6_0138. Injecting parameters to ippserver through the web management background, resulting in command execution vulnerabilities.
Key phrases: command execution
CVE-2020-10562: An issue was discovered in DEVOME GRR before 3.4.1c. admin_edit_room.php mishandles file uploads.
Key phrases: file upload
CVE-2020-10563: An issue was discovered in DEVOME GRR before 3.4.1c. frmcontactlist.php mishandles a SQL query.
CVE-2020-10564: An issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory traversal can lead to remote code execution by uploading a crafted txt file into the lib directory, because of a wfu_include_lib call.
Key phrases: directory traversal, remote code execution
CVE-2020-10565: grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part of a memrw command (read_* or write_*) by a guest through a grub2.cfg file. This allows an untrusted guest to perform arbitrary read or write operations in the context of the grub-bhyve process, resulting in code execution as root on the host OS.
Key phrases: perform arbitrary read, perform arbitrary read or write operations in the, code execution as root
CVE-2020-10566: grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, mishandles font loading by a guest through a grub2.cfg file, leading to a buffer overflow.
Key phrases: buffer overflow
CVE-2020-10567: An issue was discovered in Responsive Filemanager through 9.14.0. In the ajax_calls.php file in the save_img action in the name parameter, there is no validation of what kind of extension is sent. This makes it possible to execute PHP code if a legitimate JPEG image contains this code in the EXIF data, and the .php extension is used in the name parameter. (A potential fast patch is to disable the save_img action in the config file.)
CVE-2020-10568: The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison. This leads to remote code execution in includes/class-wp-installer.php via a series of requests that leverage unintended comparisons of integers to strings.
Key phrases: csrf, remote code execution, series of requests
CVE-2020-10569: SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Additionally, it allows unauthenticated access to upload files, which can be used to execute commands on the system by chaining it with a GhostCat attack. NOTE: This may be a duplicate of CVE-2020-1938
Key phrases: a GhostCat attack, upload files, ajp protocol port, unauthenticated access, execute commands
CVE-2020-1057: <p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.</p><p>If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p><p>The security update addresses the vulnerability by modifying how the ChakraCore scripting engine handles objects in memory.</p>
Key phrases: execute arbitrary code, gain the same user rights, remote code execution, corrupt memory
CVE-2020-10570: The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attackers to bypass intended restrictions on message reading and message replying. This might be interpreted as a bypass of the passcode feature.
Key phrases: bypass intended restrictions, bypass of the passcode feature, bypass intended restrictions on message reading and message, show popup
CVE-2020-10571: An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data.
Key phrases: malicious data
CVE-2020-10573: An issue was discovered in Janus through 0.9.1. janus_audiobridge.c has a double mutex unlock when listing private rooms in AudioBridge.
Key phrases: double mutex unlock
CVE-2020-10574: An issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't actually exist during a "query_logger" Admin API request, because of a typo in the JSON validation.
CVE-2020-10575: An issue was discovered in Janus through 0.9.1. plugins/janus_videocall.c in the VideoCall plugin mishandles session management because a race condition causes some references to be freed too early or too many times.
Key phrases: race condition
CVE-2020-10576: An issue was discovered in Janus through 0.9.1. plugins/janus_voicemail.c in the VoiceMail plugin has a race condition that could cause a server crash.
Key phrases: race condition, server crash
CVE-2020-10577: An issue was discovered in Janus through 0.9.1. janus.c has multiple concurrent threads that misuse the source property of a session, leading to a race condition when claiming sessions.
Key phrases: race condition
CVE-2020-10578: An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1.
Key phrases: arbitrary file read
CVE-2020-10579: A directory traversal on the /admin/sysmon.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote attackers to list the content of arbitrary server directories accessible to the user running the application.
Key phrases: list the content of arbitrary server directories accessible, directory traversal
CVE-2020-1058: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035, CVE-2020-1060, CVE-2020-1093.
Key phrases: remote code execution
CVE-2020-10580: A command injection on the /admin/broadcast.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote authenticated attackers to execute arbitrary PHP code on the server as the user running the application.
Key phrases: execute arbitrary PHP code, execute arbitrary PHP code on the server as, command injection
CVE-2020-10581: Multiple session validity check issues in several administration functionalities of Invigo Automatic Device Management (ADM) through 5.0 allow remote attackers to read potentially sensitive data hosted by the application.
Key phrases: read potentially sensitive data hosted by the application, multiple session validity check issues
CVE-2020-10582: A SQL injection on the /admin/display_errors.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote attackers to execute arbitrary SQL requests (including data reading and modification) on the database.
Key phrases: execute arbitrary SQL requests, execute arbitrary SQL requests (including data reading, sql injection
CVE-2020-10583: The /admin/admapi.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote authenticated attackers to execute arbitrary OS commands on the server as the user running the application.
Key phrases: execute arbitrary OS commands, execute arbitrary OS commands on the server as, arbitrary os command
CVE-2020-10584: A directory traversal on the /admin/search_by.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote attackers to read arbitrary server files accessible to the user running the application.
Key phrases: read arbitrary server files, read arbitrary server files accessible to the user, directory traversal
CVE-2020-10587: antiX and MX Linux allow local users to achieve root access via "persist-config --command /bin/sh" because of the Sudo configuration.
Key phrases: achieve root access via "persist-config
CVE-2020-10588: v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/add.sh and /etc/v2rayL/remove.sh are owned by a low-privileged user but execute as root via Sudo.
Key phrases: achieve root access because /etc/v2rayL/
CVE-2020-10589: v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/config.json is owned by a low-privileged user but contains commands that are executed as root, after v2rayL.service is restarted via Sudo.
Key phrases: achieve root access because /etc/v2rayL/
CVE-2020-1059: A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content, aka 'Microsoft Edge Spoofing Vulnerability'.
Key phrases: spoofing, microsoft edge spoofing
CVE-2020-10590: Replicated Classic 2.x versions have an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration. An attacker with network access to the Admin Console port (8800) on the Replicated Classic server could retrieve the TLS Keypair (Cert and Key) used to configure the Admin Console.
Key phrases: improperly secured api
CVE-2020-10591: An issue was discovered in Walmart Labs Concord before 1.44.0. CORS Access-Control-Allow-Origin headers have a potentially unsafe dependency on Origin headers, and are not configurable. This allows remote attackers to discover host information, nodes, API metadata, and references to usernames via api/v1/apikey.
Key phrases: discover host information, unsafe dependency
CVE-2020-10592: Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (CPU consumption), aka TROVE-2020-002.
Key phrases: Denial of Service (CPU consumption), cause a Denial of Service (CPU consumption, denial of service
CVE-2020-10593: Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit.
Key phrases: Denial of Service (memory leak), cause a Denial of Service (memory leak, denial of service
CVE-2020-10594: An issue was discovered in drf-jwt 1.15.x before 1.15.1. It allows attackers with access to a notionally invalidated token to obtain a new, working token via the refresh endpoint, because the blacklist protection mechanism is incompatible with the token-refresh feature. NOTE: drf-jwt is a fork of jpadilla/django-rest-framework-jwt, which is unmaintained.
Key phrases: obtain a new, working token via the refresh endpoint, a notionally invalidated token to obtain a new
CVE-2020-10595: pam-krb5 before 4.9 has a buffer overflow that might cause remote code execution in situations involving supplemental prompting by a Kerberos library. It may overflow a buffer provided by the underlying Kerberos library by a single '\\0' byte if an attacker responds to a prompt with an answer of a carefully chosen length. The effect may range from heap corruption to stack corruption depending on the structure of the underlying Kerberos library, with unknown effects but possibly including code execution. This code path is not used for normal authentication, but only when the Kerberos library does supplemental prompting, such as with PKINIT or when using the non-standard no_prompt PAM configuration option.
Key phrases: buffer overflow, remote code execution, heap corruption, stack corruption, unknown effects
CVE-2020-10596: OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section.
Key phrases: conduct XSS attacks via a crafted filename in, xss
CVE-2020-10597: Delta Industrial Automation DOPSoft, Version 4.00.08.15 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read information and/or crash the application.
Key phrases: read information and/or crash the application, out-of-bounds read, out of bounds read
CVE-2020-10598: In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in access to sensitive data.
Key phrases: escape the restricted environment, access to sensitive data
CVE-2020-10599: VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be exploited resulting in a buffer overflow, which may lead to a denial-of-service condition and execution of arbitrary code.
Key phrases: be exploited resulting in a buffer overflow, activex component, denial-of-service condition, arbitrary code, denial of service
CVE-2020-1060: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1035, CVE-2020-1058, CVE-2020-1093.
Key phrases: remote code execution
CVE-2020-10600: An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive (2018 SP2 and prior versions).
Key phrases: memory pressure, blocking queries, crash
CVE-2020-10601: VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a local attacker to bypass the password-protected mechanism through brute-force attacks, cracking techniques, or overwriting the password hash.
Key phrases: bypass the password-protected mechanism through brute, weak hashing algorithm, insecure permissions, brute-force, cracking techniques, overwriting the password hash
CVE-2020-10602: In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager due to a race condition. This can result in blocking connections and queries to PI Data Archive.
Key phrases: race condition, blocking connections and queries, crash
CVE-2020-10603: WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system commands remotely.
Key phrases: inject system commands remotely
CVE-2020-10604: In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through specially crafted requests. This can result in blocking connections and queries to PI Data Archive.
Key phrases: blocking connections, crash
CVE-2020-10605: Grundfos CIM 500 before v06.16.00 responds to unauthenticated requests for password storage files.
Key phrases: unauthenticated requests
CVE-2020-10606: In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected PI System software. This exploitation can result in unauthorized information disclosure, deletion, or modification if the local computer also processes PI System data from other users, such as from a shared workstation or terminal server deployment.
Key phrases: incorrect permissions set, unauthorized information disclosure, deletion, modification
CVE-2020-10607: In Advantech WebAccess, Versions 8.4.2 and prior. A stack-based buffer overflow vulnerability caused by a lack of proper validation of the length of user-supplied data may allow remote code execution.
Key phrases: remote code execution, stack-based buffer overflow, stack based buffer overflow
CVE-2020-10608: In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI System libraries. This exploitation can target another local user of PI System software on the computer to escalate privilege and result in unauthorized information disclosure, deletion, or modification.
Key phrases: bypass a code integrity check, exploitation, unauthorized information disclosure, deletion, modification, escalate privilege
CVE-2020-10609: Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to be read or allow modification to system settings by someone with access to the device.
Key phrases: be read or allow modification to system settings, system settings by someone with access to the, plaintext credentials, sensitive information
CVE-2020-1061: A remote code execution vulnerability exists in the way that the Microsoft Script Runtime handles objects in memory, aka 'Microsoft Script Runtime Remote Code Execution Vulnerability'.
Key phrases: remote code execution, microsoft script runtime remote code execution
CVE-2020-10610: In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PI System software to take control of the local computer at Windows system privilege level, resulting in unauthorized information disclosure, deletion, or modification.
Key phrases: unauthorized information disclosure, deletion, modification