Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-6367 State: PUBLISHED Published: 2020-10-20T13:32:14 Last Updated: 2024-08-04T09:02:39.915Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N) Vendors: SAP SE Products: SAP NetWeaver Composite Application Framework Problem Types: Cross Site Scripting Description: There is a reflected cross site scripting vulnerability in SAP NetWeaver Composite Application Framework, versions - 7.20, 7.30, 7.31, 7.40, 7.50. An unauthenticated attacker can trick an unsuspecting authenticated user to click on a malicious link. The end users browser has no way to know that the script should not be trusted, and will execute the script, resulting in sensitive information being
way to know that the script should not be trusted, and will execute the script, resulting in sensitive information being disclosed or modified. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196 - https://launchpad.support.sap.com/#/notes/2972661
CVE ID: CVE-2020-6368 State: PUBLISHED Published: 2020-10-15T01:54:18 Last Updated: 2024-08-04T09:02:40.215Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP SE Products: SAP Business Planning and Consolidation Problem Types: Cross Site Scripting Description: SAP Business Planning and Consolidation, versions - 750, 751, 752, 753, 754, 755, 810, 100, 200, can be abused by an attacker, allowing them to modify displayed application content without authorization, and to potentially obtain authentication information from other legitimate users, leading to Cross Site Scripting. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sa
s, leading to Cross Site Scripting. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196 - https://launchpad.support.sap.com/#/notes/2960825
CVE ID: CVE-2020-6369 State: PUBLISHED Published: 2020-10-20T13:30:36 Last Updated: 2024-08-04T09:02:39.880Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: SAP SE Products: CA Introscope Enterprise Manager (Affected products: SAP Solution Manager and SAP Focused Run) Problem Types: Hard Coded Credentials Description: SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an unauthenticated attackers to bypass the authentication if the default passwords for Admin and Guest have not been changed by the administrator.This may impact the confidentiality of the service. Additional Analyst Notes: - CVE Prog
en changed by the administrator.This may impact the confidentiality of the service. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196 - https://launchpad.support.sap.com/#/notes/2971638 - http://seclists.org/fulldisclosure/2021/Jun/31 - http://packetstormsecurity.com/files/163159/SAP-Wily-Introscope-Enterprise-Default-Hard-Coded-Credentials.html
CVE ID: CVE-2020-6370 State: PUBLISHED Published: 2020-10-20T13:32:54 Last Updated: 2024-08-04T09:02:40.564Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP SE Products: SAP NetWeaver (DI Design Time Repository) Problem Types: Cross-Site Scripting Description: SAP NetWeaver Design Time Repository (DTR), versions - 7.11, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196 - https://launchpad.support.sap.com/#/notes/2939419
CVE ID: CVE-2020-6371 State: PUBLISHED Published: 2020-10-15T01:56:41 Last Updated: 2024-08-04T09:02:39.932Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP SE Products: SAP NetWeaver Application Server ABAP (POWL test application) Problem Types: Information Disclosure Description: User enumeration vulnerability can be exploited to get a list of user accounts and personal user information can be exposed in SAP NetWeaver Application Server ABAP (POWL test application) versions - 710, 711, 730, 731, 740, 750, leading to Information Disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.acti
sure. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196 - https://launchpad.support.sap.com/#/notes/2963137
CVE ID: CVE-2020-6372 State: PUBLISHED Published: 2020-10-15T01:57:29 Last Updated: 2024-08-04T09:02:40.644Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.act
ation. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196 - https://launchpad.support.sap.com/#/notes/2973497 - https://www.zerodayinitiative.com/advisories/ZDI-20-1264/
CVE ID: CVE-2020-6373 State: PUBLISHED Published: 2020-10-15T01:58:20 Last Updated: 2024-08-04T09:02:39.914Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.act
ation. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196 - https://launchpad.support.sap.com/#/notes/2973497 - https://www.zerodayinitiative.com/advisories/ZDI-20-1263/
CVE ID: CVE-2020-6374 State: PUBLISHED Published: 2020-10-15T01:59:17 Last Updated: 2024-08-04T09:02:39.614Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Jupiter Tessallation(.jt) file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/w
o Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196 - https://launchpad.support.sap.com/#/notes/2973497 - https://www.zerodayinitiative.com/advisories/ZDI-20-1266/
CVE ID: CVE-2020-6375 State: PUBLISHED Published: 2020-10-15T01:58:50 Last Updated: 2024-08-04T09:02:40.215Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Computer Graphics Metafile (.cgm) file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://wiki
s caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196 - https://launchpad.support.sap.com/#/notes/2973497
CVE ID: CVE-2020-6376 State: PUBLISHED Published: 2020-10-15T01:59:38 Last Updated: 2024-08-04T09:02:40.379Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Hemisphere Binary (.rh) file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.c
ue to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196 - https://launchpad.support.sap.com/#/notes/2973497
CVE ID: CVE-2020-6377 State: PUBLISHED Published: 2020-01-10T21:10:15 Last Updated: 2024-08-04T09:02:40.097Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1029462 - https://chromereleases.googleblog.com/2020/01/stable-channel-update-for-desktop.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00007.html - https://lists.fedoraproject
msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00007.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PSUXNEUS6N42UJNQVCQSTSM6CSW2REPG/ - https://access.redhat.com/errata/RHSA-2020:0084 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00023.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N5CIQCVS6E3ULJCNU7YJXJPO2BLQZDTK/ - https://seclists.org/bugtraq/2020/Jan/27 - https://www.debian.org/security/2020/dsa-4606 - https://security.gentoo.org/glsa/202003-08
CVE ID: CVE-2020-6378 State: PUBLISHED Published: 2020-02-11T14:42:10 Last Updated: 2024-08-04T09:02:40.238Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in speech in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1018677 - https://chromereleases.googleblog.com/2020/01/stable-channel-update-for-desktop_16.html - https://security.gentoo.org/glsa/202003-08 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/
CVE ID: CVE-2020-6379 State: PUBLISHED Published: 2020-02-11T14:42:10 Last Updated: 2024-08-04T09:02:40.158Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in V8 in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/01/stable-channel-update-for-desktop_16.html - https://crbug.com/1033407 - https://security.gentoo.org/glsa/202003-08 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/
CVE ID: CVE-2020-6380 State: PUBLISHED Published: 2020-02-11T14:42:11 Last Updated: 2024-08-04T09:02:40.463Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.130 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/01/stable-channel-update-for-desktop_16.html - https://crbug.com/1032170 - https://security.gentoo.org/glsa/202003-08 - https://lists.fedoraproject.org/archives/list/package-announ
.com/1032170 - https://security.gentoo.org/glsa/202003-08 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/
CVE ID: CVE-2020-6381 State: PUBLISHED Published: 2020-02-11T14:42:11 Last Updated: 2024-08-04T09:02:40.381Z Vendors: Google Products: Chrome Problem Types: Integer overflow Description: Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1034394 - https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html - https://access.redhat.com/errata/RHSA-2020:0514 - http://lists.opensuse.
nsuse-security-announce/2020-02/msg00015.html - https://access.redhat.com/errata/RHSA-2020:0514 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html - https://www.debian.org/security/2020/dsa-4638 - https://security.gentoo.org/glsa/202003-08 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3B5RWJQD5LA45MYLLR55KZJOJ5NVZGP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/
CVE ID: CVE-2020-6382 State: PUBLISHED Published: 2020-02-11T14:42:11 Last Updated: 2024-08-04T09:02:39.847Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html - https://crbug.com/1031909 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html - https://access.redhat.com/errata/RHSA-2020:0514 - http://lists.opensuse.org/opensuse-security-announ
-02/msg00015.html - https://access.redhat.com/errata/RHSA-2020:0514 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html - https://www.debian.org/security/2020/dsa-4638 - https://security.gentoo.org/glsa/202003-08 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3B5RWJQD5LA45MYLLR55KZJOJ5NVZGP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/
CVE ID: CVE-2020-6383 State: PUBLISHED Published: 2020-02-27T22:55:23 Last Updated: 2024-08-04T09:02:39.874Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1051017 - https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_18.html - https://access.redhat.com/errata/RHSA-2020:0738 - https://www.debian.org/security/2020/dsa-4638 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraprojec
.debian.org/security/2020/dsa-4638 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3B5RWJQD5LA45MYLLR55KZJOJ5NVZGP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/
CVE ID: CVE-2020-6384 State: PUBLISHED Published: 2020-02-27T22:55:23 Last Updated: 2024-08-04T09:02:40.313Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_18.html - https://crbug.com/1048473 - https://access.redhat.com/errata/RHSA-2020:0738 - https://www.debian.org/security/2020/dsa-4638 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora
://www.debian.org/security/2020/dsa-4638 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3B5RWJQD5LA45MYLLR55KZJOJ5NVZGP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/
CVE ID: CVE-2020-6385 State: PUBLISHED Published: 2020-02-11T14:42:11 Last Updated: 2024-08-04T09:02:40.196Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass site isolation via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html - https://crbug.com/1035399 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html - https://access.redhat.com/errata/RHSA-2020:0514 - http://lists.opensuse.org/opensus
ity-announce/2020-02/msg00015.html - https://access.redhat.com/errata/RHSA-2020:0514 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html - https://www.debian.org/security/2020/dsa-4638 - https://security.gentoo.org/glsa/202003-08 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3B5RWJQD5LA45MYLLR55KZJOJ5NVZGP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/
CVE ID: CVE-2020-6386 State: PUBLISHED Published: 2020-02-27T22:55:24 Last Updated: 2024-08-04T09:02:40.088Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_18.html - https://crbug.com/1043603 - https://access.redhat.com/errata/RHSA-2020:0738 - https://www.debian.org/security/2020/dsa-4638 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr
/www.debian.org/security/2020/dsa-4638 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3B5RWJQD5LA45MYLLR55KZJOJ5NVZGP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/
CVE ID: CVE-2020-6387 State: PUBLISHED Published: 2020-02-11T14:42:11 Last Updated: 2024-08-04T09:02:39.680Z Vendors: Google Products: Chrome Problem Types: Out of bounds write Description: Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html - https://crbug.com/1042535 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html - https://access.redhat.com/errata/RHSA-2020:0514 - http://lists.opensuse.org/opensuse-securi
unce/2020-02/msg00015.html - https://access.redhat.com/errata/RHSA-2020:0514 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html - https://www.debian.org/security/2020/dsa-4638 - https://security.gentoo.org/glsa/202003-08 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3B5RWJQD5LA45MYLLR55KZJOJ5NVZGP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/
CVE ID: CVE-2020-6388 State: PUBLISHED Published: 2020-02-11T14:42:11 Last Updated: 2024-08-04T09:02:40.323Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds access in WebAudio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html - https://crbug.com/1042879 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html - https://access.redhat.com/errata/RHSA-2020:0514 - http://lists.opensuse.org/opensus
ity-announce/2020-02/msg00015.html - https://access.redhat.com/errata/RHSA-2020:0514 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html - https://www.debian.org/security/2020/dsa-4638 - https://security.gentoo.org/glsa/202003-08 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3B5RWJQD5LA45MYLLR55KZJOJ5NVZGP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/ - http://packetstormsecurity.com/files/157376/Chrome-AudioArray-Allocate-Data-Race-Out-Of-Bounds-Access.html
CVE ID: CVE-2020-6389 State: PUBLISHED Published: 2020-02-11T14:42:11 Last Updated: 2024-08-04T09:02:40.428Z Vendors: Google Products: Chrome Problem Types: Out of bounds write Description: Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html - https://crbug.com/1042933 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html - https://access.redhat.com/errata/RHSA-2020:0514 - http://lists.opensuse.org/opensuse-securi
CVE ID: CVE-2020-6390 State: PUBLISHED Published: 2020-02-11T14:42:11 Last Updated: 2024-08-04T09:02:40.391Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop.html - https://crbug.com/1045874 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html - https://access.redhat.com/errata/RHSA-2020:0514 - http://lists.opensuse.org/o
-security-announce/2020-02/msg00015.html - https://access.redhat.com/errata/RHSA-2020:0514 - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html - https://www.debian.org/security/2020/dsa-4638 - https://security.gentoo.org/glsa/202003-08 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3B5RWJQD5LA45MYLLR55KZJOJ5NVZGP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/ - http://packetstormsecurity.com/files/157419/Chrome-ReadableStream-Close-Out-Of-Bounds-Access.html