yahoo-inc/cve-impacts huggingface dataset:
CVE-2020-1947: In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere's web console uses the SnakeYAML library for parsing YAML inputs to load datasource configuration. SnakeYAML allows to unmarshal data to a Java type By using the YAML tag. Unmarshalling untrusted data can lead to security flaws of RCE.
Key phrases: unmarshal data to a Java type By using, security flaws, rce
CVE-2020-19470: An issue has been found in function DCTStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a NULL pointer dereference (invalid read of size 1) .
Key phrases: cause a Denial of Service due to a, denial of service, null pointer dereference
CVE-2020-19471: An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4 .
Key phrases: cause a Denial of Service due to an, denial of service, invalid read
CVE-2020-19472: An issue has been found in function DCTStream::readHuffSym in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 2 .
Key phrases: cause a Denial of Service due to an, denial of service, invalid read
CVE-2020-19473: An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an uncaught floating point exception.
Key phrases: cause a Denial of Service due to an, denial of service
CVE-2020-19474: An issue has been found in function Gfx::doShowText in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Use After Free .
Key phrases: cause a Denial of Service due to an, denial of service, use after free
CVE-2020-19475: An issue has been found in function CCITTFaxStream::lookChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 2 .
Key phrases: cause a Denial of Service due to an, denial of service, invalid write
CVE-2020-1948: This vulnerability can affect all Dubbo users stay on version 2.7.6 or lower. An attacker can send RPC requests with unrecognized service name or method name along with some malicious parameter payloads. When the malicious parameter is deserialized, it will execute some malicious code. More details can be found below.
CVE-2020-19481: An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid memory read in gf_m2ts_process_pmt in media_tools/mpegts.c that can cause a denial of service via a crafted MP4 file.
Key phrases: invalid memory read, denial of service
CVE-2020-19488: An issue was discovered in box_code_apple.c:119 in Gpac MP4Box 0.8.0, allows attackers to cause a Denial of Service due to an invalid read on function ilst_item_Read.
Key phrases: cause a Denial of Service due to an, denial of service, invalid read
CVE-2020-1949: Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the administrative consoles and are vulnerable to reflected XSS attacks.
Key phrases: reflected xss
CVE-2020-19490: tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.
Key phrases: integer overflow
CVE-2020-19491: There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.
Key phrases: invalid memory access bug, denial of service, unspecified other impact, unspecified impact
CVE-2020-19492: There is a floating point exception in ReadImage that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.
Key phrases: denial of service, unspecified other impact, unspecified impact
CVE-2020-19497: Integer overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.17, allows attackers to cause a Denial of Service or possibly other unspecified impacts.
Key phrases: cause a Denial of Service or possibly other, integer overflow, denial of service, unspecified impacts
CVE-2020-19498: Floating point exception in function Fraction in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impacts.
Key phrases: cause a Denial of Service or possibly other, floating point exception, denial of service, unspecified impacts
CVE-2020-19499: An issue was discovered in heif::Box_iref::get_references in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impact due to an invalid memory read.
Key phrases: cause a Denial of Service or possibly other, denial of service, unspecified impact, invalid memory read
CVE-2020-1950: A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.
Key phrases: corrupt psd file, excessive memory usage
CVE-2020-1951: A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23.
Key phrases: infinite loop
CVE-2020-19510: Textpattern 4.7.3 contains an aribtrary file load via the file_insert function in include/txp_file.php.
Key phrases: aribtrary file load
CVE-2020-19511: Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1) className and !2) Description fields in index.php/Admin/Classes,
Key phrases: cross site scriptiong
CVE-2020-19513: Buffer overflow in FinalWire Ltd AIDA64 Engineer 6.00.5100 allows attackers to execute arbitrary code by creating a crafted input that will overwrite the SEH handler.
Key phrases: execute arbitrary code, execute arbitrary code by creating a crafted input, buffer overflow
CVE-2020-19515: qdPM V9.1 is vulnerable to Cross Site Scripting (XSS) via qdPM\\\\install\\\\modules\\\\database_config.php.
Key phrases: cross site scripting (xss)
CVE-2020-1952: An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely.
Key phrases: execute code
CVE-2020-19527: iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DB_NAME parameter to install/install.php.
Key phrases: execute arbitrary OS commands, shell metacharacters, arbitrary os command
CVE-2020-1953: Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default settings of this library. So if a YAML file was loaded from an untrusted source, it could therefore load and execute code out of the control of the host application.
Key phrases: the instantiation of classes if the YAML includes, execute code
CVE-2020-1954: Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If the ‘createMBServerConnectorFactory‘ property of the default InstrumentationManagerImpl is not disabled, then it is vulnerable to a man-in-the-middle (MITM) style attack. An attacker on the same host can connect to the registry and rebind the entry to another server, thus acting as a proxy to the original. They are then able to gain access to all of the information that is sent and received over JMX.
Key phrases: gain access, man-in-the-middle (mitm) style, man in the middle
CVE-2020-19547: Directory Traversal vulnerability exists in PopojiCMS 2.0.1 via the id parameter in admin.php.
Key phrases: directory traversal
CVE-2020-1955: CouchDB version 3.0.0 shipped with a new configuration setting that governs access control to the entire database server called `require_valid_user_except_for_up`. It was meant as an extension to the long standing setting `require_valid_user`, which in turn requires that any and all requests to CouchDB will have to be made with valid credentials, effectively forbidding any anonymous requests. The new `require_valid_user_except_for_up` is an off-by-default setting that was meant to allow requiring valid credentials for all endpoints except for the `/_up` endpoint. However, the implementation of this made an error that lead to not enforcing credentials on any endpoint, when enabled. CouchDB versions 3.0.1[1] and 3.1.0[2] fix this issue.
Key phrases: not enforcing credentials on any endpoint, anonymous requests
CVE-2020-19551: Blacklist bypass issue exists in WUZHI CMS up to and including 4.1.0 in common.func.php, which when uploaded can cause remote code executiong.
Key phrases: bypass issue exists in WUZHI CMS up to, Blacklist bypass, blacklist bypass issue, remote code executiong
CVE-2020-19553: Cross Site Scripting (XSS) vlnerability exists in WUZHI CMS up to and including 4.1.0 in the config function in coreframe/app/attachment/libs/class/ckditor.class.php.
Key phrases: cross site scripting (xss)
CVE-2020-19554: Cross Site Scripting (XSS) vulnerability exists in ManageEngine OPManager <=12.5.174 when the API key contains an XML-based XSS payload.
Key phrases: cross site scripting (xss)
CVE-2020-19559: An issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary code via a crafted payload to the ResolveMethod() parameter.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted payload to
CVE-2020-1956: Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation.
CVE-2020-1957: Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass.
Key phrases: authentication bypass
CVE-2020-1958: When LDAP authentication is enabled in Apache Druid 0.17.0, callers of Druid APIs with a valid set of LDAP credentials can bypass the credentialsValidator.userSearch filter barrier that determines if a valid LDAP user is allowed to authenticate with Druid. They are still subject to role-based authorization checks, if configured. Callers of Druid APIs can also retrieve any LDAP attribute values of users that exist on the LDAP server, so long as that information is visible to the Druid server. This information disclosure does not require the caller itself to be a valid LDAP user.
Key phrases: bypass the credentialsValidator.userSearch filter, information disclosure
CVE-2020-19586: Incorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4 Admin UI.
Key phrases: escalate privilege via MIAdminStyles.i4 Admin UI, incorrect access control
CVE-2020-19587: Cross Site Scripting (XSS) vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbitrary code via MIAdminStyles.i4 Admin UI.
Key phrases: run arbitrary code, run arbitrary code via MIAdminStyles.i4 Admin UI, cross site scripting (xss)
CVE-2020-1959: A Server-Side Template Injection was identified in Apache Syncope prior to 2.1.6 enabling attackers to inject arbitrary Java EL expressions, leading to an unauthenticated Remote Code Execution (RCE) vulnerability. Apache Syncope uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint violation error messages, they support different types of interpolation, including Java EL expressions. Therefore, if an attacker can inject arbitrary data in the error message template being passed, they will be able to run arbitrary Java code.
Key phrases: inject arbitrary Java EL expressions, server-side template injection, remote code execution (rce)
CVE-2020-19595: Buffer overflow vulnerability in Core FTP Server v2 Build 697, via a crafted username.
Key phrases: buffer overflow
CVE-2020-19596: Buffer overflow vulnerability in Core FTP Server v1.2 Build 583, via a crafted username.
Key phrases: buffer overflow
CVE-2020-1960: A vulnerability in Apache Flink (1.1.0 to 1.1.5, 1.2.0 to 1.2.1, 1.3.0 to 1.3.3, 1.4.0 to 1.4.2, 1.5.0 to 1.5.6, 1.6.0 to 1.6.4, 1.7.0 to 1.7.2, 1.8.0 to 1.8.3, 1.9.0 to 1.9.2, 1.10.0) where, when running a process with an enabled JMXReporter, with a port configured via metrics.reporter.reporter_name>.port, an attacker with local access to the machine and JMX port can execute a man-in-the-middle attack using a specially crafted request to rebind the JMXRMI registry to one under the attacker's control. This compromises any connection established to the process via JMX, allowing extraction of credentials and any other transferred data.
Key phrases: extraction of credentials and any other transferred data, man-in-the-middle, man in the middle
CVE-2020-19609: Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff_expand_colormap() function when parsing TIFF files allowing attackers to cause a denial of service.
Key phrases: cause a denial of service, heap based buffer over-write
CVE-2020-1961: Vulnerability to Server-Side Template Injection on Mail templates for Apache Syncope 2.0.X releases prior to 2.0.15, 2.1.X releases prior to 2.1.6, enabling attackers to inject arbitrary JEXL expressions, leading to Remote Code Execution (RCE) was discovered.
Key phrases: inject arbitrary JEXL expressions, server-side template injection, remote code execution (rce)
CVE-2020-19611: Cross Site Scripting (XSS) in redirect module of Racktables version 0.21.2, allows an attacker to inject arbitrary web script or HTML via the op parameter.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, cross site scripting (xss)
CVE-2020-19613: Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503.
Key phrases: server side request forgery (ssrf)
CVE-2020-19616: Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post header field to /post/editing.
Key phrases: cross site scripting (xss)
CVE-2020-19617: Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the nickname field to /settings/profile.
Key phrases: cross site scripting (xss)
CVE-2020-19618: Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post content field to /post/editing.
Key phrases: cross site scripting (xss)
CVE-2020-19619: Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the signature field to /settings/profile.
Key phrases: cross site scripting (xss)
CVE-2020-19625: Remote Code Execution Vulnerability in tests/support/stores/test_grid_filter.php in oria gridx 1.3, allows remote attackers to execute arbitrary code, via crafted value to the $query parameter.
Key phrases: execute arbitrary code, remote code execution
CVE-2020-19626: Cross Site Scripting (XSS) vulnerability in craftcms 3.1.31, allows remote attackers to inject arbitrary web script or HTML, via /admin/settings/sites/new.
Key phrases: inject arbitrary web script or HTML, cross site scripting (xss)
CVE-2020-1963: Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which could be used by attacker to access to a filesystem.
CVE-2020-19639: Cross Site Request Forgery (CSRF) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B, via all fields to WebUI.
Key phrases: cross site request forgery (csrf)
CVE-2020-1964: It was noticed that Apache Heron 0.20.2-incubating, Release 0.20.1-incubating, and Release v-0.20.0-incubating does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerabilities (CWE-502: Deserialization of Untrusted Data).
Key phrases: remote code execution
CVE-2020-19640: An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. An unauthenticated attacker can reboot the device causing a Denial of Service, via a hidden reboot command to '/media/?action=cmd'.
Key phrases: denial of service, hidden reboot command
CVE-2020-19641: An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. Authenticated attackers with the "Operator" Privilege can gain admin privileges via a crafted request to '/goform/formUserMng'.
Key phrases: gain admin privileges
CVE-2020-19642: An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted GoAhead ASP-file on the SD card.
Key phrases: execute arbitrary code
CVE-2020-19643: Cross Site Scripting (XSS) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B via all fields in the FTP settings page to the "goform/formSetFtpCfg" settings page.
Key phrases: cross site scripting (xss)
CVE-2020-19660: Cross Site Scripting (XSS) pandao editor.md 1.5.0 allows attackers to execute arbitrary code via crafted linked url values.
Key phrases: execute arbitrary code, execute arbitrary code via crafted linked url values, cross site scripting (xss)
CVE-2020-19664: DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi.
Key phrases: mainfunction.cgi, remote command execution, shell metacharacters
CVE-2020-19667: Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7.
Key phrases: stack-based buffer overflow, unconditional jump, stack based buffer overflow
CVE-2020-19668: Unverified indexs into the array lead to out of bound access in the gif_out_code function in fromgif.c in libsixel 1.8.6.
Key phrases: unverified indexs, out of bound access
CVE-2020-19669: Cross Site Request Forgery (CSRF) vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin&c=Admin&a=admin_add&lang=cn.
Key phrases: cross site request forgery (csrf)
CVE-2020-1967: Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).
Key phrases: null pointer dereference, denial of service, crash
CVE-2020-19670: In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be bypassed, causing administrators to reset any passwords.
Key phrases: authentication, bypassed, authentication bypass
CVE-2020-19672: Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter upload, bypass the getimagesize function, upload php file, getshell.
Key phrases: bypass the administrator to obtain the background upload interface, bypass the getimagesize function, obtain the background upload interface, through parameter upload, getshell
CVE-2020-19676: Nacos 1.1.4 is affected by: Incorrect Access Control. An environment can be set up locally to get the service details interface. Then other Nacos service names can be accessed through the service list interface. Service details can then be accessed when not logged in. (detail:https://github.com/alibaba/nacos/issues/2284)
Key phrases: incorrect access control
CVE-2020-19678: Directory Traversal vulnerability found in Pfsense v.2.1.3 and Pfsense Suricata v.1.4.6 pkg v.1.0.1 allows a remote attacker to obtain sensitive information via the file parameter to suricata/suricata_logs_browser.php.
Key phrases: obtain sensitive information, obtain sensitive information via the file parameter to, directory traversal
CVE-2020-1968: The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites and not ECDH ciphersuites. This issue affects OpenSSL 1.0.2 which is out of support and no longer receiving public updates. OpenSSL 1.1.1 is not vulnerable to this issue. Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v).
Key phrases: raccoon
CVE-2020-19682: A Cross Site Request Forgery (CSRF) vulnerability exits in ZZZCMS V1.7.1 via the save_user funciton in save.php.
Key phrases: cross site request forgery (csrf)
CVE-2020-19683: A Cross Site Scripting (XSS) exists in ZZZCMS V1.7.1 via an editfile action in save.php.
Key phrases: cross site scripting (xss)
CVE-2020-19692: Buffer Overflow vulnerabilty found in Nginx NJS v.0feca92 allows a remote attacker to execute arbitrary code via the njs_module_read in the njs_module.c file.
Key phrases: execute arbitrary code, execute arbitrary code via the njs_module_read in the, buffer overflow vulnerabilty
CVE-2020-19693: An issue found in Espruino Espruino 6ea4c0a allows an attacker to execute arbitrrary code via oldFunc parameter of the jswrap_object.c:jswrap_function_replacewith endpoint.
Key phrases: execute arbitrrary code via oldFunc parameter of the
CVE-2020-19695: Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njs_object_property parameter of the njs/njs_vm.c function.
Key phrases: execute arbitrary code, execute arbitrary code via the njs_object_property parameter of, buffer overflow
CVE-2020-19697: Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script in the <iframe>src parameter.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted script in, cross site scripting
CVE-2020-19698: Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the editor parameter.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted script to, cross site scripting
CVE-2020-19699: Cross Site Scripting vulnerability found in KOHGYLW Kiftd v.1.0.18 allows a remote attacker to execute arbitrary code via the <ifram> tag in the upload file page.
Key phrases: execute arbitrary code, execute arbitrary code via the <ifram>, cross site scripting
CVE-2020-19703: A cross-site scripting (XSS) vulnerability in the referer parameter of Dzzoffice 2.02 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, cross-site scripting (xss)
CVE-2020-19704: A stored cross-site scripting (XSS) vulnerability via ResourceController.java in spring-boot-admin as of 20190710 allows attackers to execute arbitrary web scripts or HTML.
Key phrases: execute arbitrary web scripts or HTML, stored cross-site scripting (xss)
CVE-2020-19705: thinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add.
Key phrases: SQL injection via index.php?m=home&c=message&a=add, sql injection
CVE-2020-19709: Insufficient filtering of the tag parameters in feehicms 0.1.3 allows attackers to execute arbitrary web or HTML via a crafted payload.
Key phrases: execute arbitrary web or HTML, execute arbitrary web or HTML via a crafted, insufficient filtering
CVE-2020-1971: The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the "-crl_download" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).
Key phrases: null pointer dereference, denial of service, crash
CVE-2020-19716: A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a denial of service (DOS).
Key phrases: denial of service (DOS), buffer overflow, denial of service (dos)
CVE-2020-19717: An unhandled memory allocation failure in Core/Ap48bdlAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS).
Key phrases: denial of service (DOS), memory allocation failure, null pointer dereference, denial of service (dos)
CVE-2020-19718: An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS).
Key phrases: denial of service (DOS), memory allocation failure, null pointer dereference, denial of service (dos)
CVE-2020-19719: A buffer overflow vulnerability in Ap4ElstAtom.cpp of Bento 1.5.1-628 leads to a denial of service (DOS).
Key phrases: denial of service (DOS), buffer overflow, denial of service (dos)
CVE-2020-19720: An unhandled memory allocation failure in Core/AP4IkmsAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS).
Key phrases: denial of service (DOS), memory allocation failure, null pointer dereference, denial of service (dos)
CVE-2020-19721: A heap buffer overflow vulnerability in Ap4TrunAtom.cpp of Bento 1.5.1-628 may lead to an out-of-bounds write while running mp42aac, leading to system crashes and a denial of service (DOS).
Key phrases: denial of service (DOS), heap buffer overflow, out-of-bounds write, system crashes, denial of service (dos), out of bounds write
CVE-2020-19722: An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dereference, leading to a denial of service (DOS).
Key phrases: denial of service (DOS), memory allocation failure, direct copy to null pointer dereference, denial of service (dos)
CVE-2020-19724: A memory consumption issue in get_data function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a denial of service via crafted command.
Key phrases: cause a denial of service via crafted command, memory consumption issue
CVE-2020-19725: There is a use-after-free vulnerability in file pdd_simplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution.
Key phrases: use-after-free, arbitrary code execution, use after free, segmentation fault
CVE-2020-19726: An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service.
Key phrases: read or write to system memory or cause, auxiliary symbol data, denial of service
CVE-2020-1975: Missing XML validation vulnerability in the PAN-OS web interface on Palo Alto Networks PAN-OS software allows authenticated users to inject arbitrary XML that results in privilege escalation. This issue affects PAN-OS 8.1 versions earlier than PAN-OS 8.1.12 and PAN-OS 9.0 versions earlier than PAN-OS 9.0.6. This issue does not affect PAN-OS 7.1, PAN-OS 8.0, or PAN-OS 9.1 or later versions.
Key phrases: inject arbitrary XML, inject arbitrary XML that results in privilege escalation, xml validation
CVE-2020-19750: An issue was discovered in gpac 0.8.0. The strdup function in box_code_base.c has a heap-based buffer over-read.
Key phrases: heap-based buffer over-read, buffer over read
CVE-2020-19751: An issue was discovered in gpac 0.8.0. The gf_odf_del_ipmp_tool function in odf_code.c has a heap-based buffer over-read.
Key phrases: heap-based buffer over-read, buffer over read
CVE-2020-19752: The find_color_or_error function in gifsicle 1.92 contains a NULL pointer dereference.
Key phrases: null pointer dereference
CVE-2020-1976: A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect software running on Mac OS allows authenticated local users to cause the Mac OS kernel to hang or crash. This issue affects GlobalProtect 5.0.5 and earlier versions of GlobalProtect 5.0 on Mac OS.
Key phrases: cause the Mac OS kernel to hang or, denial-of-service (dos), hang or crash, denial of service
CVE-2020-19762: Automated Logic Corporation (ALC) WebCTRL System 6.5 and prior allows remote attackers to execute any JavaScript code via a XSS payload for the first parameter in a GET request.
Key phrases: execute any JavaScript code via a XSS payload, xss payload
CVE-2020-19765: An issue in the noReentrance() modifier of the Ethereum-based contract Accounting 1.0 allows attackers to carry out a reentrancy attack.
Key phrases: carry out a reentrancy attack
CVE-2020-19766: The time check operation of PepeAuctionSale 1.0 can be rendered ineffective by assigning a large number to the _duration variable, compromising access control to the application.
Key phrases: access control
CVE-2020-19767: A lack of target address verification in the destroycontract() function of 0xRACER 1.0 allows attackers to steal tokens from victim users via a crafted script.
Key phrases: steal tokens from victim users via a crafted, target address verification
CVE-2020-19768: A lack of target address verification in the selfdestructs() function of ICOVO 1.0 allows attackers to steal tokens from victim users via a crafted script.
Key phrases: steal tokens from victim users via a crafted, target address verification
CVE-2020-19769: A lack of target address verification in the BurnMe() function of Rob The Bank 1.0 allows attackers to steal tokens from victim users via a crafted script.
Key phrases: steal tokens from victim users via a crafted, target address verification
CVE-2020-1977: Insufficient Cross-Site Request Forgery (XSRF) protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier versions.
Key phrases: hijack the authentication of administrators and to perform, insufficient cross-site request forgery (xsrf)
CVE-2020-19770: A cross-site scripting (XSS) vulnerability in the system bulletin component of WUZHI CMS v4.1.0 allows attackers to steal the admin's cookie.
Key phrases: steal the admin's cookie, cross-site scripting (xss)
CVE-2020-19778: Incorrect Access Control in Shopxo v1.4.0 and v1.5.0 allows remote attackers to gain privileges in "/index.php" by manipulating the parameter "user_id" in the HTML request.
Key phrases: gain privileges, gain privileges in "/index.php" by manipulating, incorrect access control
CVE-2020-1978: TechSupport files generated on Palo Alto Networks VM Series firewalls for Microsoft Azure platform configured with high availability (HA) inadvertently collect Azure dashboard service account credentials. These credentials are equivalent to the credentials associated with the Contributor role in Azure. A user with the credentials will be able to manage all the Azure resources in the subscription except for granting access to other resources. These credentials do not allow login access to the VMs themselves. This issue affects VM Series Plugin versions before 1.0.9 for PAN-OS 9.0. This issue does not affect VM Series in non-HA configurations or on other cloud platforms. It does not affect hardware firewall appliances. Since becoming aware of the issue, Palo Alto Networks has safely deleted all the tech support files with the credentials. We now filter and remove these credentials from all TechSupport files sent to us. The TechSupport files uploaded to Palo Alto Networks systems were only accessible by authorized personnel with valid Palo Alto Networks credentials. We do not have any evidence of malicious access or use of these credentials.
Key phrases: the VMs themselves, availability, file upload
CVE-2020-19786: File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute aritrary commands and code via crafted PHP file.
Key phrases: execute aritrary commands and code via crafted PHP, file upload
CVE-2020-1979: A format string vulnerability in the PAN-OS log daemon (logd) on Panorama allows a network based attacker with knowledge of registered firewall devices and access to Panorama management interfaces to execute arbitrary code, bypassing the restricted shell and escalating privileges. This issue affects only PAN-OS 8.1 versions earlier than PAN-OS 8.1.13 on Panorama. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions.
Key phrases: execute arbitrary code, Panorama management interfaces to execute arbitrary code, format string, escalate privilege
CVE-2020-1980: A shell command injection vulnerability in the PAN-OS CLI allows a local authenticated user to escape the restricted shell and escalate privileges. This issue affects only PAN-OS 8.1 versions earlier than PAN-OS 8.1.13. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions. This issue is fixed in PAN-OS 8.1.13, and all later versions.
Key phrases: escape the restricted shell and escalate privileges, shell command injection
CVE-2020-19802: File Upload vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the upload file type parameter.
Key phrases: execute arbitrary code, execute arbitrary code via the upload file type, file upload
CVE-2020-19803: Cross Site Request Forgery vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the background system settings.
Key phrases: execute arbitrary code, execute arbitrary code via the background system settings, cross site request forgery
CVE-2020-1981: A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation. This issue allows a local attacker who bypassed the restricted shell to execute commands as a low privileged user and gain root access on the PAN-OS hardware or virtual appliance. This issue affects only PAN-OS 8.1 versions earlier than PAN-OS 8.1.13. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions.
Key phrases: gain root access, execute commands as a low privileged user and, predictable temporary filename, local privilege escalation
CVE-2020-1982: Certain communication between PAN-OS and cloud-delivered services inadvertently use TLS 1.0, which is known to be a cryptographically weak protocol. These cloud services include Cortex Data Lake, the Customer Support Portal, and the Prisma Access infrastructure. Conditions required for exploitation of known TLS 1.0 weaknesses do not exist for the communication between PAN-OS and cloud-delivered services. We do not believe that any communication is impacted as a result of known attacks against TLS 1.0. This issue impacts: All versions of PAN-OS 8.0; PAN-OS 8.1 versions earlier than PAN-OS 8.1.14; PAN-OS 9.0 versions earlier than PAN-OS 9.0.9; PAN-OS 9.1 versions earlier than PAN-OS 9.1.3. PAN-OS 7.1 is not impacted by this issue.
Key phrases: tls weaknesses
CVE-2020-19821: A SQL injection vulnerability in admin.php of DOYOCMS 2.3 allows attackers to execute arbitrary SQL commands via the orders[] parameter.
Key phrases: execute arbitrary SQL commands, execute arbitrary SQL commands via the orders[, sql injection
CVE-2020-19822: A remote code execution (RCE) vulnerability in template_user.php of ZZCMS version 2018 allows attackers to execute arbitrary PHP code via the "ml" and "title" parameters.
Key phrases: execute arbitrary PHP code, execute arbitrary PHP code via the "ml, remote code execution (rce)
CVE-2020-19824: An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parameter.
Key phrases: execute arbitrary code, execute arbitrary code and crash program via the
CVE-2020-19825: Cross Site Scripting (XSS) vulnerability in kevinpapst kimai2 1.30.0 in /src/Twig/Runtime/MarkdownExtension.php, allows attackers to gain escalated privileges.
Key phrases: gain escalated privileges, cross site scripting (xss), escalate privilege
CVE-2020-1983: A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.
Key phrases: cause a denial of service, use after free
CVE-2020-1984: Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk (C:\\) to gain system privileges if the path does not already exist or is writable. This issue affects all versions of Secdo for Windows.
Key phrases: gain system privileges, the root of the OS disk (C:\\, hardcoded path
CVE-2020-1985: Incorrect Default Permissions on C:\\Programdata\\Secdo\\Logs folder in Secdo allows local authenticated users to overwrite system files and gain escalated privileges. This issue affects all versions Secdo for Windows.
Key phrases: gain escalated privileges, overwrite system files and gain escalated privileges, incorrect default permissions, escalate privilege
CVE-2020-19850: An issue found in Directus API v.2.2.0 allows a remote attacker to cause a denial of service via a great amount of HTTP requests.
Key phrases: cause a denial of service via a great
CVE-2020-19853: BlueCMS v1.6 contains a SQL injection vulnerability via /ad_js.php.
Key phrases: sql injection
CVE-2020-19855: phpwcms v1.9 contains a cross-site scripting (XSS) vulnerability in /image_zoom.php.
Key phrases: cross-site scripting (xss)
CVE-2020-19858: Platinum Upnp SDK through 1.2.0 has a directory traversal vulnerability. The attack could remote attack victim by sending http://ip:port/../privacy.avi URL to compromise a victim's privacy.
Key phrases: directory traversal, remote, compromise a victims privacy
CVE-2020-1986: Improper input validation vulnerability in Secdo allows an authenticated local user with 'create folders or append data' access to the root of the OS disk (C:\\) to cause a system crash on every login. This issue affects all versions Secdo for Windows.
Key phrases: the root of the OS disk (C:\\, improper input validation, system crash
CVE-2020-19860: When ldns version 1.7.1 verifies a zone file, the ldns_rr_new_frm_str_internal function has a heap out of bounds read vulnerability. An attacker can leak information on the heap by constructing a zone file payload.
Key phrases: heap out of bounds read, leak information
CVE-2020-19861: When a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for the length value obtained from the zone file. When the memcpy is copied, the 0xfe - ldns_rdf_size(salt_rdf) byte data can be copied, causing heap overflow information leakage.
Key phrases: heap overflow, information leakage
CVE-2020-1987: An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local authenticated user to read VPN cookie information when the troubleshooting logging level is set to "Dump". This issue affects Palo Alto Networks Global Protect Agent 5.0 versions prior to 5.0.9; 5.1 versions prior to 5.1.1.
Key phrases: read VPN cookie information when the troubleshooting logging, information exposure
CVE-2020-19877: DBHcms v1.2.0 has a directory traversal vulnerability as there is no directory control function in directory /dbhcms/. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information.
Key phrases: obtain server-sensitive information, directory traversal
CVE-2020-19878: DBHcms v1.2.0 has a sensitive information leaks vulnerability as there is no security access control in /dbhcms/ext/news/ext.news.be.php, A remote unauthenticated attacker can exploit this vulnerability to get path information.
Key phrases: sensitive information leaks
CVE-2020-19879: DBHcms v1.2.0 has a stored xss vulnerability as there is no security filter of $_GET['dbhcms_pid'] variable in dbhcms\\\\page.php line 107,
Key phrases: stored xss
CVE-2020-1988: An unquoted search path vulnerability in the Windows release of Global Protect Agent allows an authenticated local user with file creation privileges on the root of the OS disk (C:\\) or to Program Files directory to gain system privileges. This issue affects Palo Alto Networks GlobalProtect Agent 5.0 versions before 5.0.5; 4.1 versions before 4.1.13 on Windows;
Key phrases: gain system privileges, Program Files directory to gain system privileges, unquoted search path
CVE-2020-19880: DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function form 'Name' in dbhcms\\\\types.php, A remote unauthenticated attacker can exploit this vulnerability to hijack other users.
Key phrases: xss, hijack other users
CVE-2020-19881: DBHcms v1.2.0 has a reflected xss vulnerability as there is no security filter in dbhcms\\\\mod\\\\mod.selector.php line 108 for $_GET['return_name'] parameter, A remote authenticated with admin user can exploit this vulnerability to hijack other users.
Key phrases: xss, hijack other users
CVE-2020-19882: DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for 'menu_description' variable in dbhcms\\\\mod\\\\mod.menus.edit.php line 83 and in dbhcms\\\\mod\\\\mod.menus.view.php line 111, A remote authenticated with admin user can exploit this vulnerability to hijack other users.
Key phrases: stored xss, hijack other users
CVE-2020-19883: DBHcms v1.2.0 has a stored xss vulnerability as there is no security filter in dbhcms\\\\mod\\\\mod.users.view.php line 57 for user_login, A remote authenticated with admin user can exploit this vulnerability to hijack other users.
Key phrases: stored xss, hijack other users
CVE-2020-19884: DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function in dbhcms\\\\mod\\\\mod.domain.edit.php line 119.
Key phrases: stored xss
CVE-2020-19885: DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for '$_POST['pageparam_insert_name']' variable in dbhcms\\\\mod\\\\mod.page.edit.php line 227, A remote authenticated with admin user can exploit this vulnerability to hijack other users.
Key phrases: stored xss, hijack
CVE-2020-19886: DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for an /index.php?dbhcms_pid=-80&deletemenu=9 can delete any menu.
Key phrases: csrf protection mechanism
CVE-2020-19887: DBHcms v1.2.0 has a stored XSS vulnerability as there is no htmlspecialchars function for '$_POST['pageparam_insert_description']' variable in dbhcms\\\\mod\\\\mod.page.edit.php line 227, A remote authenticated with admin user can exploit this vulnerability to hijack other users.
Key phrases: stored xss, hijack
CVE-2020-19888: DBHcms v1.2.0 has an unauthorized operation vulnerability because there's no access control at line 175 of dbhcms\\\\page.php for empty cache operation. This vulnerability can be exploited to empty a table.
Key phrases: unauthorized operation, empty a table
CVE-2020-19889: DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for index.php?dbhcms_pid=-70 can add a user.
Key phrases: csrf protection mechanism
CVE-2020-1989: An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global Protect Agent for Linux on ARM platform allows a local authenticated user to gain root privileges on the system. This issue affects Palo Alto Networks Global Protect Agent for Linux 5.0 versions before 5.0.8; 5.1 versions before 5.1.1.
Key phrases: gain root privileges, gain root privileges on the system, incorrect privilege assignment
CVE-2020-19890: DBHcms v1.2.0 has an Arbitrary file read vulnerability in dbhcms\\\\mod\\\\mod.editor.php $_GET['file'] is filename,and as there is no filter function for security, you can read any file's content.
Key phrases: arbitrary file read
CVE-2020-19891: DBHcms v1.2.0 has an Arbitrary file write vulnerability in dbhcms\\\\mod\\\\mod.editor.php $_POST['updatefile'] is filename and $_POST['tinymce_content'] is file content, there is no filter function for security. A remote authenticated admin user can exploit this vulnerability to get a webshell.
Key phrases: arbitrary file write
CVE-2020-19896: File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php.
Key phrases: execute arbitary PHP code via post-edit.php, file inclusion
CVE-2020-19897: A reflected Cross Site Scripting (XSS) in wuzhicms v4.1.0 allows remote attackers to execute arbitrary web script or HTML via the imgurl parameter.
Key phrases: execute arbitrary web script or HTML, execute arbitrary web script or HTML via the, cross site scripting (xss)
CVE-2020-1990: A stack-based buffer overflow vulnerability in the management server component of PAN-OS allows an authenticated user to upload a corrupted PAN-OS configuration and potentially execute code with root privileges. This issue affects Palo Alto Networks PAN-OS 8.1 versions before 8.1.13; 9.0 versions before 9.0.7. This issue does not affect PAN-OS 7.1.
Key phrases: upload a corrupted PAN-OS configuration and, stack-based buffer overflow, stack based buffer overflow, execute code, root privilege
CVE-2020-19902: Directory Traversal vulnerability found in Cryptoprof WCMS v.0.3.2 allows a remote attacker to execute arbitrary code via the wex/cssjs.php parameter.
Key phrases: execute arbitrary code, execute arbitrary code via the wex/cssjs.php, directory traversal
CVE-2020-19907: A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier allows authenticated attackers to execute any command or service.
Key phrases: execute any command or service, command injection, execute commands
CVE-2020-19909: Integer overflow vulnerability in tool_operate.c in curl 7.65.2 via a large value as the retry delay. NOTE: many parties report that this has no direct security impact on the curl user; however, it may (in theory) cause a denial of service to associated systems or networks if, for example, --retry-delay is misinterpreted as a value much smaller than what was intended. This is not especially plausible because the overflow only happens if the user was trying to specify that curl should wait weeks (or longer) before trying to recover from a transient error.
Key phrases: integer overflow, denial of service
CVE-2020-1991: An insecure temporary file vulnerability in Palo Alto Networks Traps allows a local authenticated Windows user to escalate privileges or overwrite system files. This issue affects Palo Alto Networks Traps 5.0 versions before 5.0.8; 6.1 versions before 6.1.4 on Windows. This issue does not affect Cortex XDR 7.0. This issue does not affect Traps for Linux or MacOS.
Key phrases: escalate privileges or overwrite system files, temporary file