deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-12416
Published: 2020-07-09
Description: A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 78.
CVSS Score: 8.8 (HIGH)
CWE: CWE-362, CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html; https://bugzilla.mozilla.org/show_bug.cgi?id=1639734
CVE: CVE-2020-12417
Published: 2020-07-09
Description: Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially exploitable crash. *Note: this issue only affects Firefox on ARM64 platforms.* This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-617, CWE-681, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00026.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html
CVE: CVE-2020-12418
Published: 2020-07-09
Description: Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malicious JavaScript. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00026.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html
CVE: CVE-2020-12419
Published: 2020-07-09
Description: When processing callbacks that occurred during window flushing in the parent process, the associated window may die; causing a use-after-free condition. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00026.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html
CVE: CVE-2020-12420
Published: 2020-07-09
Description: When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-362, CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00026.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html
CVE: CVE-2020-12421
Published: 2020-07-09
Description: When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an administrator.) This could have caused add-ons to become out-of-date silently without notification to the user. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00026.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html
CVE: CVE-2020-12422
Published: 2020-07-09
Description: In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds write, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 78.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html; https://bugzilla.mozilla.org/show_bug.cgi?id=1450353
CVE: CVE-2020-12423
Published: 2020-07-09
Description: When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in the user's %PATH%, Firefox may have loaded the DLL, leading to arbitrary code execution. *Note: This issue only affects the Windows operating system; other operating systems are unaffected.* This vulnerability affects Firefox < 78.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html; https://bugzilla.mozilla.org/show_bug.cgi?id=1642400
CVE: CVE-2020-12425
Published: 2020-07-09
Description: Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, leading to potential information disclosure. This vulnerability affects Firefox < 78.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html; https://bugzilla.mozilla.org/show_bug.cgi?id=1634738
CVE: CVE-2020-12426
Published: 2020-07-09
Description: Mozilla developers and community members reported memory safety bugs present in Firefox 77. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 78.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html; https://bugzilla.mozilla.org/buglist.cgi?bug_id=1608068%2C1609951%2C1631187%2C1637682
CVE: CVE-2020-13992
Published: 2020-07-09
Description: An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A Stored XSS issue allows remote unauthenticated attackers to abuse a helpdesk user's logged in session. A user with sufficient privileges to change their login-page image must open a crafted ticket.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://loca1gh0s7.github.io/MFH-from-XSS-to-RCE-loca1gh0st-exercise; https://loca1gh0s7.github.io/MFH-from-XSS-to-RCE-loca1gh0st-exercise
CVE: CVE-2020-13993
Published: 2020-07-09
Description: An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A blind time-based SQL injection issue allows remote unauthenticated attackers to retrieve information from the database via a ticket.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://loca1gh0s7.github.io/MFH-from-XSS-to-RCE-loca1gh0st-exercise/; https://loca1gh0s7.github.io/MFH-from-XSS-to-RCE-loca1gh0st-exercise/
CVE: CVE-2020-13994
Published: 2020-07-09
Description: An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A privileged user can achieve code execution on the server via a ticket because of improper access control of uploaded resources. This might be exploitable in conjunction with CVE-2020-13992 by an unauthenticated attacker.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://loca1gh0s7.github.io/MFH-from-XSS-to-RCE-loca1gh0st-exercise/; https://loca1gh0s7.github.io/MFH-from-XSS-to-RCE-loca1gh0st-exercise/
CVE: CVE-2020-10756
Published: 2020-07-09
Description: An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of the host memory, resulting in possible information disclosure. This flaw affects versions of libslirp before 4.3.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00040.html; https://bugzilla.redhat.com/show_bug.cgi?id=1835986
CVE: CVE-2020-15526
Published: 2020-07-09
Description: In Redgate SQL Monitor 7.1.4 through 10.1.6 (inclusive), the scope for disabling some TLS security certificate checks can extend beyond that defined by various options on the Configuration > Notifications pages to disable certificate checking for alert notifications. These TLS security checks are also ignored during monitoring of VMware machines. This would make SQL Monitor vulnerable to potential man-in-the-middle attacks when sending alert notification emails, posting to Slack or posting to webhooks. The vulnerability is fixed in version 10.1.7.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://www.red-gate.com/privacy-and-security/vulnerabilities/2020-07-08-sql-monitor; https://www.red-gate.com/privacy-and-security/vulnerabilities/2020-07-08-sql-monitor
CVE: CVE-2019-17638
Published: 2020-07-09
Description: In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to the ByteBufferPool twice. Because of this double release, two threads can acquire the same ByteBuffer from the pool and while thread1 is about to use the ByteBuffer to write response1 data, thread2 fills the ByteBuffer with other data. Thread1 then proceeds to write the buffer that now contains different data. This results in client1, which issued request1 seeing data from another request or response which could contain sensitive data belonging to client2 (HTTP session ids, authentication credentials, etc.). If the Jetty version cannot be upgraded, the vulnerability can be significantly reduced by configuring a responseHeaderSize significantly larger than the requestHeaderSize (12KB responseHeaderSize and 8KB requestHeaderSize).
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-672, CWE-675, CWE-672
References: http://www.openwall.com/lists/oss-security/2020/08/17/1; https://bugs.eclipse.org/bugs/show_bug.cgi?id=564984; https://lists.apache.org/thread.html/r29073905dc9139d0d7a146595694bf57bb9e35e5ec6aa73eb9c8443a%40%3Ccommits.pulsar.apache.org%3E
CVE: CVE-2020-13131
Published: 2020-07-09
Description: An issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in this library (which is included in yubico-piv-tool) does not properly check embedded length fields during device communication. A malicious PIV token can misreport the returned length fields during RSA key generation. This will cause stack memory to be copied into heap allocated memory that gets returned to the caller. The leaked memory could include PINs, passwords, key material, and other sensitive information depending on the integration. During further processing by the caller, this information could leak across trust boundaries. Note that RSA key generation is triggered by the host and cannot directly be triggered by the token.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://blog.inhq.net/posts/yubico-libykpiv-vuln/; https://www.yubico.com/products/services-software/download/smart-card-drivers-tools/; https://blog.inhq.net/posts/yubico-libykpiv-vuln/
CVE: CVE-2020-13132
Published: 2020-07-09
Description: An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_generate_key() function in lib/util.c through incorrect error handling code. This could be used to cause a denial of service attack.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-763
References: https://blog.inhq.net/posts/yubico-libykpiv-vuln/; https://www.yubico.com/support/security-advisories/ysa-2020-02/; https://blog.inhq.net/posts/yubico-libykpiv-vuln/
CVE: CVE-2020-14170
Published: 2020-07-09
Description: Webhooks in Atlassian Bitbucket Server from version 5.4.0 before version 7.3.1 allow remote attackers to access the content of internal network resources via a Server-Side Request Forgery (SSRF) vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-918
References: https://jira.atlassian.com/browse/BSERV-12433; https://jira.atlassian.com/browse/BSERV-12433
CVE: CVE-2020-14171
Published: 2020-07-09
Description: Atlassian Bitbucket Server from version 4.9.0 before version 7.2.4 allows remote attackers to intercept unencrypted repository import requests via a Man-in-the-Middle (MITM) attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-319
References: https://jira.atlassian.com/browse/BSERV-12434; https://jira.atlassian.com/browse/BSERV-12434
CVE: CVE-2020-15000
Published: 2020-07-09
Description: A PIN management problem was discovered on Yubico YubiKey 5 devices 5.2.0 to 5.2.6. OpenPGP has three passwords: Admin PIN, Reset Code, and User PIN. The Reset Code is used to reset the User PIN, but it is disabled by default. A flaw in the implementation of OpenPGP sets the Reset Code to a known value upon initialization. If the retry counter for the Reset Code is set to non-zero without changing the Reset Code, this known value can be used to reset the User PIN. To set the retry counters, the Admin PIN is required.
CVSS Score: 5.9 (MEDIUM)
References: https://www.yubico.com/support/security-advisories/ysa-2020-05/; https://www.yubico.com/support/security-advisories/ysa-2020-05/
CVE: CVE-2020-15001
Published: 2020-07-09
Description: An information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and 5.3.0 to 5.3.1. The OTP application allows a user to set optional access codes on OTP slots. This access code is intended to prevent unauthorized changes to OTP configurations. The access code is not checked when updating NFC specific components of the OTP configurations. This may allow an attacker to access configured OTPs and passwords stored in slots that were not configured by the user to be read over NFC, despite a user having set an access code. (Users who have not set an access code, or who have not configured the OTP slots, are not impacted by this issue.)
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://www.yubico.com/support/security-advisories/ysa-2020-04/; https://www.yubico.com/support/security-advisories/ysa-2020-04/
CVE: CVE-2020-15092
Published: 2020-07-09
Description: In TimelineJS before version 3.7.0, some user data renders as HTML. An attacker could implement an XSS exploit with maliciously crafted content in a number of data fields. This risk is present whether the source data for the timeline is stored on Google Sheets or in a JSON configuration file. Most TimelineJS users configure their timeline with a Google Sheets document. Those users are exposed to this vulnerability if they grant write access to the document to a malicious inside attacker, if the access of a trusted user is compromised, or if they grant public write access to the document. Some TimelineJS users configure their timeline with a JSON document. Those users are exposed to this vulnerability if they grant write access to the document to a malicious inside attacker, if the access of a trusted user is compromised, or if write access to the system hosting that document is otherwise compromised. Version 3.7.0 of TimelineJS addresses this in two ways. For content which is intended to support limited HTML markup for styling and linking, that content is "sanitized" before being added to the DOM. For content intended for simple text display, all markup is stripped. Very few users of TimelineJS actually install the TimelineJS code on their server. Most users publish a timeline using a URL hosted on systems we control. The fix for this issue is published to our system such that **those users will automatically begin using the new code**. The only exception would be users who have deliberately edited the embed URL to "pin" their timeline to an earlier version of the code. Some users of TimelineJS use it as a part of a wordpress plugin (knight-lab-timelinejs). Version 3.7.0.0 of that plugin and newer integrate the updated code. Users are encouraged to update the plugin rather than manually update the embedded version of TimelineJS.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/NUKnightLab/TimelineJS3/security/advisories/GHSA-2jpm-827p-j44g; https://knightlab.northwestern.edu/posts/; https://github.com/NUKnightLab/TimelineJS3/security/advisories/GHSA-2jpm-827p-j44g
CVE: CVE-2020-15093
Published: 2020-07-09
Description: The tough library (Rust/crates.io) prior to version 0.7.1 does not properly verify the threshold of cryptographic signatures. It allows an attacker to duplicate a valid signature in order to circumvent TUF requiring a minimum threshold of unique signatures before the metadata is considered valid. A fix is available in version 0.7.1. CVE-2020-6174 is assigned to the same vulnerability in the TUF reference implementation.
CVSS Score: 8.6 (HIGH)
CWE: CWE-347, CWE-347
References: https://crates.io/crates/tough; https://github.com/awslabs/tough/security/advisories/GHSA-5q2r-92f9-4m49; https://github.com/theupdateframework/tuf/commit/[PII_REDACTED]d065ff3356c3cb4aec60c582b57e0e
CVE: CVE-2020-15299
Published: 2020-07-09
Description: A reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remote attackers to trick a victim into submitting an install_online_preset AJAX request containing base64-encoded JavaScript (in the kc-online-preset-data POST parameter) that is executed in the victim's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.wordfence.com/blog/2020/07/xss-flaw-impacting-100000-sites-patched-in-kingcomposer/; https://www.wordfence.com/blog/2020/07/xss-flaw-impacting-100000-sites-patched-in-kingcomposer/
CVE: CVE-2020-4173
Published: 2020-07-09
Description: IBM Guardium Activity Insights 10.6 and 11.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 174682.
CVSS Score: 4.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/174682; https://www.ibm.com/support/pages/node/6244924; https://exchange.xforce.ibmcloud.com/vulnerabilities/174682
CVE: CVE-2020-4305
Published: 2020-07-09
Description: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 176677.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/176677; https://www.ibm.com/support/pages/node/6244664; https://exchange.xforce.ibmcloud.com/vulnerabilities/176677
CVE: CVE-2020-5607
Published: 2020-07-10
Description: Open redirect vulnerability in SHIRASAGI v1.13.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/shirasagi/shirasagi; https://github.com/shirasagi/shirasagi/commit/040a02c9d4b5dd2f91c5c29c0008a47cde6ee99a; https://github.com/shirasagi/shirasagi/commit/040a02c9d4b5dd2f91c5c29c0008a47cde6ee99a.patch
CVE: CVE-2020-7814
Published: 2020-07-10
Description: RAONWIZ v2018.0.2.50 and eariler versions contains a vulnerability that could allow remote files to be downloaded and excuted by lack of validation to file extension, witch can used as remote-code-excution attacks by hackers File download & execution vulnerability in ____COMPONENT____ of RAONWIZ RAON KUpload allows ____ATTACKER/ATTACK____ to cause ____IMPACT____. This issue affects: RAONWIZ RAON KUpload 2018.0.2.50 versions prior to 2018.0.2.51 on Windows.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35495; https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35495
CVE: CVE-2020-3974
Published: 2020-07-10
Description: VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior before 11.2.0 ) and Horizon Client for Mac (5.x and prior before 5.4.3) contain a privilege escalation vulnerability due to improper XPC Client validation. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMware Remote Console for Mac or Horizon Client for Mac is installed.
CVSS Score: 7.8 (HIGH)
References: https://www.vmware.com/security/advisories/VMSA-2020-0017.html; https://www.vmware.com/security/advisories/VMSA-2020-0017.html
CVE: CVE-2020-7815
Published: 2020-07-10
Description: XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the arguments to the vulnerable method. this can be leveraged for code execution. File download vulnerability in ____COMPONENT____ of TOBESOFT XPLATFORM allows ____ATTACKER/ATTACK____ to cause ____IMPACT____. This issue affects: TOBESOFT XPLATFORM 9.2.250 versions prior to 9.2.260 on Windows.
CVSS Score: 7.8 (HIGH)
References: http://support.tobesoft.co.kr/Support/index.html; https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35496; http://support.tobesoft.co.kr/Support/index.html
CVE: CVE-2020-9258
Published: 2020-07-10
Description: HUAWEI P30 smartphone with versions earlier than 10.1.0.135(C00E135R2P11) have an improper input verification vulnerability. An attribution in a module is not set correctly and some verification is lacked. Attackers with local access can exploit this vulnerability by injecting malicious fragment. This may lead to user information leak.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200708-02-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200708-02-smartphone-en
CVE: CVE-2020-9260
Published: 2020-07-10
Description: HUAWEI P30 and HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E22R2P5) and versions earlier than 10.1.0.160(C00E160R2P8) have an information disclosure vulnerability. Certain WI-FI function's default configuration in the system seems insecure, an attacker should craft a WI-FI hotspot to launch the attack. Successful exploit could cause information disclosure.
CVSS Score: 6.5 (MEDIUM)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200708-01-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200708-01-smartphone-en
CVE: CVE-2012-6473
Published: 2020-07-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2012. Notes: none
CVE: CVE-2012-6474
Published: 2020-07-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2012. Notes: none
CVE: CVE-2012-6475
Published: 2020-07-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2012. Notes: none
CVE: CVE-2012-6476
Published: 2020-07-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2012. Notes: none
CVE: CVE-2012-6477
Published: 2020-07-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2012. Notes: none
CVE: CVE-2012-6478
Published: 2020-07-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2012. Notes: none