{"vulnerability": "CVE-2020-2562", "sightings": [{"uuid": "ef5d6888-7d39-4482-a415-fa664e22d38b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25622", "type": "seen", "source": "https://t.me/cibsecurity/20932", "content": "\u203c CVE-2020-25622 \u203c\n\nAn issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows CSRF.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-16T18:41:48.000000Z"}, {"uuid": "e7e75ec7-4832-43c8-b097-72a38acf93a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25620", "type": "seen", "source": "https://t.me/cibsecurity/20930", "content": "\u203c CVE-2020-25620 \u203c\n\nAn issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local user accounts named support@n-able.com and nableadmin@n-able.com. These allow logins to the N-Central Administrative Console (NAC) and/or the regular web interface.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-16T18:41:46.000000Z"}, {"uuid": "c3bb4305-edad-4d6a-af63-a71753b0c1f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25621", "type": "seen", "source": "https://t.me/cibsecurity/20928", "content": "\u203c CVE-2020-25621 \u203c\n\nAn issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication: security is only based on ability to access a network interface. The database has keys and passwords.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-16T18:41:44.000000Z"}, {"uuid": "c1a6200c-aeeb-42e6-a7b6-0e813bf09dcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17480", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T08:25:27.000000Z"}, {"uuid": "b52df5d3-a1b5-4f85-8b44-ce34f330deee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17789", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T16:33:41.000000Z"}, {"uuid": "a372366f-93b9-49bb-b475-7d89381f7fcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17770", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T16:25:20.000000Z"}, {"uuid": "e282c384-e672-4e12-b4bc-95ccfb4a1024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17693", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T15:31:18.000000Z"}, {"uuid": "801f86a5-d157-439d-ab9f-69d6b9109656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17520", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T10:25:22.000000Z"}, {"uuid": "550511ce-f52f-4242-90e6-e768912c463c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17750", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T16:22:37.000000Z"}, {"uuid": "e4fcd42e-da00-4f9a-89d7-c974748c6e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17731", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T16:05:09.000000Z"}, {"uuid": "a19a19e2-28ea-441d-8719-9aafc16142a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17653", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T15:22:39.000000Z"}, {"uuid": "cfcf3528-9b85-455b-b8e7-adda08778034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17615", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T13:25:21.000000Z"}, {"uuid": "331476bb-03f4-4126-a595-765280898ce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17673", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T15:25:14.000000Z"}, {"uuid": "99030deb-7723-4245-ba76-5a6459f7523a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17712", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T16:02:10.000000Z"}, {"uuid": "b43e9557-8845-4ee6-8fa4-e85626b3a38b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17575", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T12:32:12.000000Z"}, {"uuid": "c220a73c-4931-427c-a27d-4dd5d96b6e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17635", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T14:25:14.000000Z"}, {"uuid": "5241d9ea-669a-4716-9759-bf98bff6fb3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17595", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T12:41:07.000000Z"}, {"uuid": "2dfc9c30-d176-40d5-9cb0-9b8f34247188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17560", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T12:25:20.000000Z"}, {"uuid": "19e9116f-8ca4-4623-9f98-f18ee62aeadb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17540", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T11:25:23.000000Z"}, {"uuid": "85520aa2-7799-4c41-8526-63dcfafc097d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17500", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T09:25:34.000000Z"}, {"uuid": "8bab28a2-401b-4f23-8d40-5ccc33c4bb2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25628", "type": "seen", "source": "https://t.me/cibsecurity/17231", "content": "\u203c CVE-2020-25628 \u203c\n\nThe filter in the tag manager required extra sanitizing to prevent a reflected XSS risk. This affects 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 to 3.5.13 and earlier unsupported versions. Fixed in 3.9.2, 3.8.5, 3.7.8 and 3.5.14.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-08T07:30:44.000000Z"}, {"uuid": "76cae014-6cf1-4bd3-980d-5d8350713907", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25629", "type": "seen", "source": "https://t.me/cibsecurity/17229", "content": "\u203c CVE-2020-25629 \u203c\n\nA vulnerability was found in Moodle where users with \"Log in as\" capability in a course context (typically, course managers) may gain access to some site administration capabilities by \"logging in as\" a System manager. This affects 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 to 3.5.13 and earlier unsupported versions. This is fixed in 3.9.2, 3.8.5, 3.7.8 and 3.5.14.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-08T07:30:42.000000Z"}, {"uuid": "b04ceabf-fb50-470f-960f-5e1b7cd9dd35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25624", "type": "seen", "source": "https://t.me/cibsecurity/16926", "content": "\u203c CVE-2020-25624 \u203c\n\nhw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-30T12:52:48.000000Z"}, {"uuid": "faa1979d-557e-4020-8737-0c3d77c2623b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17809", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T17:25:17.000000Z"}, {"uuid": "de6de02f-57d9-4bb2-b317-2a426d3dcf14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25623", "type": "seen", "source": "https://t.me/cibsecurity/15017", "content": "\u203c CVE-2020-25623 \u203c\n\nErlang/OTP 22.3.x before 22.3.4.6 and 23.x before 23.1 allows Directory Traversal. An attacker can send a crafted HTTP request to read arbitrary files, if httpd in the inets application is used.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-02T16:54:00.000000Z"}, {"uuid": "c8a62cf5-5ba5-46c9-8831-9cf76b5aaf26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17828", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T18:02:11.000000Z"}, {"uuid": "4d489773-cc46-4510-92f7-013eb2111757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17847", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T18:05:12.000000Z"}, {"uuid": "26c1fdff-0edd-4b1d-8799-ab9e067e9e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25627", "type": "seen", "source": "https://t.me/cibsecurity/17867", "content": "\u203c CVE-2020-25627 \u203c\n\nThe moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T18:25:03.000000Z"}]}